This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/MkwV_p4ZiOf8Ia5ZHOPhoW4eKIU.roa File: MkwV_p4ZiOf8Ia5ZHOPhoW4eKIU.roa (raw, json) Hash identifier: JMKNPRf6e5NpGat9TNpevi/2X+CTiPo4/6Chd3GgN+E= Subject key identifier: 32:4C:15:FE:9E:19:88:E7:FC:21:AE:59:1C:E3:E1:A1:6E:1E:28:85 Certificate issuer: /CN=24c96d386d7cf59a990d3994f0df8493dfca49b3 Certificate serial: 019B797F2BC1478F9A104BFD890966C935B8 Authority key identifier: 24:C9:6D:38:6D:7C:F5:9A:99:0D:39:94:F0:DF:84:93:DF:CA:49:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMltOG189ZqZDTmU8N-Ek9_KSbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/MkwV_p4ZiOf8Ia5ZHOPhoW4eKIU.roa Signing time: Thu 01 Jan 2026 12:18:55 +0000 ROA not before: Thu 01 Jan 2026 12:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202175 IP address blocks: 2a05:45c7::/48 maxlen: 48 2a05:45c7:1::/48 maxlen: 48 2a05:45c7:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.mft rsync://rpki.ripe.net/repository/DEFAULT/JMltOG189ZqZDTmU8N-Ek9_KSbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:2b:c1:47:8f:9a:10:4b:fd:89:09:66:c9:35:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24c96d386d7cf59a990d3994f0df8493dfca49b3 Validity Not Before: Jan 1 12:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=324c15fe9e1988e7fc21ae591ce3e1a16e1e2885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a8:9f:c1:f2:e9:b9:60:1c:d8:fa:e3:d2:9b: 91:8a:85:61:c8:c0:d1:10:a7:12:22:08:fa:12:75: 21:8a:fa:04:b5:40:3a:97:71:ef:96:da:31:5f:fb: 26:90:59:1b:c5:a5:d8:96:8d:cf:0e:54:4a:59:ce: 0f:f7:bf:b8:10:b7:e9:fa:e3:cc:be:6e:64:c0:b7: f5:51:50:50:9c:f3:e3:7f:34:57:99:44:49:c0:73: 3c:5a:13:b4:c1:20:7f:a4:8b:c1:cc:dd:81:03:8f: c5:2a:18:1e:fd:ca:96:63:19:46:3d:f1:22:92:1c: fc:e3:4f:a5:ce:22:83:01:48:c2:11:ab:ac:d9:47: c1:74:8b:e7:2e:97:b8:de:b6:8a:97:f9:a9:b0:85: 0c:b1:7e:c9:b3:32:66:b3:b6:d8:87:0d:23:c3:df: 59:e3:95:25:12:a6:8a:92:04:2d:1f:ad:e5:de:cc: fb:82:66:58:ee:f2:57:bd:24:1e:78:9c:a9:80:2d: cd:ed:4e:3f:4b:e8:c0:ab:db:b6:92:54:fa:35:c9: ce:4f:71:ab:70:96:f4:9e:55:83:90:a2:6c:be:ee: 32:3a:fe:b7:90:60:84:2f:bd:77:20:76:48:76:50: cf:27:4c:3a:b6:8f:04:11:64:94:52:95:19:5e:48: 8c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:4C:15:FE:9E:19:88:E7:FC:21:AE:59:1C:E3:E1:A1:6E:1E:28:85 X509v3 Authority Key Identifier: keyid:24:C9:6D:38:6D:7C:F5:9A:99:0D:39:94:F0:DF:84:93:DF:CA:49:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMltOG189ZqZDTmU8N-Ek9_KSbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/MkwV_p4ZiOf8Ia5ZHOPhoW4eKIU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:45c7::/47 2a05:45c7:10::/48 Signature Algorithm: sha256WithRSAEncryption 0f:d2:60:60:94:7b:db:ae:13:82:63:26:59:d0:7e:25:8b:e6: b9:87:9c:49:97:76:6f:d7:5f:72:2f:31:f1:fe:bc:0e:43:7b: e1:f6:fa:69:52:b5:96:17:85:4f:47:85:36:5e:e2:50:9b:60: bd:cb:7d:72:66:9b:14:42:c4:1d:9c:7b:41:9f:1d:a9:fa:8a: 28:1b:65:43:c4:a7:8c:3b:f6:9e:03:f8:9f:e1:8b:99:58:78: 06:d3:ec:f0:a1:50:58:0c:7e:82:5d:47:c7:cd:1b:45:c0:cd: 04:8f:f4:ca:5f:d9:94:2b:4e:77:42:f3:94:13:73:4b:37:03: 92:9f:0d:62:5c:09:1b:5d:66:bf:75:76:3b:71:35:99:af:40: 37:0a:fd:92:fa:31:49:d2:74:00:51:25:cc:8d:b4:36:6b:a0: 4f:93:8f:40:07:9c:cc:32:40:26:06:5b:7e:bf:81:6b:86:7a: 84:c5:89:a6:00:57:e0:e6:fd:83:03:9f:de:44:05:33:1e:14: ff:9b:71:8b:ca:b0:9b:69:7e:ae:84:7b:ba:ee:82:c1:0b:22: f3:a5:8e:ed:19:27:97:4d:9a:70:90:8c:a0:37:ee:53:69:4a: 31:f0:a5:48:17:4d:0e:06:25:25:80:13:8f:2a:62:72:49:f2: 72:b5:16:df -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5fyvBR4+aEEv9iQlmyTW4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0Yzk2ZDM4NmQ3Y2Y1OWE5OTBkMzk5NGYwZGY4NDkzZGZj YTQ5YjMwHhcNMjYwMTAxMTIxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMjRjMTVmZTllMTk4OGU3ZmMyMWFlNTkxY2UzZTFhMTZlMWUyODg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraifwfLpuWAc2Prj0puRioVhyMDR EKcSIgj6EnUhivoEtUA6l3HvltoxX/smkFkbxaXYlo3PDlRKWc4P97+4ELfp+uPM vm5kwLf1UVBQnPPjfzRXmURJwHM8WhO0wSB/pIvBzN2BA4/FKhge/cqWYxlGPfEi khz840+lziKDAUjCEaus2UfBdIvnLpe43raKl/mpsIUMsX7JszJms7bYhw0jw99Z 45UlEqaKkgQtH63l3sz7gmZY7vJXvSQeeJypgC3N7U4/S+jAq9u2klT6NcnOT3Gr cJb0nlWDkKJsvu4yOv63kGCEL713IHZIdlDPJ0w6to8EEWSUUpUZXkiM5QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDJMFf6eGYjn/CGuWRzj4aFuHiiFMB8GA1UdIwQY MBaAFCTJbThtfPWamQ05lPDfhJPfykmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSk1sdE9HMTg5WnFaRFRtVThOLUVrOV9LU2JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83YmVkNjMtNDA2ZS00MDVjLWE3ZjAt N2NkOWMzYmFiYTI1LzEvTWt3Vl9wNFppT2Y4SWE1WkhPUGhvVzRlS0lVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy83YmVkNjMtNDA2ZS00MDVjLWE3ZjAtN2NkOWMzYmFiYTI1 LzEvSk1sdE9HMTg5WnFaRFRtVThOLUVrOV9LU2JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcBKgVFxwAA AwcAKgVFxwAQMA0GCSqGSIb3DQEBCwUAA4IBAQAP0mBglHvbrhOCYyZZ0H4li+a5 h5xJl3Zv119yLzHx/rwOQ3vh9vppUrWWF4VPR4U2XuJQm2C9y31yZpsUQsQdnHtB nx2p+oooG2VDxKeMO/aeA/if4YuZWHgG0+zwoVBYDH6CXUfHzRtFwM0Ej/TKX9mU K053QvOUE3NLNwOSnw1iXAkbXWa/dXY7cTWZr0A3Cv2S+jFJ0nQAUSXMjbQ2a6BP k49AB5zMMkAmBlt+v4FrhnqExYmmAFfg5v2DA5/eRAUzHhT/m3GLyrCbaX6uhHu6 7oLBCyLzpY7tGSeXTZpwkIygN+5TaUox8KVIF00OBiUlgBOPKmJySfJytRbf -----END CERTIFICATE-----Generated at Tue Feb 10 04:32:01 2026 by rpki-client