This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/MnM2peioOnbLp_BAg-igkAKPvTc.roa File: MnM2peioOnbLp_BAg-igkAKPvTc.roa (raw, json) Hash identifier: Vbeb+iRYxn7BiklN0iV9tdae/Dc4FkRe08AV50vw30Q= Subject key identifier: 32:73:36:A5:E8:A8:3A:76:CB:A7:F0:40:83:E8:A0:90:02:8F:BD:37 Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797EB4DC790E0A141A8B1C7EE05AC9FE Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/MnM2peioOnbLp_BAg-igkAKPvTc.roa Signing time: Thu 01 Jan 2026 12:18:25 +0000 ROA not before: Thu 01 Jan 2026 12:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211035 IP address blocks: 2a0e:aa07:e023::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:b4:dc:79:0e:0a:14:1a:8b:1c:7e:e0:5a:c9:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=327336a5e8a83a76cba7f04083e8a090028fbd37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3f:76:ef:4f:62:96:ac:20:48:d5:48:9f:6f: 27:f5:da:b6:39:40:1d:8a:8a:bd:89:43:28:f4:f9: ec:d6:e1:20:89:c7:d6:68:71:78:11:76:9a:4a:c5: 10:8b:5a:66:94:9c:be:c7:be:00:98:42:ca:23:69: 30:86:83:71:43:c1:56:86:ad:37:95:f5:18:8d:31: f3:b0:3d:f9:80:1e:63:7d:f0:84:40:f8:58:bd:dd: 6b:12:60:c4:9b:93:ab:fe:71:59:78:08:89:3f:de: 50:49:99:13:f5:21:36:a6:b5:30:e0:74:46:a1:75: 3d:05:a4:1d:c1:e0:c6:2f:62:c5:40:f4:3a:15:69: a3:4c:e2:8b:ad:3a:26:3c:e0:1c:9e:00:e0:66:46: e1:74:2a:c5:10:82:bd:1f:a3:13:6a:7b:3a:16:fc: 34:bd:ac:b1:24:93:6f:73:d3:e7:59:2b:73:b3:dd: 92:11:d4:f5:06:f0:92:63:b5:3c:fe:1c:04:cf:ed: cd:16:b5:c5:85:5e:f7:a5:28:bf:9b:16:f9:c3:20: 28:85:8e:90:49:09:9f:c3:57:86:cd:fa:15:28:6d: f3:df:ad:b9:9a:7b:88:0d:71:45:b6:24:b2:54:aa: 64:70:b1:5a:7c:c0:cc:b2:33:9c:05:6c:48:0d:66: 35:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:73:36:A5:E8:A8:3A:76:CB:A7:F0:40:83:E8:A0:90:02:8F:BD:37 X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/MnM2peioOnbLp_BAg-igkAKPvTc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa07:e023::/48 Signature Algorithm: sha256WithRSAEncryption 09:ac:16:56:ea:c1:cc:00:ea:03:07:a2:1a:a6:d3:8a:61:24: ae:a8:e1:7c:c3:f4:14:d8:7d:2b:bb:37:22:83:2a:cf:e8:f6: 61:7c:06:36:2a:9d:bf:bd:45:69:f4:6e:e8:1b:30:b3:d5:a1: 90:1e:91:d2:df:a3:e1:21:4c:37:5a:18:92:32:b7:9f:b5:0a: 2c:d8:96:6e:56:1e:67:9f:08:79:8c:c9:01:f8:b4:06:0a:8e: 0d:83:4f:1e:e5:07:b8:d8:0a:64:63:5e:a4:4b:10:5b:5b:a4: 2d:20:b0:8a:c8:b2:34:05:5f:4b:b4:1f:0e:c6:58:d6:92:4c: d4:4e:62:2b:98:d8:48:37:4c:22:f3:93:44:33:b5:36:0c:dc: f5:c9:a4:0c:46:a7:d9:6d:37:b2:3b:46:3c:3b:4d:c9:96:33: ca:02:d1:24:67:bb:a7:22:b4:d4:99:7a:53:2f:ba:8b:a2:85: 1a:da:87:ca:d1:62:80:46:bf:24:ad:1b:41:24:50:38:02:0f: b0:8f:c2:85:ab:d3:e9:e4:16:62:5b:19:45:7a:38:8a:0f:f8: 83:cd:8b:77:b6:f1:5a:37:03:ca:1d:fa:6e:92:ec:60:53:be: 12:36:4b:38:66:f7:01:64:28:10:b4:5d:b7:88:57:75:45:4e: 05:99:98:5b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5frTceQ4KFBqLHH7gWsn+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMjczMzZhNWU4YTgzYTc2Y2JhN2YwNDA4M2U4YTA5MDAyOGZiZDM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0T92709ilqwgSNVIn28n9dq2OUAd ioq9iUMo9Pns1uEgicfWaHF4EXaaSsUQi1pmlJy+x74AmELKI2kwhoNxQ8FWhq03 lfUYjTHzsD35gB5jffCEQPhYvd1rEmDEm5Or/nFZeAiJP95QSZkT9SE2prUw4HRG oXU9BaQdweDGL2LFQPQ6FWmjTOKLrTomPOAcngDgZkbhdCrFEIK9H6MTans6Fvw0 vayxJJNvc9PnWStzs92SEdT1BvCSY7U8/hwEz+3NFrXFhV73pSi/mxb5wyAohY6Q SQmfw1eGzfoVKG3z3625mnuIDXFFtiSyVKpkcLFafMDMsjOcBWxIDWY1JwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDJzNqXoqDp2y6fwQIPooJACj703MB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvTW5NMnBlaW9PbmJMcF9CQWctaWdrQUtQdlRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6qB+Aj MA0GCSqGSIb3DQEBCwUAA4IBAQAJrBZW6sHMAOoDB6IaptOKYSSuqOF8w/QU2H0r uzcigyrP6PZhfAY2Kp2/vUVp9G7oGzCz1aGQHpHS36PhIUw3WhiSMreftQos2JZu Vh5nnwh5jMkB+LQGCo4Ng08e5Qe42ApkY16kSxBbW6QtILCKyLI0BV9LtB8OxljW kkzUTmIrmNhIN0wi85NEM7U2DNz1yaQMRqfZbTeyO0Y8O03JljPKAtEkZ7unIrTU mXpTL7qLooUa2ofK0WKARr8krRtBJFA4Ag+wj8KFq9Pp5BZiWxlFejiKD/iDzYt3 tvFaNwPKHfpukuxgU74SNks4ZvcBZCgQtF23iFd1RU4FmZhb -----END CERTIFICATE-----Generated at Tue Jan 6 21:30:59 2026 by rpki-client