This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/MxSN252Rt46daJzmFnKjpDWsGI4.roa File: MxSN252Rt46daJzmFnKjpDWsGI4.roa (raw, json) Hash identifier: UgheYX57caiwV4IurgnGNzd/ol6yl6jaHGlsEwq1YIg= Subject key identifier: 33:14:8D:DB:9D:91:B7:8E:9D:68:9C:E6:16:72:A3:A4:35:AC:18:8E Certificate issuer: /CN=38203463eb944b25c65135ca47bdbdab646f3984 Certificate serial: 019B7B366E6535C7D80CAE21C97CBA14F069 Authority key identifier: 38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/MxSN252Rt46daJzmFnKjpDWsGI4.roa Signing time: Thu 01 Jan 2026 20:18:43 +0000 ROA not before: Thu 01 Jan 2026 20:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210266 IP address blocks: 2a00:8860:700::/40 maxlen: 64 2a00:8861:700::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:6e:65:35:c7:d8:0c:ae:21:c9:7c:ba:14:f0:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38203463eb944b25c65135ca47bdbdab646f3984 Validity Not Before: Jan 1 20:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=33148ddb9d91b78e9d689ce61672a3a435ac188e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:0a:d2:19:63:19:d3:b7:6d:e8:36:b2:52:5d: f3:39:4d:c9:be:f3:7c:b1:f8:21:eb:85:ef:0f:85: fc:f8:ee:09:ff:3f:06:1a:6a:d5:34:f1:8e:ff:ef: cc:84:4e:a7:3b:ff:61:b3:8e:7b:4a:d6:7d:b2:2d: 06:63:f2:62:83:dd:42:97:6a:b9:08:93:bb:97:56: 72:4b:1b:78:65:da:93:70:68:1c:e8:e9:05:f1:b9: 64:71:9c:8a:f6:36:15:5a:42:1b:e3:f2:ed:0a:4b: ec:e5:82:71:93:63:df:83:3d:57:20:b5:ca:d7:05: 11:db:b0:af:fa:b7:02:a7:56:21:4d:28:92:bf:b2: 82:ca:24:66:e4:d0:29:90:74:51:09:30:79:31:57: a7:cf:a0:68:bd:40:d8:20:c1:88:fe:40:83:6c:72: d5:2c:95:8d:dc:6c:f3:e2:39:ed:84:0b:1f:51:36: 3e:b5:46:d4:c0:aa:47:9f:42:a4:52:82:da:2e:40: 4d:be:3f:28:b6:cd:2d:c3:61:80:97:66:5f:e3:21: 08:9b:03:1c:ab:8e:af:c7:9c:10:53:bb:c0:9f:99: b4:bf:7a:a4:3b:6e:5a:df:68:20:bb:f1:1c:14:05: 5c:d2:09:72:2e:36:fc:8e:fd:c3:52:cd:5d:c3:96: 54:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:14:8D:DB:9D:91:B7:8E:9D:68:9C:E6:16:72:A3:A4:35:AC:18:8E X509v3 Authority Key Identifier: keyid:38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/MxSN252Rt46daJzmFnKjpDWsGI4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:8860:700::/40 2a00:8861:700::/40 Signature Algorithm: sha256WithRSAEncryption 66:b6:88:c5:65:d2:c8:aa:3b:4c:2c:4c:8d:40:ec:18:5a:39: ec:84:31:e6:85:ab:e5:57:f4:37:df:d2:67:cd:1d:59:35:cd: 05:e9:d0:62:01:ba:c9:96:d1:2d:a1:60:ca:6a:3f:72:d7:d2: ec:bc:aa:c3:20:2e:16:04:c1:fe:d7:c5:2e:55:dd:68:38:7a: d5:da:31:d9:5b:08:ef:f5:dd:5d:15:4c:27:8a:d3:8c:99:1a: 2c:7b:71:17:9c:67:61:66:70:c6:41:3b:53:72:10:f7:ff:a0: 2d:3b:38:9c:5f:88:e2:d3:3b:5d:f3:46:d1:a0:1e:24:58:79: cb:73:9c:fd:b0:28:33:55:b3:7d:b7:3e:bd:ac:ef:26:92:80: ed:75:f3:e4:cb:6e:76:53:0b:81:8a:a8:f1:eb:b1:97:eb:08: 59:d2:c7:b7:7c:b1:85:20:ed:76:fc:7a:06:f1:9f:42:a0:31: fa:ae:ad:dc:25:57:08:a1:05:1e:dd:65:b2:ea:92:7d:70:66: b9:bc:e4:c7:7e:c5:d0:dc:4b:e6:5b:bc:bf:c5:1a:ba:bd:2b: b6:07:59:73:32:bf:c9:df:9c:3c:f8:c8:57:ec:4a:ca:b7:da: 37:cb:67:45:ba:2e:3a:ff:d7:b5:b3:2f:0e:62:66:9d:74:e3: 7e:81:91:e7 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgISAZt7Nm5lNcfYDK4hyXy6FPBpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MjAzNDYzZWI5NDRiMjVjNjUxMzVjYTQ3YmRiZGFiNjQ2 ZjM5ODQwHhcNMjYwMTAxMjAxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzE0OGRkYjlkOTFiNzhlOWQ2ODljZTYxNjcyYTNhNDM1YWMxODhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ArSGWMZ07dt6DayUl3zOU3JvvN8 sfgh64XvD4X8+O4J/z8GGmrVNPGO/+/MhE6nO/9hs457StZ9si0GY/Jig91Cl2q5 CJO7l1ZySxt4ZdqTcGgc6OkF8blkcZyK9jYVWkIb4/LtCkvs5YJxk2Pfgz1XILXK 1wUR27Cv+rcCp1YhTSiSv7KCyiRm5NApkHRRCTB5MVenz6BovUDYIMGI/kCDbHLV LJWN3Gzz4jnthAsfUTY+tUbUwKpHn0KkUoLaLkBNvj8ots0tw2GAl2Zf4yEImwMc q46vx5wQU7vAn5m0v3qkO25a32ggu/EcFAVc0glyLjb8jv3DUs1dw5ZUpwIDAQAB o4ICEzCCAg8wHQYDVR0OBBYEFDMUjdudkbeOnWic5hZyo6Q1rBiOMB8GA1UdIwQY MBaAFDggNGPrlEslxlE1yke9vatkbzmEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8wYTI5ODQtYTg2OS00NDBkLWI1Nzgt NTg5MzUxNzliOTg1LzEvTXhTTjI1MlJ0NDZkYUp6bUZuS2pwRFdzR0k0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi8wYTI5ODQtYTg2OS00NDBkLWI1NzgtNTg5MzUxNzliOTg1 LzEvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQAwYAKgCIYAcD BgAqAIhhBzANBgkqhkiG9w0BAQsFAAOCAQEAZraIxWXSyKo7TCxMjUDsGFo57IQx 5oWr5Vf0N9/SZ80dWTXNBenQYgG6yZbRLaFgymo/ctfS7LyqwyAuFgTB/tfFLlXd aDh61dox2VsI7/XdXRVMJ4rTjJkaLHtxF5xnYWZwxkE7U3IQ9/+gLTs4nF+I4tM7 XfNG0aAeJFh5y3Oc/bAoM1Wzfbc+vazvJpKA7XXz5MtudlMLgYqo8euxl+sIWdLH t3yxhSDtdvx6BvGfQqAx+q6t3CVXCKEFHt1lsuqSfXBmubzkx37F0NxL5lu8v8Ua ur0rtgdZczK/yd+cPPjIV+xKyrfaN8tnRbouOv/XtbMvDmJmnXTjfoGR5w== -----END CERTIFICATE-----Generated at Mon Jan 26 02:14:08 2026 by rpki-client