This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/1-MX61ORDAEgGzStxHPqb31eQIkM.roa File: 1-MX61ORDAEgGzStxHPqb31eQIkM.roa (raw, json) Hash identifier: cgOhBiY8skFAOtiWyBzOjuYndSHYI+GF0dLm5wWs2X8= Subject key identifier: F8:C5:FA:D4:E4:43:00:48:06:CD:2B:71:1C:FA:9B:DF:57:90:22:43 Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f Certificate serial: 019B79ED198B47AB0B51269D29CA21F8C728 Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/1-MX61ORDAEgGzStxHPqb31eQIkM.roa Signing time: Thu 01 Jan 2026 14:19:00 +0000 ROA not before: Thu 01 Jan 2026 14:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52153 IP address blocks: 2001:a10:186::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:19:8b:47:ab:0b:51:26:9d:29:ca:21:f8:c7:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f Validity Not Before: Jan 1 14:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8c5fad4e443004806cd2b711cfa9bdf57902243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a6:8d:56:a0:1d:fa:58:63:d6:4f:0f:69:bc: 9f:92:e3:96:c3:71:9f:c7:f8:d3:89:dd:3d:e9:bd: 12:df:9c:10:27:d3:1d:64:4d:14:e0:ad:98:d7:ec: ef:73:94:33:81:66:75:12:c8:b0:d3:c9:0c:91:01: 79:02:70:58:a1:e6:3b:37:a5:89:d7:37:56:51:ac: 07:37:e2:f3:5f:79:cc:74:fb:00:61:43:99:4d:1d: 59:1f:60:73:88:e9:a1:c1:f1:37:0a:59:f5:46:40: dc:45:ac:95:81:b6:1a:3b:e0:4c:b2:d1:79:f0:3d: ae:e9:05:fd:02:65:64:24:27:e9:0c:8e:e3:57:d8: 20:41:51:32:ef:5c:00:93:d7:9e:2c:03:8f:73:93: 37:9c:23:61:c0:5d:b6:4d:82:d7:f0:73:df:1f:46: 0d:7a:1c:17:0a:d7:7f:e4:f3:32:64:c9:b9:48:99: 91:24:8a:7f:fe:89:5f:6f:bc:96:52:47:b7:7b:c2: 2e:c7:20:7c:22:85:56:76:43:dd:15:14:f7:e3:65: a6:6a:00:be:3b:36:ac:af:d2:f0:a1:c7:9d:90:dd: ad:04:e2:e1:f2:bc:2e:bc:e2:7a:9a:93:f1:7e:37: 4d:13:22:5a:04:6d:6f:ac:4e:aa:7b:ba:3b:05:c3: a3:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:C5:FA:D4:E4:43:00:48:06:CD:2B:71:1C:FA:9B:DF:57:90:22:43 X509v3 Authority Key Identifier: keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/1-MX61ORDAEgGzStxHPqb31eQIkM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:a10:186::/48 Signature Algorithm: sha256WithRSAEncryption 84:5a:dd:05:43:f3:6e:1b:58:7b:47:aa:75:05:25:50:c0:ef: 5d:10:91:60:e2:d8:7e:e3:17:2a:63:ba:94:d3:f0:6b:8b:64: 6b:cb:5b:de:01:ac:1b:d4:48:37:4e:8c:00:cc:46:69:26:91: 00:3d:cc:60:83:fb:dc:ce:93:ff:3d:1b:7a:95:b5:e4:86:b7: 29:59:2f:76:cf:9f:6b:22:2c:e1:6b:ff:c9:bf:d7:fc:b7:09: 5a:be:b8:98:d9:ac:e1:3a:61:a1:16:55:69:43:43:4a:c2:84: 26:7b:5f:d8:0c:82:ea:24:88:84:95:91:10:90:49:a4:9e:ec: 54:3c:dd:6b:2b:b3:c7:4a:27:4e:2f:d8:cb:b2:c4:ec:5e:99: fe:05:2c:65:43:58:77:39:60:e2:4b:4b:df:45:45:a9:5e:65: 13:b9:b7:a0:80:22:30:68:f2:1f:6a:27:f9:16:e3:f1:6b:b8: fe:7d:4b:fd:1e:36:d0:e2:f8:41:9c:2b:af:ae:d8:1d:3e:4e: a1:e4:2c:1d:4a:34:3a:4b:e7:9b:79:a2:64:ec:dc:f4:2f:7d: 0d:af:f8:cd:47:96:fb:22:4d:dc:e8:b3:76:bd:81:16:ce:8b: 3a:3c:e9:aa:25:5f:4d:3a:5d:78:4c:ec:33:9a:87:e3:8f:59: 80:14:91:d5 -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgISAZt57RmLR6sLUSadKcoh+McoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwYzQwOTYxM2ZlYTBhMmI0NDJjZTExMmU5Y2JkYjQ4NWUw MTE4OGYwHhcNMjYwMTAxMTQxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGM1ZmFkNGU0NDMwMDQ4MDZjZDJiNzExY2ZhOWJkZjU3OTAyMjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKaNVqAd+lhj1k8PabyfkuOWw3Gf x/jTid096b0S35wQJ9MdZE0U4K2Y1+zvc5QzgWZ1Esiw08kMkQF5AnBYoeY7N6WJ 1zdWUawHN+LzX3nMdPsAYUOZTR1ZH2BziOmhwfE3Cln1RkDcRayVgbYaO+BMstF5 8D2u6QX9AmVkJCfpDI7jV9ggQVEy71wAk9eeLAOPc5M3nCNhwF22TYLX8HPfH0YN ehwXCtd/5PMyZMm5SJmRJIp//olfb7yWUke3e8IuxyB8IoVWdkPdFRT342WmagC+ Ozasr9LwocedkN2tBOLh8rwuvOJ6mpPxfjdNEyJaBG1vrE6qe7o7BcOjmQIDAQAB o4ICDTCCAgkwHQYDVR0OBBYEFPjF+tTkQwBIBs0rcRz6m99XkCJDMB8GA1UdIwQY MBaAFDDECWE/6gorRCzhEunL20heARiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYt YzA2NzFiZjRjZjNlLzEvMS1NWDYxT1JEQUVnR3pTdHhIUHFiMzFlUUlrTS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMTEvYjc4ZmI1LWFmY2EtNGRiNy04ODg2LWMwNjcxYmY0Y2Yz ZS8xL01NUUpZVF9xQ2l0RUxPRVM2Y3ZiU0Y0QkdJOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABChAB hjANBgkqhkiG9w0BAQsFAAOCAQEAhFrdBUPzbhtYe0eqdQUlUMDvXRCRYOLYfuMX KmO6lNPwa4tka8tb3gGsG9RIN06MAMxGaSaRAD3MYIP73M6T/z0bepW15Ia3KVkv ds+fayIs4Wv/yb/X/LcJWr64mNms4TphoRZVaUNDSsKEJntf2AyC6iSIhJWREJBJ pJ7sVDzdayuzx0onTi/Yy7LE7F6Z/gUsZUNYdzlg4ktL30VFqV5lE7m3oIAiMGjy H2on+Rbj8Wu4/n1L/R420OL4QZwrr67YHT5OoeQsHUo0Okvnm3miZOzc9C99Da/4 zUeW+yJN3Oizdr2BFs6LOjzpqiVfTTpdeEzsM5qH449ZgBSR1Q== -----END CERTIFICATE-----Generated at Mon Jan 26 08:38:49 2026 by rpki-client