This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/mgOOOuVNV7MiGLp-CEOWEBJLcvg.roa File: mgOOOuVNV7MiGLp-CEOWEBJLcvg.roa (raw, json) Hash identifier: Hpy4oqYgeXBaWnETXpdB+jmt4iNAOroBspo32HVLQVQ= Subject key identifier: 9A:03:8E:3A:E5:4D:57:B3:22:18:BA:7E:08:43:96:10:12:4B:72:F8 Certificate issuer: /CN=544194f8249773d3cd6fb654b239de769c42e864 Certificate serial: 019B76EAC4AF32E177763A6B45065F1BCBFE Authority key identifier: 54:41:94:F8:24:97:73:D3:CD:6F:B6:54:B2:39:DE:76:9C:42:E8:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/mgOOOuVNV7MiGLp-CEOWEBJLcvg.roa Signing time: Thu 01 Jan 2026 00:17:35 +0000 ROA not before: Thu 01 Jan 2026 00:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6206 IP address blocks: 2001:678:730::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.mft rsync://rpki.ripe.net/repository/DEFAULT/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:c4:af:32:e1:77:76:3a:6b:45:06:5f:1b:cb:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=544194f8249773d3cd6fb654b239de769c42e864 Validity Not Before: Jan 1 00:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a038e3ae54d57b32218ba7e08439610124b72f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ae:b7:39:f8:06:39:18:3c:9b:cb:8b:42:fc: 99:7f:84:dd:3f:a8:ca:5f:9a:d2:22:0b:1e:66:cd: ca:c2:19:4e:73:0e:8a:c0:6f:00:62:b6:ea:38:e8: 13:7e:01:45:6b:00:33:8a:93:6c:ea:48:c3:aa:27: 7e:c5:00:c1:3e:71:93:01:d6:d1:e6:ce:e3:2f:2f: bd:82:c2:e6:77:55:5e:5d:3d:53:e8:10:27:57:07: 89:16:23:35:11:3c:0e:4b:cb:39:e8:5e:63:6d:32: 53:a6:7c:f7:1f:6c:7a:76:e2:a8:8d:95:77:c6:9c: 76:98:e1:94:a7:3b:f8:7d:b9:21:6d:4a:a5:16:35: b0:ba:7b:a5:20:80:6f:32:44:7d:f9:a2:36:40:cb: bd:87:c6:b1:6e:33:0c:1c:3d:16:10:31:03:c8:2a: 10:bd:7a:96:72:d6:12:49:66:21:4e:e5:0e:3b:01: 00:5a:33:05:8d:fe:99:70:9e:06:63:d5:00:6c:76: aa:65:17:5b:ba:83:e2:1f:cd:fa:42:7b:69:d3:0f: de:87:18:86:6a:6c:c7:71:81:9a:4c:20:bc:f0:b8: 67:12:0f:21:db:f3:7d:24:9d:f6:9a:a7:94:be:3e: a6:ca:a6:6f:34:2c:ac:a3:01:4b:c9:c9:97:22:08: b3:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:03:8E:3A:E5:4D:57:B3:22:18:BA:7E:08:43:96:10:12:4B:72:F8 X509v3 Authority Key Identifier: keyid:54:41:94:F8:24:97:73:D3:CD:6F:B6:54:B2:39:DE:76:9C:42:E8:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/mgOOOuVNV7MiGLp-CEOWEBJLcvg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:730::/48 Signature Algorithm: sha256WithRSAEncryption 58:eb:10:2e:37:0d:fd:1d:0d:06:e6:11:f2:9a:bd:ed:1a:7b: b3:18:a5:6b:e8:a6:fb:bf:a8:68:4b:95:e8:42:a1:f2:c5:f9: bf:16:c3:63:9c:2e:d9:c9:a1:10:ea:fd:9d:be:cf:9a:54:71: 98:90:a8:17:28:6b:86:29:65:d3:68:03:9d:04:f0:35:8b:b8: 97:c0:ac:6e:8e:ad:2e:0a:30:eb:15:02:57:81:fb:bf:60:e4: 96:bc:de:1a:06:72:b3:fd:e1:43:91:66:b6:c0:d1:f4:45:e3: 76:9b:4b:c4:82:1b:6e:02:7d:2c:45:e5:be:4b:3b:43:27:0d: 8d:11:aa:25:19:6e:d3:10:62:c6:da:c3:e9:60:27:7e:73:a3: 6b:77:f3:7f:7d:06:40:1b:d3:78:77:b8:b5:7e:52:93:92:39: 60:7a:ba:aa:b3:d7:59:39:63:13:74:16:30:61:fb:ee:fc:8a: e2:ba:9b:12:a3:16:03:e4:03:25:1b:38:2b:39:f2:3f:e7:28: 2e:26:6a:1e:3f:14:60:15:e6:9d:24:93:22:b6:81:1b:f3:2a: a0:52:77:52:f1:e4:f7:05:43:82:07:4e:a7:c2:5c:e8:16:cc: 0f:f3:ba:96:a8:2b:b6:80:7e:0d:da:64:fe:e6:5b:cf:23:8b: 9c:4c:1b:50 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt26sSvMuF3djprRQZfG8v+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NDE5NGY4MjQ5NzczZDNjZDZmYjY1NGIyMzlkZTc2OWM0 MmU4NjQwHhcNMjYwMTAxMDAxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTAzOGUzYWU1NGQ1N2IzMjIxOGJhN2UwODQzOTYxMDEyNGI3MmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0663OfgGORg8m8uLQvyZf4TdP6jK X5rSIgseZs3KwhlOcw6KwG8AYrbqOOgTfgFFawAzipNs6kjDqid+xQDBPnGTAdbR 5s7jLy+9gsLmd1VeXT1T6BAnVweJFiM1ETwOS8s56F5jbTJTpnz3H2x6duKojZV3 xpx2mOGUpzv4fbkhbUqlFjWwunulIIBvMkR9+aI2QMu9h8axbjMMHD0WEDEDyCoQ vXqWctYSSWYhTuUOOwEAWjMFjf6ZcJ4GY9UAbHaqZRdbuoPiH836Qntp0w/ehxiG amzHcYGaTCC88LhnEg8h2/N9JJ32mqeUvj6myqZvNCysowFLycmXIgizdQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJoDjjrlTVezIhi6fghDlhASS3L4MB8GA1UdIwQY MBaAFFRBlPgkl3PTzW+2VLI53nacQuhkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkVHVS1DU1hjOVBOYjdaVXNqbmVkcHhDNkdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9kZDFlYTYtY2NiZi00ZGYxLTkyZWYt ZDYxZGYzM2M0MzFiLzEvbWdPT091Vk5WN01pR0xwLUNFT1dFQkpMY3ZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9kZDFlYTYtY2NiZi00ZGYxLTkyZWYtZDYxZGYzM2M0MzFi LzEvVkVHVS1DU1hjOVBOYjdaVXNqbmVkcHhDNkdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAcw MA0GCSqGSIb3DQEBCwUAA4IBAQBY6xAuNw39HQ0G5hHymr3tGnuzGKVr6Kb7v6ho S5XoQqHyxfm/FsNjnC7ZyaEQ6v2dvs+aVHGYkKgXKGuGKWXTaAOdBPA1i7iXwKxu jq0uCjDrFQJXgfu/YOSWvN4aBnKz/eFDkWa2wNH0ReN2m0vEghtuAn0sReW+SztD Jw2NEaolGW7TEGLG2sPpYCd+c6Nrd/N/fQZAG9N4d7i1flKTkjlgerqqs9dZOWMT dBYwYfvu/IriupsSoxYD5AMlGzgrOfI/5yguJmoePxRgFeadJJMitoEb8yqgUndS 8eT3BUOCB06nwlzoFswP87qWqCu2gH4N2mT+5lvPI4ucTBtQ -----END CERTIFICATE-----Generated at Sun Jan 25 18:05:19 2026 by rpki-client