This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/mAx98JfPhDLCrH-MWTXW6Mq1lcs.roa File: mAx98JfPhDLCrH-MWTXW6Mq1lcs.roa (raw, json) Hash identifier: wPC82FVYZPE02MEAyWj2Vz88uVP6Jay8pwhChdxfydA= Subject key identifier: 98:0C:7D:F0:97:CF:84:32:C2:AC:7F:8C:59:35:D6:E8:CA:B5:95:CB Certificate issuer: /CN=7bab6c11d41162db0306858f83e5e65121132a6b Certificate serial: 019B791133C67F58FE2CBBE8D1150E04B11A Authority key identifier: 7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/mAx98JfPhDLCrH-MWTXW6Mq1lcs.roa Signing time: Thu 01 Jan 2026 10:18:48 +0000 ROA not before: Thu 01 Jan 2026 10:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213021 IP address blocks: 2a07:22c1:c100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:33:c6:7f:58:fe:2c:bb:e8:d1:15:0e:04:b1:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bab6c11d41162db0306858f83e5e65121132a6b Validity Not Before: Jan 1 10:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=980c7df097cf8432c2ac7f8c5935d6e8cab595cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:03:f4:2b:0b:23:34:fb:d6:ef:b7:97:6d:8c: 20:eb:74:17:8a:7a:f6:45:75:09:3b:68:5c:0d:49: 23:17:76:4d:50:1c:7c:29:da:03:42:b5:0b:08:61: d4:84:0a:d2:bc:f3:3d:46:dc:69:14:8d:27:3e:01: 75:d0:6a:3b:87:af:69:c0:5e:a6:06:7a:94:11:bd: aa:a0:91:c8:de:29:59:a9:f0:be:c6:db:bc:04:0d: fb:a1:14:95:f7:bc:7d:21:18:3c:64:f7:e9:5b:fc: b6:03:e9:29:11:2e:66:12:26:45:66:d9:61:8a:89: 74:26:d1:75:2d:f7:f5:aa:b9:fa:6a:ec:bb:93:e5: 6a:c5:7d:ef:1f:a8:54:1c:4c:32:05:ca:0e:f4:8c: 6a:bb:5b:df:81:02:db:9e:2b:d6:62:4d:6c:e0:a0: b7:bd:7f:02:c6:c3:a7:07:79:59:1d:fa:20:46:ad: 7a:d2:97:d5:fb:3a:1f:cd:4a:7b:0b:34:f9:5b:7d: d6:43:81:6b:be:10:ca:d9:ff:ca:df:df:8a:ff:a4: 6a:77:c2:d3:4e:af:ca:f3:65:b6:3e:b9:9b:8e:f9: 8d:75:58:7f:bc:16:a2:b3:eb:6f:e3:7f:38:b6:d4: 2a:98:f2:14:21:c4:c0:1a:f7:13:87:9f:48:16:7c: fc:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:0C:7D:F0:97:CF:84:32:C2:AC:7F:8C:59:35:D6:E8:CA:B5:95:CB X509v3 Authority Key Identifier: keyid:7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/mAx98JfPhDLCrH-MWTXW6Mq1lcs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:22c1:c100::/40 Signature Algorithm: sha256WithRSAEncryption 35:14:c2:ba:32:6d:8b:67:5a:71:56:43:f6:ed:ff:fe:f7:eb: a3:e1:d3:5e:b8:97:46:72:ff:a4:28:81:c1:33:e5:06:52:79: 59:6f:06:52:90:1c:5a:8b:e1:ad:2b:7b:f0:5b:37:de:e6:1c: e1:42:01:76:99:26:02:f8:e2:1f:e7:27:1b:ac:ea:00:fc:8b: 89:b8:4c:d2:41:d3:3f:cd:00:bd:ec:69:23:c7:f9:e1:6f:14: 80:42:e5:56:d2:86:59:9c:64:e8:45:87:c5:09:8f:2c:37:21: 16:fb:46:42:fd:bd:0d:e0:38:dd:09:26:7b:bb:e2:ab:9d:89: 53:8b:f0:4c:cc:2c:d6:bf:ec:a1:1c:90:cf:2c:fd:e3:81:91: 8b:f9:2b:b0:65:5d:b8:7f:89:cd:ad:84:64:10:7b:88:22:ab: 06:ff:ca:bf:58:cb:ea:2c:d4:98:5a:8e:da:5a:2e:16:e8:a0: 14:3e:0c:0c:02:fb:f7:c9:0e:b2:f5:68:ad:01:f6:3b:80:72: c2:16:0a:0c:69:54:1d:5a:0e:f0:1f:65:fd:b9:0d:2a:d4:fd: e0:fe:ae:23:d6:eb:18:8d:e9:dc:c0:d8:d8:db:e8:c0:24:2a: 24:1e:53:ac:0c:76:44:51:0a:f1:8e:5a:cf:61:f7:08:50:36: 78:3f:bb:7d -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt5ETPGf1j+LLvo0RUOBLEaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiYWI2YzExZDQxMTYyZGIwMzA2ODU4ZjgzZTVlNjUxMjEx MzJhNmIwHhcNMjYwMTAxMTAxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODBjN2RmMDk3Y2Y4NDMyYzJhYzdmOGM1OTM1ZDZlOGNhYjU5NWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gP0KwsjNPvW77eXbYwg63QXinr2 RXUJO2hcDUkjF3ZNUBx8KdoDQrULCGHUhArSvPM9RtxpFI0nPgF10Go7h69pwF6m BnqUEb2qoJHI3ilZqfC+xtu8BA37oRSV97x9IRg8ZPfpW/y2A+kpES5mEiZFZtlh iol0JtF1Lff1qrn6auy7k+VqxX3vH6hUHEwyBcoO9Ixqu1vfgQLbnivWYk1s4KC3 vX8CxsOnB3lZHfogRq160pfV+zofzUp7CzT5W33WQ4FrvhDK2f/K39+K/6Rqd8LT Tq/K82W2PrmbjvmNdVh/vBais+tv4384ttQqmPIUIcTAGvcTh59IFnz83QIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFJgMffCXz4Qywqx/jFk11ujKtZXLMB8GA1UdIwQY MBaAFHurbBHUEWLbAwaFj4Pl5lEhEyprMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTZ0c0VkUVJZdHNEQm9XUGctWG1VU0VUS21zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9kMzM0YWQtNTI0MC00ZGFhLWEwNTAt OWY1YmY3MzY3MjBlLzEvbUF4OThKZlBoRExDckgtTVdUWFc2TXExbGNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9kMzM0YWQtNTI0MC00ZGFhLWEwNTAtOWY1YmY3MzY3MjBl LzEvZTZ0c0VkUVJZdHNEQm9XUGctWG1VU0VUS21zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgciwcEw DQYJKoZIhvcNAQELBQADggEBADUUwroybYtnWnFWQ/bt//7366Ph0164l0Zy/6Qo gcEz5QZSeVlvBlKQHFqL4a0re/BbN97mHOFCAXaZJgL44h/nJxus6gD8i4m4TNJB 0z/NAL3saSPH+eFvFIBC5VbShlmcZOhFh8UJjyw3IRb7RkL9vQ3gON0JJnu74qud iVOL8EzMLNa/7KEckM8s/eOBkYv5K7BlXbh/ic2thGQQe4giqwb/yr9Yy+os1Jha jtpaLhbooBQ+DAwC+/fJDrL1aK0B9juAcsIWCgxpVB1aDvAfZf25DSrU/eD+riPW 6xiN6dzA2Njb6MAkKiQeU6wMdkRRCvGOWs9h9whQNng/u30= -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:29 2026 by rpki-client