This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/MASv_rraqDJSYbqgrPz4hvaUE2c.roa File: MASv_rraqDJSYbqgrPz4hvaUE2c.roa (raw, json) Hash identifier: cVsPoSNgg1jdtpq+zgxbSf3SDxFypt0t/a96jTQx6hE= Subject key identifier: 30:04:AF:FE:BA:DA:A8:32:52:61:BA:A0:AC:FC:F8:86:F6:94:13:67 Certificate issuer: /CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd Certificate serial: 019B7FF130BF83395222D6DC4BEC3A899B38 Authority key identifier: FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/MASv_rraqDJSYbqgrPz4hvaUE2c.roa Signing time: Fri 02 Jan 2026 18:21:11 +0000 ROA not before: Fri 02 Jan 2026 18:21:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49981 IP address blocks: 2a04:92c7:16::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:30:bf:83:39:52:22:d6:dc:4b:ec:3a:89:9b:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd Validity Not Before: Jan 2 18:21:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3004affebadaa8325261baa0acfcf886f6941367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a4:e5:39:01:a2:91:e6:5c:f7:02:2e:38:e4: a1:2d:73:c3:83:f2:29:61:cd:8b:cc:d4:38:78:60: 58:1d:e8:54:5b:d4:38:90:a5:96:9c:d4:34:2e:9d: b2:b8:9d:62:27:f0:66:40:53:81:91:47:7d:64:de: ab:ab:29:3d:02:c6:24:74:eb:25:ab:20:ca:0d:38: ab:62:4a:f9:d3:c8:89:fb:8a:a4:de:8c:42:f2:0a: 6d:84:b4:8e:89:26:a4:cf:ee:80:a2:42:ba:40:70: 7f:0f:8b:05:15:cb:cd:df:60:25:cb:53:73:a8:61: 84:43:1b:bf:32:51:90:3e:6d:80:af:f7:83:a6:0d: fb:eb:ac:11:13:e6:8c:33:c6:6d:bc:8a:71:fd:27: 9e:56:1b:a8:f7:19:56:11:b5:f6:07:d7:3c:17:4f: 23:e0:c3:9e:0f:ab:0a:38:57:30:b4:94:93:60:b7: 0f:4b:5c:f6:2f:78:2c:ed:03:75:83:c9:0e:56:66: b9:37:1f:35:52:df:7b:ae:7c:d2:5b:8d:0b:bf:b7: 60:13:1a:df:74:ba:67:d2:64:af:33:fb:da:25:f0: 40:97:4a:2a:62:b1:c9:bd:b8:6e:4e:40:d7:93:93: 82:77:12:8b:09:37:04:a9:d0:e5:85:ca:d3:72:96: 0c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:04:AF:FE:BA:DA:A8:32:52:61:BA:A0:AC:FC:F8:86:F6:94:13:67 X509v3 Authority Key Identifier: keyid:FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/MASv_rraqDJSYbqgrPz4hvaUE2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a04:92c7:16::/48 Signature Algorithm: sha256WithRSAEncryption b0:43:ab:bb:01:34:63:76:8c:96:e1:00:8f:38:e5:be:fd:48: 98:d5:24:19:3d:a8:de:f1:6d:ca:ef:08:ab:66:62:bd:ab:06: f3:1c:eb:04:b5:6b:7a:30:10:cc:af:c1:41:64:6f:82:81:70: c1:ad:29:b6:1d:64:89:f9:0f:7a:b1:3c:c6:2a:d5:47:88:fd: 87:ca:08:64:f7:cf:08:8f:99:22:05:39:5d:80:90:66:1b:96: 83:9c:4f:2b:91:ee:07:7c:b1:1f:34:7b:9a:54:ce:a6:12:b9: a0:6c:c0:0d:f2:e1:d7:46:17:9e:16:b2:d8:50:61:14:08:67: bb:7a:2a:aa:5c:5d:32:68:cf:03:2e:9b:df:af:2f:b9:56:f7: c0:64:07:62:2d:e9:8c:31:9b:2d:87:f4:48:eb:d7:b7:a8:b7: 88:c6:b0:de:ba:f3:87:1e:19:b9:52:27:f4:2d:83:fc:94:23: 20:da:2a:37:0d:41:a4:96:cf:3f:56:b4:f4:e1:09:2b:99:d5: 23:49:6a:f7:4f:aa:d4:ba:34:25:41:be:f3:6e:8e:44:ae:0b: f6:3e:5a:13:8d:57:78:8d:36:35:a1:d3:59:69:15:5a:d0:0c: d6:f2:3e:9b:a5:22:f9:29:52:5b:fc:1b:8b:b7:0d:4f:36:b3: 2e:d2:39:30 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/8TC/gzlSItbcS+w6iZs4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZGVjNGE0NmE2ZTZlNGY5YTkyZDBiYTJlMGIzYWI1NjU4 YmUxYmQwHhcNMjYwMTAyMTgyMTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDA0YWZmZWJhZGFhODMyNTI2MWJhYTBhY2ZjZjg4NmY2OTQxMzY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46TlOQGikeZc9wIuOOShLXPDg/Ip Yc2LzNQ4eGBYHehUW9Q4kKWWnNQ0Lp2yuJ1iJ/BmQFOBkUd9ZN6rqyk9AsYkdOsl qyDKDTirYkr508iJ+4qk3oxC8gpthLSOiSakz+6AokK6QHB/D4sFFcvN32Aly1Nz qGGEQxu/MlGQPm2Ar/eDpg3766wRE+aMM8ZtvIpx/SeeVhuo9xlWEbX2B9c8F08j 4MOeD6sKOFcwtJSTYLcPS1z2L3gs7QN1g8kOVma5Nx81Ut97rnzSW40Lv7dgExrf dLpn0mSvM/vaJfBAl0oqYrHJvbhuTkDXk5OCdxKLCTcEqdDlhcrTcpYMvwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDAEr/662qgyUmG6oKz8+Ib2lBNnMB8GA1UdIwQY MBaAFP/exKRqbm5PmpLQui4LOrVli+G9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEt N2U4YzZkNGQ5YmVmLzEvTUFTdl9ycmFxREpTWWJxZ3JQejRodmFVRTJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEtN2U4YzZkNGQ5YmVm LzEvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgSSxwAW MA0GCSqGSIb3DQEBCwUAA4IBAQCwQ6u7ATRjdoyW4QCPOOW+/UiY1SQZPaje8W3K 7wirZmK9qwbzHOsEtWt6MBDMr8FBZG+CgXDBrSm2HWSJ+Q96sTzGKtVHiP2Hyghk 988Ij5kiBTldgJBmG5aDnE8rke4HfLEfNHuaVM6mErmgbMAN8uHXRheeFrLYUGEU CGe7eiqqXF0yaM8DLpvfry+5VvfAZAdiLemMMZsth/RI69e3qLeIxrDeuvOHHhm5 Uif0LYP8lCMg2io3DUGkls8/VrT04QkrmdUjSWr3T6rUujQlQb7zbo5Ergv2PloT jVd4jTY1odNZaRVa0AzW8j6bpSL5KVJb/BuLtw1PNrMu0jkw -----END CERTIFICATE-----Generated at Mon Jan 19 17:30:01 2026 by rpki-client