This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/MFYkRU3grNRPvLbyPaISwxG8sRc.roa File: MFYkRU3grNRPvLbyPaISwxG8sRc.roa (raw, json) Hash identifier: Kn7dq6VQMBUK2el7CpBxhmeZzkXVRbxFBsXov0HWD6Q= Subject key identifier: 30:56:24:45:4D:E0:AC:D4:4F:BC:B6:F2:3D:A2:12:C3:11:BC:B1:17 Certificate issuer: /CN=6857a9bb297f0b3c444ab0af673a52750e979b4e Certificate serial: 019B7DCB5A978B32ABCADF8E0079C4E9FDB6 Authority key identifier: 68:57:A9:BB:29:7F:0B:3C:44:4A:B0:AF:67:3A:52:75:0E:97:9B:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aFepuyl_CzxESrCvZzpSdQ6Xm04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/MFYkRU3grNRPvLbyPaISwxG8sRc.roa Signing time: Fri 02 Jan 2026 08:20:37 +0000 ROA not before: Fri 02 Jan 2026 08:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 680 IP address blocks: 141.14.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft rsync://rpki.ripe.net/repository/DEFAULT/aFepuyl_CzxESrCvZzpSdQ6Xm04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:5a:97:8b:32:ab:ca:df:8e:00:79:c4:e9:fd:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6857a9bb297f0b3c444ab0af673a52750e979b4e Validity Not Before: Jan 2 08:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=305624454de0acd44fbcb6f23da212c311bcb117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:27:1f:b1:da:88:0f:8e:5f:59:f5:21:e6:2a: 74:f8:33:1e:a4:c5:ea:8d:79:79:6a:e3:3c:54:fb: f8:67:53:09:53:cb:56:23:21:d1:b4:f1:c9:c4:02: 68:51:cf:0a:88:17:f4:23:c0:fd:67:5c:1c:06:89: 72:ed:47:37:d8:36:de:44:23:bd:05:bf:d5:92:0a: 34:16:f6:fe:da:94:19:ab:1b:f6:91:fe:83:c5:05: a2:6f:cd:3e:3f:3e:e8:d6:9e:b8:fc:93:1f:52:73: 18:b6:98:02:f1:0b:80:11:46:6e:55:e8:8f:65:68: d5:81:4a:21:01:7a:fd:35:26:42:b0:ac:89:ff:95: 0a:eb:7e:fb:2e:20:29:2c:ca:fb:98:c2:6a:35:9d: 5e:ff:fa:4d:82:23:55:39:5d:60:f1:76:35:38:b0: 03:61:0c:dd:52:82:43:00:32:05:12:f4:b2:fb:c6: 8d:32:01:f5:cb:b1:9e:c0:23:9d:7d:3c:d9:3d:e0: 86:1e:00:f2:65:d3:a9:7e:4a:6e:f4:cc:2b:59:db: 29:0f:ff:87:27:21:5a:9b:42:82:46:65:f3:ab:a0: 86:4d:74:4a:6b:2e:62:07:10:ff:12:cc:17:be:1f: 65:af:f5:ff:06:57:54:34:0c:42:70:96:35:05:01: fb:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:56:24:45:4D:E0:AC:D4:4F:BC:B6:F2:3D:A2:12:C3:11:BC:B1:17 X509v3 Authority Key Identifier: keyid:68:57:A9:BB:29:7F:0B:3C:44:4A:B0:AF:67:3A:52:75:0E:97:9B:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFepuyl_CzxESrCvZzpSdQ6Xm04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/MFYkRU3grNRPvLbyPaISwxG8sRc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.14.0.0/16 Signature Algorithm: sha256WithRSAEncryption b7:a7:b6:f3:9d:c0:e8:8c:4c:20:ce:76:73:2a:09:82:06:db: 73:65:0b:de:c0:f5:20:35:9d:c2:79:4c:46:d5:aa:f2:0a:c4: 41:b4:99:63:65:ad:ff:6a:14:ec:41:e0:1c:7b:93:b7:9a:1d: 47:d4:fa:57:c3:86:53:d8:08:83:05:30:9b:4e:7f:e4:66:c8: 7d:82:52:4e:37:5d:7c:39:03:8f:b7:6a:33:2f:2d:88:df:af: 35:a4:de:ff:a3:f2:a8:a2:36:cb:1b:f0:ef:60:97:ed:de:c9: e8:da:61:f2:63:fd:ce:bd:ce:85:58:b0:86:fb:39:e3:3d:9d: 3b:4f:d7:5d:4e:4d:a6:4b:c4:b9:78:59:04:0b:c9:c5:25:eb: 7d:16:79:ad:f6:5d:e6:3d:39:8d:31:c1:92:5b:af:53:fd:15: 62:52:6a:dc:41:04:f6:25:19:7c:50:c8:09:24:df:9b:ea:63: 65:3b:ce:0b:0e:e8:96:77:11:73:3a:a8:ed:3f:fd:9f:64:d1: 06:b3:55:34:2e:31:9e:63:cd:38:4d:53:3f:a1:f9:71:33:5b: 01:24:02:ed:18:10:f8:92:2a:60:bc:71:de:83:42:ea:d1:2b: 77:8e:5d:67:b3:4c:68:5a:35:87:7e:0d:2a:67:82:eb:85:b9: ef:79:b2:f4 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt9y1qXizKryt+OAHnE6f22MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4NTdhOWJiMjk3ZjBiM2M0NDRhYjBhZjY3M2E1Mjc1MGU5 NzliNGUwHhcNMjYwMTAyMDgyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDU2MjQ0NTRkZTBhY2Q0NGZiY2I2ZjIzZGEyMTJjMzExYmNiMTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCcfsdqID45fWfUh5ip0+DMepMXq jXl5auM8VPv4Z1MJU8tWIyHRtPHJxAJoUc8KiBf0I8D9Z1wcBoly7Uc32DbeRCO9 Bb/Vkgo0Fvb+2pQZqxv2kf6DxQWib80+Pz7o1p64/JMfUnMYtpgC8QuAEUZuVeiP ZWjVgUohAXr9NSZCsKyJ/5UK6377LiApLMr7mMJqNZ1e//pNgiNVOV1g8XY1OLAD YQzdUoJDADIFEvSy+8aNMgH1y7GewCOdfTzZPeCGHgDyZdOpfkpu9MwrWdspD/+H JyFam0KCRmXzq6CGTXRKay5iBxD/EswXvh9lr/X/BldUNAxCcJY1BQH7ZQIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFDBWJEVN4KzUT7y28j2iEsMRvLEXMB8GA1UdIwQY MBaAFGhXqbspfws8REqwr2c6UnUOl5tOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUZlcHV5bF9DenhFU3JDdlp6cFNkUTZYbTA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85ZDBhMTUtZDU0Ni00OTcwLTlhODEt ODU5NmMyYWY5ZGNjLzEvTUZZa1JVM2dyTlJQdkxieVBhSVN3eEc4c1JjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85ZDBhMTUtZDU0Ni00OTcwLTlhODEtODU5NmMyYWY5ZGNj LzEvYUZlcHV5bF9DenhFU3JDdlp6cFNkUTZYbTA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjQ4wDQYJ KoZIhvcNAQELBQADggEBALentvOdwOiMTCDOdnMqCYIG23NlC97A9SA1ncJ5TEbV qvIKxEG0mWNlrf9qFOxB4Bx7k7eaHUfU+lfDhlPYCIMFMJtOf+RmyH2CUk43XXw5 A4+3ajMvLYjfrzWk3v+j8qiiNssb8O9gl+3eyejaYfJj/c69zoVYsIb7OeM9nTtP 111OTaZLxLl4WQQLycUl630Wea32XeY9OY0xwZJbr1P9FWJSatxBBPYlGXxQyAkk 35vqY2U7zgsO6JZ3EXM6qO0//Z9k0QazVTQuMZ5jzThNUz+h+XEzWwEkAu0YEPiS KmC8cd6DQurRK3eOXWezTGhaNYd+DSpnguuFue95svQ= -----END CERTIFICATE-----Generated at Tue Jan 27 11:25:38 2026 by rpki-client