This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/_MZvKV3x_CMQg_YOQWsNxrXSCeM.roa File: _MZvKV3x_CMQg_YOQWsNxrXSCeM.roa (raw, json) Hash identifier: bi2ahLJ77GPZvKeHLJ6JVhgGy2Rr8NOyhwWvBntL74Q= Subject key identifier: FC:C6:6F:29:5D:F1:FC:23:10:83:F6:0E:41:6B:0D:C6:B5:D2:09:E3 Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5 Certificate serial: 019B7C802B5F80CE1017143D36C7B51BE55A Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/_MZvKV3x_CMQg_YOQWsNxrXSCeM.roa Signing time: Fri 02 Jan 2026 02:18:53 +0000 ROA not before: Fri 02 Jan 2026 02:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214672 IP address blocks: 2a0f:7803:f980::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:2b:5f:80:ce:10:17:14:3d:36:c7:b5:1b:e5:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcead390625edba1408108df57cea47160d70e5 Validity Not Before: Jan 2 02:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fcc66f295df1fc231083f60e416b0dc6b5d209e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f6:76:df:e6:92:38:4d:9b:1b:43:bb:c8:8e: 8e:82:42:7d:73:a0:11:e1:7f:12:1c:6c:2d:54:f9: d6:88:ea:cb:10:10:eb:d1:31:17:46:5c:8c:f5:e6: 9a:71:9a:4c:88:77:ae:22:0b:06:cd:42:3b:00:70: dc:7a:fd:72:cd:e6:10:3b:f0:60:d4:0f:89:d4:03: e3:ec:d3:59:8b:fd:9d:b7:71:69:af:c3:f6:a6:d2: 3a:49:14:cf:f1:49:3b:b7:42:2d:ef:67:6e:75:32: 6d:73:1c:73:35:e3:27:fa:b3:ba:df:86:2b:7b:26: d1:86:1d:7d:5c:5d:ab:39:c0:c5:0b:87:f8:2a:e9: 3c:9e:43:e9:4e:10:9f:c4:17:d5:d3:fe:10:81:17: 0a:6e:c9:f7:b4:7d:fe:df:94:3c:23:f1:5a:f5:98: bd:64:c3:a0:e0:c2:28:67:15:48:ec:0c:0c:9b:de: 8c:6d:9c:07:76:b3:87:3f:ed:38:a7:b1:d3:8a:ab: 73:75:86:67:84:8a:12:10:47:ae:72:f4:fa:1e:89: 57:35:30:0c:a5:09:88:45:f8:9d:31:dc:d1:21:58: 50:75:ad:67:25:15:3f:76:b9:ab:11:f0:92:3a:4b: 5c:6b:f2:cf:b1:25:88:3d:ae:6a:99:2d:11:c9:4f: 54:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:C6:6F:29:5D:F1:FC:23:10:83:F6:0E:41:6B:0D:C6:B5:D2:09:E3 X509v3 Authority Key Identifier: keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/_MZvKV3x_CMQg_YOQWsNxrXSCeM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:7803:f980::/44 Signature Algorithm: sha256WithRSAEncryption 91:91:6a:ca:ee:54:34:9e:00:e0:d1:97:a2:46:23:5f:df:55: 3d:f7:ba:ee:f2:fd:88:b8:c0:a9:6e:6b:e8:7a:22:61:c7:38: 87:74:9b:1e:db:0c:d5:fb:ac:6a:29:ad:11:9b:2a:ab:ff:1b: 88:08:b8:19:66:14:26:3d:a8:6d:8b:86:fd:78:8a:b8:12:80: 6b:b6:42:82:80:32:80:ec:2a:42:49:48:3d:1d:66:fc:5d:5d: f5:a7:45:b9:2b:34:07:05:db:9a:99:0e:31:e8:5f:c9:66:49: c2:4a:52:bd:4c:da:92:34:85:b2:86:73:b2:94:73:25:b0:52: 5c:27:ce:3b:1e:74:77:e7:16:e7:4e:82:86:fa:c1:8e:48:c8: f2:20:c2:3d:a5:e5:0f:95:82:8d:14:de:2c:f6:ea:86:91:f9: f2:ca:f0:e0:60:3c:38:e3:61:51:9d:0f:f3:0c:e1:97:4b:69: 10:2d:9c:66:be:5f:68:25:e6:cb:85:f0:ef:25:bc:19:d2:20: 77:bb:10:ef:c5:56:55:ce:d0:72:7e:e1:3b:ce:6a:5a:92:e8: 3a:da:67:c2:0f:20:5b:05:cf:75:67:ef:8a:76:75:6b:7a:61: 5c:98:e5:71:bf:c6:28:ee:07:b6:a3:72:8d:99:41:1a:eb:b5: 4d:f5:f5:26 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8gCtfgM4QFxQ9Nse1G+VaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw ZDcwZTUwHhcNMjYwMTAyMDIxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmY2M2NmYyOTVkZjFmYzIzMTA4M2Y2MGU0MTZiMGRjNmI1ZDIwOWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPZ23+aSOE2bG0O7yI6OgkJ9c6AR 4X8SHGwtVPnWiOrLEBDr0TEXRlyM9eaacZpMiHeuIgsGzUI7AHDcev1yzeYQO/Bg 1A+J1APj7NNZi/2dt3Fpr8P2ptI6SRTP8Uk7t0It72dudTJtcxxzNeMn+rO634Yr eybRhh19XF2rOcDFC4f4Kuk8nkPpThCfxBfV0/4QgRcKbsn3tH3+35Q8I/Fa9Zi9 ZMOg4MIoZxVI7AwMm96MbZwHdrOHP+04p7HTiqtzdYZnhIoSEEeucvT6HolXNTAM pQmIRfidMdzRIVhQda1nJRU/drmrEfCSOktca/LPsSWIPa5qmS0RyU9UNwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPzGbyld8fwjEIP2DkFrDca10gnjMB8GA1UdIwQY MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt ZjViNmE3MThmNGI1LzEvX01adktWM3hfQ01RZ19ZT1FXc054clhTQ2VNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1 LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg94A/mA MA0GCSqGSIb3DQEBCwUAA4IBAQCRkWrK7lQ0ngDg0ZeiRiNf31U997ru8v2IuMCp bmvoeiJhxziHdJse2wzV+6xqKa0Rmyqr/xuICLgZZhQmPahti4b9eIq4EoBrtkKC gDKA7CpCSUg9HWb8XV31p0W5KzQHBduamQ4x6F/JZknCSlK9TNqSNIWyhnOylHMl sFJcJ847HnR35xbnToKG+sGOSMjyIMI9peUPlYKNFN4s9uqGkfnyyvDgYDw442FR nQ/zDOGXS2kQLZxmvl9oJebLhfDvJbwZ0iB3uxDvxVZVztByfuE7zmpakug62mfC DyBbBc91Z++KdnVremFcmOVxv8Yo7ge2o3KNmUEa67VN9fUm -----END CERTIFICATE-----Generated at Wed Jan 21 16:58:59 2026 by rpki-client