This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/MxVivBucAENp2PAscr5joXqh_oY.roa File: MxVivBucAENp2PAscr5joXqh_oY.roa (raw, json) Hash identifier: qdH6vqEjmsgzasuWWeKuMXOT/SGrMj1v+Oi8w3/Eecw= Subject key identifier: 33:15:62:BC:1B:9C:00:43:69:D8:F0:2C:72:BE:63:A1:7A:A1:FE:86 Certificate issuer: /CN=8e626c909eb4951154bcee8221e43951b4257624 Certificate serial: 019B7F156500A5FB42A765FB5243B67E5314 Authority key identifier: 8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/MxVivBucAENp2PAscr5joXqh_oY.roa Signing time: Fri 02 Jan 2026 14:21:07 +0000 ROA not before: Fri 02 Jan 2026 14:21:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61180 IP address blocks: 2a02:166b::/38 maxlen: 48 2a06:2602::/38 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:65:00:a5:fb:42:a7:65:fb:52:43:b6:7e:53:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e626c909eb4951154bcee8221e43951b4257624 Validity Not Before: Jan 2 14:21:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=331562bc1b9c004369d8f02c72be63a17aa1fe86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5e:e9:68:16:fc:04:1a:97:bd:ae:59:49:d9: e5:f1:fc:e4:7b:83:3d:7c:c4:56:57:4f:7b:b9:db: c3:c4:1d:2f:29:c7:07:fa:32:99:ab:99:3e:18:41: 3d:61:c3:8c:e3:9b:8e:3a:3b:de:51:07:96:5e:a2: be:d5:1e:24:84:05:c3:f3:a7:45:ab:89:05:3f:da: 9a:d3:a1:53:66:c6:52:3a:a3:fc:ed:a7:82:21:d5: ac:65:34:22:e1:2e:2b:59:9d:0f:d0:c4:95:6c:27: a0:70:7c:b8:c5:f0:c3:d7:af:93:0f:0f:76:8d:44: b0:10:53:a5:24:3b:d1:91:bd:4e:8b:aa:1f:3b:f6: c1:c4:5a:23:2d:17:21:28:a9:93:96:aa:d8:c4:ab: dc:f6:0d:e1:28:53:ef:f8:64:13:ba:17:6c:40:8f: 19:13:23:a8:99:75:34:11:ad:4c:80:19:da:82:3c: a6:59:49:97:48:b8:01:de:28:f7:a0:fb:f1:d9:59: bb:1f:de:f7:45:7b:f4:ce:63:1f:19:2e:b7:0b:41: 97:91:b1:95:73:01:5b:eb:9b:89:c6:0b:16:30:53: c7:4b:7e:52:c9:b6:52:92:bf:24:0f:4c:ce:4d:4a: ca:58:e1:ab:b0:b4:09:fb:fe:bb:eb:6d:f7:74:f2: c2:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:15:62:BC:1B:9C:00:43:69:D8:F0:2C:72:BE:63:A1:7A:A1:FE:86 X509v3 Authority Key Identifier: keyid:8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/MxVivBucAENp2PAscr5joXqh_oY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:166b::/38 2a06:2602::/38 Signature Algorithm: sha256WithRSAEncryption 2f:a3:ab:38:ef:42:33:a5:1c:d1:90:fa:81:1b:2d:7d:54:5a: 34:d5:76:f1:93:c7:01:a2:f7:c5:4f:b4:27:da:d8:e0:7e:4d: 86:eb:be:fd:a5:b4:6a:c5:46:3b:a6:7b:ed:a1:b1:d5:be:d7: 34:8e:8f:40:b5:cd:ee:d8:56:a5:95:7f:96:76:05:2b:ae:eb: 74:17:63:b3:76:5a:37:af:b3:9d:03:fd:18:a4:16:cf:30:51: 94:f9:97:a8:c7:37:06:26:76:ef:62:c4:61:ce:da:b4:24:49: 0a:f4:a0:6c:cb:f9:6f:97:3e:d5:8b:80:75:3d:0c:b6:00:bc: 5d:b3:22:24:1e:e5:18:81:a7:93:91:7a:14:8e:92:ff:15:d2: 6f:fb:29:c9:ed:e0:83:35:73:f9:93:e7:d7:3e:04:91:4c:24: 74:60:5e:b8:74:88:da:be:b1:5c:7b:dc:70:12:7b:3a:09:f0: ad:2a:bf:25:02:f9:b1:f1:a3:90:a9:df:44:8d:65:ee:dc:1d: 33:72:a1:42:2b:98:72:6d:24:dd:68:24:9e:8c:a0:17:cc:eb: 0e:7f:ef:23:c1:e1:e4:d1:6e:29:a1:25:5b:f8:f5:98:6d:f3: 0d:68:04:d8:17:29:51:6a:cc:5f:57:38:41:87:63:7e:f0:7c: 70:8f:12:e9 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgISAZt/FWUApftCp2X7UkO2flMUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNjI2YzkwOWViNDk1MTE1NGJjZWU4MjIxZTQzOTUxYjQy NTc2MjQwHhcNMjYwMTAyMTQyMTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzE1NjJiYzFiOWMwMDQzNjlkOGYwMmM3MmJlNjNhMTdhYTFmZTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoF7paBb8BBqXva5ZSdnl8fzke4M9 fMRWV097udvDxB0vKccH+jKZq5k+GEE9YcOM45uOOjveUQeWXqK+1R4khAXD86dF q4kFP9qa06FTZsZSOqP87aeCIdWsZTQi4S4rWZ0P0MSVbCegcHy4xfDD16+TDw92 jUSwEFOlJDvRkb1Oi6ofO/bBxFojLRchKKmTlqrYxKvc9g3hKFPv+GQTuhdsQI8Z EyOomXU0Ea1MgBnagjymWUmXSLgB3ij3oPvx2Vm7H973RXv0zmMfGS63C0GXkbGV cwFb65uJxgsWMFPHS35SybZSkr8kD0zOTUrKWOGrsLQJ+/676233dPLCXwIDAQAB o4ICEzCCAg8wHQYDVR0OBBYEFDMVYrwbnABDadjwLHK+Y6F6of6GMB8GA1UdIwQY MBaAFI5ibJCetJURVLzugiHkOVG0JXYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam1Kc2tKNjBsUkZVdk82Q0llUTVVYlFsZGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9mZTQyNjYtN2Y1NC00ZmIzLWI4MTAt ZTk3ZDFkMDIyMGFmLzEvTXhWaXZCdWNBRU5wMlBBc2NyNWpvWHFoX29ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9mZTQyNjYtN2Y1NC00ZmIzLWI4MTAtZTk3ZDFkMDIyMGFm LzEvam1Kc2tKNjBsUkZVdk82Q0llUTVVYlFsZGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQAwYCKgIWawAD BgIqBiYCADANBgkqhkiG9w0BAQsFAAOCAQEAL6OrOO9CM6Uc0ZD6gRstfVRaNNV2 8ZPHAaL3xU+0J9rY4H5Nhuu+/aW0asVGO6Z77aGx1b7XNI6PQLXN7thWpZV/lnYF K67rdBdjs3ZaN6+znQP9GKQWzzBRlPmXqMc3BiZ272LEYc7atCRJCvSgbMv5b5c+ 1YuAdT0MtgC8XbMiJB7lGIGnk5F6FI6S/xXSb/spye3ggzVz+ZPn1z4EkUwkdGBe uHSI2r6xXHvccBJ7OgnwrSq/JQL5sfGjkKnfRI1l7twdM3KhQiuYcm0k3Wgknoyg F8zrDn/vI8Hh5NFuKaElW/j1mG3zDWgE2BcpUWrMX1c4QYdjfvB8cI8S6Q== -----END CERTIFICATE-----Generated at Mon Jan 26 01:42:41 2026 by rpki-client