This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/M1tXxXhsBhX0I_ZbDRKd9eW6s0U.roa File: M1tXxXhsBhX0I_ZbDRKd9eW6s0U.roa (raw, json) Hash identifier: 6xzXp9P9AUTeSSPJaJ/qtZlUIhfXwQniMZG8y5cXdRk= Subject key identifier: 33:5B:57:C5:78:6C:06:15:F4:23:F6:5B:0D:12:9D:F5:E5:BA:B3:45 Certificate issuer: /CN=32967a7747365c819de6076f7f5aa0ba3c9e598a Certificate serial: 019B7DCADAE4B36E98768D120ABD488C63E4 Authority key identifier: 32:96:7A:77:47:36:5C:81:9D:E6:07:6F:7F:5A:A0:BA:3C:9E:59:8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MpZ6d0c2XIGd5gdvf1qgujyeWYo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/M1tXxXhsBhX0I_ZbDRKd9eW6s0U.roa Signing time: Fri 02 Jan 2026 08:20:04 +0000 ROA not before: Fri 02 Jan 2026 08:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202619 IP address blocks: 2001:67c:26f8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/MpZ6d0c2XIGd5gdvf1qgujyeWYo.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/MpZ6d0c2XIGd5gdvf1qgujyeWYo.mft rsync://rpki.ripe.net/repository/DEFAULT/MpZ6d0c2XIGd5gdvf1qgujyeWYo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:da:e4:b3:6e:98:76:8d:12:0a:bd:48:8c:63:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32967a7747365c819de6076f7f5aa0ba3c9e598a Validity Not Before: Jan 2 08:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=335b57c5786c0615f423f65b0d129df5e5bab345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a6:5a:93:d0:42:c1:97:ef:34:25:a4:69:7d: 00:34:6a:22:ca:f6:d5:cd:85:ec:cb:58:41:73:2f: 4a:9a:05:ab:2b:26:78:8a:78:af:8a:65:96:e5:ed: cb:15:72:94:9a:d5:88:60:08:37:60:d6:b9:5d:5d: 07:6e:c3:38:fe:2e:49:88:60:a2:9b:b7:fc:0f:26: 6b:ce:2f:96:3c:6b:ea:76:63:99:34:62:f3:86:ad: 25:1b:92:93:ca:7a:62:dc:b2:c8:0a:9c:0b:3d:08: 53:8a:ea:7f:85:9d:61:9e:bd:cc:21:4d:14:bb:e6: 59:37:54:6c:62:a4:f3:ac:7f:e2:b6:70:bd:c0:5b: eb:b9:5d:f7:72:e0:31:48:f1:57:5b:7f:97:a8:e0: 25:13:d9:e4:a0:ca:bd:c3:da:5e:1d:0d:18:3e:53: f3:99:3a:61:31:d7:65:50:7b:9c:f1:7a:ff:f8:0b: 37:d8:c8:76:e7:8e:8e:96:1c:e9:89:fd:42:01:92: cc:dd:95:8b:97:fd:c2:eb:f9:87:8c:8d:61:e4:2c: 14:5b:38:c3:e3:02:0a:78:c5:72:32:9f:f8:d1:b0: 69:a4:8f:34:67:54:1d:e7:66:3f:e9:a3:c6:4b:32: d4:59:11:94:7b:f8:83:60:f5:74:6e:21:64:ee:90: 7b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:5B:57:C5:78:6C:06:15:F4:23:F6:5B:0D:12:9D:F5:E5:BA:B3:45 X509v3 Authority Key Identifier: keyid:32:96:7A:77:47:36:5C:81:9D:E6:07:6F:7F:5A:A0:BA:3C:9E:59:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MpZ6d0c2XIGd5gdvf1qgujyeWYo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/M1tXxXhsBhX0I_ZbDRKd9eW6s0U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/MpZ6d0c2XIGd5gdvf1qgujyeWYo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:26f8::/48 Signature Algorithm: sha256WithRSAEncryption 6e:f3:e0:42:5e:04:8e:59:ea:05:d9:94:bc:2c:9c:ac:ca:47: 99:be:32:a2:f2:f2:93:0b:aa:79:14:e2:67:55:25:63:4c:56: 3a:c5:e7:b7:53:f9:d9:e4:46:bf:e8:64:ee:50:d3:96:1a:0e: ac:99:75:3e:a7:eb:b3:f5:31:84:96:c3:88:f7:f3:2d:6c:1f: 53:a8:a2:1d:08:e6:1d:03:75:92:c5:db:d9:29:b9:d4:1b:ff: 51:0e:7e:b2:5f:8f:b3:19:2d:c1:87:40:6c:2f:40:2e:42:38: 93:8f:cf:b1:e1:fa:a2:6f:d6:eb:d3:ed:dd:7b:3d:c0:7e:a7: 85:7a:95:b7:cd:63:42:60:86:ab:fd:72:a9:dc:cd:6f:0c:8e: 78:c7:ef:2d:24:fe:84:64:fb:94:e8:5c:1b:6f:a8:3d:f5:8f: 19:e8:a7:25:df:bb:82:de:aa:98:0a:df:d8:93:3b:20:b6:15: 6d:ae:05:e9:00:ce:88:c6:cb:d8:ca:03:0d:64:19:a2:70:7f: e1:b7:4a:57:60:ee:91:54:7a:1b:d5:24:68:a8:ed:dc:5d:ad: f0:84:c2:24:83:63:58:07:ff:10:f1:06:17:7a:d0:0a:5f:81: 77:f7:c4:c4:65:9d:9c:10:39:83:8a:dd:91:99:bf:4c:17:d6: ac:c7:81:3a -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9ytrks26Ydo0SCr1IjGPkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyOTY3YTc3NDczNjVjODE5ZGU2MDc2ZjdmNWFhMGJhM2M5 ZTU5OGEwHhcNMjYwMTAyMDgyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzViNTdjNTc4NmMwNjE1ZjQyM2Y2NWIwZDEyOWRmNWU1YmFiMzQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqZak9BCwZfvNCWkaX0ANGoiyvbV zYXsy1hBcy9KmgWrKyZ4inivimWW5e3LFXKUmtWIYAg3YNa5XV0HbsM4/i5JiGCi m7f8DyZrzi+WPGvqdmOZNGLzhq0lG5KTynpi3LLICpwLPQhTiup/hZ1hnr3MIU0U u+ZZN1RsYqTzrH/itnC9wFvruV33cuAxSPFXW3+XqOAlE9nkoMq9w9peHQ0YPlPz mTphMddlUHuc8Xr/+As32Mh2546Olhzpif1CAZLM3ZWLl/3C6/mHjI1h5CwUWzjD 4wIKeMVyMp/40bBppI80Z1Qd52Y/6aPGSzLUWRGUe/iDYPV0biFk7pB7VQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDNbV8V4bAYV9CP2Ww0SnfXlurNFMB8GA1UdIwQY MBaAFDKWendHNlyBneYHb39aoLo8nlmKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXBaNmQwYzJYSUdkNWdkdmYxcWd1anllV1lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8zZTc3ZGMtNDg2OC00MWQ0LTkwYzQt MmFjOGJjZDgzNTUwLzEvTTF0WHhYaHNCaFgwSV9aYkRSS2Q5ZVc2czBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy8zZTc3ZGMtNDg2OC00MWQ0LTkwYzQtMmFjOGJjZDgzNTUw LzEvTXBaNmQwYzJYSUdkNWdkdmYxcWd1anllV1lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCb4 MA0GCSqGSIb3DQEBCwUAA4IBAQBu8+BCXgSOWeoF2ZS8LJysykeZvjKi8vKTC6p5 FOJnVSVjTFY6xee3U/nZ5Ea/6GTuUNOWGg6smXU+p+uz9TGElsOI9/MtbB9TqKId COYdA3WSxdvZKbnUG/9RDn6yX4+zGS3Bh0BsL0AuQjiTj8+x4fqib9br0+3dez3A fqeFepW3zWNCYIar/XKp3M1vDI54x+8tJP6EZPuU6Fwbb6g99Y8Z6Kcl37uC3qqY Ct/YkzsgthVtrgXpAM6IxsvYygMNZBmicH/ht0pXYO6RVHob1SRoqO3cXa3whMIk g2NYB/8Q8QYXetAKX4F398TEZZ2cEDmDit2Rmb9MF9asx4E6 -----END CERTIFICATE-----Generated at Tue Jan 27 07:43:44 2026 by rpki-client