This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/M7mbbyIR5xkz5lkLD1tR-mOMDZE.roa File: M7mbbyIR5xkz5lkLD1tR-mOMDZE.roa (raw, json) Hash identifier: GSKHfVVOdL2e+McXNKGIgDnG7vQB68vSPuon+3b3vBw= Subject key identifier: 33:B9:9B:6F:22:11:E7:19:33:E6:59:0B:0F:5B:51:FA:63:8C:0D:91 Certificate issuer: /CN=ac89af60986e6d958322fb026c6b65aeec949a0d Certificate serial: 019B7B366738B8447D2910A4AD204EA67B46 Authority key identifier: AC:89:AF:60:98:6E:6D:95:83:22:FB:02:6C:6B:65:AE:EC:94:9A:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/M7mbbyIR5xkz5lkLD1tR-mOMDZE.roa Signing time: Thu 01 Jan 2026 20:18:41 +0000 ROA not before: Thu 01 Jan 2026 20:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20473 IP address blocks: 2a13:ce40:6667::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:67:38:b8:44:7d:29:10:a4:ad:20:4e:a6:7b:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac89af60986e6d958322fb026c6b65aeec949a0d Validity Not Before: Jan 1 20:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=33b99b6f2211e71933e6590b0f5b51fa638c0d91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c9:8e:25:26:6e:e8:f0:ac:da:c4:34:f7:12: 50:79:5e:4e:df:42:24:63:77:ef:10:b8:0c:4e:18: fa:2d:ec:50:a6:86:9f:19:85:2d:3f:44:18:a4:ef: d2:69:26:86:e5:83:23:64:7a:5f:58:f5:02:b4:ee: d9:b5:7b:32:38:fd:5b:56:98:a4:75:0e:3c:56:ee: 90:19:7a:77:88:5b:aa:01:29:14:6d:ed:44:c1:f9: 8a:e4:e7:85:09:ef:a3:ae:85:29:97:05:66:97:8a: 69:c7:aa:11:ac:7c:c0:7f:59:c9:68:b4:69:c8:74: 1d:84:28:e5:4c:c6:c6:6d:1e:52:c6:3d:c5:82:85: 38:76:00:f1:4f:7d:35:19:24:b7:4b:cf:a7:ac:73: ef:ee:28:63:44:57:d4:d1:f2:72:3e:22:52:8c:82: db:f4:3f:00:41:95:f5:a1:fe:49:38:31:fa:5c:df: c1:31:26:22:7e:d8:66:61:05:aa:b7:a2:cb:80:59: 41:ff:97:39:5f:9c:be:b8:c3:f3:bc:f7:d9:8a:21: 6a:42:a0:6a:34:42:4a:e1:a6:7e:a4:d0:2c:bd:38: a9:00:23:07:02:5d:c9:58:25:e0:c6:ad:24:ba:b8: 62:ef:07:c0:af:91:d0:53:fb:8d:2b:48:73:8a:62: 55:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:B9:9B:6F:22:11:E7:19:33:E6:59:0B:0F:5B:51:FA:63:8C:0D:91 X509v3 Authority Key Identifier: keyid:AC:89:AF:60:98:6E:6D:95:83:22:FB:02:6C:6B:65:AE:EC:94:9A:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/M7mbbyIR5xkz5lkLD1tR-mOMDZE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:ce40:6667::/48 Signature Algorithm: sha256WithRSAEncryption 13:34:bb:3a:cd:70:91:cd:79:71:ad:f8:aa:37:55:96:2e:14: 20:81:85:c1:70:80:5f:a8:2b:67:5d:a4:5c:2f:51:57:c2:22: af:aa:9b:b8:f8:a9:a0:ec:5a:f9:0e:d3:8b:6e:23:3e:80:9a: 9b:dc:3a:b5:a4:0f:68:ac:10:17:0e:a7:e6:c1:75:15:1d:06: 81:a1:c3:75:9e:9b:5b:c7:2e:b2:78:08:d0:ea:db:32:e9:a6: 90:5e:77:ae:63:42:73:86:76:49:97:b7:b2:fa:f0:12:60:77: f8:fb:06:31:90:2a:6b:f6:fd:8f:83:1d:86:b6:3e:24:9b:cb: 7f:57:fa:09:0d:b6:25:5a:3f:ce:90:16:7c:05:2c:5a:cc:61: af:a6:f7:7e:e7:94:36:c7:c7:59:3f:0b:47:a0:e8:fc:a2:09: 7f:e1:e4:31:2d:21:ff:d3:da:02:8e:e6:fc:f8:75:e4:a5:a8: 58:1c:e1:1f:65:51:80:7f:4d:cc:59:3a:e5:bf:a3:f9:36:bb: cc:5f:b0:5b:dd:bf:f2:39:0a:10:ea:17:24:d4:b1:65:80:2e: f3:91:00:8b:b4:89:15:a8:a6:43:36:a9:d1:0d:87:44:a5:ef: c4:b6:fc:db:e8:74:3a:f4:fb:eb:12:5a:5d:6a:78:bb:1f:ea: 64:96:f6:6d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7Nmc4uER9KRCkrSBOpntGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjODlhZjYwOTg2ZTZkOTU4MzIyZmIwMjZjNmI2NWFlZWM5 NDlhMGQwHhcNMjYwMTAxMjAxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzM2I5OWI2ZjIyMTFlNzE5MzNlNjU5MGIwZjViNTFmYTYzOGMwZDkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcmOJSZu6PCs2sQ09xJQeV5O30Ik Y3fvELgMThj6LexQpoafGYUtP0QYpO/SaSaG5YMjZHpfWPUCtO7ZtXsyOP1bVpik dQ48Vu6QGXp3iFuqASkUbe1EwfmK5OeFCe+jroUplwVml4ppx6oRrHzAf1nJaLRp yHQdhCjlTMbGbR5Sxj3FgoU4dgDxT301GSS3S8+nrHPv7ihjRFfU0fJyPiJSjILb 9D8AQZX1of5JODH6XN/BMSYifthmYQWqt6LLgFlB/5c5X5y+uMPzvPfZiiFqQqBq NEJK4aZ+pNAsvTipACMHAl3JWCXgxq0kurhi7wfAr5HQU/uNK0hzimJVxQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDO5m28iEecZM+ZZCw9bUfpjjA2RMB8GA1UdIwQY MBaAFKyJr2CYbm2VgyL7AmxrZa7slJoNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckltdllKaHViWldESXZzQ2JHdGxydXlVbWcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8zY2NiODUtOTE4Yi00ZGU4LWJkYTIt OWM4YmJhNjY0ZmYwLzEvTTdtYmJ5SVI1eGt6NWxrTEQxdFItbU9NRFpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8zY2NiODUtOTE4Yi00ZGU4LWJkYTItOWM4YmJhNjY0ZmYw LzEvckltdllKaHViWldESXZzQ2JHdGxydXlVbWcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhPOQGZn MA0GCSqGSIb3DQEBCwUAA4IBAQATNLs6zXCRzXlxrfiqN1WWLhQggYXBcIBfqCtn XaRcL1FXwiKvqpu4+Kmg7Fr5DtOLbiM+gJqb3Dq1pA9orBAXDqfmwXUVHQaBocN1 nptbxy6yeAjQ6tsy6aaQXneuY0JzhnZJl7ey+vASYHf4+wYxkCpr9v2Pgx2Gtj4k m8t/V/oJDbYlWj/OkBZ8BSxazGGvpvd+55Q2x8dZPwtHoOj8ogl/4eQxLSH/09oC jub8+HXkpahYHOEfZVGAf03MWTrlv6P5NrvMX7Bb3b/yOQoQ6hck1LFlgC7zkQCL tIkVqKZDNqnRDYdEpe/Etvzb6HQ69PvrElpdani7H+pklvZt -----END CERTIFICATE-----Generated at Tue Jan 27 02:50:23 2026 by rpki-client