This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/M3kEZhwNAZH2MoRits4PT4v1XYY.roa File: M3kEZhwNAZH2MoRits4PT4v1XYY.roa (raw, json) Hash identifier: 9BRevnCxVw2l/jCPOd7XDBAI+hID2up62MsIMKdFJLE= Subject key identifier: 33:79:04:66:1C:0D:01:91:F6:32:84:62:B6:CE:0F:4F:8B:F5:5D:86 Certificate issuer: /CN=fd21cb4baa15862d1b5773bf2be60ca5f4fc24d4 Certificate serial: 019B7C1117CCF7D91474C758DEBEFBF01E6F Authority key identifier: FD:21:CB:4B:AA:15:86:2D:1B:57:73:BF:2B:E6:0C:A5:F4:FC:24:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/M3kEZhwNAZH2MoRits4PT4v1XYY.roa Signing time: Fri 02 Jan 2026 00:17:33 +0000 ROA not before: Fri 02 Jan 2026 00:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208753 IP address blocks: 2a10:ba87:feef::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.crl rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft rsync://rpki.ripe.net/repository/DEFAULT/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:17:cc:f7:d9:14:74:c7:58:de:be:fb:f0:1e:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd21cb4baa15862d1b5773bf2be60ca5f4fc24d4 Validity Not Before: Jan 2 00:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=337904661c0d0191f6328462b6ce0f4f8bf55d86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:85:20:24:8d:3d:50:37:c0:57:05:f6:2b:e4: e1:8c:13:b2:f8:ef:d8:84:1d:ab:ca:e6:f0:7f:56: fe:25:f6:59:c6:a5:fb:b5:5c:e5:8f:ca:26:27:9c: 4c:17:a0:3d:14:8a:63:e4:ec:9b:90:64:7f:bd:3d: 48:fb:8d:ed:14:88:0c:21:f4:25:b8:6c:bf:b1:40: 01:30:27:47:5c:91:8e:30:41:51:fb:3c:25:8d:e1: e3:b7:bd:70:27:41:7d:f0:dc:5a:11:0d:49:dd:2e: dc:c1:a5:ca:97:84:a6:76:cf:58:4a:26:c0:06:a5: bc:66:ac:d7:70:bc:ed:21:e2:eb:48:51:f3:05:62: c4:0e:00:6d:3e:f3:57:c0:02:a7:73:3a:54:b3:0b: 5d:28:f3:30:a1:2c:62:76:93:2a:d6:b6:20:73:11: 7a:22:a6:40:6f:52:cc:ca:f3:67:94:fa:95:15:3f: d0:d4:03:9b:dc:80:d7:bf:14:1a:ec:aa:96:07:a6: f2:ec:3e:9c:d8:fb:ff:33:7b:6a:08:a8:df:68:cc: 53:8c:3b:99:7b:da:0c:60:40:09:77:b8:47:cf:f1: 31:71:57:72:60:30:e1:27:ac:14:7d:9a:d6:62:21: 4e:53:bd:73:48:5d:a3:e0:93:ef:ca:a6:f1:5f:12: 12:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:79:04:66:1C:0D:01:91:F6:32:84:62:B6:CE:0F:4F:8B:F5:5D:86 X509v3 Authority Key Identifier: keyid:FD:21:CB:4B:AA:15:86:2D:1B:57:73:BF:2B:E6:0C:A5:F4:FC:24:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/M3kEZhwNAZH2MoRits4PT4v1XYY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:ba87:feef::/48 Signature Algorithm: sha256WithRSAEncryption 6b:22:f4:12:22:5f:d7:12:ae:bd:2e:7c:8a:1b:d7:b1:3e:1c: 9c:8f:0c:6f:d9:30:38:bb:c9:f7:5f:4f:3e:6c:2a:71:15:e8: 9c:19:06:52:11:1a:07:57:72:b8:f1:76:72:d5:43:33:82:eb: 9c:9a:07:75:d5:59:d9:c8:8d:1d:ed:a3:88:a2:ae:a7:50:e0: 38:bc:de:6c:ed:3f:89:c0:65:7a:d0:46:0d:a4:f5:e3:d0:8b: 27:7d:da:be:b4:38:ce:39:34:47:88:d8:cb:b4:ae:5c:ce:2c: 95:e1:c3:21:92:8e:1d:7b:a9:62:b6:8c:40:78:cf:9d:a3:1c: 1c:d5:7c:8d:c8:1f:fb:3f:32:c9:92:b7:e0:65:1a:a4:70:e2: e5:79:5a:5c:88:41:d6:56:73:5c:ef:1b:96:93:b9:c9:ff:bb: 17:86:04:c6:19:d4:8e:05:7f:ee:84:0e:db:21:d5:3b:e7:c0: 39:98:52:83:c8:8b:94:8d:ce:51:6d:eb:f7:88:48:68:83:8e: 58:91:7a:21:bf:5f:d5:2b:8f:e6:66:14:de:d9:ec:77:be:c2: a2:47:da:43:95:33:a8:c3:2c:04:a7:7f:6f:01:8f:7d:cb:72: e2:ee:e3:e6:fc:f2:3b:33:f4:17:7d:29:67:4c:9d:47:54:98: 11:17:5c:b6 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8ERfM99kUdMdY3r778B5vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMjFjYjRiYWExNTg2MmQxYjU3NzNiZjJiZTYwY2E1ZjRm YzI0ZDQwHhcNMjYwMTAyMDAxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzc5MDQ2NjFjMGQwMTkxZjYzMjg0NjJiNmNlMGY0ZjhiZjU1ZDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9IUgJI09UDfAVwX2K+ThjBOy+O/Y hB2ryubwf1b+JfZZxqX7tVzlj8omJ5xMF6A9FIpj5OybkGR/vT1I+43tFIgMIfQl uGy/sUABMCdHXJGOMEFR+zwljeHjt71wJ0F98NxaEQ1J3S7cwaXKl4Smds9YSibA BqW8ZqzXcLztIeLrSFHzBWLEDgBtPvNXwAKnczpUswtdKPMwoSxidpMq1rYgcxF6 IqZAb1LMyvNnlPqVFT/Q1AOb3IDXvxQa7KqWB6by7D6c2Pv/M3tqCKjfaMxTjDuZ e9oMYEAJd7hHz/ExcVdyYDDhJ6wUfZrWYiFOU71zSF2j4JPvyqbxXxISlQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDN5BGYcDQGR9jKEYrbOD0+L9V2GMB8GA1UdIwQY MBaAFP0hy0uqFYYtG1dzvyvmDKX0/CTUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1NITFM2b1ZoaTBiVjNPX0stWU1wZlQ4Sk5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8zMjY2MDYtMTRiYS00NDM2LTk5ODUt YmU1NTIwYTVjODIxLzEvTTNrRVpod05BWkgyTW9SaXRzNFBUNHYxWFlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny8zMjY2MDYtMTRiYS00NDM2LTk5ODUtYmU1NTIwYTVjODIx LzEvX1NITFM2b1ZoaTBiVjNPX0stWU1wZlQ4Sk5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhC6h/7v MA0GCSqGSIb3DQEBCwUAA4IBAQBrIvQSIl/XEq69LnyKG9exPhycjwxv2TA4u8n3 X08+bCpxFeicGQZSERoHV3K48XZy1UMzguucmgd11VnZyI0d7aOIoq6nUOA4vN5s 7T+JwGV60EYNpPXj0Isnfdq+tDjOOTRHiNjLtK5cziyV4cMhko4de6litoxAeM+d oxwc1XyNyB/7PzLJkrfgZRqkcOLleVpciEHWVnNc7xuWk7nJ/7sXhgTGGdSOBX/u hA7bIdU758A5mFKDyIuUjc5Rbev3iEhog45YkXohv1/VK4/mZhTe2ex3vsKiR9pD lTOowywEp39vAY99y3Li7uPm/PI7M/QXfSlnTJ1HVJgRF1y2 -----END CERTIFICATE-----Generated at Sun Jan 25 17:34:33 2026 by rpki-client