This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/MQcbotKf19kmcSzpeDPbkc2BYb4.roa File: MQcbotKf19kmcSzpeDPbkc2BYb4.roa (raw, json) Hash identifier: tx0bnxsdHJln6Y4VbZTnW3YQpwA8PsngDKmsWxtzuwI= Subject key identifier: 31:07:1B:A2:D2:9F:D7:D9:26:71:2C:E9:78:33:DB:91:CD:81:61:BE Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797EA80FD41538EAEA509BB584B55A3D Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/MQcbotKf19kmcSzpeDPbkc2BYb4.roa Signing time: Thu 01 Jan 2026 12:18:22 +0000 ROA not before: Thu 01 Jan 2026 12:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200021 IP address blocks: 2a0e:aa07:e060::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:a8:0f:d4:15:38:ea:ea:50:9b:b5:84:b5:5a:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=31071ba2d29fd7d926712ce97833db91cd8161be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:44:3d:94:b4:23:08:31:8c:e8:7a:b8:04:82: ee:fe:05:74:56:e5:cd:37:a0:8a:f0:d4:f9:a7:d8: 72:7c:16:73:40:91:77:f5:b5:6d:b0:55:e1:68:95: 98:5e:7f:2e:6c:36:55:36:b2:a6:1b:dd:7b:c3:65: 20:38:ee:d1:17:db:9d:9b:c5:e1:18:ca:ba:92:47: 5d:3f:71:a3:e0:c8:a6:66:81:8e:ca:8a:1a:5f:08: b7:ac:39:c9:80:01:ef:dd:e3:41:67:b1:f3:3a:32: cb:0a:a3:fd:df:88:0c:66:9a:7a:7e:4f:d6:f8:e5: d9:6a:50:50:ca:a8:30:76:9d:c3:83:70:79:5a:d4: 68:39:b0:80:c6:1c:09:b4:c4:b2:6d:74:31:1f:ff: 89:55:43:2a:d5:30:b0:f5:3e:3a:78:ff:65:b2:37: d4:24:a5:a2:bd:e0:ca:c7:20:ed:37:a7:72:35:df: c3:36:2a:22:a9:a8:44:eb:8d:80:f3:f3:dc:59:ba: 3c:aa:c7:5f:ef:0c:e5:36:96:10:ea:80:82:53:e5: 5f:71:79:a1:df:9c:46:d4:31:ef:cc:22:a7:c7:3a: 07:c2:a2:ea:03:d5:a8:25:54:2f:5e:22:54:a4:1a: 21:dc:c2:23:db:93:0d:e0:f0:ba:97:8c:bb:33:91: fe:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:07:1B:A2:D2:9F:D7:D9:26:71:2C:E9:78:33:DB:91:CD:81:61:BE X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/MQcbotKf19kmcSzpeDPbkc2BYb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa07:e060::/44 Signature Algorithm: sha256WithRSAEncryption ab:a0:97:a2:45:e5:e4:75:d5:f2:c2:0f:e5:68:75:d6:a9:8d: 1b:a9:d6:3b:09:de:f7:16:5f:bb:fd:a0:6f:bb:9b:ea:82:72: 89:06:10:74:b8:41:62:17:7d:ab:60:4d:be:3f:4a:ce:f3:5b: aa:ab:e8:d2:f2:83:54:0a:50:78:83:15:ac:aa:67:61:05:7c: 1c:b9:fe:44:8d:a1:02:39:c5:5a:f4:f3:86:e2:0d:4d:8a:5f: 14:6d:f8:4a:53:94:5d:07:c0:db:84:8a:14:92:5a:34:da:6c: d7:5d:4b:82:09:b7:8f:64:11:6d:4a:00:bf:e8:ab:01:f7:30: 63:04:01:df:d8:3f:ea:c9:5a:13:0f:35:d6:ed:b9:4d:5a:65: e0:27:45:bd:e2:2a:f0:f9:e1:23:3f:b8:6d:1e:70:0e:59:8a: 38:cc:0e:d9:5c:e6:96:33:5f:86:13:0f:19:1f:7d:b0:2a:cd: a4:ee:b6:b1:de:2b:31:93:a1:af:98:4a:1a:69:b2:e0:39:2c: 86:60:95:15:31:09:04:b6:44:7d:b6:5a:d3:e5:d5:3c:dc:55: 51:b6:ce:b2:3a:37:25:70:0d:6b:5f:0c:88:8c:3b:e6:8a:ce: 1f:ef:d3:cc:d4:0f:3b:95:26:82:3c:04:34:93:29:fb:20:46: 14:c7:91:2c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5fqgP1BU46upQm7WEtVo9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTA3MWJhMmQyOWZkN2Q5MjY3MTJjZTk3ODMzZGI5MWNkODE2MWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0Q9lLQjCDGM6Hq4BILu/gV0VuXN N6CK8NT5p9hyfBZzQJF39bVtsFXhaJWYXn8ubDZVNrKmG917w2UgOO7RF9udm8Xh GMq6kkddP3Gj4MimZoGOyooaXwi3rDnJgAHv3eNBZ7HzOjLLCqP934gMZpp6fk/W +OXZalBQyqgwdp3Dg3B5WtRoObCAxhwJtMSybXQxH/+JVUMq1TCw9T46eP9lsjfU JKWiveDKxyDtN6dyNd/DNioiqahE642A8/PcWbo8qsdf7wzlNpYQ6oCCU+VfcXmh 35xG1DHvzCKnxzoHwqLqA9WoJVQvXiJUpBoh3MIj25MN4PC6l4y7M5H+KQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDEHG6LSn9fZJnEs6Xgz25HNgWG+MB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvTVFjYm90S2YxOWttY1N6cGVEUGJrYzJCWWI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6qB+Bg MA0GCSqGSIb3DQEBCwUAA4IBAQCroJeiReXkddXywg/laHXWqY0bqdY7Cd73Fl+7 /aBvu5vqgnKJBhB0uEFiF32rYE2+P0rO81uqq+jS8oNUClB4gxWsqmdhBXwcuf5E jaECOcVa9POG4g1Nil8UbfhKU5RdB8DbhIoUklo02mzXXUuCCbePZBFtSgC/6KsB 9zBjBAHf2D/qyVoTDzXW7blNWmXgJ0W94irw+eEjP7htHnAOWYo4zA7ZXOaWM1+G Ew8ZH32wKs2k7rax3isxk6GvmEoaabLgOSyGYJUVMQkEtkR9tlrT5dU83FVRts6y OjclcA1rXwyIjDvmis4f79PM1A87lSaCPAQ0kyn7IEYUx5Es -----END CERTIFICATE-----Generated at Tue Jan 6 21:30:42 2026 by rpki-client