This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/MG1O0F-rfzgVt6p4ihu5OYT_iRI.roa File: MG1O0F-rfzgVt6p4ihu5OYT_iRI.roa (raw, json) Hash identifier: 7/PK+3uI7sSfh+PE9VI26WFRSj3egwTahCxUQ+oiYmE= Subject key identifier: 30:6D:4E:D0:5F:AB:7F:38:15:B7:AA:78:8A:1B:B9:39:84:FF:89:12 Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B79108A585E81F3F9218964217D470DCE Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/MG1O0F-rfzgVt6p4ihu5OYT_iRI.roa Signing time: Thu 01 Jan 2026 10:18:05 +0000 ROA not before: Thu 01 Jan 2026 10:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61298 IP address blocks: 2a12:bec0:180::/44 maxlen: 48 2a12:bec0:e00::/48 maxlen: 48 2a12:bec0:e01::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:8a:58:5e:81:f3:f9:21:89:64:21:7d:47:0d:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 10:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=306d4ed05fab7f3815b7aa788a1bb93984ff8912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c1:aa:37:a2:58:2f:0d:3c:81:08:83:f1:9d: 2d:cf:54:7e:df:68:0b:a8:f9:3a:29:6c:e7:7e:3f: 03:f8:87:ce:e2:db:ed:d9:89:77:21:9f:e5:1d:50: e3:60:48:17:e8:c5:3e:89:89:c6:33:8b:15:8c:cc: 69:88:d4:6b:fe:c4:a2:ba:df:6e:b7:5b:fb:b5:a3: c9:b5:bf:ee:e1:f2:d9:8e:06:c5:2a:d9:9c:61:63: 13:97:21:44:ee:f8:8c:28:1e:bc:15:25:4c:69:35: 5d:31:65:07:73:97:db:37:f9:f2:ec:0a:08:be:9e: 9e:2d:00:28:4b:73:20:a9:11:85:c3:31:28:7c:27: 17:63:80:a2:f4:8d:6b:b2:b0:6c:6f:7c:86:0f:b3: 2c:34:2d:a2:ee:d6:8a:84:31:86:1f:3e:14:30:f4: 99:ee:8b:33:dc:6a:7b:77:4f:b2:40:6e:25:80:4a: d2:50:d6:b4:0f:bd:42:6f:7a:89:99:60:92:79:bd: aa:13:92:97:4d:70:78:5c:dd:55:ba:1e:33:13:89: 6d:e0:f4:2e:d5:91:56:21:89:15:c3:f7:4f:dd:d6: 07:0b:e4:b9:06:75:73:47:9b:4b:6b:1b:6f:a8:39: d8:f2:2d:fe:9b:dc:72:2a:f2:51:40:b9:56:6e:b6: 77:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:6D:4E:D0:5F:AB:7F:38:15:B7:AA:78:8A:1B:B9:39:84:FF:89:12 X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/MG1O0F-rfzgVt6p4ihu5OYT_iRI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec0:180::/44 2a12:bec0:e00::/47 Signature Algorithm: sha256WithRSAEncryption ad:9d:40:cf:70:60:cb:ff:f3:83:ad:be:20:7a:15:8f:40:26: 9d:6b:c8:98:e2:8b:4f:5e:b6:63:53:e6:0f:00:37:73:44:68: ad:50:5c:bc:15:38:d6:a1:2e:9f:08:80:02:71:e0:e6:32:52: 47:b9:88:ef:a0:0c:bb:b6:3a:68:74:81:dc:11:14:1a:a0:59: 05:35:ae:60:be:85:2f:9a:06:d1:57:b7:71:40:e2:b1:04:df: 06:3c:9c:f4:30:b7:75:ae:af:1d:c0:f3:a0:25:d4:7f:9a:93: d4:1d:98:fe:8b:d3:eb:f2:64:43:bb:64:54:26:7d:69:6f:54: 31:d8:8e:ab:7c:b2:6d:ba:bf:97:32:c2:cb:9a:3f:9e:5e:9a: 7e:a8:d1:28:b9:07:3e:8b:79:6b:55:3c:42:44:b4:91:06:21: c7:e8:11:ee:e8:36:92:75:bd:2a:81:d2:9c:2d:0e:ad:c3:d3: 73:1d:26:2b:2a:3c:c9:f6:f4:b1:58:4c:82:e3:ca:24:87:f1: fe:8f:62:9f:ec:47:74:07:8d:c1:21:93:e8:bb:e4:6d:ec:be: 32:f2:e7:f0:24:68:c6:ab:0a:b2:2a:67:db:d4:8a:68:be:3f: dc:a2:24:8a:bb:2e:83:86:62:08:5e:7f:25:20:65:c0:78:44: 7c:7e:9e:5e -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5EIpYXoHz+SGJZCF9Rw3OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAxMTAxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDZkNGVkMDVmYWI3ZjM4MTViN2FhNzg4YTFiYjkzOTg0ZmY4OTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48GqN6JYLw08gQiD8Z0tz1R+32gL qPk6KWznfj8D+IfO4tvt2Yl3IZ/lHVDjYEgX6MU+iYnGM4sVjMxpiNRr/sSiut9u t1v7taPJtb/u4fLZjgbFKtmcYWMTlyFE7viMKB68FSVMaTVdMWUHc5fbN/ny7AoI vp6eLQAoS3MgqRGFwzEofCcXY4Ci9I1rsrBsb3yGD7MsNC2i7taKhDGGHz4UMPSZ 7osz3Gp7d0+yQG4lgErSUNa0D71Cb3qJmWCSeb2qE5KXTXB4XN1Vuh4zE4lt4PQu 1ZFWIYkVw/dP3dYHC+S5BnVzR5tLaxtvqDnY8i3+m9xyKvJRQLlWbrZ30QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDBtTtBfq384FbeqeIobuTmE/4kSMB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvTUcxTzBGLXJmemdWdDZwNGlodTVPWVRfaVJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKhK+wAGA AwcBKhK+wA4AMA0GCSqGSIb3DQEBCwUAA4IBAQCtnUDPcGDL//ODrb4gehWPQCad a8iY4otPXrZjU+YPADdzRGitUFy8FTjWoS6fCIACceDmMlJHuYjvoAy7tjpodIHc ERQaoFkFNa5gvoUvmgbRV7dxQOKxBN8GPJz0MLd1rq8dwPOgJdR/mpPUHZj+i9Pr 8mRDu2RUJn1pb1Qx2I6rfLJtur+XMsLLmj+eXpp+qNEouQc+i3lrVTxCRLSRBiHH 6BHu6DaSdb0qgdKcLQ6tw9NzHSYrKjzJ9vSxWEyC48okh/H+j2Kf7Ed0B43BIZPo u+Rt7L4y8ufwJGjGqwqyKmfb1Ipovj/coiSKuy6DhmIIXn8lIGXAeER8fp5e -----END CERTIFICATE-----Generated at Tue Jan 20 02:49:06 2026 by rpki-client