This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/mQL1nW7K7ybu0TZ9G8v3WzDDFmg.roa File: mQL1nW7K7ybu0TZ9G8v3WzDDFmg.roa (raw, json) Hash identifier: O084txLhwyZ8zQFJ9DRJsh8HYo5IGT97mu78wCO555Y= Subject key identifier: 99:02:F5:9D:6E:CA:EF:26:EE:D1:36:7D:1B:CB:F7:5B:30:C3:16:68 Certificate issuer: /CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5 Certificate serial: 019B78A3148E8BBB5810810C923F4BBD9696 Authority key identifier: A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/mQL1nW7K7ybu0TZ9G8v3WzDDFmg.roa Signing time: Thu 01 Jan 2026 08:18:32 +0000 ROA not before: Thu 01 Jan 2026 08:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48753 IP address blocks: 2a0f:5f44::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:14:8e:8b:bb:58:10:81:0c:92:3f:4b:bd:96:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5 Validity Not Before: Jan 1 08:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9902f59d6ecaef26eed1367d1bcbf75b30c31668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6a:98:8c:55:de:d4:d7:e8:f6:d8:a5:35:d3: 3e:1e:5c:19:8f:78:58:0b:68:d6:b8:23:98:01:a5: c7:dc:40:3f:1f:2f:91:58:e7:f3:db:92:a2:9d:cd: ae:6c:4c:27:8e:d8:f8:c9:a3:a0:f5:bd:d7:c6:ce: da:fd:17:d3:83:42:0f:6f:28:d9:e1:40:7b:7c:5b: 3c:6a:3c:cf:97:07:3d:ef:ee:47:10:99:44:bb:11: 69:14:99:e0:6e:bf:64:58:94:ce:ce:cc:ce:76:c9: a7:1b:db:57:ca:de:90:2a:37:9e:cd:92:4b:27:9d: 89:67:8f:5c:55:19:f1:a5:24:b1:27:4e:34:af:ca: a0:44:bc:6d:59:f0:9c:2e:c3:26:de:0e:46:81:94: d3:af:8d:2d:9f:4b:15:da:e6:1f:82:ea:9c:10:e7: 51:c8:b8:be:04:30:b4:df:ea:77:f0:c0:02:94:0a: 4a:d1:14:2a:7f:40:c2:68:5e:fd:38:cf:d9:c4:47: ce:ec:63:16:41:10:03:b8:55:f0:4c:7e:5e:85:ee: 37:95:c5:bd:8d:61:84:2a:26:d2:53:65:aa:a9:d2: 4a:eb:89:bc:c6:48:d6:4d:48:41:35:88:15:5e:22: 40:d7:8f:ed:e3:a5:fd:01:e8:a6:13:34:f9:00:48: 47:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:02:F5:9D:6E:CA:EF:26:EE:D1:36:7D:1B:CB:F7:5B:30:C3:16:68 X509v3 Authority Key Identifier: keyid:A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/mQL1nW7K7ybu0TZ9G8v3WzDDFmg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:5f44::/48 Signature Algorithm: sha256WithRSAEncryption 53:34:ed:32:70:fb:b2:2f:ed:63:27:e3:d4:f4:d3:6a:03:e4: b1:81:9f:e0:82:60:5f:12:9b:61:18:5c:86:ef:40:9b:27:7b: d8:37:aa:a4:43:8d:fe:50:73:0c:e2:62:a9:6f:36:fb:c8:47: bb:34:dd:39:c0:dd:9e:ef:3e:11:ac:6e:48:58:fa:63:32:91: 4e:14:e9:8c:f5:ba:55:4b:9c:99:83:b1:78:50:3a:a5:e5:80: 58:8d:04:1f:bc:6b:c8:9f:6a:98:3c:ba:40:57:70:b4:68:3a: 05:85:e1:27:d3:d3:23:0a:60:89:aa:75:14:a8:e5:0f:0e:1d: 97:63:95:0d:ba:1a:da:11:c6:8d:9e:4e:76:66:60:53:42:ca: 50:af:28:f3:fc:45:7c:15:d1:e7:07:70:86:c4:0f:66:78:f0: 7b:01:95:b2:6b:76:df:47:3d:2e:47:da:7d:78:ed:b3:95:c3: f5:54:b0:69:bd:99:33:b1:65:a0:cd:a6:1a:32:6d:fe:cb:ea: ee:6c:f9:be:61:1d:f6:ad:6f:f1:fc:59:85:c7:bf:86:11:cb: 30:41:1e:05:15:b8:be:f5:12:a5:28:8c:1e:e5:b9:91:80:88: 72:90:fc:a6:30:4e:71:9d:79:1a:21:1c:02:04:6b:e0:7e:0e: 31:cc:02:c8 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt4oxSOi7tYEIEMkj9LvZaWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2ZWQ0NDJiOTFkNGU4M2E2ZGUzOWZiNjc5NzFhMWU3OWM2 YjFlZDUwHhcNMjYwMTAxMDgxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTAyZjU5ZDZlY2FlZjI2ZWVkMTM2N2QxYmNiZjc1YjMwYzMxNjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2qYjFXe1Nfo9tilNdM+HlwZj3hY C2jWuCOYAaXH3EA/Hy+RWOfz25Kinc2ubEwnjtj4yaOg9b3Xxs7a/RfTg0IPbyjZ 4UB7fFs8ajzPlwc97+5HEJlEuxFpFJngbr9kWJTOzszOdsmnG9tXyt6QKjeezZJL J52JZ49cVRnxpSSxJ040r8qgRLxtWfCcLsMm3g5GgZTTr40tn0sV2uYfguqcEOdR yLi+BDC03+p38MAClApK0RQqf0DCaF79OM/ZxEfO7GMWQRADuFXwTH5ehe43lcW9 jWGEKibSU2WqqdJK64m8xkjWTUhBNYgVXiJA14/t46X9AeimEzT5AEhHsQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJkC9Z1uyu8m7tE2fRvL91swwxZoMB8GA1UdIwQY MBaAFKbtRCuR1Og6beOftnlxoeecax7VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHUxRUs1SFU2RHB0NDUtMmVYR2g1NXhySHRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS81NTNkYzYtMTJkMC00ZDRhLWEyOTQt OTdjNWQ1OWIwYmJmLzEvbVFMMW5XN0s3eWJ1MFRaOUc4djNXekRERm1nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS81NTNkYzYtMTJkMC00ZDRhLWEyOTQtOTdjNWQ1OWIwYmJm LzEvcHUxRUs1SFU2RHB0NDUtMmVYR2g1NXhySHRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9fRAAA MA0GCSqGSIb3DQEBCwUAA4IBAQBTNO0ycPuyL+1jJ+PU9NNqA+SxgZ/ggmBfEpth GFyG70CbJ3vYN6qkQ43+UHMM4mKpbzb7yEe7NN05wN2e7z4RrG5IWPpjMpFOFOmM 9bpVS5yZg7F4UDql5YBYjQQfvGvIn2qYPLpAV3C0aDoFheEn09MjCmCJqnUUqOUP Dh2XY5UNuhraEcaNnk52ZmBTQspQryjz/EV8FdHnB3CGxA9mePB7AZWya3bfRz0u R9p9eO2zlcP1VLBpvZkzsWWgzaYaMm3+y+rubPm+YR32rW/x/FmFx7+GEcswQR4F Fbi+9RKlKIwe5bmRgIhykPymME5xnXkaIRwCBGvgfg4xzALI -----END CERTIFICATE-----Generated at Wed Jan 21 15:37:01 2026 by rpki-client