This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/MfXXH5uyMjxJS9-0ROwlt3yXcEk.roa File: MfXXH5uyMjxJS9-0ROwlt3yXcEk.roa (raw, json) Hash identifier: 1+CoCqM4Yk8Y6cvI59FiuCQ7nWHGYta/hsbHqMSiJAM= Subject key identifier: 31:F5:D7:1F:9B:B2:32:3C:49:4B:DF:B4:44:EC:25:B7:7C:97:70:49 Certificate issuer: /CN=e909ee3d618974da0cbd805a2da80410a4989881 Certificate serial: 019B7B369AEEAD9922334133D2E8D418F150 Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/MfXXH5uyMjxJS9-0ROwlt3yXcEk.roa Signing time: Thu 01 Jan 2026 20:18:54 +0000 ROA not before: Thu 01 Jan 2026 20:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49030 IP address blocks: 2a01:240:ab01::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:9a:ee:ad:99:22:33:41:33:d2:e8:d4:18:f1:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881 Validity Not Before: Jan 1 20:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=31f5d71f9bb2323c494bdfb444ec25b77c977049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ed:3b:83:49:ed:9d:1b:f4:90:af:77:e0:fd: 04:10:c0:6a:58:6e:35:b8:81:23:b5:cc:c0:7f:e8: 08:73:bc:99:79:f4:f0:70:25:ae:b5:11:73:28:b7: 5f:fc:04:63:07:ef:15:e1:f6:a7:a3:87:fc:11:b4: 4e:1a:49:13:67:77:2c:13:41:85:8f:9b:f3:12:5e: b8:c5:ee:af:58:98:bb:ce:73:a3:7e:db:e9:19:e8: 2c:2e:1f:fa:e5:79:8b:75:5f:94:f0:9f:62:f4:65: 15:2d:47:d9:c6:94:80:e0:ef:bb:0f:09:ed:fe:0b: 48:46:f9:9a:e1:7f:2d:32:ac:3b:f1:0d:39:b6:55: 64:b3:5c:79:a7:ae:0b:3b:ad:65:6d:4c:3f:a8:cf: 6c:31:8e:36:0a:e4:ae:5c:a8:c4:8b:62:7a:39:d1: 8a:47:16:6e:2e:44:b5:2e:c0:2b:b6:0b:c2:8e:f4: 4c:89:0b:54:2a:53:9a:4e:da:5a:a6:ff:72:10:2e: e6:b0:ed:fe:9e:ee:40:a5:2e:fc:26:43:dc:9b:10: 35:d3:b4:1e:e6:6e:c5:0c:52:c6:66:3c:15:65:54: 4d:c7:23:18:a8:28:b9:29:05:31:68:e7:53:00:cf: 51:81:b2:b6:31:f0:d3:fc:de:13:7c:99:4b:35:2a: bc:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:F5:D7:1F:9B:B2:32:3C:49:4B:DF:B4:44:EC:25:B7:7C:97:70:49 X509v3 Authority Key Identifier: keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/MfXXH5uyMjxJS9-0ROwlt3yXcEk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:240:ab01::/48 Signature Algorithm: sha256WithRSAEncryption b2:9c:3b:17:b5:4e:06:3e:94:c3:ea:8a:96:59:12:07:0d:b5: 33:c5:9f:fc:ff:73:51:2d:2e:cc:3b:a1:68:5c:a0:a2:39:dc: 12:c4:11:b3:21:c5:89:d2:d5:de:5c:fd:bc:66:5f:d0:d0:a9: 90:c9:1c:a5:46:86:7c:64:78:34:13:28:03:ea:39:8d:05:5a: cb:e0:60:aa:cd:66:e1:ae:ec:24:02:5c:08:75:6a:aa:e5:07: 47:26:36:b4:52:04:1f:11:a7:da:e9:80:ef:a8:5b:b9:07:08: a5:f5:9e:be:97:45:f8:5f:8d:ab:cd:28:e8:5c:7c:e0:d5:1e: 05:90:52:5e:c4:ce:ec:9d:72:f0:4a:ee:34:dc:df:96:05:2c: 55:32:68:53:be:49:03:5b:5a:02:10:49:50:5e:b3:6f:ae:0f: 5a:37:0d:0a:34:d4:79:e3:b8:58:c2:24:ab:32:b7:7c:a7:0f: 67:8d:c9:3d:3f:87:38:66:fe:67:f6:75:6e:fd:39:3f:07:a2: 30:e7:1d:db:78:06:49:17:52:75:0e:90:59:31:94:cf:a5:11: 1f:ad:05:9e:d3:fb:11:7a:4a:5c:81:36:28:65:9e:77:40:90: 05:da:bd:28:f4:35:c3:4b:bd:df:cf:39:0c:42:f0:ab:70:58: d5:4f:bb:5c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7NprurZkiM0Ez0ujUGPFQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MDllZTNkNjE4OTc0ZGEwY2JkODA1YTJkYTgwNDEwYTQ5 ODk4ODEwHhcNMjYwMTAxMjAxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMWY1ZDcxZjliYjIzMjNjNDk0YmRmYjQ0NGVjMjViNzdjOTc3MDQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+07g0ntnRv0kK934P0EEMBqWG41 uIEjtczAf+gIc7yZefTwcCWutRFzKLdf/ARjB+8V4fano4f8EbROGkkTZ3csE0GF j5vzEl64xe6vWJi7znOjftvpGegsLh/65XmLdV+U8J9i9GUVLUfZxpSA4O+7Dwnt /gtIRvma4X8tMqw78Q05tlVks1x5p64LO61lbUw/qM9sMY42CuSuXKjEi2J6OdGK RxZuLkS1LsArtgvCjvRMiQtUKlOaTtpapv9yEC7msO3+nu5ApS78JkPcmxA107Qe 5m7FDFLGZjwVZVRNxyMYqCi5KQUxaOdTAM9RgbK2MfDT/N4TfJlLNSq85wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDH11x+bsjI8SUvftETsJbd8l3BJMB8GA1UdIwQY MBaAFOkJ7j1hiXTaDL2AWi2oBBCkmJiBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yYjVmNWYtYmI5Ni00YjMxLThhNmEt ZGQxMTVmOWUzMzAxLzEvTWZYWEg1dXlNanhKUzktMFJPd2x0M3lYY0VrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8yYjVmNWYtYmI5Ni00YjMxLThhNmEtZGQxMTVmOWUzMzAx LzEvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgECQKsB MA0GCSqGSIb3DQEBCwUAA4IBAQCynDsXtU4GPpTD6oqWWRIHDbUzxZ/8/3NRLS7M O6FoXKCiOdwSxBGzIcWJ0tXeXP28Zl/Q0KmQyRylRoZ8ZHg0EygD6jmNBVrL4GCq zWbhruwkAlwIdWqq5QdHJja0UgQfEafa6YDvqFu5Bwil9Z6+l0X4X42rzSjoXHzg 1R4FkFJexM7snXLwSu403N+WBSxVMmhTvkkDW1oCEElQXrNvrg9aNw0KNNR547hY wiSrMrd8pw9njck9P4c4Zv5n9nVu/Tk/B6Iw5x3beAZJF1J1DpBZMZTPpREfrQWe 0/sRekpcgTYoZZ53QJAF2r0o9DXDS73fzzkMQvCrcFjVT7tc -----END CERTIFICATE-----Generated at Sun Jan 25 19:35:43 2026 by rpki-client