This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/mUHJF4mGLNcVm-1iZRq7sRrciKA.roa File: mUHJF4mGLNcVm-1iZRq7sRrciKA.roa (raw, json) Hash identifier: v1v9ELWgCV5IQ8NqhHOZPn5bOHfjyDlgKXQdmPVfuM8= Subject key identifier: 99:41:C9:17:89:86:2C:D7:15:9B:ED:62:65:1A:BB:B1:1A:DC:88:A0 Certificate issuer: /CN=922a1a67e2da7112d4559cd8dbd8141f8f3277e8 Certificate serial: 019B7A5AC75B26A341178E378BA4CC0B62AA Authority key identifier: 92:2A:1A:67:E2:DA:71:12:D4:55:9C:D8:DB:D8:14:1F:8F:32:77:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kioaZ-LacRLUVZzY29gUH48yd-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/mUHJF4mGLNcVm-1iZRq7sRrciKA.roa Signing time: Thu 01 Jan 2026 16:18:48 +0000 ROA not before: Thu 01 Jan 2026 16:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51574 IP address blocks: 2a13:5a07:fe::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.crl rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft rsync://rpki.ripe.net/repository/DEFAULT/kioaZ-LacRLUVZzY29gUH48yd-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:c7:5b:26:a3:41:17:8e:37:8b:a4:cc:0b:62:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=922a1a67e2da7112d4559cd8dbd8141f8f3277e8 Validity Not Before: Jan 1 16:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9941c91789862cd7159bed62651abbb11adc88a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:89:b2:4d:24:f9:3e:4e:d0:9d:f4:75:a6:89: 58:4b:49:5d:b8:1e:41:76:17:7a:12:4f:4c:93:25: 0a:06:da:c0:bc:ad:22:df:07:77:5d:de:08:b4:2d: 48:bd:1a:9a:ab:b5:16:ea:07:4e:2d:f3:f7:de:8c: 12:2b:10:a6:e9:22:76:91:5b:06:0b:48:db:c1:4b: 7c:c6:8b:8f:a1:c8:df:5c:4c:20:2b:08:75:fa:a9: 57:9f:8a:15:07:49:81:e5:07:aa:13:a3:63:80:1e: 34:74:52:ce:eb:d7:db:72:63:b4:91:1a:40:40:d8: 18:96:8b:66:4f:68:cb:13:a1:c3:dd:d3:27:3c:db: 5f:bd:ae:fb:2c:22:9c:d7:f3:4a:5c:f5:0d:f5:f8: c8:bc:bb:59:d2:81:00:d7:04:b8:da:30:03:dc:3f: d5:b3:29:d4:21:35:de:57:82:43:be:78:05:9d:ed: 8d:78:df:c4:7f:6f:d8:cf:6b:7a:00:b0:d0:3e:71: a4:8f:4d:e8:54:9b:75:8a:46:6f:fb:02:60:8a:61: fe:9a:48:3c:9c:7d:97:ce:26:e8:fb:b2:10:47:8d: f5:86:50:c1:e8:57:8c:23:6c:82:32:b2:31:d2:17: 43:6c:7f:50:24:b9:7d:c0:39:4f:c4:ac:18:b5:3a: 61:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:41:C9:17:89:86:2C:D7:15:9B:ED:62:65:1A:BB:B1:1A:DC:88:A0 X509v3 Authority Key Identifier: keyid:92:2A:1A:67:E2:DA:71:12:D4:55:9C:D8:DB:D8:14:1F:8F:32:77:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kioaZ-LacRLUVZzY29gUH48yd-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/mUHJF4mGLNcVm-1iZRq7sRrciKA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:5a07:fe::/48 Signature Algorithm: sha256WithRSAEncryption 1a:90:90:b7:08:43:57:80:e0:40:0b:1b:b2:5e:3b:79:bc:c7: 83:e2:0e:dd:af:62:61:93:6f:f8:1f:74:89:15:1a:48:2b:5f: 3a:88:fa:0d:45:92:24:4b:3e:53:70:2f:bf:8c:76:b1:f9:72: c1:1e:0c:17:07:df:10:f9:0b:ad:c2:c3:d1:32:47:dd:52:7f: a9:32:07:d0:e7:75:ba:a3:53:af:40:9f:34:71:35:a3:41:20: 8b:54:66:f7:bd:fa:58:10:10:28:11:61:f6:66:38:76:d8:b0: aa:ee:0d:ff:04:2d:50:7f:48:77:45:4a:c9:ab:04:ff:45:32: 3e:d6:7e:7c:da:d7:b4:20:3d:3a:91:2a:71:34:14:61:ad:f3: a6:cf:ad:6d:31:54:a6:48:e9:4a:cb:2e:b3:94:55:9e:d7:b2: 6c:37:69:d2:45:39:34:6c:9e:72:46:e7:fe:bc:bb:6f:e5:1f: 2f:35:07:5a:af:4b:70:54:45:18:d4:a9:a7:61:dd:ba:5d:07: 3e:43:14:bb:be:89:9f:40:8f:f8:10:d1:cd:40:0d:86:54:1f: 07:e5:ec:43:a6:63:6a:32:66:b9:d6:81:96:40:a3:be:42:b5: d7:06:63:cb:18:c0:79:e4:df:8b:3a:37:2a:02:d7:d2:7d:05: 3d:69:54:93 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6WsdbJqNBF443i6TMC2KqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMmExYTY3ZTJkYTcxMTJkNDU1OWNkOGRiZDgxNDFmOGYz Mjc3ZTgwHhcNMjYwMTAxMTYxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTQxYzkxNzg5ODYyY2Q3MTU5YmVkNjI2NTFhYmJiMTFhZGM4OGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YmyTST5Pk7QnfR1polYS0lduB5B dhd6Ek9MkyUKBtrAvK0i3wd3Xd4ItC1IvRqaq7UW6gdOLfP33owSKxCm6SJ2kVsG C0jbwUt8xouPocjfXEwgKwh1+qlXn4oVB0mB5QeqE6NjgB40dFLO69fbcmO0kRpA QNgYlotmT2jLE6HD3dMnPNtfva77LCKc1/NKXPUN9fjIvLtZ0oEA1wS42jAD3D/V synUITXeV4JDvngFne2NeN/Ef2/Yz2t6ALDQPnGkj03oVJt1ikZv+wJgimH+mkg8 nH2Xzibo+7IQR431hlDB6FeMI2yCMrIx0hdDbH9QJLl9wDlPxKwYtTphmwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJlByReJhizXFZvtYmUau7Ea3IigMB8GA1UdIwQY MBaAFJIqGmfi2nES1FWc2NvYFB+PMnfoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2lvYVotTGFjUkxVVlp6WTI5Z1VINDh5ZC1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZGFjMzAtODU3MC00N2IyLWIyNmEt N2YzYTQyODE3MWM3LzEvbVVISkY0bUdMTmNWbS0xaVpScTdzUnJjaUtBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS81ZGFjMzAtODU3MC00N2IyLWIyNmEtN2YzYTQyODE3MWM3 LzEva2lvYVotTGFjUkxVVlp6WTI5Z1VINDh5ZC1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhNaBwD+ MA0GCSqGSIb3DQEBCwUAA4IBAQAakJC3CENXgOBACxuyXjt5vMeD4g7dr2Jhk2/4 H3SJFRpIK186iPoNRZIkSz5TcC+/jHax+XLBHgwXB98Q+QutwsPRMkfdUn+pMgfQ 53W6o1OvQJ80cTWjQSCLVGb3vfpYEBAoEWH2Zjh22LCq7g3/BC1Qf0h3RUrJqwT/ RTI+1n582te0ID06kSpxNBRhrfOmz61tMVSmSOlKyy6zlFWe17JsN2nSRTk0bJ5y Ruf+vLtv5R8vNQdar0twVEUY1KmnYd26XQc+QxS7vomfQI/4ENHNQA2GVB8H5exD pmNqMma51oGWQKO+QrXXBmPLGMB55N+LOjcqAtfSfQU9aVST -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:29 2026 by rpki-client