This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/mkQb5astOXlF9aqqEzzgXK8P4sE.roa File: mkQb5astOXlF9aqqEzzgXK8P4sE.roa (raw, json) Hash identifier: hQAMPQuYpMvhUOw6tcbiYvo2RyId0JQGIKuqDGNYqaE= Subject key identifier: 9A:44:1B:E5:AB:2D:39:79:45:F5:AA:AA:13:3C:E0:5C:AF:0F:E2:C1 Certificate issuer: /CN=259490c5dbcfbf590da33bfbd37970a0763469c9 Certificate serial: 019B7C110E3217E78420AC4698739A26FC0B Authority key identifier: 25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/mkQb5astOXlF9aqqEzzgXK8P4sE.roa Signing time: Fri 02 Jan 2026 00:17:31 +0000 ROA not before: Fri 02 Jan 2026 00:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214868 IP address blocks: 2a09:be41::/32 maxlen: 48 2a09:be42::/32 maxlen: 48 2a09:be43::/32 maxlen: 48 2a09:be44::/32 maxlen: 48 2a09:be45::/32 maxlen: 48 2a09:be46::/32 maxlen: 48 2a09:be47::/32 maxlen: 48 2a12:49c0::/29 maxlen: 48 2a12:49c0::/32 maxlen: 48 2a12:49c1::/32 maxlen: 48 2a12:49c2::/32 maxlen: 48 2a12:49c3::/32 maxlen: 48 2a12:49c4::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.crl rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:0e:32:17:e7:84:20:ac:46:98:73:9a:26:fc:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=259490c5dbcfbf590da33bfbd37970a0763469c9 Validity Not Before: Jan 2 00:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a441be5ab2d397945f5aaaa133ce05caf0fe2c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:82:49:00:c0:5a:2e:54:c7:b8:f1:81:90:26: 98:87:37:9b:7e:84:19:ad:65:8f:44:29:e5:c7:97: c4:63:a1:8f:ad:3d:b5:70:85:cf:e2:d1:73:6a:05: e9:bc:f6:4f:6a:93:24:34:2f:15:41:c9:52:6f:b7: ee:18:5c:3f:c9:8c:50:ab:bb:02:4c:ca:c3:9d:43: cb:bc:04:0c:36:1f:3b:7e:04:65:6f:b5:e2:d6:18: 49:35:56:33:78:ed:e3:9e:00:f7:59:16:6b:b7:eb: 93:9d:06:ef:af:d7:90:8f:a3:ee:78:5a:53:2e:8e: c4:8f:9c:b6:6d:81:9a:cc:3c:d4:a3:24:45:03:cc: ef:cb:60:eb:ec:89:1c:cc:e3:c5:0c:da:56:cf:08: 92:95:a0:e7:87:72:0c:9c:9b:bb:9d:f5:33:3a:c2: a9:a1:ea:29:ba:c5:5c:48:89:e4:40:fd:f6:08:e9: bf:b7:95:71:54:c2:2b:75:03:c5:95:e5:b2:73:f4: 47:26:ed:d1:41:06:37:46:79:72:68:d0:28:2e:db: af:c8:d3:56:b9:50:a7:21:fe:a3:7c:ef:26:e7:02: fa:27:37:eb:88:8e:2f:2b:e9:03:34:c8:6a:75:bd: e8:58:47:1b:44:17:02:72:18:49:2a:72:df:bb:f2: 07:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:44:1B:E5:AB:2D:39:79:45:F5:AA:AA:13:3C:E0:5C:AF:0F:E2:C1 X509v3 Authority Key Identifier: keyid:25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/mkQb5astOXlF9aqqEzzgXK8P4sE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:be41::-2a09:be47:ffff:ffff:ffff:ffff:ffff:ffff 2a12:49c0::/29 Signature Algorithm: sha256WithRSAEncryption 28:d5:bb:cb:e3:ab:98:ce:5b:6b:e0:3f:61:f4:06:69:d7:28: 81:7c:41:00:9c:96:95:2b:fa:03:3f:f9:2e:13:b8:fc:c1:ee: e9:88:f4:ae:52:85:43:89:ab:0e:61:84:ab:d2:2d:87:af:ae: d8:c6:60:f6:71:80:2b:28:45:10:ae:a7:13:f8:b5:a8:be:78: b7:31:a6:61:40:d0:7a:c4:36:a1:24:b9:4e:40:b9:ce:74:b9: 88:51:50:3e:c7:0e:1b:7f:00:b1:f4:5f:e5:ad:6c:58:f3:4f: f2:09:69:94:ab:c3:37:f0:11:db:f7:47:45:c8:22:bf:8b:85: 16:a3:e4:03:7e:a7:cc:a2:1e:e8:d4:f2:fb:6f:7e:d7:08:25: fb:b5:1e:3b:88:2c:d8:c8:c3:ec:71:86:35:66:a3:ea:5f:8c: 78:82:28:ea:47:fb:66:a1:a3:c7:02:31:fd:7a:ac:a7:92:5a: d7:2c:6e:76:4a:93:0b:35:43:a7:84:ae:03:45:88:3a:c1:c1: c2:ab:a7:f4:e4:3b:41:83:30:22:94:3e:62:f5:ef:81:b3:5b: 20:f3:24:0a:40:70:91:f1:7f:d8:ba:e6:aa:d3:3a:94:ec:24: 21:45:b3:f1:cc:19:17:34:9e:c1:81:1e:a2:07:ab:2e:30:a5: 93:34:e0:39 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt8EQ4yF+eEIKxGmHOaJvwLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1OTQ5MGM1ZGJjZmJmNTkwZGEzM2JmYmQzNzk3MGEwNzYz NDY5YzkwHhcNMjYwMTAyMDAxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTQ0MWJlNWFiMmQzOTc5NDVmNWFhYWExMzNjZTA1Y2FmMGZlMmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4JJAMBaLlTHuPGBkCaYhzebfoQZ rWWPRCnlx5fEY6GPrT21cIXP4tFzagXpvPZPapMkNC8VQclSb7fuGFw/yYxQq7sC TMrDnUPLvAQMNh87fgRlb7Xi1hhJNVYzeO3jngD3WRZrt+uTnQbvr9eQj6PueFpT Lo7Ej5y2bYGazDzUoyRFA8zvy2Dr7IkczOPFDNpWzwiSlaDnh3IMnJu7nfUzOsKp oeopusVcSInkQP32COm/t5VxVMIrdQPFleWyc/RHJu3RQQY3RnlyaNAoLtuvyNNW uVCnIf6jfO8m5wL6JzfriI4vK+kDNMhqdb3oWEcbRBcCchhJKnLfu/IHZQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFJpEG+WrLTl5RfWqqhM84FyvD+LBMB8GA1UdIwQY MBaAFCWUkMXbz79ZDaM7+9N5cKB2NGnJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlpTUXhkdlB2MWtOb3p2NzAzbHdvSFkwYWNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9lZGFkMmQtOTVjYy00OWQwLTg2ZjQt M2NlM2NmOGIxYzQ5LzEvbWtRYjVhc3RPWGxGOWFxcUV6emdYSzhQNHNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9lZGFkMmQtOTVjYy00OWQwLTg2ZjQtM2NlM2NmOGIxYzQ5 LzEvSlpTUXhkdlB2MWtOb3p2NzAzbHdvSFkwYWNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAdBAIAAjAXMA4DBQAqCb5B AwUDKgm+QAMFAyoSScAwDQYJKoZIhvcNAQELBQADggEBACjVu8vjq5jOW2vgP2H0 BmnXKIF8QQCclpUr+gM/+S4TuPzB7umI9K5ShUOJqw5hhKvSLYevrtjGYPZxgCso RRCupxP4tai+eLcxpmFA0HrENqEkuU5Auc50uYhRUD7HDht/ALH0X+WtbFjzT/IJ aZSrwzfwEdv3R0XIIr+LhRaj5AN+p8yiHujU8vtvftcIJfu1HjuILNjIw+xxhjVm o+pfjHiCKOpH+2aho8cCMf16rKeSWtcsbnZKkws1Q6eErgNFiDrBwcKrp/TkO0GD MCKUPmL174GzWyDzJApAcJHxf9i65qrTOpTsJCFFs/HMGRc0nsGBHqIHqy4wpZM0 4Dk= -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:14 2026 by rpki-client