This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/MkyGLOUgEm7yWmws0P0WmJhg_og.roa File: MkyGLOUgEm7yWmws0P0WmJhg_og.roa (raw, json) Hash identifier: lImHVfPNO/uEHSArF6tT6T1ccVGKtSX8t+Ym23NvLaU= Subject key identifier: 32:4C:86:2C:E5:20:12:6E:F2:5A:6C:2C:D0:FD:16:98:98:60:FE:88 Certificate issuer: /CN=21351865b767dd7b9c22314bfc8055bd57db0065 Certificate serial: 019B7AC8AA4D0CF85B7F1E30DAE8B61678AF Authority key identifier: 21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/MkyGLOUgEm7yWmws0P0WmJhg_og.roa Signing time: Thu 01 Jan 2026 18:18:49 +0000 ROA not before: Thu 01 Jan 2026 18:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48292 IP address blocks: 2a0c:f587:fffe::/48 maxlen: 48 2a0c:f587:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:aa:4d:0c:f8:5b:7f:1e:30:da:e8:b6:16:78:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21351865b767dd7b9c22314bfc8055bd57db0065 Validity Not Before: Jan 1 18:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=324c862ce520126ef25a6c2cd0fd16989860fe88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:51:e9:85:db:77:a1:75:7d:0f:64:0f:5a:76: f0:03:ae:40:85:55:73:eb:58:8e:4f:88:e7:48:a9: e2:7e:93:85:3f:c1:61:7a:df:f1:dd:62:39:4b:a2: 86:8f:b3:21:2d:eb:f7:bf:92:77:25:b4:26:d8:a5: 11:a5:c6:2c:0b:5d:c1:8d:7e:09:d1:76:b6:27:e9: fc:c9:64:6d:dd:d2:a4:c6:01:77:f8:b5:31:e0:f4: 22:c8:ff:e7:54:e4:d0:b9:a8:fa:3f:3d:07:09:a0: e2:d1:b4:1f:5b:79:43:ea:85:a8:e6:c1:b7:19:d2: e2:ed:95:18:3b:52:f7:cf:57:63:a7:88:97:d0:e5: f2:72:1c:c4:2d:30:8a:d8:15:93:41:27:f8:c3:a7: 84:4a:08:dc:61:4e:78:a6:8c:96:c5:3b:56:6d:d7: f1:58:6e:1a:a2:4c:3c:8d:4a:e5:fa:cb:df:7f:ca: 95:9e:fc:15:3a:e5:89:a3:b2:d9:5c:35:4a:92:e5: 8d:5c:00:94:63:bc:2b:87:1e:36:de:6d:73:41:9d: b7:2e:25:16:7b:7b:05:66:c4:82:72:27:bd:03:00: d5:46:34:66:68:ad:37:53:49:c3:d3:91:b8:c3:a5: b5:ee:0d:ab:34:18:a8:c3:00:84:eb:6f:31:00:f9: a1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:4C:86:2C:E5:20:12:6E:F2:5A:6C:2C:D0:FD:16:98:98:60:FE:88 X509v3 Authority Key Identifier: keyid:21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/MkyGLOUgEm7yWmws0P0WmJhg_og.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:f587:fffe::/47 Signature Algorithm: sha256WithRSAEncryption 61:d4:37:91:a8:2c:f6:e0:20:45:9e:5e:15:71:4c:8d:bd:91: eb:ff:21:a9:2b:48:65:88:4b:70:11:8b:86:b0:dc:33:0e:45: 8a:33:6a:18:68:48:54:33:e6:1d:09:fd:60:37:f8:68:2b:a4: d7:34:d1:9c:58:ab:72:f7:f7:43:6c:96:9b:3e:18:4a:ec:79: ec:06:31:8d:23:a5:7e:17:6b:f8:d7:8f:80:af:4e:f9:02:42: 21:75:23:89:1a:bd:ca:47:a2:52:3c:74:3a:12:c6:ad:ef:33: e3:34:98:92:60:3c:be:b7:8f:76:09:62:19:03:3e:89:ef:8b: be:56:28:02:4c:0c:23:57:62:1f:75:d5:c1:7a:3d:28:81:6f: b8:fd:7a:90:b5:c6:0c:a0:03:0a:46:e2:e3:19:d2:69:7e:3b: c3:46:9a:fb:86:81:50:12:bb:db:26:dd:ae:e2:3b:ec:04:dd: 97:a6:3f:fb:03:17:9c:08:a2:55:94:24:02:51:4f:14:ef:e3: 33:4a:9c:be:13:49:7a:a7:ab:ed:b6:d0:14:d6:33:40:26:a4: 15:2b:73:c4:fc:a9:5c:8c:4a:77:06:c1:22:2e:86:11:b3:d8: c9:cb:d6:1b:71:1e:23:ae:16:cb:98:a6:a5:9a:eb:16:1c:84: cd:b5:a4:ab -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6yKpNDPhbfx4w2ui2FnivMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzUxODY1Yjc2N2RkN2I5YzIyMzE0YmZjODA1NWJkNTdk YjAwNjUwHhcNMjYwMTAxMTgxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMjRjODYyY2U1MjAxMjZlZjI1YTZjMmNkMGZkMTY5ODk4NjBmZTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFHphdt3oXV9D2QPWnbwA65AhVVz 61iOT4jnSKnifpOFP8Fhet/x3WI5S6KGj7MhLev3v5J3JbQm2KURpcYsC13BjX4J 0Xa2J+n8yWRt3dKkxgF3+LUx4PQiyP/nVOTQuaj6Pz0HCaDi0bQfW3lD6oWo5sG3 GdLi7ZUYO1L3z1djp4iX0OXychzELTCK2BWTQSf4w6eESgjcYU54poyWxTtWbdfx WG4aokw8jUrl+svff8qVnvwVOuWJo7LZXDVKkuWNXACUY7wrhx423m1zQZ23LiUW e3sFZsSCcie9AwDVRjRmaK03U0nD05G4w6W17g2rNBiowwCE628xAPmhzwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDJMhizlIBJu8lpsLND9FpiYYP6IMB8GA1UdIwQY MBaAFCE1GGW3Z917nCIxS/yAVb1X2wBlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRVWVpiZG4zWHVjSWpGTF9JQlZ2VmZiQUdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lNTJiMDctZjJhNC00N2MxLTk0NjAt MWU0ZTA0MDA4NDRiLzEvTWt5R0xPVWdFbTd5V213czBQMFdtSmhnX29nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9lNTJiMDctZjJhNC00N2MxLTk0NjAtMWU0ZTA0MDA4NDRi LzEvSVRVWVpiZG4zWHVjSWpGTF9JQlZ2VmZiQUdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKgz1h//+ MA0GCSqGSIb3DQEBCwUAA4IBAQBh1DeRqCz24CBFnl4VcUyNvZHr/yGpK0hliEtw EYuGsNwzDkWKM2oYaEhUM+YdCf1gN/hoK6TXNNGcWKty9/dDbJabPhhK7HnsBjGN I6V+F2v414+Ar075AkIhdSOJGr3KR6JSPHQ6Esat7zPjNJiSYDy+t492CWIZAz6J 74u+VigCTAwjV2IfddXBej0ogW+4/XqQtcYMoAMKRuLjGdJpfjvDRpr7hoFQErvb Jt2u4jvsBN2Xpj/7AxecCKJVlCQCUU8U7+MzSpy+E0l6p6vtttAU1jNAJqQVK3PE /KlcjEp3BsEiLoYRs9jJy9YbcR4jrhbLmKalmusWHITNtaSr -----END CERTIFICATE-----Generated at Mon Jan 26 01:01:42 2026 by rpki-client