This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/MB0uTApSO8m5vg_bm9trr3XpjgU.roa File: MB0uTApSO8m5vg_bm9trr3XpjgU.roa (raw, json) Hash identifier: 2eNykuyF9+3yCGYPE8lH28bjQtkNd0f4qvsTFx03Ijs= Subject key identifier: 30:1D:2E:4C:0A:52:3B:C9:B9:BE:0F:DB:9B:DB:6B:AF:75:E9:8E:05 Certificate issuer: /CN=69a28c2f84c75e8d0388694355152dd2b731f249 Certificate serial: 019B7910589B3FB768925424A9F845E2D39A Authority key identifier: 69:A2:8C:2F:84:C7:5E:8D:03:88:69:43:55:15:2D:D2:B7:31:F2:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaKML4THXo0DiGlDVRUt0rcx8kk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/MB0uTApSO8m5vg_bm9trr3XpjgU.roa Signing time: Thu 01 Jan 2026 10:17:52 +0000 ROA not before: Thu 01 Jan 2026 10:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9056 IP address blocks: 2a00:7c00:8001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/aaKML4THXo0DiGlDVRUt0rcx8kk.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/aaKML4THXo0DiGlDVRUt0rcx8kk.mft rsync://rpki.ripe.net/repository/DEFAULT/aaKML4THXo0DiGlDVRUt0rcx8kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:58:9b:3f:b7:68:92:54:24:a9:f8:45:e2:d3:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69a28c2f84c75e8d0388694355152dd2b731f249 Validity Not Before: Jan 1 10:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=301d2e4c0a523bc9b9be0fdb9bdb6baf75e98e05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:73:8a:9d:f3:3e:94:6d:c8:12:8e:b4:3a:f1: b3:66:4f:9e:e1:87:c2:12:8e:28:e1:03:bb:11:76: e5:63:f8:57:bb:3a:54:c1:8b:bc:09:f7:45:01:96: 3c:33:dc:e1:f0:30:5e:f2:25:11:2c:86:27:08:b1: a4:91:a7:fc:12:ec:16:0c:c4:82:0a:d1:b2:a9:35: 2d:ae:93:3d:13:bd:a7:dd:81:18:01:be:43:ac:d9: 60:bc:9f:f5:e3:ea:09:76:34:89:82:63:69:1f:70: 08:b0:ec:cd:c5:61:ce:45:81:77:ef:99:4f:60:95: fd:e6:bc:56:05:fe:9f:40:2c:20:cd:ec:8b:34:69: d0:7a:44:5c:ed:68:c7:4d:42:fe:40:55:7d:79:54: a7:d3:66:3a:bd:7a:5c:7b:13:62:70:99:04:7b:60: 8e:43:98:1d:1c:05:2a:dd:f5:d3:21:15:8d:e1:9c: 39:93:9f:2c:06:bc:9a:f2:b1:42:b6:d5:9b:51:49: 1a:a2:3d:53:63:fa:33:53:3b:6f:63:f2:11:84:a1: 37:dd:aa:38:bb:86:d2:f3:89:01:6b:93:a4:4e:8f: 6e:7a:60:36:cb:b3:ea:19:d5:df:09:13:6f:1c:d8: dc:ee:2f:e1:ea:25:72:70:02:e6:fa:19:3d:e7:80: 63:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:1D:2E:4C:0A:52:3B:C9:B9:BE:0F:DB:9B:DB:6B:AF:75:E9:8E:05 X509v3 Authority Key Identifier: keyid:69:A2:8C:2F:84:C7:5E:8D:03:88:69:43:55:15:2D:D2:B7:31:F2:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaKML4THXo0DiGlDVRUt0rcx8kk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/MB0uTApSO8m5vg_bm9trr3XpjgU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/aaKML4THXo0DiGlDVRUt0rcx8kk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:7c00:8001::/48 Signature Algorithm: sha256WithRSAEncryption 6d:e0:80:ac:93:6c:59:d2:17:0d:90:10:0f:56:28:9d:5a:d0: 4b:9e:03:81:49:e2:fe:d6:1b:7f:da:32:ec:f6:0e:33:80:18: 04:f7:3e:2a:16:71:83:d6:3b:79:4b:8c:53:42:15:21:52:d1: 78:e9:51:0e:35:79:ed:a6:76:9a:3b:44:ba:30:27:fb:fc:de: 4f:d3:24:f2:f3:55:56:21:a0:4b:af:eb:61:33:98:82:c9:e6: ea:aa:b5:df:18:51:63:a8:8a:43:e9:fb:48:59:15:02:94:a8: 8b:9f:57:c7:c5:76:44:31:18:82:17:94:83:38:e3:21:cc:55: a3:ab:a2:79:a8:bf:69:24:3c:e3:50:aa:a9:e9:c1:b5:71:89: d2:59:e7:13:3b:4c:4d:dd:c1:0d:48:51:96:b7:7e:91:16:bb: c6:0b:bb:7f:27:fa:73:e4:20:e1:b8:bb:b3:0d:bc:91:73:b7: 5c:b5:a6:71:96:19:64:c4:28:77:eb:82:66:53:44:47:64:77: fa:af:37:e4:18:b7:ab:06:98:b0:5e:f0:ff:57:34:96:61:6d: 13:9c:bd:48:a1:c1:01:16:fc:cc:9f:8b:3f:9d:b7:7f:a3:fb: 53:49:6f:35:14:f9:6c:18:e2:85:5d:3a:5c:6a:a6:d3:a4:fe: 0a:fd:5a:49 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EFibP7doklQkqfhF4tOaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5YTI4YzJmODRjNzVlOGQwMzg4Njk0MzU1MTUyZGQyYjcz MWYyNDkwHhcNMjYwMTAxMTAxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDFkMmU0YzBhNTIzYmM5YjliZTBmZGI5YmRiNmJhZjc1ZTk4ZTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynOKnfM+lG3IEo60OvGzZk+e4YfC Eo4o4QO7EXblY/hXuzpUwYu8CfdFAZY8M9zh8DBe8iURLIYnCLGkkaf8EuwWDMSC CtGyqTUtrpM9E72n3YEYAb5DrNlgvJ/14+oJdjSJgmNpH3AIsOzNxWHORYF375lP YJX95rxWBf6fQCwgzeyLNGnQekRc7WjHTUL+QFV9eVSn02Y6vXpcexNicJkEe2CO Q5gdHAUq3fXTIRWN4Zw5k58sBrya8rFCttWbUUkaoj1TY/ozUztvY/IRhKE33ao4 u4bS84kBa5OkTo9uemA2y7PqGdXfCRNvHNjc7i/h6iVycALm+hk954BjOQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDAdLkwKUjvJub4P25vba6916Y4FMB8GA1UdIwQY MBaAFGmijC+Ex16NA4hpQ1UVLdK3MfJJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWFLTUw0VEhYbzBEaUdsRFZSVXQwcmN4OGtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS84OWZmNDctMGI3Yi00MzA5LWE4YWYt MmNiZDU1ZjlhOGVlLzEvTUIwdVRBcFNPOG01dmdfYm05dHJyM1hwamdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS84OWZmNDctMGI3Yi00MzA5LWE4YWYtMmNiZDU1ZjlhOGVl LzEvYWFLTUw0VEhYbzBEaUdsRFZSVXQwcmN4OGtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgB8AIAB MA0GCSqGSIb3DQEBCwUAA4IBAQBt4ICsk2xZ0hcNkBAPViidWtBLngOBSeL+1ht/ 2jLs9g4zgBgE9z4qFnGD1jt5S4xTQhUhUtF46VEONXntpnaaO0S6MCf7/N5P0yTy 81VWIaBLr+thM5iCyebqqrXfGFFjqIpD6ftIWRUClKiLn1fHxXZEMRiCF5SDOOMh zFWjq6J5qL9pJDzjUKqp6cG1cYnSWecTO0xN3cENSFGWt36RFrvGC7t/J/pz5CDh uLuzDbyRc7dctaZxlhlkxCh364JmU0RHZHf6rzfkGLerBpiwXvD/VzSWYW0TnL1I ocEBFvzMn4s/nbd/o/tTSW81FPlsGOKFXTpcaqbTpP4K/VpJ -----END CERTIFICATE-----Generated at Mon Jan 26 08:38:36 2026 by rpki-client