This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/MFZV6XuNVW4uzo7Tb4imPHBAW_0.roa File: MFZV6XuNVW4uzo7Tb4imPHBAW_0.roa (raw, json) Hash identifier: B/sFK7YNvW7W62auQfe+btUk5i3m3zDaD4jDBobilWo= Subject key identifier: 30:56:55:E9:7B:8D:55:6E:2E:CE:8E:D3:6F:88:A6:3C:70:40:5B:FD Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Certificate serial: 019B77C77A21F8084D1859B278CB5345E0D5 Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/MFZV6XuNVW4uzo7Tb4imPHBAW_0.roa Signing time: Thu 01 Jan 2026 04:18:40 +0000 ROA not before: Thu 01 Jan 2026 04:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51101 IP address blocks: 2a00:4120:8000:c::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:7a:21:f8:08:4d:18:59:b2:78:cb:53:45:e0:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Validity Not Before: Jan 1 04:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=305655e97b8d556e2ece8ed36f88a63c70405bfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fa:b8:76:b8:9d:76:a1:a7:97:d8:25:14:d0: 5b:da:ac:87:4c:00:0e:05:f2:cd:fa:d0:7e:55:9c: b6:2a:b5:61:75:9b:28:9c:18:85:6d:d2:59:e1:91: 11:db:7c:79:c2:86:70:e4:33:84:df:88:11:7c:33: 72:50:ca:a1:ab:1f:25:1a:52:51:08:e3:cb:49:aa: 1a:b1:b2:df:db:13:cb:ab:d5:0b:97:37:77:f6:8c: 44:0e:a3:e9:26:06:4a:35:2f:03:09:a0:a3:54:69: fb:ae:3f:bc:0b:8a:f6:17:c5:db:43:ec:05:48:78: 80:5e:22:1f:c4:2c:98:af:94:80:11:52:85:28:08: f4:0f:89:84:7a:cb:dd:8b:5b:34:b6:6a:53:50:67: 0c:f5:2a:08:4b:3c:7f:e5:d5:a9:15:3f:f3:77:59: 33:e9:08:d1:cd:2c:19:23:8d:31:22:51:88:dc:ff: a4:7a:84:39:01:92:6e:b8:5f:f1:27:4e:0b:12:b5: 52:e5:56:e2:e2:23:11:b1:4f:39:fc:16:2e:94:8d: c9:e9:8f:29:94:96:58:fe:27:a3:25:3f:1e:9f:43: 4d:f8:9a:3e:67:6f:3c:84:31:cc:92:26:c9:8b:d2: 85:09:d0:da:67:f7:52:36:4a:5d:37:d9:eb:d5:db: b0:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:56:55:E9:7B:8D:55:6E:2E:CE:8E:D3:6F:88:A6:3C:70:40:5B:FD X509v3 Authority Key Identifier: keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/MFZV6XuNVW4uzo7Tb4imPHBAW_0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:4120:8000:c::/64 Signature Algorithm: sha256WithRSAEncryption af:71:cd:b5:b2:c4:54:06:da:03:8a:a3:63:a2:e4:e8:24:f9: da:a2:10:35:89:01:71:9f:02:aa:92:b7:73:c3:42:d6:88:bc: 4d:0e:76:92:37:5f:1a:1d:8e:09:fb:14:f8:27:d0:64:39:72: 61:e7:f4:92:6c:d2:5e:65:6a:94:d8:c7:fc:1d:11:9e:5c:07: 91:c6:8a:b9:18:cf:06:d0:35:7b:4b:de:47:5a:f5:ea:07:98: 3c:fa:00:e0:e2:03:0f:4b:b2:2e:b4:dd:76:db:29:9c:5f:d4: f5:fd:87:84:8f:de:f5:07:17:b9:ef:cb:ca:7c:8e:08:16:b1: 63:2b:69:7d:a6:e1:a1:80:f1:a0:fe:70:3d:b4:61:d3:b6:cd: d1:89:be:03:4d:fe:17:48:8e:10:41:9b:d9:9c:19:0f:62:9d: 6e:94:dd:d5:ae:b9:da:40:01:42:1c:8f:45:65:ad:b5:99:fb: 91:9a:94:c7:44:3a:0e:d3:91:89:60:d9:43:4e:e4:96:f8:01: 7b:cf:3c:b3:1e:04:50:ef:a3:a5:5e:2a:f6:f9:5d:d2:ff:fc: 2a:08:fc:7b:29:f8:9c:6e:9f:40:34:22:54:d4:7c:28:44:c0: 92:eb:78:3a:54:40:47:f2:e8:ad:1b:c8:26:3b:75:5a:a3:08: 5b:43:e8:c4 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgISAZt3x3oh+AhNGFmyeMtTReDVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj MmQ3NmIwHhcNMjYwMTAxMDQxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDU2NTVlOTdiOGQ1NTZlMmVjZThlZDM2Zjg4YTYzYzcwNDA1YmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvq4driddqGnl9glFNBb2qyHTAAO BfLN+tB+VZy2KrVhdZsonBiFbdJZ4ZER23x5woZw5DOE34gRfDNyUMqhqx8lGlJR COPLSaoasbLf2xPLq9ULlzd39oxEDqPpJgZKNS8DCaCjVGn7rj+8C4r2F8XbQ+wF SHiAXiIfxCyYr5SAEVKFKAj0D4mEesvdi1s0tmpTUGcM9SoISzx/5dWpFT/zd1kz 6QjRzSwZI40xIlGI3P+keoQ5AZJuuF/xJ04LErVS5Vbi4iMRsU85/BYulI3J6Y8p lJZY/iejJT8en0NN+Jo+Z288hDHMkibJi9KFCdDaZ/dSNkpdN9nr1duwDwIDAQAB o4ICDjCCAgowHQYDVR0OBBYEFDBWVel7jVVuLs6O02+IpjxwQFv9MB8GA1UdIwQY MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt NTI3NjZiMjRiYWE0LzEvTUZaVjZYdU5WVzR1em83VGI0aW1QSEJBV18wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0 LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAKgBBIIAA AAwwDQYJKoZIhvcNAQELBQADggEBAK9xzbWyxFQG2gOKo2Oi5Ogk+dqiEDWJAXGf AqqSt3PDQtaIvE0OdpI3Xxodjgn7FPgn0GQ5cmHn9JJs0l5lapTYx/wdEZ5cB5HG irkYzwbQNXtL3kda9eoHmDz6AODiAw9Lsi603XbbKZxf1PX9h4SP3vUHF7nvy8p8 jggWsWMraX2m4aGA8aD+cD20YdO2zdGJvgNN/hdIjhBBm9mcGQ9inW6U3dWuudpA AUIcj0VlrbWZ+5GalMdEOg7TkYlg2UNO5Jb4AXvPPLMeBFDvo6VeKvb5XdL//CoI /Hsp+Jxun0A0IlTUfChEwJLreDpUQEfy6K0byCY7dVqjCFtD6MQ= -----END CERTIFICATE-----Generated at Mon Jan 26 03:56:57 2026 by rpki-client