This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/MNCcfOf0YS36WqFOiIyVG7kT7lw.roa File: MNCcfOf0YS36WqFOiIyVG7kT7lw.roa (raw, json) Hash identifier: xDxtOXtE08yNKWuVaze/oNgNsHgsu08VrPvfwX+Etss= Subject key identifier: 30:D0:9C:7C:E7:F4:61:2D:FA:5A:A1:4E:88:8C:95:1B:B9:13:EE:5C Certificate issuer: /CN=4384f6fa6decced5578a85a51e0bd65701ea34ec Certificate serial: 019B7DCB1F8DA6B120CC7BF2DE82C1835E38 Authority key identifier: 43:84:F6:FA:6D:EC:CE:D5:57:8A:85:A5:1E:0B:D6:57:01:EA:34:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/MNCcfOf0YS36WqFOiIyVG7kT7lw.roa Signing time: Fri 02 Jan 2026 08:20:22 +0000 ROA not before: Fri 02 Jan 2026 08:20:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209076 IP address blocks: 2a0e:cc00::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.mft rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:1f:8d:a6:b1:20:cc:7b:f2:de:82:c1:83:5e:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4384f6fa6decced5578a85a51e0bd65701ea34ec Validity Not Before: Jan 2 08:20:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=30d09c7ce7f4612dfa5aa14e888c951bb913ee5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:de:4d:6d:d5:f2:c0:e1:45:04:f7:8d:07:59: 59:43:c1:d3:ea:50:3d:40:1f:13:65:0f:2a:d6:14: 4d:f8:9f:7f:e4:28:f9:f2:c8:7b:40:af:76:0f:e6: ba:9c:7f:3e:95:d4:38:e7:20:47:bd:0b:4b:2f:97: d7:2a:42:69:17:ce:d0:57:fa:57:1a:1b:94:85:de: e8:2a:10:23:35:70:37:19:e6:09:00:ce:5f:bd:3d: 47:eb:0c:9f:4a:fd:34:81:f0:c7:d6:d4:1e:7d:b5: f9:36:58:a2:86:69:82:c4:42:83:98:61:35:e8:06: f9:c9:d2:f3:7f:5e:b1:f6:dc:a6:ad:0a:e5:a6:a5: d8:d7:e6:95:5a:8a:47:77:a4:27:77:9c:a1:6f:70: 92:ef:91:b6:cf:20:fe:92:1f:ae:b0:71:6d:f4:5b: ea:c0:2e:20:21:4e:f2:c0:5d:18:9b:b5:9c:5a:b4: bf:71:e2:f3:30:81:03:c9:27:60:f0:e4:35:29:98: e2:cd:59:d2:34:bc:c4:f7:a0:a7:cc:62:b3:b3:64: 1c:13:6a:ac:de:ed:60:e3:e4:2f:12:af:18:2a:a9: 10:68:e4:06:79:98:0d:37:d4:e3:57:7a:c5:75:d9: d4:34:ba:a6:26:78:93:e8:52:c0:0f:a4:e5:fb:cc: 9e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:D0:9C:7C:E7:F4:61:2D:FA:5A:A1:4E:88:8C:95:1B:B9:13:EE:5C X509v3 Authority Key Identifier: keyid:43:84:F6:FA:6D:EC:CE:D5:57:8A:85:A5:1E:0B:D6:57:01:EA:34:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/MNCcfOf0YS36WqFOiIyVG7kT7lw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:cc00::/29 Signature Algorithm: sha256WithRSAEncryption 28:5d:da:28:07:11:0f:28:6b:5f:ca:5b:75:7d:92:dc:3a:97: 3d:59:7c:c0:e0:d1:e2:32:44:db:c8:cf:9d:48:76:56:19:19: d9:4d:14:13:b2:c7:9a:f7:3c:27:46:10:e4:fe:70:55:53:be: 02:4f:c9:96:bc:16:0c:c5:bb:8e:8e:fa:32:f2:b6:ea:b8:63: ee:1b:7d:3f:2d:ce:4f:62:74:63:d2:fe:d9:a1:40:ef:3a:ce: ea:9f:fe:c3:b5:86:95:ff:c6:d4:03:1f:e3:e1:fc:61:a7:a9: d0:6b:31:39:65:09:d5:54:86:82:e6:59:79:68:c8:bd:fa:d8: 72:f8:10:6b:57:48:07:79:07:84:28:f4:52:42:fe:03:c3:12: 8b:61:3c:35:29:9a:4f:1d:15:fb:b4:95:90:1d:83:9d:88:10: 1f:bc:b1:e5:96:f9:ec:10:84:75:cf:1f:c7:8f:cf:d1:57:0e: 83:24:d3:b2:1a:23:a3:a2:2b:46:5e:6d:75:f6:4e:d6:48:7d: 31:12:1c:7d:58:75:e7:e9:f6:80:72:35:6f:b8:30:f7:7a:b7: ef:49:8a:87:50:93:94:2d:4b:8f:6b:45:25:a9:87:b6:0a:55: 49:4b:cb:b0:30:4e:c0:6a:e8:b5:9b:e9:c7:ee:da:63:04:b8: 70:84:0b:2a -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt9yx+NprEgzHvy3oLBg144MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzODRmNmZhNmRlY2NlZDU1NzhhODVhNTFlMGJkNjU3MDFl YTM0ZWMwHhcNMjYwMTAyMDgyMDIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMGQwOWM3Y2U3ZjQ2MTJkZmE1YWExNGU4ODhjOTUxYmI5MTNlZTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0t5NbdXywOFFBPeNB1lZQ8HT6lA9 QB8TZQ8q1hRN+J9/5Cj58sh7QK92D+a6nH8+ldQ45yBHvQtLL5fXKkJpF87QV/pX GhuUhd7oKhAjNXA3GeYJAM5fvT1H6wyfSv00gfDH1tQefbX5NliihmmCxEKDmGE1 6Ab5ydLzf16x9tymrQrlpqXY1+aVWopHd6Qnd5yhb3CS75G2zyD+kh+usHFt9Fvq wC4gIU7ywF0Ym7WcWrS/ceLzMIEDySdg8OQ1KZjizVnSNLzE96CnzGKzs2QcE2qs 3u1g4+QvEq8YKqkQaOQGeZgNN9TjV3rFddnUNLqmJniT6FLAD6Tl+8yebQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFDDQnHzn9GEt+lqhToiMlRu5E+5cMB8GA1UdIwQY MBaAFEOE9vpt7M7VV4qFpR4L1lcB6jTsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTRUMi1tM3N6dFZYaW9XbEhndldWd0hxTk93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9iNjk4YmQtOGRkMi00MGJlLTgyYTMt MWIxM2JkNDU2NmE1LzEvTU5DY2ZPZjBZUzM2V3FGT2lJeVZHN2tUN2x3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9iNjk4YmQtOGRkMi00MGJlLTgyYTMtMWIxM2JkNDU2NmE1 LzEvUTRUMi1tM3N6dFZYaW9XbEhndldWd0hxTk93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg7MADAN BgkqhkiG9w0BAQsFAAOCAQEAKF3aKAcRDyhrX8pbdX2S3DqXPVl8wODR4jJE28jP nUh2VhkZ2U0UE7LHmvc8J0YQ5P5wVVO+Ak/JlrwWDMW7jo76MvK26rhj7ht9Py3O T2J0Y9L+2aFA7zrO6p/+w7WGlf/G1AMf4+H8Yaep0GsxOWUJ1VSGguZZeWjIvfrY cvgQa1dIB3kHhCj0UkL+A8MSi2E8NSmaTx0V+7SVkB2DnYgQH7yx5Zb57BCEdc8f x4/P0VcOgyTTshojo6IrRl5tdfZO1kh9MRIcfVh15+n2gHI1b7gw93q370mKh1CT lC1Lj2tFJamHtgpVSUvLsDBOwGrotZvpx+7aYwS4cIQLKg== -----END CERTIFICATE-----Generated at Sun Jan 25 22:15:18 2026 by rpki-client