This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/MQx32Dwq5mgjGkhrtw1GXgbTM7k.roa File: MQx32Dwq5mgjGkhrtw1GXgbTM7k.roa (raw, json) Hash identifier: k7RwMPx0AuwbMMSs4Cz+gmC3ZAfNIVOZ0kZNv8/NLR0= Subject key identifier: 31:0C:77:D8:3C:2A:E6:68:23:1A:48:6B:B7:0D:46:5E:06:D3:33:B9 Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797EBC4F28E461D91C6EEA908EA30BAF Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/MQx32Dwq5mgjGkhrtw1GXgbTM7k.roa Signing time: Thu 01 Jan 2026 12:18:27 +0000 ROA not before: Thu 01 Jan 2026 12:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214053 IP address blocks: 2a0e:aa07:ec10::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:bc:4f:28:e4:61:d9:1c:6e:ea:90:8e:a3:0b:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=310c77d83c2ae668231a486bb70d465e06d333b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:24:65:b0:11:55:67:0c:e0:9c:cc:c8:ae:c6: d1:b6:88:9e:2b:56:5e:97:19:7c:33:8f:58:6f:de: 48:d6:e9:7e:59:b6:c4:43:75:15:56:c7:79:c7:ee: 9a:7d:79:d5:57:f0:7a:76:3b:9f:91:4a:d1:2b:97: ae:74:76:af:2a:4d:1f:6d:86:9d:b9:5b:60:c2:1f: 1f:ee:28:35:47:38:a9:5e:55:e4:37:d4:d0:10:05: 1a:e1:d3:5f:6d:7b:a0:e7:50:2b:27:39:c6:6c:1b: 6a:5c:af:a2:1c:10:38:cb:60:85:4c:15:52:3d:f5: f0:03:31:20:0f:4f:e6:69:c1:48:0f:45:c8:2d:15: 21:7d:eb:7d:3a:7b:ab:07:26:32:9c:57:8b:aa:97: 89:03:b8:b3:93:52:1d:cb:7b:36:82:24:70:f4:3c: 4b:a4:98:2e:ee:b9:a2:d9:67:67:5e:13:62:b7:d6: 89:60:39:05:4a:a2:ad:e7:cd:fe:90:a1:54:4b:ba: c6:32:9c:92:19:ea:3a:13:96:a8:20:df:0d:8f:30: bf:d9:f5:32:88:6e:a2:cf:0e:5f:00:89:98:5e:2d: c2:09:aa:8b:a4:f4:74:ef:18:f0:ae:d0:e3:70:10: 70:8b:62:8a:e1:05:97:53:20:10:a6:84:07:02:99: bb:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:0C:77:D8:3C:2A:E6:68:23:1A:48:6B:B7:0D:46:5E:06:D3:33:B9 X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/MQx32Dwq5mgjGkhrtw1GXgbTM7k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa07:ec10::/44 Signature Algorithm: sha256WithRSAEncryption 30:64:80:ce:56:b7:2f:12:47:c7:42:17:fa:ce:62:a4:5e:56: 1f:89:a4:fa:e6:e3:ab:94:76:8d:e0:0c:f5:55:51:82:68:37: 38:06:a6:e6:73:d4:ae:3d:80:2c:39:94:11:3a:b9:9c:6f:3a: 4d:63:d0:c5:77:9f:d0:6c:70:9c:c7:7b:88:e5:ef:a7:61:1d: 28:8b:4c:82:2d:f7:4f:a9:1c:13:aa:97:57:f5:57:50:76:19: 21:00:03:bf:b0:88:8a:12:7b:11:ca:8f:db:83:17:98:31:7c: d2:6f:a1:9b:71:f5:43:d7:84:98:d2:18:07:37:fa:e9:29:9d: 2b:7f:3e:5f:71:03:ff:9e:f2:ce:06:c6:21:0c:44:33:c7:af: 16:bd:2b:00:e8:2c:40:d9:c8:0d:85:50:ca:6c:f5:7f:ec:5c: ae:7f:3a:8d:e1:d2:05:5e:22:47:30:54:cf:9e:10:e2:38:43: 14:93:12:ff:14:b8:87:8b:bf:c4:d1:ba:29:1f:06:16:3e:cd: d5:65:6f:1c:54:13:0a:d6:0f:16:25:82:43:8d:52:d8:aa:af: 03:e3:32:51:90:2b:b8:ce:38:ea:6a:df:62:82:cd:91:cc:78: f2:51:80:0d:ad:ea:cc:c0:5d:ee:15:16:1a:e8:78:02:82:5b: bb:51:c0:f7 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5frxPKORh2Rxu6pCOowuvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTBjNzdkODNjMmFlNjY4MjMxYTQ4NmJiNzBkNDY1ZTA2ZDMzM2I5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCRlsBFVZwzgnMzIrsbRtoieK1Ze lxl8M49Yb95I1ul+WbbEQ3UVVsd5x+6afXnVV/B6djufkUrRK5eudHavKk0fbYad uVtgwh8f7ig1RzipXlXkN9TQEAUa4dNfbXug51ArJznGbBtqXK+iHBA4y2CFTBVS PfXwAzEgD0/macFID0XILRUhfet9OnurByYynFeLqpeJA7izk1Idy3s2giRw9DxL pJgu7rmi2WdnXhNit9aJYDkFSqKt583+kKFUS7rGMpySGeo6E5aoIN8NjzC/2fUy iG6izw5fAImYXi3CCaqLpPR07xjwrtDjcBBwi2KK4QWXUyAQpoQHApm7lQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDEMd9g8KuZoIxpIa7cNRl4G0zO5MB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvTVF4MzJEd3E1bWdqR2tocnR3MUdYZ2JUTTdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6qB+wQ MA0GCSqGSIb3DQEBCwUAA4IBAQAwZIDOVrcvEkfHQhf6zmKkXlYfiaT65uOrlHaN 4Az1VVGCaDc4Bqbmc9SuPYAsOZQROrmcbzpNY9DFd5/QbHCcx3uI5e+nYR0oi0yC LfdPqRwTqpdX9VdQdhkhAAO/sIiKEnsRyo/bgxeYMXzSb6GbcfVD14SY0hgHN/rp KZ0rfz5fcQP/nvLOBsYhDEQzx68WvSsA6CxA2cgNhVDKbPV/7FyufzqN4dIFXiJH MFTPnhDiOEMUkxL/FLiHi7/E0bopHwYWPs3VZW8cVBMK1g8WJYJDjVLYqq8D4zJR kCu4zjjqat9igs2RzHjyUYANrerMwF3uFRYa6HgCglu7UcD3 -----END CERTIFICATE-----Generated at Tue Jan 6 21:32:11 2026 by rpki-client