This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/b321d1-814b-4cf9-9d07-11441e16a137/1/M2fsMNeCLbSytrRdZXN8GNnfsT4.roa File: M2fsMNeCLbSytrRdZXN8GNnfsT4.roa (raw, json) Hash identifier: ZZlxpGml6cr7CGJbkVDdK84PY4ZB8pkla7yZE+pnKvI= Subject key identifier: 33:67:EC:30:D7:82:2D:B4:B2:B6:B4:5D:65:73:7C:18:D9:DF:B1:3E Certificate issuer: /CN=3c4ef552d7c57136134e7b44d697cb02cde7d87d Certificate serial: 019B7D5B885A51328948A94C87B281BB6FD3 Authority key identifier: 3C:4E:F5:52:D7:C5:71:36:13:4E:7B:44:D6:97:CB:02:CD:E7:D8:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE71UtfFcTYTTntE1pfLAs3n2H0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/b321d1-814b-4cf9-9d07-11441e16a137/1/M2fsMNeCLbSytrRdZXN8GNnfsT4.roa Signing time: Fri 02 Jan 2026 06:18:29 +0000 ROA not before: Fri 02 Jan 2026 06:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50346 IP address blocks: 212.6.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/b321d1-814b-4cf9-9d07-11441e16a137/1/PE71UtfFcTYTTntE1pfLAs3n2H0.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/b321d1-814b-4cf9-9d07-11441e16a137/1/PE71UtfFcTYTTntE1pfLAs3n2H0.mft rsync://rpki.ripe.net/repository/DEFAULT/PE71UtfFcTYTTntE1pfLAs3n2H0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:88:5a:51:32:89:48:a9:4c:87:b2:81:bb:6f:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4ef552d7c57136134e7b44d697cb02cde7d87d Validity Not Before: Jan 2 06:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3367ec30d7822db4b2b6b45d65737c18d9dfb13e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0d:4f:b9:fd:14:88:c2:67:ad:35:00:04:4b: 3c:86:0a:df:0d:bc:b3:d0:41:a2:13:8d:08:32:df: de:b0:b9:27:f7:ed:c9:e9:dd:44:60:00:9e:54:76: be:81:72:c7:a2:cf:5a:eb:33:90:cb:c1:9d:47:80: b2:bd:59:83:1f:bf:aa:ad:fb:cd:fc:08:78:22:67: 94:d8:a2:fd:f2:d1:ed:55:fc:76:d0:92:02:a4:07: 65:ed:a5:8d:4b:58:bf:f7:7b:6d:2e:75:45:89:31: 31:14:d3:78:cc:00:d9:7f:0b:f7:2c:b1:3b:70:df: e3:88:1b:ce:58:7c:37:25:dd:d8:8b:a2:95:59:ac: ab:ed:0c:68:e1:08:6a:e7:e3:2c:16:50:4d:2c:04: e4:65:c6:ed:a5:58:52:6c:9a:28:87:b8:3b:03:55: c6:2f:25:fa:90:4a:f8:6b:d6:06:6a:e8:27:c2:b1: 21:65:1d:62:64:a9:83:84:aa:93:86:83:0f:ea:f9: 6c:a3:9e:4a:41:7b:99:1a:de:90:1f:1e:6d:82:53: ac:fc:0f:d9:3e:ee:da:56:fc:e6:c6:24:75:fe:c1: 3a:19:5e:fd:bb:76:de:39:ed:fb:81:1e:1f:73:3b: 1e:d0:f6:8b:a1:77:78:52:41:38:1f:9e:18:4f:90: ad:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:67:EC:30:D7:82:2D:B4:B2:B6:B4:5D:65:73:7C:18:D9:DF:B1:3E X509v3 Authority Key Identifier: keyid:3C:4E:F5:52:D7:C5:71:36:13:4E:7B:44:D6:97:CB:02:CD:E7:D8:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE71UtfFcTYTTntE1pfLAs3n2H0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b321d1-814b-4cf9-9d07-11441e16a137/1/M2fsMNeCLbSytrRdZXN8GNnfsT4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b321d1-814b-4cf9-9d07-11441e16a137/1/PE71UtfFcTYTTntE1pfLAs3n2H0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.6.62.0/24 Signature Algorithm: sha256WithRSAEncryption a3:ed:8d:83:0f:28:3f:08:93:d2:45:d3:53:03:95:72:07:99: 11:1b:e7:97:38:51:28:a8:5a:4d:77:6c:fa:ab:87:6f:cc:79: 4b:42:af:c3:3c:33:c9:06:bb:b8:2f:ef:6d:0b:12:1c:78:e0: a6:52:b5:5f:75:5a:b6:ed:c0:d8:1e:7e:99:e5:28:52:51:50: b1:60:e1:b1:3e:10:83:87:43:b2:55:59:f8:a1:19:31:2d:78: 65:18:f4:60:70:52:3a:6f:56:11:6b:0e:2a:fe:0d:9c:0d:7e: f8:1e:4b:33:4e:96:58:25:51:f6:c3:8f:76:81:79:4a:73:cc: 81:b7:34:25:3e:96:d2:56:40:65:df:36:23:08:98:8b:f3:7b: 85:1d:cd:5b:72:c4:17:eb:fd:4c:6c:69:6c:d1:12:02:c2:13: 76:b7:71:bf:4a:09:4e:18:3c:07:bc:60:c0:97:fb:87:0e:88: d2:92:3f:7b:6a:3c:db:8b:d7:c4:63:4e:a4:8e:d5:13:88:a0: bb:46:b7:09:13:b2:89:b3:8b:78:dc:82:64:c4:aa:77:b6:46: f8:44:17:e2:af:06:af:87:d1:15:9e:df:d8:ea:f3:ed:31:ce: 05:61:b5:0b:f6:e3:92:76:34:7f:ba:a8:d9:77:42:dc:e9:a8: 6b:5b:b1:86 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W4haUTKJSKlMh7KBu2/TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjNGVmNTUyZDdjNTcxMzYxMzRlN2I0NGQ2OTdjYjAyY2Rl N2Q4N2QwHhcNMjYwMTAyMDYxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzY3ZWMzMGQ3ODIyZGI0YjJiNmI0NWQ2NTczN2MxOGQ5ZGZiMTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQ1Puf0UiMJnrTUABEs8hgrfDbyz 0EGiE40IMt/esLkn9+3J6d1EYACeVHa+gXLHos9a6zOQy8GdR4CyvVmDH7+qrfvN /Ah4ImeU2KL98tHtVfx20JICpAdl7aWNS1i/93ttLnVFiTExFNN4zADZfwv3LLE7 cN/jiBvOWHw3Jd3Yi6KVWayr7Qxo4Qhq5+MsFlBNLATkZcbtpVhSbJooh7g7A1XG LyX6kEr4a9YGaugnwrEhZR1iZKmDhKqThoMP6vlso55KQXuZGt6QHx5tglOs/A/Z Pu7aVvzmxiR1/sE6GV79u3beOe37gR4fczse0PaLoXd4UkE4H54YT5CtqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDNn7DDXgi20sra0XWVzfBjZ37E+MB8GA1UdIwQY MBaAFDxO9VLXxXE2E057RNaXywLN59h9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEU3MVV0ZkZjVFlUVG50RTFwZkxBczNuMkgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9iMzIxZDEtODE0Yi00Y2Y5LTlkMDct MTE0NDFlMTZhMTM3LzEvTTJmc01OZUNMYlN5dHJSZFpYTjhHTm5mc1Q0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9iMzIxZDEtODE0Yi00Y2Y5LTlkMDctMTE0NDFlMTZhMTM3 LzEvUEU3MVV0ZkZjVFlUVG50RTFwZkxBczNuMkgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1AY+MA0G CSqGSIb3DQEBCwUAA4IBAQCj7Y2DDyg/CJPSRdNTA5VyB5kRG+eXOFEoqFpNd2z6 q4dvzHlLQq/DPDPJBru4L+9tCxIceOCmUrVfdVq27cDYHn6Z5ShSUVCxYOGxPhCD h0OyVVn4oRkxLXhlGPRgcFI6b1YRaw4q/g2cDX74HkszTpZYJVH2w492gXlKc8yB tzQlPpbSVkBl3zYjCJiL83uFHc1bcsQX6/1MbGls0RICwhN2t3G/SglOGDwHvGDA l/uHDojSkj97ajzbi9fEY06kjtUTiKC7RrcJE7KJs4t43IJkxKp3tkb4RBfirwav h9EVnt/Y6vPtMc4FYbUL9uOSdjR/uqjZd0Lc6ahrW7GG -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:25 2026 by rpki-client