This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/MMY-RTsxhEKbZHNhhj0KSwNZMxE.roa File: MMY-RTsxhEKbZHNhhj0KSwNZMxE.roa (raw, json) Hash identifier: Ef0KimqUfcjmjAh99qPeo3PT6AwZiNEjh0UvdcbEniQ= Subject key identifier: 30:C6:3E:45:3B:31:84:42:9B:64:73:61:86:3D:0A:4B:03:59:33:11 Certificate issuer: /CN=96d95fe2d90943c92f6c28f3b329f82015cd92ae Certificate serial: 019B77C6A6D0C94B4CDD093B84D920EB577A Authority key identifier: 96:D9:5F:E2:D9:09:43:C9:2F:6C:28:F3:B3:29:F8:20:15:CD:92:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/MMY-RTsxhEKbZHNhhj0KSwNZMxE.roa Signing time: Thu 01 Jan 2026 04:17:46 +0000 ROA not before: Thu 01 Jan 2026 04:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199700 IP address blocks: 2a13:8d80::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:a6:d0:c9:4b:4c:dd:09:3b:84:d9:20:eb:57:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96d95fe2d90943c92f6c28f3b329f82015cd92ae Validity Not Before: Jan 1 04:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=30c63e453b3184429b647361863d0a4b03593311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:eb:57:83:9a:fe:64:2d:80:16:59:9e:f4:7d: 10:1e:99:de:d3:6d:04:7b:cc:9e:c2:d8:82:bd:ae: b1:00:3a:d8:de:53:ac:a0:56:f2:2f:f1:49:44:d8: a3:6d:b8:0d:83:f1:bc:39:de:eb:c6:e1:05:74:1c: 8d:0e:b5:ee:7b:a6:03:b5:47:76:c0:d5:83:c6:06: 2c:94:aa:55:79:40:21:34:c9:ef:22:65:74:5b:9f: 21:3f:75:36:2a:75:40:d5:3d:f4:6d:b3:91:d1:1a: 48:83:b1:ab:b2:82:6c:9d:8c:f3:d0:eb:37:08:51: f0:f5:d7:32:b0:cf:f9:ea:61:ad:d3:78:ef:c9:8a: 0b:7b:89:60:44:80:be:22:25:6b:e9:19:14:15:d0: 7e:64:3d:43:98:91:87:61:2e:63:16:48:de:c5:f6: 9f:fb:01:cf:b9:15:8d:43:6f:bd:1f:3f:71:4e:44: bd:d8:5a:38:d4:65:f7:3d:49:a3:5c:35:f1:4e:f3: 21:3d:bb:c0:52:2e:60:c6:c4:2d:d6:b4:90:b1:91: 61:56:26:ea:3c:aa:2f:57:ce:e1:a3:06:91:b3:84: d8:06:39:30:50:87:a6:3b:42:c0:9f:aa:cf:d3:c3: 5d:c0:29:d9:ba:e7:81:5e:ac:9e:90:32:1b:2b:0f: ee:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:C6:3E:45:3B:31:84:42:9B:64:73:61:86:3D:0A:4B:03:59:33:11 X509v3 Authority Key Identifier: keyid:96:D9:5F:E2:D9:09:43:C9:2F:6C:28:F3:B3:29:F8:20:15:CD:92:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/MMY-RTsxhEKbZHNhhj0KSwNZMxE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:8d80::/40 Signature Algorithm: sha256WithRSAEncryption c3:99:ea:73:79:c1:a1:22:42:ef:cd:4d:e2:d9:e9:a4:3d:f3: 0a:e1:82:1e:41:21:a6:44:30:7e:b1:60:34:0b:df:c0:72:cf: 5e:51:be:dd:21:99:45:74:1a:39:69:d1:3e:32:69:61:ec:ec: ac:72:d3:ab:4e:a4:f9:f4:0a:36:29:ff:ec:f2:69:57:10:f9: b0:8a:92:f0:64:66:1b:e4:00:0c:2e:d5:05:a5:9a:a5:76:1f: 16:6d:a9:d2:a7:19:76:e0:85:c0:c7:37:ed:1c:74:bd:2f:95: 22:82:10:65:a9:1c:0d:c3:30:93:42:9d:bb:ba:c7:38:ae:4b: b0:74:bb:85:22:bd:0f:26:61:01:81:47:34:95:71:b3:ef:6c: 81:5e:57:98:08:26:06:0f:f1:db:1c:20:cd:53:d7:35:bc:b1: 67:b5:2d:74:ec:c4:0d:e2:ee:21:a4:16:23:a0:b5:2d:64:5e: 62:b1:70:ba:19:d5:91:8c:07:b9:1d:d2:5e:61:79:63:21:f1: 51:10:15:c3:cf:46:af:4c:2c:33:f6:f6:26:a9:c6:31:75:06: 64:46:24:9d:57:cc:1f:e8:6b:b1:24:88:1c:20:7f:b6:4f:ca: c9:09:48:77:6b:34:19:86:b5:db:21:a9:38:82:af:79:2d:a3: 9f:b7:86:99 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3xqbQyUtM3Qk7hNkg61d6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZDk1ZmUyZDkwOTQzYzkyZjZjMjhmM2IzMjlmODIwMTVj ZDkyYWUwHhcNMjYwMTAxMDQxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMGM2M2U0NTNiMzE4NDQyOWI2NDczNjE4NjNkMGE0YjAzNTkzMzExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6etXg5r+ZC2AFlme9H0QHpne020E e8yewtiCva6xADrY3lOsoFbyL/FJRNijbbgNg/G8Od7rxuEFdByNDrXue6YDtUd2 wNWDxgYslKpVeUAhNMnvImV0W58hP3U2KnVA1T30bbOR0RpIg7GrsoJsnYzz0Os3 CFHw9dcysM/56mGt03jvyYoLe4lgRIC+IiVr6RkUFdB+ZD1DmJGHYS5jFkjexfaf +wHPuRWNQ2+9Hz9xTkS92Fo41GX3PUmjXDXxTvMhPbvAUi5gxsQt1rSQsZFhVibq PKovV87howaRs4TYBjkwUIemO0LAn6rP08NdwCnZuueBXqyekDIbKw/u5wIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFDDGPkU7MYRCm2RzYYY9CksDWTMRMB8GA1UdIwQY MBaAFJbZX+LZCUPJL2wo87Mp+CAVzZKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHRsZjR0a0pROGt2YkNqenN5bjRJQlhOa3E0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8zMmNjMjctOTQ0OC00MzdiLTk3MjIt ZGM5YjljNjAxM2Y2LzEvTU1ZLVJUc3hoRUtiWkhOaGhqMEtTd05aTXhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8zMmNjMjctOTQ0OC00MzdiLTk3MjItZGM5YjljNjAxM2Y2 LzEvbHRsZjR0a0pROGt2YkNqenN5bjRJQlhOa3E0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhONgAAw DQYJKoZIhvcNAQELBQADggEBAMOZ6nN5waEiQu/NTeLZ6aQ98wrhgh5BIaZEMH6x YDQL38Byz15Rvt0hmUV0Gjlp0T4yaWHs7Kxy06tOpPn0CjYp/+zyaVcQ+bCKkvBk ZhvkAAwu1QWlmqV2HxZtqdKnGXbghcDHN+0cdL0vlSKCEGWpHA3DMJNCnbu6xziu S7B0u4UivQ8mYQGBRzSVcbPvbIFeV5gIJgYP8dscIM1T1zW8sWe1LXTsxA3i7iGk FiOgtS1kXmKxcLoZ1ZGMB7kd0l5heWMh8VEQFcPPRq9MLDP29iapxjF1BmRGJJ1X zB/oa7EkiBwgf7ZPyskJSHdrNBmGtdshqTiCr3kto5+3hpk= -----END CERTIFICATE-----Generated at Sun Jan 25 19:19:06 2026 by rpki-client