This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/MjvomoUdbRCYMRTivd64oJucyR4.roa File: MjvomoUdbRCYMRTivd64oJucyR4.roa (raw, json) Hash identifier: cQeTekUSkTsAQzZ5llLXfmDS9liZjdYx7jCgTSy2Qs0= Subject key identifier: 32:3B:E8:9A:85:1D:6D:10:98:31:14:E2:BD:DE:B8:A0:9B:9C:C9:1E Certificate issuer: /CN=2631166de785a3531bdc8361f1190a8369a7ed6a Certificate serial: 019B77C7386FBC6CCA9EE1CF4E1ACC3EE50E Authority key identifier: 26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/MjvomoUdbRCYMRTivd64oJucyR4.roa Signing time: Thu 01 Jan 2026 04:18:23 +0000 ROA not before: Thu 01 Jan 2026 04:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212477 IP address blocks: 2a03:3f40:d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:38:6f:bc:6c:ca:9e:e1:cf:4e:1a:cc:3e:e5:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2631166de785a3531bdc8361f1190a8369a7ed6a Validity Not Before: Jan 1 04:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=323be89a851d6d10983114e2bddeb8a09b9cc91e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:62:e2:ae:33:e7:60:1b:54:7a:e4:f3:66:50: ac:ba:83:f8:b9:24:25:8b:e2:f6:e7:48:da:a8:25: 37:1c:fe:3d:b5:29:8f:2d:28:d0:c0:cc:de:e2:13: 12:e9:ad:04:46:5f:ba:f4:2c:b8:4d:09:ee:4f:27: be:ba:81:7f:9a:39:ea:dc:bc:69:df:60:5d:b9:94: d9:f4:6d:b3:10:93:4e:ea:5a:26:09:f5:71:b1:be: b9:98:44:fd:bc:d7:8e:63:87:c8:aa:f5:fc:00:23: 97:05:4c:f4:45:1d:12:38:9f:2d:0a:8e:2b:da:01: 6c:e9:7c:9e:5e:82:fd:b2:37:01:e4:bd:a7:a0:50: 53:db:c2:8d:1e:82:8f:9c:be:39:c8:b7:21:18:af: 61:e3:d0:b7:67:44:4b:56:de:24:ae:ce:d0:3c:2a: 0c:79:2b:27:1d:54:ad:0a:4e:c9:88:48:98:28:7c: 66:04:ca:9f:1b:05:f5:19:b1:1c:d2:93:6e:83:c5: d7:2b:67:fe:8b:1a:dd:9c:2c:ce:f1:c5:f2:9e:57: 5c:25:f9:0a:d1:ef:19:b6:50:36:f1:be:35:cc:14: 5e:40:cf:c5:1c:8f:e5:5b:77:56:46:d4:53:cd:85: 44:ac:05:6c:57:b5:f2:f7:1d:b9:56:0e:5f:6c:c8: e7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:3B:E8:9A:85:1D:6D:10:98:31:14:E2:BD:DE:B8:A0:9B:9C:C9:1E X509v3 Authority Key Identifier: keyid:26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/MjvomoUdbRCYMRTivd64oJucyR4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:3f40:d::/48 Signature Algorithm: sha256WithRSAEncryption 17:0f:49:56:5f:ce:9c:6f:6d:08:6b:6d:2f:ac:7d:af:29:de: cb:75:46:2d:e9:84:0e:1a:f5:b6:e1:51:18:87:39:38:74:4c: 4d:8a:cd:eb:86:45:6f:d1:ed:70:56:ff:31:8c:66:3d:63:f0: 6e:a8:06:f7:68:c8:b8:cf:1d:02:a9:03:b1:a1:f0:01:22:ba: ea:6b:c6:96:74:2c:bb:6e:17:91:08:f4:00:0b:50:72:82:df: e9:db:57:c0:93:9c:18:7c:d5:69:1b:5d:40:f5:97:5e:1c:7a: d2:a0:c0:4a:d6:d8:19:fc:20:9b:df:7a:21:69:4c:65:da:5f: 9d:fd:ff:9d:c1:d7:e8:b2:3d:4a:20:b9:dd:ee:a1:5f:8f:0a: 24:af:7f:8c:47:b5:cc:f3:65:40:01:51:55:1c:2e:41:d5:2e: 04:4c:85:f6:47:b4:1d:6a:62:f5:6c:a0:a1:39:dc:82:af:aa: 6b:5d:4a:66:e8:92:fb:fe:0a:3b:c4:61:c6:c9:2c:df:59:ca: a9:11:b9:85:53:2b:dc:c3:a5:4a:78:f4:57:1b:37:ad:2d:6f: 82:0e:a2:6f:84:00:b9:67:3c:65:d4:92:a8:42:88:58:c7:36: 42:3b:67:b4:73:5f:db:a8:30:54:b0:f5:d1:92:46:3f:4f:c5: c6:5b:05:ff -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3xzhvvGzKnuHPThrMPuUOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2MzExNjZkZTc4NWEzNTMxYmRjODM2MWYxMTkwYTgzNjlh N2VkNmEwHhcNMjYwMTAxMDQxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMjNiZTg5YTg1MWQ2ZDEwOTgzMTE0ZTJiZGRlYjhhMDliOWNjOTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2LirjPnYBtUeuTzZlCsuoP4uSQl i+L250jaqCU3HP49tSmPLSjQwMze4hMS6a0ERl+69Cy4TQnuTye+uoF/mjnq3Lxp 32BduZTZ9G2zEJNO6lomCfVxsb65mET9vNeOY4fIqvX8ACOXBUz0RR0SOJ8tCo4r 2gFs6XyeXoL9sjcB5L2noFBT28KNHoKPnL45yLchGK9h49C3Z0RLVt4krs7QPCoM eSsnHVStCk7JiEiYKHxmBMqfGwX1GbEc0pNug8XXK2f+ixrdnCzO8cXynldcJfkK 0e8ZtlA28b41zBReQM/FHI/lW3dWRtRTzYVErAVsV7Xy9x25Vg5fbMjnVwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDI76JqFHW0QmDEU4r3euKCbnMkeMB8GA1UdIwQY MBaAFCYxFm3nhaNTG9yDYfEZCoNpp+1qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmpFV2JlZUZvMU1iM0lOaDhSa0tnMm1uN1dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9mYjAxNTctNjc0Ni00YjAwLThmOGUt Yjg5YTI2MTk5OTc2LzEvTWp2b21vVWRiUkNZTVJUaXZkNjRvSnVjeVI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9mYjAxNTctNjc0Ni00YjAwLThmOGUtYjg5YTI2MTk5OTc2 LzEvSmpFV2JlZUZvMU1iM0lOaDhSa0tnMm1uN1dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgM/QAAN MA0GCSqGSIb3DQEBCwUAA4IBAQAXD0lWX86cb20Ia20vrH2vKd7LdUYt6YQOGvW2 4VEYhzk4dExNis3rhkVv0e1wVv8xjGY9Y/BuqAb3aMi4zx0CqQOxofABIrrqa8aW dCy7bheRCPQAC1Bygt/p21fAk5wYfNVpG11A9ZdeHHrSoMBK1tgZ/CCb33ohaUxl 2l+d/f+dwdfosj1KILnd7qFfjwokr3+MR7XM82VAAVFVHC5B1S4ETIX2R7QdamL1 bKChOdyCr6prXUpm6JL7/go7xGHGySzfWcqpEbmFUyvcw6VKePRXGzetLW+CDqJv hAC5Zzxl1JKoQohYxzZCO2e0c1/bqDBUsPXRkkY/T8XGWwX/ -----END CERTIFICATE-----Generated at Sun Jan 11 15:07:46 2026 by rpki-client