This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/MdnCyLAdEMMjAL_0LCFs3Um-Buc.roa File: MdnCyLAdEMMjAL_0LCFs3Um-Buc.roa (raw, json) Hash identifier: R5JbgvdqSHQP0/wmS2mWsK2GXFdJcB9h1pCHWe14zww= Subject key identifier: 31:D9:C2:C8:B0:1D:10:C3:23:00:BF:F4:2C:21:6C:DD:49:BE:06:E7 Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797EA47E188AF18E1539C35EAA7D6A2F Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/MdnCyLAdEMMjAL_0LCFs3Um-Buc.roa Signing time: Thu 01 Jan 2026 12:18:21 +0000 ROA not before: Thu 01 Jan 2026 12:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 139589 IP address blocks: 2a0e:aa01:1fff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:a4:7e:18:8a:f1:8e:15:39:c3:5e:aa:7d:6a:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=31d9c2c8b01d10c32300bff42c216cdd49be06e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0e:3f:6e:a0:98:2a:0d:98:be:4f:d7:1f:31: 11:4c:d2:72:09:52:51:f6:78:1d:f4:c0:5b:46:08: f0:d2:d7:f3:5d:13:47:6a:73:f8:d3:21:2a:66:cb: 6e:ff:66:a2:03:ea:d8:61:ba:fd:77:1c:9f:8d:eb: e5:14:84:ad:ca:b8:7b:d1:ba:bf:53:32:93:4f:b0: 35:00:96:98:dd:5a:cc:f4:8e:15:33:d3:06:30:c4: b7:5d:f5:ac:e6:b9:5f:de:55:1d:ce:bf:6b:2e:8f: c9:86:57:e7:e5:c3:3f:90:0b:80:33:a6:e0:b6:9b: 6f:f9:ef:aa:be:82:16:4d:be:d9:c3:e2:8a:9d:b7: ec:c5:6a:cc:ed:da:16:d8:88:0f:54:95:24:61:b3: d9:61:55:3e:11:73:ab:e7:f9:46:2a:02:b0:70:c6: 55:56:89:59:d3:6e:53:9b:92:36:b3:9d:11:79:39: d1:b7:84:59:e8:87:3a:63:4f:80:37:a4:55:e4:8e: 34:0b:8a:4c:79:8c:93:c2:a1:18:39:88:3f:59:ab: 2b:ad:6b:0a:ea:e6:6d:f9:c5:b6:1d:a9:91:d2:0b: e2:49:67:ce:a3:0e:04:4b:25:a8:c2:7b:3c:e0:5a: 57:38:56:68:e6:d9:d7:6b:31:fd:f9:a5:43:14:79: ec:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:D9:C2:C8:B0:1D:10:C3:23:00:BF:F4:2C:21:6C:DD:49:BE:06:E7 X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/MdnCyLAdEMMjAL_0LCFs3Um-Buc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa01:1fff::/48 Signature Algorithm: sha256WithRSAEncryption 89:91:e4:17:ae:31:bf:c0:6a:6a:31:7a:53:6b:c4:5a:b8:d8: fa:68:9a:f0:aa:14:4f:e9:ea:9d:7b:64:22:f5:a6:c7:b6:52: 5c:e8:8e:42:3e:f8:c9:bc:75:a9:c4:cf:bb:11:6d:ff:f7:5a: ae:80:24:9b:89:38:00:91:8f:59:b9:81:b8:a3:1b:c2:eb:2b: f1:19:ff:86:79:fa:7d:78:9c:89:df:49:19:e9:46:ed:4b:a5: 8d:02:4f:1f:63:04:73:30:ed:ec:65:55:fd:cf:9b:50:75:a0: 09:56:16:3a:55:54:70:aa:e5:d1:46:94:0a:70:00:cb:9d:6b: 26:77:a3:54:3d:f0:45:63:98:c0:62:1c:96:2b:26:63:38:68: 8f:f6:af:f0:91:67:63:09:15:f0:81:11:bb:a0:bd:9d:75:dc: ab:0a:ee:ec:1b:8e:70:d1:fb:43:35:9a:96:d4:6e:72:c2:32: 1c:de:ab:a1:c9:1a:fb:5e:2a:1d:1a:ff:3e:61:20:39:d6:a5: 5a:81:46:f2:a8:37:bd:33:1e:09:88:8c:18:4b:e4:14:f4:8d: 90:d6:b8:9d:2f:e6:1c:2a:62:5f:01:37:2c:4a:13:d2:d5:43: a1:b8:d8:27:d0:fd:13:70:00:89:04:8c:c3:90:5a:fc:7e:38: 1f:ed:c0:08 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5fqR+GIrxjhU5w16qfWovMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMWQ5YzJjOGIwMWQxMGMzMjMwMGJmZjQyYzIxNmNkZDQ5YmUwNmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApg4/bqCYKg2Yvk/XHzERTNJyCVJR 9ngd9MBbRgjw0tfzXRNHanP40yEqZstu/2aiA+rYYbr9dxyfjevlFIStyrh70bq/ UzKTT7A1AJaY3VrM9I4VM9MGMMS3XfWs5rlf3lUdzr9rLo/Jhlfn5cM/kAuAM6bg tptv+e+qvoIWTb7Zw+KKnbfsxWrM7doW2IgPVJUkYbPZYVU+EXOr5/lGKgKwcMZV VolZ025Tm5I2s50ReTnRt4RZ6Ic6Y0+AN6RV5I40C4pMeYyTwqEYOYg/WasrrWsK 6uZt+cW2HamR0gviSWfOow4ESyWowns84FpXOFZo5tnXazH9+aVDFHns7QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDHZwsiwHRDDIwC/9CwhbN1JvgbnMB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvTWRuQ3lMQWRFTU1qQUxfMExDRnMzVW0tQnVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6qAR// MA0GCSqGSIb3DQEBCwUAA4IBAQCJkeQXrjG/wGpqMXpTa8RauNj6aJrwqhRP6eqd e2Qi9abHtlJc6I5CPvjJvHWpxM+7EW3/91qugCSbiTgAkY9ZuYG4oxvC6yvxGf+G efp9eJyJ30kZ6UbtS6WNAk8fYwRzMO3sZVX9z5tQdaAJVhY6VVRwquXRRpQKcADL nWsmd6NUPfBFY5jAYhyWKyZjOGiP9q/wkWdjCRXwgRG7oL2dddyrCu7sG45w0ftD NZqW1G5ywjIc3quhyRr7XiodGv8+YSA51qVagUbyqDe9Mx4JiIwYS+QU9I2Q1rid L+YcKmJfATcsShPS1UOhuNgn0P0TcACJBIzDkFr8fjgf7cAI -----END CERTIFICATE-----Generated at Tue Jan 6 21:30:43 2026 by rpki-client