This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/mNxGt9qb_iycY-k9T9Xk7VdVdK4.roa File: mNxGt9qb_iycY-k9T9Xk7VdVdK4.roa (raw, json) Hash identifier: yOZN/l16jnDDJZqC6JGLhuV6WIELWRxBgaUyq9ISi7Q= Subject key identifier: 98:DC:46:B7:DA:9B:FE:2C:9C:63:E9:3D:4F:D5:E4:ED:57:55:74:AE Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3 Certificate serial: 019B7CECF6B898C18E10C9D00F2EA48F3386 Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/mNxGt9qb_iycY-k9T9Xk7VdVdK4.roa Signing time: Fri 02 Jan 2026 04:17:42 +0000 ROA not before: Fri 02 Jan 2026 04:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5470 IP address blocks: 2001:648:2800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.mft rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:f6:b8:98:c1:8e:10:c9:d0:0f:2e:a4:8f:33:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3 Validity Not Before: Jan 2 04:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=98dc46b7da9bfe2c9c63e93d4fd5e4ed575574ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2d:46:ca:a1:67:ae:f0:e0:d5:dc:f2:ed:8f: 89:62:02:fb:a9:d4:fb:a9:6d:d4:3f:32:94:f7:94: 45:7c:4a:8e:f8:e2:0b:a3:28:3a:7b:4d:fb:85:bf: df:84:b5:a8:21:71:c9:09:67:28:33:e6:6f:fb:9b: f0:40:5c:ad:4c:46:2c:22:0d:e3:5c:4b:c7:42:94: 6c:db:7b:63:d6:2f:da:37:8a:a5:e3:b8:d9:ec:41: 5f:b7:78:8d:ce:ec:e4:fe:df:23:87:3a:c9:23:39: 36:02:a6:9a:77:aa:b1:11:a2:81:51:9f:1d:76:c8: 99:96:96:1d:67:b4:56:d4:3e:ac:06:f9:99:3d:22: ad:00:69:ba:33:50:cb:54:ae:ec:71:ba:61:96:d3: 02:20:0f:5c:6e:23:87:e8:d1:4d:b9:f2:73:bc:b8: 69:41:21:f2:54:b1:1d:9d:fe:09:d3:f6:af:72:71: 35:1b:10:08:ef:f5:ce:f5:5e:35:63:f1:75:6f:93: ed:8e:3c:6a:00:5f:a6:90:c1:63:b5:ed:e4:01:b7: fb:12:56:75:f7:f9:c1:13:27:0e:aa:65:e4:77:80: e3:36:27:3c:e6:34:e6:cd:49:9a:20:f9:d1:00:c3: 44:0a:2a:f9:7f:d4:2a:b9:88:f5:65:14:b7:b5:62: 45:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:DC:46:B7:DA:9B:FE:2C:9C:63:E9:3D:4F:D5:E4:ED:57:55:74:AE X509v3 Authority Key Identifier: keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/mNxGt9qb_iycY-k9T9Xk7VdVdK4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:648:2800::/48 Signature Algorithm: sha256WithRSAEncryption 9e:d6:0e:d4:5b:88:ef:8f:aa:a2:7f:29:e8:a3:b5:77:b2:4a: 49:6c:2c:18:b8:d6:31:e2:94:f5:77:32:13:b3:88:fc:2d:1c: 8a:81:e7:6c:5a:74:a0:ee:3a:d2:8f:d1:2d:66:21:a5:d8:c6: e6:7f:84:39:eb:63:0c:bc:24:16:3a:96:34:52:23:a7:fe:be: 33:70:0f:7a:51:de:71:52:00:90:56:cf:4c:2a:3d:e4:49:7e: 40:1a:21:bb:64:0c:3f:97:bf:7e:3f:7b:cf:ce:2f:4b:84:f3: 89:30:13:be:22:29:cd:13:11:ef:e0:c7:33:9f:04:c7:42:96: 36:2a:aa:2c:e4:33:f7:b2:6f:fc:2c:90:7e:06:3d:6f:b0:7c: 68:b5:9e:cd:4e:2c:6f:58:95:4d:ce:17:00:99:6f:a9:65:bf: 01:b4:20:f0:55:7f:db:a7:7f:c4:dc:07:56:bc:2d:b8:d0:f7: 66:25:a1:4d:7d:af:22:7f:68:c3:2d:3c:54:4f:c9:37:b8:25: 66:17:58:8a:66:0d:6a:0a:54:d2:be:ea:12:c5:13:b9:d4:ff: 0f:ca:7f:e6:6e:76:0e:31:ba:80:5e:30:87:69:78:66:bd:d4: a1:49:46:7a:5a:43:2a:29:31:6b:a0:ae:94:fa:43:ca:f8:a7: c0:7a:6c:c9 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt87Pa4mMGOEMnQDy6kjzOGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhNmY5Mjk1NTIxZGYzMGExNThmNTA2YmE3Y2I4NzNhYjk1 MjlkYzMwHhcNMjYwMTAyMDQxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OGRjNDZiN2RhOWJmZTJjOWM2M2U5M2Q0ZmQ1ZTRlZDU3NTU3NGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyy1GyqFnrvDg1dzy7Y+JYgL7qdT7 qW3UPzKU95RFfEqO+OILoyg6e037hb/fhLWoIXHJCWcoM+Zv+5vwQFytTEYsIg3j XEvHQpRs23tj1i/aN4ql47jZ7EFft3iNzuzk/t8jhzrJIzk2Aqaad6qxEaKBUZ8d dsiZlpYdZ7RW1D6sBvmZPSKtAGm6M1DLVK7scbphltMCIA9cbiOH6NFNufJzvLhp QSHyVLEdnf4J0/avcnE1GxAI7/XO9V41Y/F1b5PtjjxqAF+mkMFjte3kAbf7ElZ1 9/nBEycOqmXkd4DjNic85jTmzUmaIPnRAMNECir5f9QquYj1ZRS3tWJFTQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJjcRrfam/4snGPpPU/V5O1XVXSuMB8GA1UdIwQY MBaAFFpvkpVSHfMKFY9Qa6fLhzq5Up3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2Ut YWFhNDU1M2QyYWJkLzEvbU54R3Q5cWJfaXljWS1rOVQ5WGs3VmRWZEs0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2UtYWFhNDU1M2QyYWJk LzEvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGSCgA MA0GCSqGSIb3DQEBCwUAA4IBAQCe1g7UW4jvj6qifynoo7V3skpJbCwYuNYx4pT1 dzITs4j8LRyKgedsWnSg7jrSj9EtZiGl2Mbmf4Q562MMvCQWOpY0UiOn/r4zcA96 Ud5xUgCQVs9MKj3kSX5AGiG7ZAw/l79+P3vPzi9LhPOJMBO+IinNExHv4McznwTH QpY2Kqos5DP3sm/8LJB+Bj1vsHxotZ7NTixvWJVNzhcAmW+pZb8BtCDwVX/bp3/E 3AdWvC240PdmJaFNfa8if2jDLTxUT8k3uCVmF1iKZg1qClTSvuoSxRO51P8Pyn/m bnYOMbqAXjCHaXhmvdShSUZ6WkMqKTFroK6U+kPK+KfAemzJ -----END CERTIFICATE-----Generated at Mon Feb 2 09:40:11 2026 by rpki-client