This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/cca476-a3c8-4a65-8c0c-f32260e05700/1/Mj7AFWu1EqZHOmVJMKOMm7PDVAc.roa File: Mj7AFWu1EqZHOmVJMKOMm7PDVAc.roa (raw, json) Hash identifier: GRpVbHiFHaOYOCNz4Rrq2ZkYp/ciepwMIDmQKZdm5EU= Subject key identifier: 32:3E:C0:15:6B:B5:12:A6:47:3A:65:49:30:A3:8C:9B:B3:C3:54:07 Certificate issuer: /CN=918283d785cc88ef8520862ac161f27b5630bc14 Certificate serial: 019B7D5D1EB89B29DE2D248DF97F39EBFACD Authority key identifier: 91:82:83:D7:85:CC:88:EF:85:20:86:2A:C1:61:F2:7B:56:30:BC:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYKD14XMiO-FIIYqwWHye1YwvBQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/cca476-a3c8-4a65-8c0c-f32260e05700/1/Mj7AFWu1EqZHOmVJMKOMm7PDVAc.roa Signing time: Fri 02 Jan 2026 06:20:13 +0000 ROA not before: Fri 02 Jan 2026 06:20:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202739 IP address blocks: 2001:678:1e0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/cca476-a3c8-4a65-8c0c-f32260e05700/1/kYKD14XMiO-FIIYqwWHye1YwvBQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/cca476-a3c8-4a65-8c0c-f32260e05700/1/kYKD14XMiO-FIIYqwWHye1YwvBQ.mft rsync://rpki.ripe.net/repository/DEFAULT/kYKD14XMiO-FIIYqwWHye1YwvBQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:1e:b8:9b:29:de:2d:24:8d:f9:7f:39:eb:fa:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=918283d785cc88ef8520862ac161f27b5630bc14 Validity Not Before: Jan 2 06:20:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=323ec0156bb512a6473a654930a38c9bb3c35407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:bd:4f:00:a1:0e:55:c3:28:1f:03:d5:7e:54: 8f:30:16:3f:d9:01:df:da:dd:56:96:d8:3f:8a:e8: 36:f5:1e:80:a1:26:2d:f1:44:c3:ac:f7:ae:4a:b0: e7:92:ee:54:b8:d7:5b:c5:98:4c:4f:12:63:09:1a: 2f:d8:2f:3c:11:75:90:27:35:cb:ee:e1:6e:74:ad: 07:7b:ef:87:15:75:b4:81:68:87:3e:3b:a1:4a:de: 17:af:ac:d4:4a:89:75:c8:4b:74:94:1a:d5:f8:37: 3a:14:41:42:dc:08:ff:ae:0c:a3:9e:16:1e:5a:ab: 49:95:e5:7e:ea:08:34:30:af:c2:94:28:6d:f3:eb: 36:42:ed:1b:36:f0:18:df:62:d2:c9:79:6b:a6:ff: f9:7e:86:b1:f9:5b:7e:57:69:3b:e8:72:8d:62:a5: d9:7c:0c:81:db:ba:39:4a:19:cb:9f:21:51:94:ab: b6:1d:72:f6:1f:5d:da:41:db:8e:99:13:bc:7e:6b: ed:e2:76:8d:22:b0:06:4d:0b:cb:bb:ae:e2:8c:31: 7d:38:b4:69:8f:49:8a:ad:f5:1d:6e:4a:22:dc:27: 9d:b0:e9:6f:68:77:99:e9:f4:1c:f3:54:a9:b4:4d: bd:92:b9:bd:c8:cf:b8:ab:00:49:d3:f5:73:01:41: 48:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:3E:C0:15:6B:B5:12:A6:47:3A:65:49:30:A3:8C:9B:B3:C3:54:07 X509v3 Authority Key Identifier: keyid:91:82:83:D7:85:CC:88:EF:85:20:86:2A:C1:61:F2:7B:56:30:BC:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYKD14XMiO-FIIYqwWHye1YwvBQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/cca476-a3c8-4a65-8c0c-f32260e05700/1/Mj7AFWu1EqZHOmVJMKOMm7PDVAc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/cca476-a3c8-4a65-8c0c-f32260e05700/1/kYKD14XMiO-FIIYqwWHye1YwvBQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:1e0::/48 Signature Algorithm: sha256WithRSAEncryption 81:6f:1e:a7:bc:12:63:83:52:95:9c:65:76:ec:8c:5d:32:28: 89:9e:9a:9b:58:76:53:5e:c1:34:43:0e:cc:a9:8d:c7:92:18: cf:15:99:e1:bd:5f:97:19:6d:55:3e:6a:78:0f:fb:50:82:fa: 02:fd:99:62:3a:0a:7d:b2:30:7b:b0:60:7a:59:8f:fb:5f:af: 85:71:29:78:48:ec:c5:26:ac:95:03:2c:d5:db:21:29:66:4a: 27:cb:48:95:df:d6:61:02:23:54:2e:11:e7:cf:7c:03:fd:8e: 27:e6:68:8d:2b:22:3e:99:ba:50:23:4b:91:e7:7c:a0:1f:51: fb:19:93:bf:9b:ee:8a:fb:f5:5b:a4:46:f7:8f:18:e5:de:ac: 98:b3:71:2b:f5:3c:db:61:de:a7:3b:ba:01:6f:43:0f:71:2a: 32:01:55:00:e6:c7:73:48:7f:12:25:a9:2d:99:d2:79:d6:ad: e3:88:f5:22:f4:3d:3f:51:05:05:b4:fb:4c:e2:ab:e3:c0:88: 6f:36:63:d6:c9:0f:e4:76:d3:d6:39:39:29:8d:a0:44:6e:52: 61:83:e2:04:f5:80:a1:85:90:e9:f3:d1:76:4f:5b:7b:1f:ce: 2c:b6:c5:9f:a3:0c:f0:a7:c6:e1:14:b2:a9:c5:38:73:10:5a: f7:e7:5a:49 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XR64myneLSSN+X856/rNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxODI4M2Q3ODVjYzg4ZWY4NTIwODYyYWMxNjFmMjdiNTYz MGJjMTQwHhcNMjYwMTAyMDYyMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMjNlYzAxNTZiYjUxMmE2NDczYTY1NDkzMGEzOGM5YmIzYzM1NDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl71PAKEOVcMoHwPVflSPMBY/2QHf 2t1Wltg/iug29R6AoSYt8UTDrPeuSrDnku5UuNdbxZhMTxJjCRov2C88EXWQJzXL 7uFudK0He++HFXW0gWiHPjuhSt4Xr6zUSol1yEt0lBrV+Dc6FEFC3Aj/rgyjnhYe WqtJleV+6gg0MK/ClCht8+s2Qu0bNvAY32LSyXlrpv/5foax+Vt+V2k76HKNYqXZ fAyB27o5ShnLnyFRlKu2HXL2H13aQduOmRO8fmvt4naNIrAGTQvLu67ijDF9OLRp j0mKrfUdbkoi3CedsOlvaHeZ6fQc81SptE29krm9yM+4qwBJ0/VzAUFI7wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDI+wBVrtRKmRzplSTCjjJuzw1QHMB8GA1UdIwQY MBaAFJGCg9eFzIjvhSCGKsFh8ntWMLwUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1lLRDE0WE1pTy1GSUlZcXdXSHllMVl3dkJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9jY2E0NzYtYTNjOC00YTY1LThjMGMt ZjMyMjYwZTA1NzAwLzEvTWo3QUZXdTFFcVpIT21WSk1LT01tN1BEVkFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9jY2E0NzYtYTNjOC00YTY1LThjMGMtZjMyMjYwZTA1NzAw LzEva1lLRDE0WE1pTy1GSUlZcXdXSHllMVl3dkJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAHg MA0GCSqGSIb3DQEBCwUAA4IBAQCBbx6nvBJjg1KVnGV27IxdMiiJnpqbWHZTXsE0 Qw7MqY3HkhjPFZnhvV+XGW1VPmp4D/tQgvoC/ZliOgp9sjB7sGB6WY/7X6+FcSl4 SOzFJqyVAyzV2yEpZkony0iV39ZhAiNULhHnz3wD/Y4n5miNKyI+mbpQI0uR53yg H1H7GZO/m+6K+/VbpEb3jxjl3qyYs3Er9TzbYd6nO7oBb0MPcSoyAVUA5sdzSH8S JaktmdJ51q3jiPUi9D0/UQUFtPtM4qvjwIhvNmPWyQ/kdtPWOTkpjaBEblJhg+IE 9YChhZDp89F2T1t7H84stsWfowzwp8bhFLKpxThzEFr351pJ -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:17 2026 by rpki-client