This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/MYsq3VI7S6Tys8tH6kZ55isv4aM.roa File: MYsq3VI7S6Tys8tH6kZ55isv4aM.roa (raw, json) Hash identifier: nLJu9Ca3UL28v4nK9lRnWd7XxYbaE6zulNTp5ZAXAYk= Subject key identifier: 31:8B:2A:DD:52:3B:4B:A4:F2:B3:CB:47:EA:46:79:E6:2B:2F:E1:A3 Certificate issuer: /CN=fbd83efdd9996f8c75e7f4114e466ebf836968ea Certificate serial: 019B7A5A5C3EA0B468ED4FDB39A6C60C4C83 Authority key identifier: FB:D8:3E:FD:D9:99:6F:8C:75:E7:F4:11:4E:46:6E:BF:83:69:68:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9g-_dmZb4x15_QRTkZuv4NpaOo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/MYsq3VI7S6Tys8tH6kZ55isv4aM.roa Signing time: Thu 01 Jan 2026 16:18:20 +0000 ROA not before: Thu 01 Jan 2026 16:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28854 IP address blocks: 80.84.32.0/20 maxlen: 24 88.206.128.0/17 maxlen: 24 185.60.128.0/22 maxlen: 24 2a04:f40::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft rsync://rpki.ripe.net/repository/DEFAULT/1-9g-_dmZb4x15_QRTkZuv4NpaOo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:5c:3e:a0:b4:68:ed:4f:db:39:a6:c6:0c:4c:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbd83efdd9996f8c75e7f4114e466ebf836968ea Validity Not Before: Jan 1 16:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=318b2add523b4ba4f2b3cb47ea4679e62b2fe1a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f6:25:eb:c8:6c:0a:99:c5:57:e8:5c:f4:67: 9b:05:e1:c5:fd:94:31:29:e9:5d:c0:2d:da:c3:27: fc:22:58:46:3b:d4:7c:2a:c4:62:16:e9:73:41:0f: f4:d6:ec:6a:aa:de:1f:37:98:98:a7:3c:df:15:6b: 93:14:65:e0:fb:7d:aa:6b:c1:90:90:39:7b:ae:b4: 92:03:6d:33:cb:03:95:c4:5f:cf:7c:07:08:ad:98: 5f:10:0e:2c:fc:93:06:fa:eb:53:04:2d:6a:19:63: e5:40:a9:0e:12:4a:b5:5b:4b:96:3c:32:af:87:75: 36:ea:9d:5f:d0:dd:bc:36:98:56:ba:68:5d:ba:38: 44:b1:0e:22:a0:3e:30:de:76:71:f7:84:fc:f3:f8: 3c:a5:62:ef:c3:ee:79:09:98:09:99:ab:a7:b7:97: 06:f0:44:9a:2e:9f:fb:72:75:df:58:ae:c9:ac:a3: 88:a0:4c:06:2c:b7:be:7e:34:d1:6b:bc:ea:f9:c0: 71:f7:ab:28:97:b5:f4:4f:a0:3e:b0:8d:76:b5:d8: bf:3d:5f:8d:e1:5b:07:65:b0:f0:01:eb:ef:8b:d4: 69:0f:23:de:a1:93:d2:f0:ef:aa:ba:c3:3b:94:f8: 4a:3d:e7:af:62:b1:08:62:68:43:df:ee:8b:92:ae: 25:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:8B:2A:DD:52:3B:4B:A4:F2:B3:CB:47:EA:46:79:E6:2B:2F:E1:A3 X509v3 Authority Key Identifier: keyid:FB:D8:3E:FD:D9:99:6F:8C:75:E7:F4:11:4E:46:6E:BF:83:69:68:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9g-_dmZb4x15_QRTkZuv4NpaOo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/MYsq3VI7S6Tys8tH6kZ55isv4aM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.84.32.0/20 88.206.128.0/17 185.60.128.0/22 IPv6: 2a04:f40::/29 Signature Algorithm: sha256WithRSAEncryption 37:a3:13:82:89:15:4e:1f:da:19:49:ad:86:8f:55:f4:48:f8: 3e:eb:ab:11:69:f3:47:47:02:a1:7f:95:a7:89:e5:da:98:06: 55:dc:7b:7b:3b:63:67:04:f3:3b:d9:19:c9:34:2b:ac:66:c8: 48:d2:99:98:75:e7:6d:1b:3c:ed:74:4d:23:ca:ec:d7:df:3a: c8:c5:eb:1a:6c:86:42:9b:69:d5:d3:b1:91:79:c8:18:62:56: 57:87:8c:f0:ec:59:3c:a3:cf:3e:4d:0c:e4:bd:25:e3:03:78: 62:2e:ec:11:b3:1c:6f:24:fe:fd:5c:a4:d3:c7:2e:da:2c:3e: 20:bc:43:10:9c:fc:52:80:0c:2c:a3:b0:96:40:23:a1:22:61: 0a:a9:6f:64:0f:1f:c0:3f:30:d0:ef:74:3f:a2:56:28:f8:66: 0d:d3:04:59:08:8e:4f:ee:56:68:c3:a2:d5:98:b4:8a:af:2c: d8:c3:88:da:5d:97:3f:41:83:cd:d9:6e:76:44:6c:75:e8:f9: 83:5e:5d:32:e4:9f:63:ef:b3:09:3d:a2:41:79:82:21:6e:4f: 4d:ab:64:59:a8:28:1f:7f:a5:16:d5:39:3e:c3:44:0c:79:31: d7:78:fe:88:3e:c1:82:60:8d:29:97:f3:e8:f5:ab:27:79:b2: a3:67:70:fd -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt6Wlw+oLRo7U/bOabGDEyDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiZDgzZWZkZDk5OTZmOGM3NWU3ZjQxMTRlNDY2ZWJmODM2 OTY4ZWEwHhcNMjYwMTAxMTYxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMThiMmFkZDUyM2I0YmE0ZjJiM2NiNDdlYTQ2NzllNjJiMmZlMWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvYl68hsCpnFV+hc9GebBeHF/ZQx KeldwC3awyf8IlhGO9R8KsRiFulzQQ/01uxqqt4fN5iYpzzfFWuTFGXg+32qa8GQ kDl7rrSSA20zywOVxF/PfAcIrZhfEA4s/JMG+utTBC1qGWPlQKkOEkq1W0uWPDKv h3U26p1f0N28NphWumhdujhEsQ4ioD4w3nZx94T88/g8pWLvw+55CZgJmaunt5cG 8ESaLp/7cnXfWK7JrKOIoEwGLLe+fjTRa7zq+cBx96sol7X0T6A+sI12tdi/PV+N 4VsHZbDwAevvi9RpDyPeoZPS8O+qusM7lPhKPeevYrEIYmhD3+6Lkq4lawIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFDGLKt1SO0uk8rPLR+pGeeYrL+GjMB8GA1UdIwQY MBaAFPvYPv3ZmW+Mdef0EU5Gbr+DaWjqMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS05Zy1fZG1aYjR4MTVfUVJUa1p1djROcGFPby5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmMvYWEwNmE1LTdlZjYtNGJjOS1iMGEw LTJmYTgzOTAxN2Q3NS8xL01Zc3EzVkk3UzZUeXM4dEg2a1o1NWlzdjRhTS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMmMvYWEwNmE1LTdlZjYtNGJjOS1iMGEwLTJmYTgzOTAxN2Q3 NS8xLzEtOWctX2RtWmI0eDE1X1FSVGtadXY0TnBhT28uY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBIDBARQVCAD BAdYzoADBAK5PIAwDQQCAAIwBwMFAyoED0AwDQYJKoZIhvcNAQELBQADggEBADej E4KJFU4f2hlJrYaPVfRI+D7rqxFp80dHAqF/laeJ5dqYBlXce3s7Y2cE8zvZGck0 K6xmyEjSmZh1520bPO10TSPK7NffOsjF6xpshkKbadXTsZF5yBhiVleHjPDsWTyj zz5NDOS9JeMDeGIu7BGzHG8k/v1cpNPHLtosPiC8QxCc/FKADCyjsJZAI6EiYQqp b2QPH8A/MNDvdD+iVij4Zg3TBFkIjk/uVmjDotWYtIqvLNjDiNpdlz9Bg83ZbnZE bHXo+YNeXTLkn2Pvswk9okF5giFuT02rZFmoKB9/pRbVOT7DRAx5Mdd4/og+wYJg jSmX8+j1qyd5sqNncP0= -----END CERTIFICATE-----Generated at Mon Jan 26 06:17:50 2026 by rpki-client