This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/MvgNCuZzXlWuar7EiR28ia35_v4.roa File: MvgNCuZzXlWuar7EiR28ia35_v4.roa (raw, json) Hash identifier: pmikhTMcBnwdKLZfauM4zV25CdLoZ0KdBQ1dfdVrR+M= Subject key identifier: 32:F8:0D:0A:E6:73:5E:55:AE:6A:BE:C4:89:1D:BC:89:AD:F9:FE:FE Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Certificate serial: 019B77C76601CA85AF30583ACFBC3B48E831 Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/MvgNCuZzXlWuar7EiR28ia35_v4.roa Signing time: Thu 01 Jan 2026 04:18:35 +0000 ROA not before: Thu 01 Jan 2026 04:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50340 IP address blocks: 2a11:4341::/32 maxlen: 32 2a11:7887::/32 maxlen: 32 2a11:9887::/32 maxlen: 32 2a12:2cc7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:66:01:ca:85:af:30:58:3a:cf:bc:3b:48:e8:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Validity Not Before: Jan 1 04:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=32f80d0ae6735e55ae6abec4891dbc89adf9fefe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:60:3d:2a:e7:0b:dc:ed:d4:31:b6:83:11:4a: 4e:15:13:dd:ee:bd:98:ed:64:98:b8:94:3e:a1:7f: 36:43:dd:3c:57:89:60:9b:00:a7:b8:ec:95:df:42: 8d:6f:20:9f:94:70:3d:bb:79:d5:ee:e4:01:b1:c0: 32:32:73:00:96:8f:bb:0a:26:d7:94:4a:2d:40:55: 77:f6:a4:0e:ff:21:d6:96:81:f1:0f:8e:5b:a3:58: bb:eb:38:d9:fb:7b:ec:f4:be:7c:e4:8b:f4:5e:56: 4d:30:89:f6:a2:7a:d9:7d:b1:f2:3c:2b:e2:2b:56: a6:e9:20:fd:11:05:6e:4d:15:69:0b:b6:0b:ff:d3: 83:70:0e:93:36:6a:0b:b3:1f:ed:8b:cc:45:10:c1: d4:75:2f:d1:20:48:bd:c5:c1:94:90:eb:d7:62:09: 4c:c2:be:24:82:5d:5a:47:8d:33:6c:89:2f:b3:74: 85:c9:0b:68:9b:d4:13:32:39:d4:9b:8f:f5:17:09: c5:74:2a:d7:94:fc:b6:1e:c2:90:90:00:2b:91:a1: ae:ef:cd:ff:2c:89:25:32:67:bf:26:b8:7e:8c:23: 25:cd:b9:f7:af:dd:e5:a6:ee:0c:0e:26:57:2f:74: 97:e6:a9:f4:bf:07:45:48:14:0c:26:54:6b:e1:b6: 66:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:F8:0D:0A:E6:73:5E:55:AE:6A:BE:C4:89:1D:BC:89:AD:F9:FE:FE X509v3 Authority Key Identifier: keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/MvgNCuZzXlWuar7EiR28ia35_v4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:4341::/32 2a11:7887::/32 2a11:9887::/32 2a12:2cc7::/32 Signature Algorithm: sha256WithRSAEncryption 8d:ca:ee:10:18:f2:45:11:84:a6:19:f4:2c:70:57:c5:39:77: 5c:fc:cd:1d:13:c2:aa:c4:96:37:d2:d7:de:40:85:95:35:49: e1:8b:2a:93:0b:6a:36:d7:74:77:1e:57:2e:fe:87:95:3d:a6: c7:62:7e:8a:b5:65:e7:97:4c:24:17:2b:7b:85:56:2b:07:61: 09:33:06:c9:04:18:9e:19:39:36:38:97:54:8a:58:64:66:f3: 56:66:68:39:cd:7e:ca:07:f3:cb:d1:75:fd:3a:57:da:e0:69: ae:c4:56:1d:1b:0c:2a:26:e5:68:35:b6:49:61:71:e2:79:dc: ce:4e:b5:58:ac:f8:0b:9f:cb:47:76:e4:ad:c0:a5:c6:84:89: 1a:ba:4f:44:8a:0e:8d:a6:dc:e1:5d:1a:0e:d2:8a:6c:e1:98: b5:e1:4f:67:d6:8d:46:2c:0c:45:c8:1c:53:64:1c:cd:98:10: ce:81:65:f0:74:e5:83:06:24:c0:e4:fe:c6:56:9b:50:f0:fc: d0:28:06:1b:75:66:d5:e1:e9:ed:36:b1:84:15:a7:28:1c:ce: cf:dc:e5:b0:a8:80:04:7c:31:08:ae:dc:71:68:8e:16:b2:9a: 36:24:c0:56:ee:f6:62:d8:38:ac:4c:65:cf:ee:66:ef:7c:a0: d8:b7:be:a9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt3x2YByoWvMFg6z7w7SOgxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiOTQ0N2ZlOWE0YWNjN2Q2ZmY3MmQ2Yzc5OGQ0M2Q2NmNk NTBjM2YwHhcNMjYwMTAxMDQxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMmY4MGQwYWU2NzM1ZTU1YWU2YWJlYzQ4OTFkYmM4OWFkZjlmZWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2A9KucL3O3UMbaDEUpOFRPd7r2Y 7WSYuJQ+oX82Q908V4lgmwCnuOyV30KNbyCflHA9u3nV7uQBscAyMnMAlo+7CibX lEotQFV39qQO/yHWloHxD45bo1i76zjZ+3vs9L585Iv0XlZNMIn2onrZfbHyPCvi K1am6SD9EQVuTRVpC7YL/9ODcA6TNmoLsx/ti8xFEMHUdS/RIEi9xcGUkOvXYglM wr4kgl1aR40zbIkvs3SFyQtom9QTMjnUm4/1FwnFdCrXlPy2HsKQkAArkaGu783/ LIklMme/Jrh+jCMlzbn3r93lpu4MDiZXL3SX5qn0vwdFSBQMJlRr4bZmywIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFDL4DQrmc15Vrmq+xIkdvImt+f7+MB8GA1UdIwQY MBaAFHuUR/6aSsx9b/ctbHmNQ9Zs1Qw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUt OWZjZWI0NWQ2ZmRiLzEvTXZnTkN1WnpYbFd1YXI3RWlSMjhpYTM1X3Y0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUtOWZjZWI0NWQ2ZmRi LzEvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAAjAcAwUAKhFDQQMF ACoReIcDBQAqEZiHAwUAKhIsxzANBgkqhkiG9w0BAQsFAAOCAQEAjcruEBjyRRGE phn0LHBXxTl3XPzNHRPCqsSWN9LX3kCFlTVJ4YsqkwtqNtd0dx5XLv6HlT2mx2J+ irVl55dMJBcre4VWKwdhCTMGyQQYnhk5NjiXVIpYZGbzVmZoOc1+ygfzy9F1/TpX 2uBprsRWHRsMKiblaDW2SWFx4nnczk61WKz4C5/LR3bkrcClxoSJGrpPRIoOjabc 4V0aDtKKbOGYteFPZ9aNRiwMRcgcU2QczZgQzoFl8HTlgwYkwOT+xlabUPD80CgG G3Vm1eHp7TaxhBWnKBzOz9zlsKiABHwxCK7ccWiOFrKaNiTAVu72Ytg4rExlz+5m 73yg2Le+qQ== -----END CERTIFICATE-----Generated at Sun Jan 25 17:44:46 2026 by rpki-client