This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/MxK8xpLc65l6jq47Ix7DiO_bItw.roa File: MxK8xpLc65l6jq47Ix7DiO_bItw.roa (raw, json) Hash identifier: j3Cx4avg2XiA5F+u98NaEufXT6dtcTEAI2lje/Zb/S4= Subject key identifier: 33:12:BC:C6:92:DC:EB:99:7A:8E:AE:3B:23:1E:C3:88:EF:DB:22:DC Certificate issuer: /CN=1b6de3c1b0c79ffb27822e0947fdc38e51fcc5ca Certificate serial: 019B797ED712E812B96B5A716C9644D369C2 Authority key identifier: 1B:6D:E3:C1:B0:C7:9F:FB:27:82:2E:09:47:FD:C3:8E:51:FC:C5:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G23jwbDHn_sngi4JR_3DjlH8xco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/MxK8xpLc65l6jq47Ix7DiO_bItw.roa Signing time: Thu 01 Jan 2026 12:18:34 +0000 ROA not before: Thu 01 Jan 2026 12:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50169 IP address blocks: 2001:678:280::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.mft rsync://rpki.ripe.net/repository/DEFAULT/G23jwbDHn_sngi4JR_3DjlH8xco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:d7:12:e8:12:b9:6b:5a:71:6c:96:44:d3:69:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b6de3c1b0c79ffb27822e0947fdc38e51fcc5ca Validity Not Before: Jan 1 12:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3312bcc692dceb997a8eae3b231ec388efdb22dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8c:52:9f:aa:0b:52:51:b9:8a:7e:88:13:1f: 3b:26:7b:12:3f:58:c1:c4:12:1b:82:47:23:75:87: 55:a5:6f:89:5e:23:4e:19:a0:c3:4a:54:74:d7:eb: 5b:80:cb:06:91:2b:e1:66:d3:c6:6b:6a:84:aa:59: d9:73:13:22:d7:2d:21:17:ad:18:e6:92:c4:15:6c: 01:4f:c5:47:b1:7e:02:9c:df:c3:f3:93:56:a7:80: 29:55:7e:a8:39:cb:ad:90:e8:d8:6f:f0:7f:08:a5: 9e:38:15:d3:b6:47:90:11:9c:c8:3d:c9:19:e3:8b: b2:6c:93:e3:23:35:ed:a1:37:b5:26:98:91:db:ca: 16:9d:1b:27:fd:76:0c:57:ad:03:3d:24:ac:5d:5d: 22:34:64:0b:b2:c0:ce:c3:40:39:95:de:8d:8e:34: 95:fd:09:f5:19:20:bd:55:29:f5:ee:1b:cf:7a:bf: c9:37:90:19:61:2c:0b:d4:36:c1:d0:d2:9c:c8:c0: 0d:19:22:63:80:96:68:f8:5b:b1:90:fb:ae:88:86: 2a:54:b7:9c:db:17:23:d9:17:76:ef:63:45:58:c7: 8d:46:a4:44:65:8f:6e:be:ec:9a:6d:14:3e:fe:98: 63:3b:96:1d:76:7a:22:de:7a:d1:bb:cd:a4:31:ea: 57:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:12:BC:C6:92:DC:EB:99:7A:8E:AE:3B:23:1E:C3:88:EF:DB:22:DC X509v3 Authority Key Identifier: keyid:1B:6D:E3:C1:B0:C7:9F:FB:27:82:2E:09:47:FD:C3:8E:51:FC:C5:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G23jwbDHn_sngi4JR_3DjlH8xco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/MxK8xpLc65l6jq47Ix7DiO_bItw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:280::/48 Signature Algorithm: sha256WithRSAEncryption 54:b7:d3:66:fc:7e:4d:13:15:47:cc:14:6f:ed:65:64:aa:3e: 19:0c:c6:b1:6a:ec:c7:98:5e:35:d8:d0:48:f4:60:08:fe:11: 3d:42:71:15:78:9d:9f:65:c6:c8:8d:d1:67:39:0c:51:4d:75: e8:46:aa:d5:f7:ba:bc:11:c1:ed:b9:d1:c1:8d:1a:99:f1:3f: e7:08:55:9b:6d:c2:6f:47:b1:9b:ec:ee:a5:b9:34:4e:d2:db: 6c:1f:5a:05:ba:d7:70:f7:44:d3:3f:6c:32:0e:22:c1:df:4e: 38:5c:ee:38:f1:5f:2b:9f:07:ec:8c:36:bd:2f:d3:f4:12:5a: 67:7a:84:7e:a7:ad:d4:e4:47:eb:a2:0d:4d:48:68:cf:a9:8f: 73:55:79:cd:b0:51:18:2e:85:c9:ed:16:05:60:a4:40:56:f4: c4:ac:f1:b8:b3:d5:73:33:32:86:ec:7a:40:70:ad:22:93:60: cd:0f:83:8f:4b:81:e7:ec:3b:b0:4c:4a:c9:20:32:c4:40:d4: 09:e6:e5:79:8f:83:c9:c6:94:77:3f:8e:7c:19:80:98:3a:d5: 5b:27:51:28:52:a4:4a:1f:76:d4:7d:ab:34:ed:2e:40:3c:b0: 32:95:08:45:7f:aa:7e:23:73:29:fe:88:14:4b:28:c0:5b:ce: 9d:64:06:63 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5ftcS6BK5a1pxbJZE02nCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiNmRlM2MxYjBjNzlmZmIyNzgyMmUwOTQ3ZmRjMzhlNTFm Y2M1Y2EwHhcNMjYwMTAxMTIxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzEyYmNjNjkyZGNlYjk5N2E4ZWFlM2IyMzFlYzM4OGVmZGIyMmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIxSn6oLUlG5in6IEx87JnsSP1jB xBIbgkcjdYdVpW+JXiNOGaDDSlR01+tbgMsGkSvhZtPGa2qEqlnZcxMi1y0hF60Y 5pLEFWwBT8VHsX4CnN/D85NWp4ApVX6oOcutkOjYb/B/CKWeOBXTtkeQEZzIPckZ 44uybJPjIzXtoTe1JpiR28oWnRsn/XYMV60DPSSsXV0iNGQLssDOw0A5ld6NjjSV /Qn1GSC9VSn17hvPer/JN5AZYSwL1DbB0NKcyMANGSJjgJZo+FuxkPuuiIYqVLec 2xcj2Rd272NFWMeNRqREZY9uvuyabRQ+/phjO5Yddnoi3nrRu82kMepXxwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDMSvMaS3OuZeo6uOyMew4jv2yLcMB8GA1UdIwQY MBaAFBtt48Gwx5/7J4IuCUf9w45R/MXKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzIzandiREhuX3NuZ2k0SlJfM0RqbEg4eGNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9jNWU1NTctOGJlNS00ZjM5LTk1NjUt ZDk5ZTA4Njg0NmI3LzEvTXhLOHhwTGM2NWw2anE0N0l4N0RpT19iSXR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9jNWU1NTctOGJlNS00ZjM5LTk1NjUtZDk5ZTA4Njg0NmI3 LzEvRzIzandiREhuX3NuZ2k0SlJfM0RqbEg4eGNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAKA MA0GCSqGSIb3DQEBCwUAA4IBAQBUt9Nm/H5NExVHzBRv7WVkqj4ZDMaxauzHmF41 2NBI9GAI/hE9QnEVeJ2fZcbIjdFnOQxRTXXoRqrV97q8EcHtudHBjRqZ8T/nCFWb bcJvR7Gb7O6luTRO0ttsH1oFutdw90TTP2wyDiLB3044XO448V8rnwfsjDa9L9P0 ElpneoR+p63U5Efrog1NSGjPqY9zVXnNsFEYLoXJ7RYFYKRAVvTErPG4s9VzMzKG 7HpAcK0ik2DND4OPS4Hn7DuwTErJIDLEQNQJ5uV5j4PJxpR3P458GYCYOtVbJ1Eo UqRKH3bUfas07S5APLAylQhFf6p+I3Mp/ogUSyjAW86dZAZj -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:26 2026 by rpki-client