This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/mTw_KV9L-hpI5Nu8b0XPe3ZJbgw.roa File: mTw_KV9L-hpI5Nu8b0XPe3ZJbgw.roa (raw, json) Hash identifier: HG8VsquQ+FnSEapJw68ywW3TpFwS/T5f8VjxgSgr5P4= Subject key identifier: 99:3C:3F:29:5F:4B:FA:1A:48:E4:DB:BC:6F:45:CF:7B:76:49:6E:0C Certificate issuer: /CN=8452b03e1b01709638940d9592983cde77ecab77 Certificate serial: 019B78A21D709F86767C194B42E98878FA44 Authority key identifier: 84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/mTw_KV9L-hpI5Nu8b0XPe3ZJbgw.roa Signing time: Thu 01 Jan 2026 08:17:28 +0000 ROA not before: Thu 01 Jan 2026 08:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197490 IP address blocks: 2a02:2000:3c6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:1d:70:9f:86:76:7c:19:4b:42:e9:88:78:fa:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8452b03e1b01709638940d9592983cde77ecab77 Validity Not Before: Jan 1 08:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=993c3f295f4bfa1a48e4dbbc6f45cf7b76496e0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:5f:f7:b3:2f:27:14:e9:36:eb:13:33:9b:79: c1:a2:77:d0:cf:3d:7f:15:70:16:82:9f:d6:51:a1: f9:83:eb:98:f4:a0:dd:d7:da:f8:b4:43:7c:c6:c8: 07:bb:57:fa:9e:e5:7d:ad:47:f5:62:2a:21:ae:a9: 60:45:45:d4:ae:c7:f8:5e:e1:99:79:d6:71:10:89: 61:cc:b0:6c:12:08:52:31:05:7d:b8:22:f1:47:6b: ae:2f:b6:46:9a:4f:33:7b:1a:ec:e9:07:ff:5f:0e: 8e:83:f0:62:c9:67:ac:a9:93:2a:c1:64:eb:60:e0: 57:8c:51:70:94:54:b1:41:76:e0:f6:15:7e:24:23: dc:a7:33:9a:8f:2e:57:f2:a2:97:a1:9c:df:ed:34: 42:3d:e9:91:67:6e:c6:18:0d:3f:84:8b:30:d6:1b: a9:c4:69:11:9c:61:1e:5c:94:4e:af:f6:a0:b9:17: ed:0c:09:75:5f:d9:be:fb:7e:cb:d7:f1:d5:57:30: d0:1c:97:03:c0:74:ca:c3:27:f7:9f:bf:74:f9:f1: ad:c6:2d:63:b4:1e:1b:19:57:1c:6f:58:55:88:f0: c6:31:0e:96:dd:27:7f:fa:4c:ec:dc:95:9a:ef:62: bc:ed:d5:d5:a2:e7:b4:8d:95:05:de:84:70:6d:19: 54:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:3C:3F:29:5F:4B:FA:1A:48:E4:DB:BC:6F:45:CF:7B:76:49:6E:0C X509v3 Authority Key Identifier: keyid:84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/mTw_KV9L-hpI5Nu8b0XPe3ZJbgw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:2000:3c6::/48 Signature Algorithm: sha256WithRSAEncryption 2a:63:a3:44:10:70:0c:82:e9:03:77:5a:3f:7e:89:e6:d5:75: 21:b6:5d:68:8a:d5:38:39:59:64:fb:9b:28:0f:7d:b4:b7:74: bd:d4:11:c3:64:05:7f:cb:18:29:b1:6a:6f:8a:b7:82:00:e7: db:92:f8:99:f3:15:1b:31:b2:76:bd:a4:58:79:8b:e7:84:e2: 56:8c:b0:2e:69:8f:ec:94:70:79:f6:b5:f9:f3:7f:ac:b7:6d: cb:10:99:f0:6a:0e:75:98:b4:e5:04:c3:78:37:48:25:df:f5: 4b:ae:75:4e:b6:3e:e5:cf:38:a4:f8:0d:b1:f4:2e:fe:63:7c: 93:a4:3c:34:6d:f7:d1:a2:24:db:42:a7:8d:0a:b8:f4:cd:00: 02:7d:f7:a0:45:2b:80:51:8f:5f:c4:7b:78:68:71:a5:dc:f0: d5:2a:df:1d:d2:2d:a1:e3:a9:4d:1f:16:4c:3c:82:9f:b6:da: 71:1d:e4:80:95:e1:86:6b:58:f9:86:2e:2f:ca:d8:74:b8:2a: 81:80:9b:51:73:3a:8d:46:87:f1:2c:67:56:d3:69:43:35:24: 8f:b2:89:56:13:1a:e8:a5:ed:f5:68:ef:1c:fa:5f:b7:a8:9d: a4:35:4f:e3:e0:02:88:60:03:12:7b:93:1c:42:9b:35:6c:ef: 36:ca:e3:b7 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt4oh1wn4Z2fBlLQumIePpEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NTJiMDNlMWIwMTcwOTYzODk0MGQ5NTkyOTgzY2RlNzdl Y2FiNzcwHhcNMjYwMTAxMDgxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTNjM2YyOTVmNGJmYTFhNDhlNGRiYmM2ZjQ1Y2Y3Yjc2NDk2ZTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1/3sy8nFOk26xMzm3nBonfQzz1/ FXAWgp/WUaH5g+uY9KDd19r4tEN8xsgHu1f6nuV9rUf1YiohrqlgRUXUrsf4XuGZ edZxEIlhzLBsEghSMQV9uCLxR2uuL7ZGmk8zexrs6Qf/Xw6Og/BiyWesqZMqwWTr YOBXjFFwlFSxQXbg9hV+JCPcpzOajy5X8qKXoZzf7TRCPemRZ27GGA0/hIsw1hup xGkRnGEeXJROr/aguRftDAl1X9m++37L1/HVVzDQHJcDwHTKwyf3n790+fGtxi1j tB4bGVccb1hViPDGMQ6W3Sd/+kzs3JWa72K87dXVoue0jZUF3oRwbRlUZQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJk8PylfS/oaSOTbvG9Fz3t2SW4MMB8GA1UdIwQY MBaAFIRSsD4bAXCWOJQNlZKYPN537Kt3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEZLd1Boc0JjSlk0bEEyVmtwZzgzbmZzcTNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8wMTFmNmUtZTkyOC00ZjJiLWFhMjQt MjAwZmMyNzRjYjAxLzEvbVR3X0tWOUwtaHBJNU51OGIwWFBlM1pKYmd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8wMTFmNmUtZTkyOC00ZjJiLWFhMjQtMjAwZmMyNzRjYjAx LzEvaEZLd1Boc0JjSlk0bEEyVmtwZzgzbmZzcTNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgIgAAPG MA0GCSqGSIb3DQEBCwUAA4IBAQAqY6NEEHAMgukDd1o/fonm1XUhtl1oitU4OVlk +5soD320t3S91BHDZAV/yxgpsWpvireCAOfbkviZ8xUbMbJ2vaRYeYvnhOJWjLAu aY/slHB59rX583+st23LEJnwag51mLTlBMN4N0gl3/VLrnVOtj7lzzik+A2x9C7+ Y3yTpDw0bffRoiTbQqeNCrj0zQACffegRSuAUY9fxHt4aHGl3PDVKt8d0i2h46lN HxZMPIKfttpxHeSAleGGa1j5hi4vyth0uCqBgJtRczqNRofxLGdW02lDNSSPsolW Exrope31aO8c+l+3qJ2kNU/j4AKIYAMSe5McQps1bO82yuO3 -----END CERTIFICATE-----Generated at Tue Jan 27 02:50:22 2026 by rpki-client