This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/mAZN186AZNftU_Zg2CXS4zTpCt4.roa File: mAZN186AZNftU_Zg2CXS4zTpCt4.roa (raw, json) Hash identifier: dTLe+Ec800fz9ppzyI+ChHfdMm/9zY/t5BE66vhSZbs= Subject key identifier: 98:06:4D:D7:CE:80:64:D7:ED:53:F6:60:D8:25:D2:E3:34:E9:0A:DE Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce Certificate serial: 019B7CEDFAE83E43B9AF9A12ABE8275F0515 Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/mAZN186AZNftU_Zg2CXS4zTpCt4.roa Signing time: Fri 02 Jan 2026 04:18:49 +0000 ROA not before: Fri 02 Jan 2026 04:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401363 IP address blocks: 2a0c:e643::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:fa:e8:3e:43:b9:af:9a:12:ab:e8:27:5f:05:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce Validity Not Before: Jan 2 04:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=98064dd7ce8064d7ed53f660d825d2e334e90ade Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7b:9f:44:29:f7:27:ff:d0:c3:a5:fc:3b:a5: 36:00:a3:f5:36:7c:83:23:49:17:10:a5:37:ce:ff: 07:14:93:a6:1b:83:a8:fb:ea:09:8c:2f:ab:a6:00: 45:de:a9:40:32:00:10:61:1b:8d:e3:01:1f:46:46: 91:ed:e0:cf:aa:a5:52:1c:69:6d:4e:9d:3a:be:df: 17:5d:b2:16:c5:91:76:58:21:74:64:b5:fb:5f:f1: 22:69:ce:15:9e:af:23:1d:14:56:f0:6f:72:bf:bf: 04:68:a3:51:3c:b4:bc:0c:2c:e5:4b:ca:6c:2c:64: 20:10:3d:fe:fd:ad:41:ed:7f:65:c7:55:3c:e0:3b: 1f:bf:a7:ce:c6:c7:08:7f:26:fe:38:42:51:37:a9: 2f:bc:16:3a:50:e9:26:91:fa:17:d7:d1:81:80:46: c6:78:c7:60:b8:cf:6c:26:6e:98:53:35:cb:48:a5: 78:59:06:d7:b2:eb:8d:cf:ce:f1:da:b0:97:70:87: 34:d9:f7:df:e1:c9:9b:98:c6:82:10:68:39:d9:30: 8d:0a:6a:7e:5e:6e:36:1f:c6:71:ee:a3:91:53:43: 57:53:9c:d7:7e:92:02:2b:2b:32:19:9f:78:f3:a5: 59:f6:05:a7:46:13:3b:15:b3:f6:6b:a2:6f:39:b3: f8:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:06:4D:D7:CE:80:64:D7:ED:53:F6:60:D8:25:D2:E3:34:E9:0A:DE X509v3 Authority Key Identifier: keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/mAZN186AZNftU_Zg2CXS4zTpCt4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:e643::/32 Signature Algorithm: sha256WithRSAEncryption 76:bb:dc:fb:ed:4c:8b:76:82:da:8a:91:f6:08:d7:91:ac:b4: d3:91:24:aa:e2:b8:33:4b:35:5f:58:f8:33:7f:e2:a4:4e:d0: 62:fa:5e:49:20:78:fd:fb:75:fc:76:e2:90:62:17:ba:11:60: ae:e8:46:86:bb:3d:cb:fe:4d:db:e4:a9:4a:a4:d6:55:48:94: 13:0a:89:9b:d3:5a:2a:03:b3:64:62:b9:fd:aa:cb:42:19:2d: b7:44:7e:02:f6:31:f2:51:d1:57:9a:07:0e:d9:8c:0c:d8:35: aa:19:7f:18:4b:15:0f:f3:ae:61:93:3e:11:c7:c8:f9:f4:23: 27:90:f4:fb:cd:e6:5c:a0:2e:b1:5c:e4:57:96:4f:4f:a0:63: 3f:04:90:e9:f9:f7:ce:8e:77:9c:73:af:8e:25:23:f3:8c:f7: f1:96:06:be:d5:5b:e6:c5:5b:bd:0b:39:59:bb:94:dd:a0:68: 97:ea:d5:00:b7:3c:51:c7:09:fa:4d:59:ae:ac:b3:0a:5f:b4: c9:b8:75:8a:a5:ef:7e:1c:e8:a9:6f:ca:65:8e:19:1c:f1:8f: 52:da:77:b9:bf:89:23:e7:4f:0c:a6:c6:4f:48:3f:5a:3d:ec: 1d:93:10:69:33:4a:96:77:b8:80:c7:46:79:07:bd:2e:fa:f9: 3a:5d:74:56 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt87froPkO5r5oSq+gnXwUVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczYzY5ZDA0NTgzNTAwYzVlZjgxMTM2ODMxMjM3NTkzZTBi Yjg2Y2UwHhcNMjYwMTAyMDQxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODA2NGRkN2NlODA2NGQ3ZWQ1M2Y2NjBkODI1ZDJlMzM0ZTkwYWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXufRCn3J//Qw6X8O6U2AKP1NnyD I0kXEKU3zv8HFJOmG4Oo++oJjC+rpgBF3qlAMgAQYRuN4wEfRkaR7eDPqqVSHGlt Tp06vt8XXbIWxZF2WCF0ZLX7X/Eiac4Vnq8jHRRW8G9yv78EaKNRPLS8DCzlS8ps LGQgED3+/a1B7X9lx1U84Dsfv6fOxscIfyb+OEJRN6kvvBY6UOkmkfoX19GBgEbG eMdguM9sJm6YUzXLSKV4WQbXsuuNz87x2rCXcIc02fff4cmbmMaCEGg52TCNCmp+ Xm42H8Zx7qORU0NXU5zXfpICKysyGZ9486VZ9gWnRhM7FbP2a6JvObP42QIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFJgGTdfOgGTX7VP2YNgl0uM06QreMB8GA1UdIwQY MBaAFHPGnQRYNQDF74ETaDEjdZPgu4bOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzhhZEJGZzFBTVh2Z1JOb01TTjFrLUM3aHM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82ZjZjZTItZTZlZS00ZTJhLTkwNWQt ZjljYjBhN2IyMDZjLzEvbUFaTjE4NkFaTmZ0VV9aZzJDWFM0elRwQ3Q0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC82ZjZjZTItZTZlZS00ZTJhLTkwNWQtZjljYjBhN2IyMDZj LzEvYzhhZEJGZzFBTVh2Z1JOb01TTjFrLUM3aHM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgzmQzAN BgkqhkiG9w0BAQsFAAOCAQEAdrvc++1Mi3aC2oqR9gjXkay005EkquK4M0s1X1j4 M3/ipE7QYvpeSSB4/ft1/HbikGIXuhFgruhGhrs9y/5N2+SpSqTWVUiUEwqJm9Na KgOzZGK5/arLQhktt0R+AvYx8lHRV5oHDtmMDNg1qhl/GEsVD/OuYZM+EcfI+fQj J5D0+83mXKAusVzkV5ZPT6BjPwSQ6fn3zo53nHOvjiUj84z38ZYGvtVb5sVbvQs5 WbuU3aBol+rVALc8UccJ+k1ZrqyzCl+0ybh1iqXvfhzoqW/KZY4ZHPGPUtp3ub+J I+dPDKbGT0g/Wj3sHZMQaTNKlne4gMdGeQe9Lvr5Ol10Vg== -----END CERTIFICATE-----Generated at Sun Jan 25 16:17:39 2026 by rpki-client