This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/m0MG-eJyS0zFzaAWWkTJJ5qGS-I.roa File: m0MG-eJyS0zFzaAWWkTJJ5qGS-I.roa (raw, json) Hash identifier: Iq+qXgVKWt2Kx6N9DmTJowNt5dRM8IzSViFs0l/+0uY= Subject key identifier: 9B:43:06:F9:E2:72:4B:4C:C5:CD:A0:16:5A:44:C9:27:9A:86:4B:E2 Certificate issuer: /CN=72d742616a68041f7f0fcd0792f38e4103a79dc2 Certificate serial: 019B78A36D1230AA599EB09626B344987F1B Authority key identifier: 72:D7:42:61:6A:68:04:1F:7F:0F:CD:07:92:F3:8E:41:03:A7:9D:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/m0MG-eJyS0zFzaAWWkTJJ5qGS-I.roa Signing time: Thu 01 Jan 2026 08:18:54 +0000 ROA not before: Thu 01 Jan 2026 08:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214083 IP address blocks: 2001:678:db4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:6d:12:30:aa:59:9e:b0:96:26:b3:44:98:7f:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72d742616a68041f7f0fcd0792f38e4103a79dc2 Validity Not Before: Jan 1 08:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b4306f9e2724b4cc5cda0165a44c9279a864be2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:1f:f2:88:ff:98:00:65:a9:a7:8a:d5:be:a7: 25:dd:98:40:d8:bd:18:ca:53:b7:23:08:cc:f9:7b: 80:d7:6d:17:8b:4e:37:6e:fb:28:4f:9a:83:09:a8: fc:04:bc:f1:dc:bc:44:80:80:0b:ad:cc:d6:80:79: 4d:91:5b:08:eb:c5:e4:93:bf:eb:e1:a0:34:9e:63: 17:2c:ed:12:d6:f8:77:90:1c:82:5e:44:b7:97:f5: 11:8a:b5:35:6c:b3:da:d4:75:c4:4c:6a:fb:86:0e: e1:9b:3a:e8:c2:7f:99:12:94:4f:38:96:aa:79:35: 14:91:74:ac:a6:16:10:53:78:ef:4c:30:b6:ff:1e: 7b:0e:10:2e:91:28:73:72:69:18:22:0f:50:ce:74: b5:a6:53:bc:55:33:dd:dd:36:7d:46:35:22:8e:c1: 71:82:ae:a5:33:7c:49:fc:d3:06:db:a5:1a:25:3a: 33:3c:2e:e0:15:8f:2c:a9:85:95:af:c0:0a:44:09: c1:f5:e8:51:db:5c:3d:a0:1b:52:1e:50:d4:ba:ad: 66:35:57:d6:ba:4f:92:9c:ce:ae:a5:f3:08:5d:ab: a1:72:80:66:75:09:c1:f5:da:c6:c8:64:74:47:90: 69:60:35:90:91:70:a7:0a:e5:e4:6d:6b:04:db:8c: e3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:43:06:F9:E2:72:4B:4C:C5:CD:A0:16:5A:44:C9:27:9A:86:4B:E2 X509v3 Authority Key Identifier: keyid:72:D7:42:61:6A:68:04:1F:7F:0F:CD:07:92:F3:8E:41:03:A7:9D:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/m0MG-eJyS0zFzaAWWkTJJ5qGS-I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:db4::/48 Signature Algorithm: sha256WithRSAEncryption 56:c8:a7:d7:55:0d:f4:ec:9b:4e:d4:2b:e6:45:8e:c7:a2:91: e5:ea:d9:6e:48:eb:89:44:ec:04:0b:63:5b:fa:39:09:fe:6f: dd:24:44:c6:d2:c1:ab:3a:62:8c:3f:e8:87:87:84:67:21:82: 41:fa:e4:4a:a8:9b:e7:27:db:86:d0:61:90:7c:20:12:5d:eb: 2d:5f:46:37:21:cf:09:88:cc:d4:84:76:ed:c8:42:94:c3:e0: d2:c9:d2:8d:b3:8f:39:06:b3:88:28:37:2b:4d:a9:e4:e8:28: 2e:88:d5:6e:87:fc:9b:da:a1:a1:af:90:1a:6e:be:0d:e7:d2: e6:c2:48:30:5e:ce:3e:c8:26:d8:42:f5:aa:38:6a:f5:5a:66: fa:45:9e:2d:cc:d8:c9:b9:4d:37:8b:07:c5:88:ac:7a:13:f3: e8:2b:fd:0c:ef:43:72:9c:fe:4a:b9:ad:2e:ef:c8:f4:62:85: 2a:cb:69:69:56:76:5e:65:d9:d4:ca:9d:01:2f:a7:4d:71:20: 22:31:78:a9:2c:32:5c:7a:06:2e:a7:bd:ae:f8:cd:1c:81:25: 9e:3d:59:85:36:53:39:bc:fa:5c:82:df:6f:ec:0f:07:16:aa: 76:2b:2f:3a:7e:a7:34:79:d1:d4:af:4d:91:26:0c:92:03:76: 28:6a:d2:7a -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt4o20SMKpZnrCWJrNEmH8bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZDc0MjYxNmE2ODA0MWY3ZjBmY2QwNzkyZjM4ZTQxMDNh NzlkYzIwHhcNMjYwMTAxMDgxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjQzMDZmOWUyNzI0YjRjYzVjZGEwMTY1YTQ0YzkyNzlhODY0YmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4x/yiP+YAGWpp4rVvqcl3ZhA2L0Y ylO3IwjM+XuA120Xi043bvsoT5qDCaj8BLzx3LxEgIALrczWgHlNkVsI68Xkk7/r 4aA0nmMXLO0S1vh3kByCXkS3l/URirU1bLPa1HXETGr7hg7hmzrown+ZEpRPOJaq eTUUkXSsphYQU3jvTDC2/x57DhAukShzcmkYIg9QznS1plO8VTPd3TZ9RjUijsFx gq6lM3xJ/NMG26UaJTozPC7gFY8sqYWVr8AKRAnB9ehR21w9oBtSHlDUuq1mNVfW uk+SnM6upfMIXauhcoBmdQnB9drGyGR0R5BpYDWQkXCnCuXkbWsE24zjgQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJtDBvnicktMxc2gFlpEySeahkviMB8GA1UdIwQY MBaAFHLXQmFqaAQffw/NB5LzjkEDp53CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3RkQ1lXcG9CQjlfRDgwSGt2T09RUU9ubmNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8yYmJkMjEtZDE0Ny00Yzc4LThkMmUt YTIwOWI5MGYyN2Q5LzEvbTBNRy1lSnlTMHpGemFBV1drVEpKNXFHUy1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC8yYmJkMjEtZDE0Ny00Yzc4LThkMmUtYTIwOWI5MGYyN2Q5 LzEvY3RkQ1lXcG9CQjlfRDgwSGt2T09RUU9ubmNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA20 MA0GCSqGSIb3DQEBCwUAA4IBAQBWyKfXVQ307JtO1CvmRY7HopHl6tluSOuJROwE C2Nb+jkJ/m/dJETG0sGrOmKMP+iHh4RnIYJB+uRKqJvnJ9uG0GGQfCASXestX0Y3 Ic8JiMzUhHbtyEKUw+DSydKNs485BrOIKDcrTank6CguiNVuh/yb2qGhr5Aabr4N 59LmwkgwXs4+yCbYQvWqOGr1Wmb6RZ4tzNjJuU03iwfFiKx6E/PoK/0M70NynP5K ua0u78j0YoUqy2lpVnZeZdnUyp0BL6dNcSAiMXipLDJcegYup72u+M0cgSWePVmF NlM5vPpcgt9v7A8HFqp2Ky86fqc0edHUr02RJgySA3YoatJ6 -----END CERTIFICATE-----Generated at Sun Jan 25 16:09:29 2026 by rpki-client