This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/MnysfPyo4atkz89bty1U8O9Gpxk.roa File: MnysfPyo4atkz89bty1U8O9Gpxk.roa (raw, json) Hash identifier: j0Rn3Q7Gpb1iUDxURvHQTFFvAHFS3dyzvh6jFQiBkzw= Subject key identifier: 32:7C:AC:7C:FC:A8:E1:AB:64:CF:CF:5B:B7:2D:54:F0:EF:46:A7:19 Certificate issuer: /CN=2f3136ed10998580a517d9598abca33d9ba66599 Certificate serial: 019B7E38F8FC8E3A38B931B595697F9963C0 Authority key identifier: 2F:31:36:ED:10:99:85:80:A5:17:D9:59:8A:BC:A3:3D:9B:A6:65:99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/MnysfPyo4atkz89bty1U8O9Gpxk.roa Signing time: Fri 02 Jan 2026 10:20:21 +0000 ROA not before: Fri 02 Jan 2026 10:20:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8987 IP address blocks: 2a03:5d67::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.mft rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:f8:fc:8e:3a:38:b9:31:b5:95:69:7f:99:63:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f3136ed10998580a517d9598abca33d9ba66599 Validity Not Before: Jan 2 10:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=327cac7cfca8e1ab64cfcf5bb72d54f0ef46a719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:cb:e2:1c:08:ea:52:90:1e:ed:ee:b5:48:c3: 01:77:66:e8:6d:06:96:61:8d:2d:67:80:a6:cc:dc: 84:62:78:61:1b:1f:77:25:16:da:be:6e:43:19:2f: 82:4c:98:70:87:ac:ed:63:0f:e8:c1:d3:ba:5d:b6: f2:07:49:15:5f:92:2b:ae:d1:c8:8c:e4:10:aa:d0: 86:c7:5b:af:72:11:f6:90:7a:0d:c7:a8:34:d5:0c: f8:9a:28:4b:d1:5c:cc:3f:58:2a:dc:7b:24:43:12: d8:7c:44:ab:7f:6a:3b:74:9e:9e:49:83:85:a1:80: 23:b9:29:44:36:c6:65:30:ae:3f:e7:d5:62:63:29: d3:14:da:7e:b3:0d:d3:d8:64:d0:5f:04:3d:38:6c: 48:31:41:b6:61:5d:a3:cf:c1:52:df:9e:b9:15:f1: 2c:f1:c9:aa:52:88:c4:75:9c:0d:29:ce:9e:29:96: f9:5d:1d:ea:4c:34:d6:83:c9:e1:dc:3d:eb:d2:dc: 65:53:52:62:e6:3e:f8:c5:9e:5d:2b:39:50:22:45: 20:c5:b6:a6:e2:b1:b7:d5:1c:83:e2:d9:29:6a:cf: 8d:9a:49:a4:8f:cb:00:a5:9c:8f:52:48:9b:28:be: fb:f5:b0:57:be:d2:5a:e2:ed:2b:b7:15:df:58:70: ab:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:7C:AC:7C:FC:A8:E1:AB:64:CF:CF:5B:B7:2D:54:F0:EF:46:A7:19 X509v3 Authority Key Identifier: keyid:2F:31:36:ED:10:99:85:80:A5:17:D9:59:8A:BC:A3:3D:9B:A6:65:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/MnysfPyo4atkz89bty1U8O9Gpxk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:5d67::/32 Signature Algorithm: sha256WithRSAEncryption ac:c4:6b:01:53:e1:06:92:f5:54:73:1d:a1:47:0d:e3:c0:c8: c5:51:04:76:c1:9a:17:47:28:d2:76:11:3d:f6:49:33:ce:f2: bb:89:3f:86:9f:ac:97:b7:a7:06:57:da:d0:c5:86:aa:1e:99: df:88:db:c5:bf:62:f4:c0:f2:37:04:3f:c6:d6:1f:13:8e:86: c0:a1:a5:78:a0:58:78:a4:4e:74:88:fc:14:dd:d1:21:0a:b6: bf:e7:ae:c6:93:ca:3d:a2:31:eb:89:6a:d6:4d:8f:94:bf:6c: 73:96:f4:b5:d6:dd:35:32:55:aa:2c:9d:c0:f8:59:34:fb:fb: 1f:50:36:85:82:a5:a8:6c:ad:02:ec:74:e2:27:cc:6a:a7:0d: bc:3a:e4:96:06:b7:02:7c:cd:90:28:83:5c:f9:d5:73:df:bb: be:57:9b:1c:8f:8e:da:82:d4:c3:bc:0e:d4:99:ce:2b:f4:2c: e1:59:f5:3a:85:11:ab:9b:41:d3:5a:54:d4:30:b7:48:5b:26: 0e:ab:a0:be:24:50:f0:e9:ca:fc:6c:be:1e:23:c3:81:45:02: a4:b5:ba:45:99:35:9e:26:b9:4d:c6:e4:bf:ed:f7:87:a7:c4: 0e:a6:fa:8e:9c:c2:c5:25:a4:8d:ff:ac:6b:9f:4a:63:29:17: 7e:41:c8:de -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+OPj8jjo4uTG1lWl/mWPAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMzEzNmVkMTA5OTg1ODBhNTE3ZDk1OThhYmNhMzNkOWJh NjY1OTkwHhcNMjYwMTAyMTAyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMjdjYWM3Y2ZjYThlMWFiNjRjZmNmNWJiNzJkNTRmMGVmNDZhNzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MviHAjqUpAe7e61SMMBd2bobQaW YY0tZ4CmzNyEYnhhGx93JRbavm5DGS+CTJhwh6ztYw/owdO6XbbyB0kVX5IrrtHI jOQQqtCGx1uvchH2kHoNx6g01Qz4mihL0VzMP1gq3HskQxLYfESrf2o7dJ6eSYOF oYAjuSlENsZlMK4/59ViYynTFNp+sw3T2GTQXwQ9OGxIMUG2YV2jz8FS3565FfEs 8cmqUojEdZwNKc6eKZb5XR3qTDTWg8nh3D3r0txlU1Ji5j74xZ5dKzlQIkUgxbam 4rG31RyD4tkpas+Nmkmkj8sApZyPUkibKL779bBXvtJa4u0rtxXfWHCrdQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFDJ8rHz8qOGrZM/PW7ctVPDvRqcZMB8GA1UdIwQY MBaAFC8xNu0QmYWApRfZWYq8oz2bpmWZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHpFMjdSQ1poWUNsRjlsWmlyeWpQWnVtWlprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mOTBkODMtMDJiZS00ZTVmLWJkMGYt OTI5ZjEwNjYzMGYxLzEvTW55c2ZQeW80YXRrejg5YnR5MVU4TzlHcHhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9mOTBkODMtMDJiZS00ZTVmLWJkMGYtOTI5ZjEwNjYzMGYx LzEvTHpFMjdSQ1poWUNsRjlsWmlyeWpQWnVtWlprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgNdZzAN BgkqhkiG9w0BAQsFAAOCAQEArMRrAVPhBpL1VHMdoUcN48DIxVEEdsGaF0co0nYR PfZJM87yu4k/hp+sl7enBlfa0MWGqh6Z34jbxb9i9MDyNwQ/xtYfE46GwKGleKBY eKROdIj8FN3RIQq2v+euxpPKPaIx64lq1k2PlL9sc5b0tdbdNTJVqiydwPhZNPv7 H1A2hYKlqGytAux04ifMaqcNvDrklga3AnzNkCiDXPnVc9+7vlebHI+O2oLUw7wO 1JnOK/Qs4Vn1OoURq5tB01pU1DC3SFsmDqugviRQ8OnK/Gy+HiPDgUUCpLW6RZk1 nia5Tcbkv+33h6fEDqb6jpzCxSWkjf+sa59KYykXfkHI3g== -----END CERTIFICATE-----Generated at Mon Jan 19 09:49:18 2026 by rpki-client