This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/m_PpEyyAvYLnKjvZhlOvXK-I4ZQ.roa
File: m_PpEyyAvYLnKjvZhlOvXK-I4ZQ.roa (raw, json)
Hash identifier: CGzyhARdUayk5Rcj/oSQUQybGpjh4LHVdpnFc+0u73Y=
Subject key identifier: 9B:F3:E9:13:2C:80:BD:82:E7:2A:3B:D9:86:53:AF:5C:AF:88:E1:94
Certificate issuer: /CN=76f311ef1581a00e437cd704b6281ac8621afc56
Certificate serial: 019B7F822294C8EE37465847D97C265EE88A
Authority key identifier: 76:F3:11:EF:15:81:A0:0E:43:7C:D7:04:B6:28:1A:C8:62:1A:FC:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dvMR7xWBoA5DfNcEtigayGIa_FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/m_PpEyyAvYLnKjvZhlOvXK-I4ZQ.roa
Signing time: Fri 02 Jan 2026 16:19:53 +0000
ROA not before: Fri 02 Jan 2026 16:19:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 22634
IP address blocks: 2a04:7141::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/dvMR7xWBoA5DfNcEtigayGIa_FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/dvMR7xWBoA5DfNcEtigayGIa_FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dvMR7xWBoA5DfNcEtigayGIa_FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:82:22:94:c8:ee:37:46:58:47:d9:7c:26:5e:e8:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76f311ef1581a00e437cd704b6281ac8621afc56
Validity
Not Before: Jan 2 16:19:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9bf3e9132c80bd82e72a3bd98653af5caf88e194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cd:2f:07:7d:5f:6f:26:44:6b:32:99:c3:69:
6d:b0:3e:67:b5:aa:33:5f:f2:9c:ef:2d:3a:89:32:
54:73:75:34:58:ac:e4:97:13:a9:00:50:29:96:d4:
f5:94:ce:8c:bc:b9:62:f6:7a:25:d1:40:8b:c4:7b:
be:e9:d1:aa:59:fa:22:05:a1:c4:31:a9:23:de:3d:
9d:3f:2d:bd:41:7f:13:46:df:0a:c5:5d:c3:6f:88:
51:3a:ea:f4:e3:55:1f:e0:77:b6:db:7f:67:54:4b:
a1:07:e1:0e:a2:c6:9e:ec:35:59:8f:22:df:6f:03:
f9:34:dc:62:43:06:14:ae:db:05:7d:ca:0e:69:9d:
32:dc:fa:bc:11:2d:c4:b4:f3:2e:33:62:07:7a:75:
3b:70:7f:89:5d:27:73:8d:76:06:b4:28:67:47:db:
63:6e:27:c8:c4:22:88:35:45:e3:c8:8e:46:ea:67:
f5:c7:c2:85:5d:a8:d4:1c:2b:0b:4c:9e:24:04:1f:
13:43:22:b7:0b:92:06:aa:bc:52:e8:17:33:0d:3d:
e7:f9:c1:d9:3c:20:38:db:5f:6f:0e:2e:9b:29:b9:
bd:62:cb:38:09:cf:59:5d:c5:0f:26:7d:cc:83:ca:
4e:0a:76:30:a6:7b:dc:9b:c1:c2:11:2e:03:3b:cf:
07:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F3:E9:13:2C:80:BD:82:E7:2A:3B:D9:86:53:AF:5C:AF:88:E1:94
X509v3 Authority Key Identifier:
keyid:76:F3:11:EF:15:81:A0:0E:43:7C:D7:04:B6:28:1A:C8:62:1A:FC:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dvMR7xWBoA5DfNcEtigayGIa_FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/m_PpEyyAvYLnKjvZhlOvXK-I4ZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/dvMR7xWBoA5DfNcEtigayGIa_FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:7141::/36
Signature Algorithm: sha256WithRSAEncryption
16:ae:a7:9d:f9:e2:44:2a:46:7b:b0:d3:94:5d:9f:30:98:a5:
17:88:3f:53:56:bd:41:d4:f8:b1:9d:14:d1:01:f6:4a:f0:a4:
90:83:5b:98:37:50:58:9a:d9:c9:1e:06:9b:15:81:7f:18:57:
e1:24:9d:2f:b7:c4:9e:c2:65:aa:8b:de:8f:91:bf:ba:46:e2:
d8:12:b8:27:c6:a6:4b:c4:ce:de:94:33:f3:a1:59:ee:90:10:
63:9c:e1:de:50:dc:81:28:4b:46:56:db:17:1b:42:09:65:f8:
34:62:1e:30:8a:e9:9a:88:6b:c0:7a:7b:5d:21:69:bf:b0:88:
b1:2a:41:d6:97:dc:57:a4:77:de:cb:45:df:67:cc:2f:3b:f7:
a0:7a:73:ae:6c:60:5b:5b:cd:1b:5e:4a:ec:7d:aa:62:e2:62:
2e:bd:be:f9:62:2a:38:94:f2:32:ae:62:6c:d0:f3:86:2d:0f:
5e:ce:c6:d2:4b:be:eb:61:ba:6d:50:b4:a7:de:7d:5b:e7:f8:
b8:e7:00:b6:5d:33:dc:b4:dd:c0:8f:27:6f:2c:d7:59:ff:d5:
73:f4:3c:45:95:ba:13:c3:1a:d9:bd:12:6f:75:5e:33:cc:82:
7a:22:57:db:9c:f1:0e:55:16:26:95:a5:32:0f:7d:1e:5c:fa:
10:e8:f0:57
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZt/giKUyO43RlhH2XwmXuiKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2ZjMxMWVmMTU4MWEwMGU0MzdjZDcwNGI2MjgxYWM4NjIx
YWZjNTYwHhcNMjYwMTAyMTYxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YmYzZTkxMzJjODBiZDgyZTcyYTNiZDk4NjUzYWY1Y2FmODhlMTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyc0vB31fbyZEazKZw2ltsD5ntaoz
X/Kc7y06iTJUc3U0WKzklxOpAFApltT1lM6MvLli9nol0UCLxHu+6dGqWfoiBaHE
Makj3j2dPy29QX8TRt8KxV3Db4hROur041Uf4He2239nVEuhB+EOosae7DVZjyLf
bwP5NNxiQwYUrtsFfcoOaZ0y3Pq8ES3EtPMuM2IHenU7cH+JXSdzjXYGtChnR9tj
bifIxCKINUXjyI5G6mf1x8KFXajUHCsLTJ4kBB8TQyK3C5IGqrxS6BczDT3n+cHZ
PCA4219vDi6bKbm9Yss4Cc9ZXcUPJn3Mg8pOCnYwpnvcm8HCES4DO88HDwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFJvz6RMsgL2C5yo72YZTr1yviOGUMB8GA1UdIwQY
MBaAFHbzEe8VgaAOQ3zXBLYoGshiGvxWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHZNUjd4V0JvQTVEZk5jRXRpZ2F5R0lhX0ZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS81MjUyMjQtNzhlYS00OWU0LTk3NDkt
MTY5NDMxMjk2YzU5LzEvbV9QcEV5eUF2WUxuS2p2WmhsT3ZYSy1JNFpRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS81MjUyMjQtNzhlYS00OWU0LTk3NDktMTY5NDMxMjk2YzU5
LzEvZHZNUjd4V0JvQTVEZk5jRXRpZ2F5R0lhX0ZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKgRxQQAw
DQYJKoZIhvcNAQELBQADggEBABaup5354kQqRnuw05RdnzCYpReIP1NWvUHU+LGd
FNEB9krwpJCDW5g3UFia2ckeBpsVgX8YV+EknS+3xJ7CZaqL3o+Rv7pG4tgSuCfG
pkvEzt6UM/OhWe6QEGOc4d5Q3IEoS0ZW2xcbQgll+DRiHjCK6ZqIa8B6e10hab+w
iLEqQdaX3Fekd97LRd9nzC8796B6c65sYFtbzRteSux9qmLiYi69vvliKjiU8jKu
YmzQ84YtD17OxtJLvuthum1QtKfefVvn+LjnALZdM9y03cCPJ28s11n/1XP0PEWV
uhPDGtm9Em91XjPMgnoiV9uc8Q5VFiaVpTIPfR5c+hDo8Fc=
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:31:46 2026 by rpki-client