This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/MIEvnImfWTyOKpa2aWLkQhgEZmY.roa File: MIEvnImfWTyOKpa2aWLkQhgEZmY.roa (raw, json) Hash identifier: txV76t93bWRJ/yIQmWuamg16DjJLT7MgtJIe7paHB7E= Subject key identifier: 30:81:2F:9C:89:9F:59:3C:8E:2A:96:B6:69:62:E4:42:18:04:66:66 Certificate issuer: /CN=05d4d49da3e14855a7b883603ff148c1bb21f690 Certificate serial: 019B7E3863A5091D04928B69339B0D1FF9A2 Authority key identifier: 05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/MIEvnImfWTyOKpa2aWLkQhgEZmY.roa Signing time: Fri 02 Jan 2026 10:19:43 +0000 ROA not before: Fri 02 Jan 2026 10:19:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42375 IP address blocks: 2a09:f1c0::/29 maxlen: 29 2a09:f9c0::/32 maxlen: 32 2a09:f9c2::/32 maxlen: 32 2a09:f9c3::/32 maxlen: 32 2a0e:4780::/29 maxlen: 29 2a0e:4bc1::/32 maxlen: 32 2a0e:4bc2::/32 maxlen: 32 2a0e:5381::/32 maxlen: 32 2a0e:5643::/32 maxlen: 32 2a0e:5901::/32 maxlen: 32 2a0e:5902::/32 maxlen: 32 2a0e:5cc0::/32 maxlen: 32 2a0e:5cc1::/32 maxlen: 32 2a0e:5cc2::/32 maxlen: 32 2a0e:7340::/29 maxlen: 29 2a0e:8080::/32 maxlen: 32 2a0e:b1c0::/29 maxlen: 29 2a0e:ccc0::/32 maxlen: 32 2a0e:ccc1::/32 maxlen: 32 2a0e:ccc2::/32 maxlen: 32 2a0e:ffc0::/29 maxlen: 29 2a0f:4340::/29 maxlen: 29 2a0f:6fc1::/32 maxlen: 32 2a0f:6fc3::/32 maxlen: 32 2a0f:6fc4::/32 maxlen: 32 2a0f:b4c0::/32 maxlen: 32 2a0f:b4c1::/32 maxlen: 32 2a0f:b4c2::/32 maxlen: 32 2a0f:c080::/32 maxlen: 32 2a0f:c081::/32 maxlen: 32 2a14:e602::/32 maxlen: 32 2a14:e604::/32 maxlen: 32 2a14:e606::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:63:a5:09:1d:04:92:8b:69:33:9b:0d:1f:f9:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05d4d49da3e14855a7b883603ff148c1bb21f690 Validity Not Before: Jan 2 10:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=30812f9c899f593c8e2a96b66962e44218046666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ea:f9:c7:a7:3f:59:c5:c6:6f:7d:c6:07:2e: 2f:69:18:99:8c:68:5a:ce:f8:98:50:1c:85:ea:f1: 6d:5f:89:26:5d:f3:7e:55:ee:7a:5d:68:62:73:c0: 2f:1d:57:3d:86:7f:26:42:3e:fc:69:f3:c3:99:19: 44:e4:18:d6:78:54:33:38:29:a3:75:8b:e0:3a:89: af:71:bb:b1:ba:16:cc:6a:26:db:55:cc:25:ec:13: 88:61:3a:2d:b6:b4:11:10:5a:65:82:9f:ef:79:62: 35:00:29:a8:a9:ee:3b:92:31:f2:03:ff:df:20:81: e8:58:7a:21:8d:51:09:e8:5b:48:1e:de:fd:df:59: b2:5f:45:11:fc:18:23:03:b5:15:38:c3:40:dc:7d: 87:17:eb:22:6f:78:f7:79:d6:b7:03:7c:46:f5:64: 53:c0:fe:2a:33:d3:df:12:97:a9:47:92:5a:2f:b1: 11:eb:fd:b1:d3:a2:96:58:5a:74:77:59:61:0c:b2: fd:25:2c:e1:bf:27:ab:fe:6f:a6:ac:52:9a:a4:64: 62:5f:d5:b6:58:bc:9a:04:1a:ed:c8:19:f4:f7:9b: d4:67:cb:45:b7:ac:4e:77:c1:fd:5a:fd:4d:8e:23: 2c:38:07:3f:62:be:e5:04:44:d2:e2:f3:d5:e6:e3: c6:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:81:2F:9C:89:9F:59:3C:8E:2A:96:B6:69:62:E4:42:18:04:66:66 X509v3 Authority Key Identifier: keyid:05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/MIEvnImfWTyOKpa2aWLkQhgEZmY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:f1c0::/29 2a09:f9c0::/32 2a09:f9c2::/31 2a0e:4780::/29 2a0e:4bc1::-2a0e:4bc2:ffff:ffff:ffff:ffff:ffff:ffff 2a0e:5381::/32 2a0e:5643::/32 2a0e:5901::-2a0e:5902:ffff:ffff:ffff:ffff:ffff:ffff 2a0e:5cc0::-2a0e:5cc2:ffff:ffff:ffff:ffff:ffff:ffff 2a0e:7340::/29 2a0e:8080::/32 2a0e:b1c0::/29 2a0e:ccc0::-2a0e:ccc2:ffff:ffff:ffff:ffff:ffff:ffff 2a0e:ffc0::/29 2a0f:4340::/29 2a0f:6fc1::/32 2a0f:6fc3::-2a0f:6fc4:ffff:ffff:ffff:ffff:ffff:ffff 2a0f:b4c0::-2a0f:b4c2:ffff:ffff:ffff:ffff:ffff:ffff 2a0f:c080::/31 2a14:e602::/32 2a14:e604::/32 2a14:e606::/32 Signature Algorithm: sha256WithRSAEncryption 6c:4d:c0:00:c7:92:b6:e3:78:4f:53:57:2a:fc:f6:26:8d:fa: e9:ef:dc:99:75:0e:f7:c6:32:78:c8:c9:91:13:63:99:53:43: f1:de:70:86:e4:f0:3c:11:75:36:d5:4c:24:ad:77:a2:32:d8: c8:20:2e:86:3e:9e:d1:8d:2b:a0:00:82:ea:56:c2:dc:9e:df: 6e:db:e8:ac:b5:e1:a4:78:df:ce:d8:41:1d:ca:70:6d:4b:6a: 9e:c1:96:4b:9b:84:66:ac:47:7b:14:0a:7d:72:dd:8b:cd:ed: 9e:29:16:90:52:65:df:fd:c1:61:f3:f0:65:63:55:06:cf:67: 1c:90:a0:a2:66:82:62:66:1a:e0:cb:1c:2d:33:73:ec:75:78: 94:a1:fd:61:81:d6:c9:34:14:fa:03:9d:10:eb:b1:f9:90:7e: 2b:ce:72:37:7f:97:b8:ce:98:71:0c:16:17:61:f4:de:d2:32: 5a:09:49:c8:e9:a7:d2:d4:d8:5d:27:f4:5f:b8:f9:d7:d3:de: 69:33:ca:88:77:49:4c:23:43:db:60:54:9c:63:b1:db:79:11: 37:7e:b0:7e:23:ae:af:21:80:e2:c7:35:fc:13:22:c0:3d:82: 31:dc:f8:5c:b7:29:5b:2a:bb:93:c4:da:1c:c4:e9:61:bb:e2: b8:d8:48:4d -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgISAZt+OGOlCR0EkotpM5sNH/miMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZDRkNDlkYTNlMTQ4NTVhN2I4ODM2MDNmZjE0OGMxYmIy MWY2OTAwHhcNMjYwMTAyMTAxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDgxMmY5Yzg5OWY1OTNjOGUyYTk2YjY2OTYyZTQ0MjE4MDQ2NjY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOr5x6c/WcXGb33GBy4vaRiZjGha zviYUByF6vFtX4kmXfN+Ve56XWhic8AvHVc9hn8mQj78afPDmRlE5BjWeFQzOCmj dYvgOomvcbuxuhbMaibbVcwl7BOIYTottrQREFplgp/veWI1ACmoqe47kjHyA//f IIHoWHohjVEJ6FtIHt7931myX0UR/BgjA7UVOMNA3H2HF+sib3j3eda3A3xG9WRT wP4qM9PfEpepR5JaL7ER6/2x06KWWFp0d1lhDLL9JSzhvyer/m+mrFKapGRiX9W2 WLyaBBrtyBn095vUZ8tFt6xOd8H9Wv1NjiMsOAc/Yr7lBETS4vPV5uPGXQIDAQAB o4IC2DCCAtQwHQYDVR0OBBYEFDCBL5yJn1k8jiqWtmli5EIYBGZmMB8GA1UdIwQY MBaAFAXU1J2j4UhVp7iDYD/xSMG7IfaQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmRUVW5hUGhTRldudUlOZ1BfRkl3YnNoOXBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8xYTNmOTEtMTViYy00ZWI4LTk3ZGQt NThmMWNiZjNjYWMzLzEvTUlFdm5JbWZXVHlPS3BhMmFXTGtRaGdFWm1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8xYTNmOTEtMTViYy00ZWI4LTk3ZGQtNThmMWNiZjNjYWMz LzEvQmRUVW5hUGhTRldudUlOZ1BfRkl3YnNoOXBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHtBggrBgEFBQcBBwEB/wSB3TCB2jCB1wQCAAIwgdADBQMq CfHAAwUAKgn5wAMFASoJ+cIDBQMqDkeAMA4DBQAqDkvBAwUAKg5LwgMFACoOU4ED BQAqDlZDMA4DBQAqDlkBAwUAKg5ZAjAOAwUGKg5cwAMFACoOXMIDBQMqDnNAAwUA Kg6AgAMFAyoOscAwDgMFBioOzMADBQAqDszCAwUDKg7/wAMFAyoPQ0ADBQAqD2/B MA4DBQAqD2/DAwUAKg9vxDAOAwUGKg+0wAMFACoPtMIDBQEqD8CAAwUAKhTmAgMF ACoU5gQDBQAqFOYGMA0GCSqGSIb3DQEBCwUAA4IBAQBsTcAAx5K243hPU1cq/PYm jfrp79yZdQ73xjJ4yMmRE2OZU0Px3nCG5PA8EXU21UwkrXeiMtjIIC6GPp7RjSug AILqVsLcnt9u2+isteGkeN/O2EEdynBtS2qewZZLm4RmrEd7FAp9ct2Lze2eKRaQ UmXf/cFh8/BlY1UGz2cckKCiZoJiZhrgyxwtM3PsdXiUof1hgdbJNBT6A50Q67H5 kH4rznI3f5e4zphxDBYXYfTe0jJaCUnI6afS1NhdJ/RfuPnX095pM8qId0lMI0Pb YFScY7HbeRE3frB+I66vIYDixzX8EyLAPYIx3PhctylbKruTxNocxOlhu+K42EhN -----END CERTIFICATE-----Generated at Sun Jan 25 19:19:11 2026 by rpki-client