This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/mvzE9d0WgRO2QdCEpT4EllpxwUo.roa File: mvzE9d0WgRO2QdCEpT4EllpxwUo.roa (raw, json) Hash identifier: 9IU9SDAfyiBlLpKhjN5znASIRj5alBZHivB7CVzTDWo= Subject key identifier: 9A:FC:C4:F5:DD:16:81:13:B6:41:D0:84:A5:3E:04:96:5A:71:C1:4A Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b Certificate serial: 019B7C7F583DFB56B3FC08135A0499836F6D Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/mvzE9d0WgRO2QdCEpT4EllpxwUo.roa Signing time: Fri 02 Jan 2026 02:17:59 +0000 ROA not before: Fri 02 Jan 2026 02:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57723 IP address blocks: 2001:1a68:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.mft rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:58:3d:fb:56:b3:fc:08:13:5a:04:99:83:6f:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b Validity Not Before: Jan 2 02:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9afcc4f5dd168113b641d084a53e04965a71c14a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:13:b0:e7:7e:a6:d4:2a:ec:12:9b:19:46:a5: 62:8b:27:c2:67:02:2b:35:62:9a:cc:82:96:01:70: fd:3f:71:e5:55:1b:a5:15:e1:1f:f9:58:1b:39:c2: 2a:f6:be:3f:db:40:54:bf:83:3b:7f:15:2c:05:53: 4e:48:37:f6:9b:eb:c8:69:b0:14:09:67:fe:47:a6: c4:0e:46:7d:e3:68:6e:52:43:6a:51:1d:31:16:10: e1:2f:31:df:aa:8e:99:4c:dc:da:03:cb:6c:42:ed: e6:45:f4:33:67:78:af:ef:3d:a6:27:bc:67:dc:e2: c3:a1:7b:73:47:9b:51:ef:d6:df:b6:17:4c:bd:5b: dd:82:ea:be:ce:cb:85:b4:b8:c6:a3:80:33:21:9b: 1c:d5:54:73:5b:08:34:9f:36:27:33:61:d3:fe:2f: a1:62:c3:da:6f:3b:bc:b0:14:d8:a0:20:90:5b:da: bc:84:45:9e:5d:21:3c:f1:85:5d:c5:60:26:73:21: f7:2b:4f:47:a2:e0:e0:51:45:7c:0e:5f:f7:44:88: 73:4d:8b:fe:ee:15:cc:58:99:e3:84:0c:7b:24:57: f2:6b:0c:7b:a5:f3:04:84:b7:ca:cf:90:7e:05:16: 6a:c0:4a:6a:e0:e1:a7:80:f0:fb:e8:e3:cf:5a:cd: e1:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:FC:C4:F5:DD:16:81:13:B6:41:D0:84:A5:3E:04:96:5A:71:C1:4A X509v3 Authority Key Identifier: keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/mvzE9d0WgRO2QdCEpT4EllpxwUo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:1a68:21::/48 Signature Algorithm: sha256WithRSAEncryption 1e:01:65:30:3d:4f:e0:cd:51:0e:5f:ef:ef:9d:62:9a:e2:46: b5:03:e2:84:12:08:2c:30:6d:a4:59:8b:e3:88:8a:15:5a:fb: 12:93:83:a6:c6:e8:4b:2e:e0:ee:89:33:e5:8c:f9:19:c7:42: 1e:45:8a:bf:28:97:7c:06:f2:01:2a:d4:cb:02:ec:29:ee:f3: a7:c2:39:18:34:d9:d8:ab:96:3e:d9:a2:59:5d:0b:a0:8b:fd: 54:97:f1:62:ad:9e:b1:4a:11:6d:a9:ba:7e:26:8e:5d:26:21: ed:fb:bb:6e:fe:6e:9e:95:d0:47:a1:96:0b:37:3c:05:e2:37: 30:37:57:68:4a:32:f8:2e:0b:79:f6:76:b5:cd:65:a9:a2:bb: 3b:28:c0:d4:4b:ba:d5:be:20:42:f8:22:b6:7e:56:2a:0e:a8: 52:d5:ed:d2:88:94:47:54:c9:bd:05:6c:aa:95:e7:11:f3:c6: 94:7d:2b:0c:04:f4:08:56:08:cc:00:d9:b8:6a:00:d7:0e:a2: f9:69:17:f0:8a:58:8f:ba:f6:6d:b5:43:5a:3f:0b:c3:b2:29: a8:ca:e8:ff:bb:69:d6:ec:75:62:42:85:3f:45:e6:a2:5b:14: 09:51:49:b9:8b:19:7d:c2:9f:90:6d:3c:b4:49:fd:49:cb:12: 4d:44:1a:ab -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8f1g9+1az/AgTWgSZg29tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4YzUxMGZjOWI4NjVkOTZlM2FmYzdjNTYwNTZlZmFkOWEz MzBjNWIwHhcNMjYwMTAyMDIxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YWZjYzRmNWRkMTY4MTEzYjY0MWQwODRhNTNlMDQ5NjVhNzFjMTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6hOw536m1CrsEpsZRqViiyfCZwIr NWKazIKWAXD9P3HlVRulFeEf+VgbOcIq9r4/20BUv4M7fxUsBVNOSDf2m+vIabAU CWf+R6bEDkZ942huUkNqUR0xFhDhLzHfqo6ZTNzaA8tsQu3mRfQzZ3iv7z2mJ7xn 3OLDoXtzR5tR79bfthdMvVvdguq+zsuFtLjGo4AzIZsc1VRzWwg0nzYnM2HT/i+h YsPabzu8sBTYoCCQW9q8hEWeXSE88YVdxWAmcyH3K09HouDgUUV8Dl/3RIhzTYv+ 7hXMWJnjhAx7JFfyawx7pfMEhLfKz5B+BRZqwEpq4OGngPD76OPPWs3hWwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJr8xPXdFoETtkHQhKU+BJZaccFKMB8GA1UdIwQY MBaAFGjFEPybhl2W46/HxWBW762aMwxbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEt NWQ2NjVlOTk4ZjZhLzEvbXZ6RTlkMFdnUk8yUWRDRXBUNEVsbHB4d1VvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEtNWQ2NjVlOTk4ZjZh LzEvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEaaAAh MA0GCSqGSIb3DQEBCwUAA4IBAQAeAWUwPU/gzVEOX+/vnWKa4ka1A+KEEggsMG2k WYvjiIoVWvsSk4OmxuhLLuDuiTPljPkZx0IeRYq/KJd8BvIBKtTLAuwp7vOnwjkY NNnYq5Y+2aJZXQugi/1Ul/FirZ6xShFtqbp+Jo5dJiHt+7tu/m6eldBHoZYLNzwF 4jcwN1doSjL4Lgt59na1zWWpors7KMDUS7rVviBC+CK2flYqDqhS1e3SiJRHVMm9 BWyqlecR88aUfSsMBPQIVgjMANm4agDXDqL5aRfwiliPuvZttUNaPwvDsimoyuj/ u2nW7HViQoU/ReaiWxQJUUm5ixl9wp+QbTy0Sf1JyxJNRBqr -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:51 2026 by rpki-client