This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/M2dF7BavLfK_2FXgWCFI02OS-Mo.roa File: M2dF7BavLfK_2FXgWCFI02OS-Mo.roa (raw, json) Hash identifier: 8Ca/EBP/Unng4biKhI4OBWHNj5CmJXCh1cwsDn7MXGo= Subject key identifier: 33:67:45:EC:16:AF:2D:F2:BF:D8:55:E0:58:21:48:D3:63:92:F8:CA Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B7910B1D7A8388B42291AA33B9BCA5780 Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/M2dF7BavLfK_2FXgWCFI02OS-Mo.roa Signing time: Thu 01 Jan 2026 10:18:15 +0000 ROA not before: Thu 01 Jan 2026 10:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214309 IP address blocks: 2a12:bec4:14d0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 07:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:b1:d7:a8:38:8b:42:29:1a:a3:3b:9b:ca:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 10:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=336745ec16af2df2bfd855e0582148d36392f8ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:9b:3d:fb:50:04:d5:c4:d8:e8:cd:7c:a7:70: 0c:c4:9d:5e:49:e4:dc:28:2f:58:61:47:43:36:41: 00:dd:db:55:c6:d3:d6:6e:b0:28:0f:36:69:cd:75: 3f:be:b8:c4:fd:75:04:f5:ad:a7:5e:f9:c1:d3:ee: 02:f0:bc:cc:ea:55:a4:5e:90:4b:db:01:4b:9d:c0: 88:14:2b:9b:f7:47:58:74:43:4b:88:bb:ab:50:14: 13:1b:80:38:3a:a8:df:f8:71:2e:d3:93:ec:bc:b6: 7d:57:e8:b0:ba:66:92:7f:91:33:f0:75:51:aa:18: 27:51:01:7b:3f:21:82:fa:cb:b2:0f:94:41:82:c7: 62:d0:f0:cc:3f:87:05:9b:5a:a3:3d:e2:e3:5a:c6: 16:27:35:fa:62:c6:54:b8:d0:cf:28:8d:44:06:77: 67:6f:69:e8:ae:bd:f0:1e:dc:9f:a5:19:b0:cd:f7: f6:d3:a6:0d:6b:10:36:62:40:43:7d:b5:86:c3:2f: 0c:3b:84:de:b0:06:9b:99:a3:a2:6d:c3:69:fa:28: 2f:c9:18:f0:4a:d6:d6:47:7b:e1:d1:0a:d2:40:ef: 91:cd:fb:ab:a0:d5:6f:84:49:53:e7:62:33:d1:cf: 1e:4c:d9:72:c7:ed:a2:e2:ce:63:f6:3c:d6:87:bc: c2:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:67:45:EC:16:AF:2D:F2:BF:D8:55:E0:58:21:48:D3:63:92:F8:CA X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/M2dF7BavLfK_2FXgWCFI02OS-Mo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec4:14d0::/44 Signature Algorithm: sha256WithRSAEncryption 76:84:73:12:10:08:b5:a8:89:ab:d3:0e:34:b1:51:11:73:a1: 0f:42:49:76:cb:b2:7f:fb:af:73:19:79:ca:db:b2:60:b3:04: 9e:93:e3:45:79:94:fb:da:21:f1:a4:eb:2d:98:ff:e0:56:01: 09:f7:fc:79:f5:37:ba:66:dc:5d:a3:26:5e:61:d2:0a:b8:b7: b4:22:ef:9d:ef:d9:9f:dc:69:7c:ea:b4:cf:e9:40:c9:8a:89: 43:76:8d:67:95:e4:f5:09:ae:53:b1:91:30:f3:38:5d:f7:7c: 5b:37:0e:fc:15:ac:ea:90:87:7f:26:f7:de:08:44:ea:ef:e6: 7b:03:a2:e0:2b:1f:c8:f0:29:37:f9:09:5d:69:8d:20:fa:bb: 3d:7c:6f:1f:5f:50:a9:cc:9b:4f:c8:db:f6:7a:f6:82:41:cf: 00:65:fd:76:1d:0e:0f:2f:ee:ef:a5:21:5d:29:c4:0e:66:e4: 39:02:38:46:bb:a1:8a:7e:5f:e2:ac:31:46:fc:44:06:7e:76: dc:c5:4b:36:31:ab:02:42:99:c0:1c:43:bf:e3:79:d4:2b:d4: 6c:97:cd:5b:12:a8:d2:f0:7c:33:f8:dd:66:9e:53:86:77:ec: 1b:12:b3:e2:3e:4c:5e:ad:5b:00:d5:34:4b:94:51:cb:1c:8e: 18:b3:0f:b7 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5ELHXqDiLQikaozubyleAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAxMTAxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzY3NDVlYzE2YWYyZGYyYmZkODU1ZTA1ODIxNDhkMzYzOTJmOGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45s9+1AE1cTY6M18p3AMxJ1eSeTc KC9YYUdDNkEA3dtVxtPWbrAoDzZpzXU/vrjE/XUE9a2nXvnB0+4C8LzM6lWkXpBL 2wFLncCIFCub90dYdENLiLurUBQTG4A4Oqjf+HEu05PsvLZ9V+iwumaSf5Ez8HVR qhgnUQF7PyGC+suyD5RBgsdi0PDMP4cFm1qjPeLjWsYWJzX6YsZUuNDPKI1EBndn b2norr3wHtyfpRmwzff206YNaxA2YkBDfbWGwy8MO4TesAabmaOibcNp+igvyRjw StbWR3vh0QrSQO+RzfuroNVvhElT52Iz0c8eTNlyx+2i4s5j9jzWh7zC4wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDNnRewWry3yv9hV4FghSNNjkvjKMB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvTTJkRjdCYXZMZktfMkZYZ1dDRkkwMk9TLU1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+xBTQ MA0GCSqGSIb3DQEBCwUAA4IBAQB2hHMSEAi1qImr0w40sVERc6EPQkl2y7J/+69z GXnK27JgswSek+NFeZT72iHxpOstmP/gVgEJ9/x59Te6ZtxdoyZeYdIKuLe0Iu+d 79mf3Gl86rTP6UDJiolDdo1nleT1Ca5TsZEw8zhd93xbNw78FazqkId/JvfeCETq 7+Z7A6LgKx/I8Ck3+QldaY0g+rs9fG8fX1CpzJtPyNv2evaCQc8AZf12HQ4PL+7v pSFdKcQOZuQ5AjhGu6GKfl/irDFG/EQGfnbcxUs2MasCQpnAHEO/43nUK9Rsl81b EqjS8Hwz+N1mnlOGd+wbErPiPkxerVsA1TRLlFHLHI4Ysw+3 -----END CERTIFICATE-----Generated at Mon Jan 19 18:00:18 2026 by rpki-client