This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Mhi3G3FszgvQnLKCmr2TJXsDmTs.roa File: Mhi3G3FszgvQnLKCmr2TJXsDmTs.roa (raw, json) Hash identifier: Wk9gQaknqmYfOwNdcyl95ddlGLSzwJsDskODYw/mCGM= Subject key identifier: 32:18:B7:1B:71:6C:CE:0B:D0:9C:B2:82:9A:BD:93:25:7B:03:99:3B Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B7910A03DC704D9F023AF9F146FEBB4F2 Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Mhi3G3FszgvQnLKCmr2TJXsDmTs.roa Signing time: Thu 01 Jan 2026 10:18:11 +0000 ROA not before: Thu 01 Jan 2026 10:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206125 IP address blocks: 2a12:bec0:80::/44 maxlen: 48 2a12:bec0:8f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:a0:3d:c7:04:d9:f0:23:af:9f:14:6f:eb:b4:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 10:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3218b71b716cce0bd09cb2829abd93257b03993b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:13:c7:7c:ea:20:1b:13:d1:7f:48:50:09:fb: af:5a:5c:c8:96:4c:41:2f:2d:33:4d:6b:a7:c1:95: 8b:be:26:40:bd:92:fb:d1:54:ad:89:5f:91:95:ce: b4:22:e8:35:82:e8:ce:d0:a6:a2:4d:bb:f1:30:0d: 4f:71:77:2a:0b:83:15:91:6f:e3:1c:c9:53:c8:10: b0:46:c4:a7:34:6f:27:32:b3:ee:7d:a3:14:2d:97: 09:70:b1:90:6d:5e:0d:b2:d0:9e:49:30:88:7b:ab: e5:5e:a4:b0:4e:bc:7c:df:0d:6f:9d:b7:78:38:c3: c8:5d:46:ba:60:d2:6c:02:8e:08:ed:a4:3e:43:5a: c4:b4:02:8d:8d:7d:43:0b:2b:b0:a8:19:7e:c2:2e: c1:f8:8e:ca:3c:ad:37:e4:c0:27:41:eb:29:0c:11: 20:01:a4:60:9a:0d:e4:60:93:5c:63:8a:f6:a3:5c: 93:63:94:11:ac:dc:18:78:b9:a0:81:ee:c6:60:c2: 64:38:2e:69:a7:c2:61:15:da:9d:32:3a:e8:5e:cd: 43:be:09:5d:b7:cb:81:64:96:ce:58:4d:23:c3:1d: 98:12:ba:1b:bc:94:92:29:ab:69:2c:37:95:24:2e: a8:39:f4:d4:62:10:0b:41:34:3c:81:5a:52:c7:7f: 87:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:18:B7:1B:71:6C:CE:0B:D0:9C:B2:82:9A:BD:93:25:7B:03:99:3B X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Mhi3G3FszgvQnLKCmr2TJXsDmTs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec0:80::/44 Signature Algorithm: sha256WithRSAEncryption 3a:1c:8f:7e:66:25:7b:95:3d:03:e4:60:b2:54:a0:5b:29:a9: 32:c2:6f:2a:ed:ab:43:80:2d:c3:ec:2b:ae:11:42:9e:de:17: d0:06:4f:e1:38:4e:4f:ae:cc:e1:7e:55:78:dd:97:c6:fe:91: e1:83:b3:00:90:50:27:60:43:42:4a:9c:3b:f6:8f:5a:bf:d1: 9c:fc:33:b8:8c:e4:90:74:47:4f:8e:9d:43:7a:0e:f4:e5:8d: 12:0c:b0:9b:c2:8e:30:68:f2:ec:aa:e3:cc:2b:e3:a8:81:01: 57:0c:8c:98:59:0a:bf:b7:d8:47:b2:bf:db:d7:fc:8e:8d:bd: 8a:46:27:69:23:54:35:3a:2b:a4:dc:56:24:b6:da:85:92:ff: 7d:50:d3:93:c8:b5:a1:50:c9:94:cb:49:a0:08:90:d7:56:28: 56:ad:ff:fb:c9:a7:99:86:09:26:fa:13:8f:3e:37:f5:72:05: 2c:0a:79:08:a0:5c:9c:fb:cc:60:f7:c9:e5:86:04:f3:98:47: 00:e9:e4:0e:35:72:65:f8:a9:7e:78:59:90:42:81:fb:50:e3: 66:f3:9a:6a:0c:3b:be:51:98:5c:44:62:9d:e9:d1:98:44:7a: 58:b3:7b:7c:f7:62:2a:ef:03:73:8a:92:08:f1:4f:77:d2:e3: d8:ba:53:b1 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EKA9xwTZ8COvnxRv67TyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAxMTAxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMjE4YjcxYjcxNmNjZTBiZDA5Y2IyODI5YWJkOTMyNTdiMDM5OTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhPHfOogGxPRf0hQCfuvWlzIlkxB Ly0zTWunwZWLviZAvZL70VStiV+Rlc60Iug1gujO0KaiTbvxMA1PcXcqC4MVkW/j HMlTyBCwRsSnNG8nMrPufaMULZcJcLGQbV4NstCeSTCIe6vlXqSwTrx83w1vnbd4 OMPIXUa6YNJsAo4I7aQ+Q1rEtAKNjX1DCyuwqBl+wi7B+I7KPK035MAnQespDBEg AaRgmg3kYJNcY4r2o1yTY5QRrNwYeLmgge7GYMJkOC5pp8JhFdqdMjroXs1Dvgld t8uBZJbOWE0jwx2YErobvJSSKatpLDeVJC6oOfTUYhALQTQ8gVpSx3+HdwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDIYtxtxbM4L0Jyygpq9kyV7A5k7MB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvTWhpM0czRnN6Z3ZRbkxLQ21yMlRKWHNEbVRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+wACA MA0GCSqGSIb3DQEBCwUAA4IBAQA6HI9+ZiV7lT0D5GCyVKBbKakywm8q7atDgC3D 7CuuEUKe3hfQBk/hOE5PrszhflV43ZfG/pHhg7MAkFAnYENCSpw79o9av9Gc/DO4 jOSQdEdPjp1Deg705Y0SDLCbwo4waPLsquPMK+OogQFXDIyYWQq/t9hHsr/b1/yO jb2KRidpI1Q1Oiuk3FYkttqFkv99UNOTyLWhUMmUy0mgCJDXVihWrf/7yaeZhgkm +hOPPjf1cgUsCnkIoFyc+8xg98nlhgTzmEcA6eQONXJl+Kl+eFmQQoH7UONm85pq DDu+UZhcRGKd6dGYRHpYs3t892Iq7wNzipII8U930uPYulOx -----END CERTIFICATE-----Generated at Tue Jan 20 02:48:05 2026 by rpki-client