This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/M_AsK8xtgHW--enKh1Fv-0yD_GQ.roa File: M_AsK8xtgHW--enKh1Fv-0yD_GQ.roa (raw, json) Hash identifier: kvJW1SXagKB0pbzliKf7XR3LeE5GTsMSJYvmlREXthM= Subject key identifier: 33:F0:2C:2B:CC:6D:80:75:BE:F9:E9:CA:87:51:6F:FB:4C:83:FC:64 Certificate issuer: /CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f Certificate serial: 019B7E38F732872ACB59C0F49B506014587B Authority key identifier: F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/M_AsK8xtgHW--enKh1Fv-0yD_GQ.roa Signing time: Fri 02 Jan 2026 10:20:21 +0000 ROA not before: Fri 02 Jan 2026 10:20:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212104 IP address blocks: 2a12:5844:1110::/44 maxlen: 44 2a12:5844:1111::/48 maxlen: 48 2a12:5844:1112::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:f7:32:87:2a:cb:59:c0:f4:9b:50:60:14:58:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f Validity Not Before: Jan 2 10:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=33f02c2bcc6d8075bef9e9ca87516ffb4c83fc64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:54:b7:05:3d:db:c8:26:05:c9:b6:35:a7:42: c4:c1:bb:b6:1c:3a:9e:a6:7f:92:a1:92:72:43:d5: ef:0c:74:ff:24:0c:10:21:cd:f9:e4:25:8f:a8:99: 50:8e:ed:30:fa:43:71:12:b9:25:17:5f:21:2d:6a: ac:e7:eb:19:4d:46:35:32:2f:34:a5:b0:c5:53:ce: 8c:fe:e7:94:48:a4:a9:03:54:29:ee:c8:7f:86:49: e9:b7:d1:83:1c:34:a0:5c:89:61:9a:33:da:fd:62: 50:62:07:42:32:23:6f:6d:e8:59:8b:15:46:8c:95: 64:04:49:17:c4:30:bd:71:ae:f3:1f:f7:f7:66:91: 59:7e:67:45:ca:06:ee:7e:a1:96:9d:74:80:1c:a8: a5:d3:90:bf:30:d0:f0:ab:7b:51:14:e0:ab:a2:72: 3e:38:67:2d:00:db:1f:d8:c2:de:c5:2f:2d:5c:88: 05:02:fd:f3:fb:ae:6f:2e:5e:58:fc:0c:7b:3b:4f: bb:a0:d0:ce:50:3a:1a:7e:67:d7:b7:43:77:4b:10: 8a:d0:33:2a:b1:cd:be:c4:a3:0f:aa:de:18:1b:d4: 95:56:15:44:11:e3:14:c8:32:0a:e7:85:d7:33:cc: 3c:3a:7a:3e:b0:c6:b8:79:2f:f8:70:30:8e:72:28: 67:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:F0:2C:2B:CC:6D:80:75:BE:F9:E9:CA:87:51:6F:FB:4C:83:FC:64 X509v3 Authority Key Identifier: keyid:F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/M_AsK8xtgHW--enKh1Fv-0yD_GQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:5844:1110::/44 Signature Algorithm: sha256WithRSAEncryption 5a:c0:41:3a:69:ea:29:23:8c:da:e0:d2:e7:95:9f:6c:c2:47: f9:32:dd:6b:5b:43:57:5d:b4:25:02:f9:f0:85:6a:89:59:32: 6d:b1:7d:a9:71:85:60:20:70:87:2d:4d:7a:25:cb:45:6d:db: e7:18:46:02:50:46:86:20:c5:10:63:aa:8a:97:b1:b5:c6:53: 1c:bd:8e:0e:dc:f7:f1:6c:a8:24:d5:00:5e:1c:3f:59:ae:8b: 18:4d:e7:b2:90:85:8f:db:e9:9c:32:4f:4d:3c:50:35:41:a6: 30:56:a5:ab:18:d1:db:c2:e3:fd:18:a4:5f:55:8c:10:24:fa: 08:ae:19:cb:36:00:92:4f:a0:4c:ac:e3:9e:a2:72:f5:d4:40: 30:00:ac:b0:c9:7e:5c:e3:2b:fd:b1:fb:50:e8:c2:35:8a:99: 19:ec:6c:b0:e8:b6:27:ee:de:7b:de:a3:de:4d:11:28:eb:89: 84:3b:27:52:9f:3a:23:ff:03:63:19:35:76:50:68:ea:2f:7d: d3:94:aa:f4:61:a8:87:28:5c:52:78:7d:09:60:8e:f3:a8:a4: a2:46:6e:fa:c6:d6:84:f6:fe:04:f4:77:8e:66:d9:de:f7:43: f2:ea:38:02:02:39:cf:aa:b3:7e:d0:60:2e:e9:fc:f2:fd:6f: 67:07:f4:5e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OPcyhyrLWcD0m1BgFFh7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2YzNlMDI3ZDJkMWMyZDM2ZDdjOTU0ODY3MjI2YzgzYjY1 ZWI1NmYwHhcNMjYwMTAyMTAyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzM2YwMmMyYmNjNmQ4MDc1YmVmOWU5Y2E4NzUxNmZmYjRjODNmYzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlS3BT3byCYFybY1p0LEwbu2HDqe pn+SoZJyQ9XvDHT/JAwQIc355CWPqJlQju0w+kNxErklF18hLWqs5+sZTUY1Mi80 pbDFU86M/ueUSKSpA1Qp7sh/hknpt9GDHDSgXIlhmjPa/WJQYgdCMiNvbehZixVG jJVkBEkXxDC9ca7zH/f3ZpFZfmdFygbufqGWnXSAHKil05C/MNDwq3tRFOCronI+ OGctANsf2MLexS8tXIgFAv3z+65vLl5Y/Ax7O0+7oNDOUDoafmfXt0N3SxCK0DMq sc2+xKMPqt4YG9SVVhVEEeMUyDIK54XXM8w8Ono+sMa4eS/4cDCOcihn4QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDPwLCvMbYB1vvnpyodRb/tMg/xkMB8GA1UdIwQY MBaAFPbD4CfS0cLTbXyVSGcibIO2XrVvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8yYjI4NzgtNWI3OS00MGY3LWI0YjUt MzU2YzRkN2JiNDUyLzEvTV9Bc0s4eHRnSFctLWVuS2gxRnYtMHlEX0dRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8yYjI4NzgtNWI3OS00MGY3LWI0YjUtMzU2YzRkN2JiNDUy LzEvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhJYRBEQ MA0GCSqGSIb3DQEBCwUAA4IBAQBawEE6aeopI4za4NLnlZ9swkf5Mt1rW0NXXbQl AvnwhWqJWTJtsX2pcYVgIHCHLU16JctFbdvnGEYCUEaGIMUQY6qKl7G1xlMcvY4O 3PfxbKgk1QBeHD9ZrosYTeeykIWP2+mcMk9NPFA1QaYwVqWrGNHbwuP9GKRfVYwQ JPoIrhnLNgCST6BMrOOeonL11EAwAKywyX5c4yv9sftQ6MI1ipkZ7Gyw6LYn7t57 3qPeTREo64mEOydSnzoj/wNjGTV2UGjqL33TlKr0YaiHKFxSeH0JYI7zqKSiRm76 xtaE9v4E9HeOZtne90Py6jgCAjnPqrN+0GAu6fzy/W9nB/Re -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:43 2026 by rpki-client