This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/MXaC2WjhU88QIu9NKuFBopRtFeQ.roa File: MXaC2WjhU88QIu9NKuFBopRtFeQ.roa (raw, json) Hash identifier: SbFLVwvUECsJmi8B9V6ZsiYyZg8UNBppk9dpgqP689Q= Subject key identifier: 31:76:82:D9:68:E1:53:CF:10:22:EF:4D:2A:E1:41:A2:94:6D:15:E4 Certificate issuer: /CN=0415d5c95cd7b58d297d479267c762cde91063e2 Certificate serial: 019B7F12D17D5AEBF06AEC2D28E7E1A8F4EC Authority key identifier: 04:15:D5:C9:5C:D7:B5:8D:29:7D:47:92:67:C7:62:CD:E9:10:63:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/MXaC2WjhU88QIu9NKuFBopRtFeQ.roa Signing time: Fri 02 Jan 2026 14:18:18 +0000 ROA not before: Fri 02 Jan 2026 14:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34359 IP address blocks: 2001:678:ebc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.crl rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:12:d1:7d:5a:eb:f0:6a:ec:2d:28:e7:e1:a8:f4:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0415d5c95cd7b58d297d479267c762cde91063e2 Validity Not Before: Jan 2 14:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=317682d968e153cf1022ef4d2ae141a2946d15e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:15:73:60:62:9d:f9:eb:37:40:31:5f:c0:7a: d5:0c:cf:15:a4:fc:5d:cb:ca:24:bb:7d:f3:b2:1b: 64:95:5e:c5:cd:c4:4d:5a:10:34:8f:c9:66:8b:08: 5b:5b:67:de:33:c5:12:c3:23:8b:8f:41:db:09:85: 80:30:3b:2d:5c:06:00:86:72:5c:da:f4:5d:c8:af: 4a:06:21:ec:8b:56:78:57:be:02:2a:e0:c7:8e:4e: f0:d2:03:7c:c6:2b:f7:1a:3e:8c:cf:bc:3c:52:8f: 29:d2:49:4c:d2:c4:6f:1b:72:ea:93:3e:75:32:15: bd:3d:4b:5c:3f:1b:06:86:61:c5:7b:b1:d8:ca:81: 3c:ba:ea:8c:5d:07:d9:a2:1b:6d:7d:8f:7f:a4:bf: be:cd:a5:53:e7:ef:0c:10:d1:74:70:e4:e7:ee:6f: 53:84:5c:21:91:6b:c9:d6:36:19:d6:75:b8:96:2d: f0:a3:4d:79:19:31:14:43:0e:68:20:9d:8a:6e:a4: ad:65:13:ef:68:d6:7c:74:b9:5a:ae:27:74:55:c5: e3:68:00:ec:d8:5a:7d:73:14:ae:88:b8:8d:23:80: 1f:e0:52:de:fe:ba:47:2d:a8:24:b2:98:bb:e3:ff: bb:1b:f3:94:16:1f:34:dc:34:5e:65:fd:df:d3:9f: e6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:76:82:D9:68:E1:53:CF:10:22:EF:4D:2A:E1:41:A2:94:6D:15:E4 X509v3 Authority Key Identifier: keyid:04:15:D5:C9:5C:D7:B5:8D:29:7D:47:92:67:C7:62:CD:E9:10:63:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/MXaC2WjhU88QIu9NKuFBopRtFeQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:ebc::/48 Signature Algorithm: sha256WithRSAEncryption 63:dd:16:07:2b:24:39:a4:14:77:36:1c:2d:31:dc:21:32:1c: 11:ad:8a:f5:3e:80:c7:6e:8b:21:5f:8f:bc:ac:a0:d2:61:b0: 3c:97:1e:74:6f:34:49:06:d0:72:42:98:d2:75:8d:74:7e:7f: 99:74:b8:fa:4c:92:6c:ec:f6:6b:38:13:41:3b:1d:84:f7:be: 9f:ac:70:07:82:7f:af:f9:61:ba:e6:4a:11:16:40:6a:d3:15: 46:42:6f:5f:64:dc:6d:de:15:d5:87:3e:7d:b6:f9:ba:8a:92: 2b:b2:f4:7c:70:0f:6c:9e:75:67:ee:e6:d3:58:04:a1:6a:10: 2e:80:b1:8e:24:2f:3b:93:dc:a3:3b:b9:f7:bc:ee:2e:23:08: aa:b5:7b:8e:06:1b:c4:f6:cc:d8:d2:e2:6d:b3:19:ff:89:fe: b5:76:f1:f1:7a:62:bf:52:be:f3:69:f1:87:09:14:89:01:30: b6:55:b5:ac:c0:e3:73:9b:f5:b4:06:73:73:5f:fb:ed:a6:95: b6:c7:83:6f:b2:54:3b:d5:65:3a:6c:b8:65:95:9d:f6:67:25: c7:ac:81:4f:e2:a5:2c:30:37:5b:fd:57:1c:bf:d7:b5:ed:b3: 06:b3:78:44:a2:73:a4:45:c4:9d:a2:0b:49:38:90:1f:df:9f: b4:da:90:e9 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/EtF9WuvwauwtKOfhqPTsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0MTVkNWM5NWNkN2I1OGQyOTdkNDc5MjY3Yzc2MmNkZTkx MDYzZTIwHhcNMjYwMTAyMTQxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTc2ODJkOTY4ZTE1M2NmMTAyMmVmNGQyYWUxNDFhMjk0NmQxNWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxVzYGKd+es3QDFfwHrVDM8VpPxd y8oku33zshtklV7FzcRNWhA0j8lmiwhbW2feM8USwyOLj0HbCYWAMDstXAYAhnJc 2vRdyK9KBiHsi1Z4V74CKuDHjk7w0gN8xiv3Gj6Mz7w8Uo8p0klM0sRvG3Lqkz51 MhW9PUtcPxsGhmHFe7HYyoE8uuqMXQfZohttfY9/pL++zaVT5+8MENF0cOTn7m9T hFwhkWvJ1jYZ1nW4li3wo015GTEUQw5oIJ2KbqStZRPvaNZ8dLlarid0VcXjaADs 2Fp9cxSuiLiNI4Af4FLe/rpHLagkspi74/+7G/OUFh803DReZf3f05/m0QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDF2gtlo4VPPECLvTSrhQaKUbRXkMB8GA1UdIwQY MBaAFAQV1clc17WNKX1HkmfHYs3pEGPiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkJYVnlWelh0WTBwZlVlU1o4ZGl6ZWtRWS1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9hNWM1ZTEtYmRhNy00ZThhLWIxYjEt NTc5YzkwYzBkZTJhLzEvTVhhQzJXamhVODhRSXU5Tkt1RkJvcFJ0RmVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9hNWM1ZTEtYmRhNy00ZThhLWIxYjEtNTc5YzkwYzBkZTJh LzEvQkJYVnlWelh0WTBwZlVlU1o4ZGl6ZWtRWS1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA68 MA0GCSqGSIb3DQEBCwUAA4IBAQBj3RYHKyQ5pBR3NhwtMdwhMhwRrYr1PoDHbosh X4+8rKDSYbA8lx50bzRJBtByQpjSdY10fn+ZdLj6TJJs7PZrOBNBOx2E976frHAH gn+v+WG65koRFkBq0xVGQm9fZNxt3hXVhz59tvm6ipIrsvR8cA9snnVn7ubTWASh ahAugLGOJC87k9yjO7n3vO4uIwiqtXuOBhvE9szY0uJtsxn/if61dvHxemK/Ur7z afGHCRSJATC2VbWswONzm/W0BnNzX/vtppW2x4NvslQ71WU6bLhllZ32ZyXHrIFP 4qUsMDdb/Vccv9e17bMGs3hEonOkRcSdogtJOJAf35+02pDp -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:32 2026 by rpki-client