This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/MMwhBGW76MVn4Dg5EbZwOtE-V9k.roa File: MMwhBGW76MVn4Dg5EbZwOtE-V9k.roa (raw, json) Hash identifier: hEekmWExVpRk8yl5uIiicxfMKJpS9Azptnbba7Lmq4g= Subject key identifier: 30:CC:21:04:65:BB:E8:C5:67:E0:38:39:11:B6:70:3A:D1:3E:57:D9 Certificate issuer: /CN=62927b36b138f086358938e3acfda4638e56a792 Certificate serial: 019B7DCA403D04C498F5C940BB6BFDA5C3EF Authority key identifier: 62:92:7B:36:B1:38:F0:86:35:89:38:E3:AC:FD:A4:63:8E:56:A7:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YpJ7NrE48IY1iTjjrP2kY45Wp5I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/MMwhBGW76MVn4Dg5EbZwOtE-V9k.roa Signing time: Fri 02 Jan 2026 08:19:25 +0000 ROA not before: Fri 02 Jan 2026 08:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 2a10:20c7:ff00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft rsync://rpki.ripe.net/repository/DEFAULT/YpJ7NrE48IY1iTjjrP2kY45Wp5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 02:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:40:3d:04:c4:98:f5:c9:40:bb:6b:fd:a5:c3:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62927b36b138f086358938e3acfda4638e56a792 Validity Not Before: Jan 2 08:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=30cc210465bbe8c567e0383911b6703ad13e57d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:da:d4:e8:ae:a1:ae:86:ab:bb:5e:e6:87:ee: ae:04:a8:42:ac:d6:75:cc:a5:01:7c:34:57:63:a0: 81:8e:2c:b7:19:15:87:37:57:6f:00:19:91:ac:ae: 97:17:6a:3e:04:66:60:3b:66:fd:61:e6:f0:cf:b7: d8:89:06:e6:89:f1:12:3b:89:36:fd:90:27:9b:f4: 3d:63:68:a5:84:8b:26:82:a3:bb:1a:d0:c6:dc:9d: 9e:ad:14:32:26:e3:90:28:04:ce:88:24:c1:1e:23: 07:25:59:38:a0:b5:1f:22:ce:47:94:10:ef:07:fc: 99:59:1a:80:9b:b7:f9:da:75:3d:f7:b8:22:f3:1a: 06:94:89:ff:df:45:19:ab:b9:59:92:27:47:90:ba: 5f:65:c5:7c:86:8c:72:dc:dc:78:20:4c:3c:ab:70: df:8c:2d:22:17:a2:b4:11:88:ad:c4:a7:48:7d:5b: cb:1b:e7:c8:05:c4:45:5e:64:f8:a1:27:01:be:89: 18:23:b6:ef:61:7c:20:f3:0e:25:48:6c:34:5a:51: e4:6b:c6:90:d0:be:ee:a1:93:07:66:3b:04:22:d5: ab:38:70:c7:33:04:a5:29:cb:98:96:97:e8:41:ab: 56:37:4c:2f:1e:58:c2:eb:d5:75:bd:89:ce:c8:cc: 6e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:CC:21:04:65:BB:E8:C5:67:E0:38:39:11:B6:70:3A:D1:3E:57:D9 X509v3 Authority Key Identifier: keyid:62:92:7B:36:B1:38:F0:86:35:89:38:E3:AC:FD:A4:63:8E:56:A7:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YpJ7NrE48IY1iTjjrP2kY45Wp5I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/MMwhBGW76MVn4Dg5EbZwOtE-V9k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:20c7:ff00::/40 Signature Algorithm: sha256WithRSAEncryption 67:f3:99:4c:92:a2:d1:54:92:51:d5:3f:1b:3a:21:56:f7:1f: e8:1b:04:bc:f0:a8:78:54:e0:b3:f4:76:b1:1d:fc:83:44:9a: b2:7c:b0:9f:fe:aa:6b:d1:80:61:cb:ef:5f:8b:38:91:06:ec: 12:43:d7:4e:1e:cd:fc:2c:e7:92:69:06:56:2e:75:9b:ca:59: 77:d4:29:ee:cd:63:2d:22:fe:7e:7b:7f:7d:4a:cc:a3:5e:c1: cd:55:08:9d:48:a8:d4:f4:85:4e:33:60:d3:f5:2d:ed:1e:8e: c8:bb:d5:7b:71:5b:5a:21:04:5a:ad:77:b1:7f:85:76:01:57: 34:f7:02:19:d0:80:c5:2a:f8:be:7c:26:16:9e:9e:73:5a:af: 7f:6f:d8:98:28:cf:5a:01:23:41:6e:df:46:ec:71:ce:94:af: 74:b7:76:22:f6:9d:63:cf:33:06:67:71:58:bd:16:7c:59:d4: 63:d5:69:61:32:45:8f:17:5d:14:6c:73:13:71:63:95:3d:c2: a6:8c:20:39:ec:f6:ae:c1:3f:49:33:e2:ef:b1:28:67:84:08: a0:d8:ea:a5:6b:31:f3:35:49:dc:7a:64:7f:d0:d2:11:26:fb: 55:6d:d7:67:68:f5:95:40:ef:44:52:82:f2:7c:17:d4:53:fc: db:d5:83:96 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt9ykA9BMSY9clAu2v9pcPvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyOTI3YjM2YjEzOGYwODYzNTg5MzhlM2FjZmRhNDYzOGU1 NmE3OTIwHhcNMjYwMTAyMDgxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMGNjMjEwNDY1YmJlOGM1NjdlMDM4MzkxMWI2NzAzYWQxM2U1N2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NrU6K6hroaru17mh+6uBKhCrNZ1 zKUBfDRXY6CBjiy3GRWHN1dvABmRrK6XF2o+BGZgO2b9Yebwz7fYiQbmifESO4k2 /ZAnm/Q9Y2ilhIsmgqO7GtDG3J2erRQyJuOQKATOiCTBHiMHJVk4oLUfIs5HlBDv B/yZWRqAm7f52nU997gi8xoGlIn/30UZq7lZkidHkLpfZcV8hoxy3Nx4IEw8q3Df jC0iF6K0EYitxKdIfVvLG+fIBcRFXmT4oScBvokYI7bvYXwg8w4lSGw0WlHka8aQ 0L7uoZMHZjsEItWrOHDHMwSlKcuYlpfoQatWN0wvHljC69V1vYnOyMxuKwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFDDMIQRlu+jFZ+A4ORG2cDrRPlfZMB8GA1UdIwQY MBaAFGKSezaxOPCGNYk446z9pGOOVqeSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXBKN05yRTQ4SVkxaVRqanJQMmtZNDVXcDVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZDI0MWYtNzFlYS00YTFiLTk2ZWEt YTk5YzdlZTVjMjg0LzEvTU13aEJHVzc2TVZuNERnNUViWndPdEUtVjlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZDI0MWYtNzFlYS00YTFiLTk2ZWEtYTk5YzdlZTVjMjg0 LzEvWXBKN05yRTQ4SVkxaVRqanJQMmtZNDVXcDVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhAgx/8w DQYJKoZIhvcNAQELBQADggEBAGfzmUySotFUklHVPxs6IVb3H+gbBLzwqHhU4LP0 drEd/INEmrJ8sJ/+qmvRgGHL71+LOJEG7BJD104ezfws55JpBlYudZvKWXfUKe7N Yy0i/n57f31KzKNewc1VCJ1IqNT0hU4zYNP1Le0ejsi71XtxW1ohBFqtd7F/hXYB VzT3AhnQgMUq+L58JhaennNar39v2Jgoz1oBI0Fu30bscc6Ur3S3diL2nWPPMwZn cVi9FnxZ1GPVaWEyRY8XXRRscxNxY5U9wqaMIDns9q7BP0kz4u+xKGeECKDY6qVr MfM1Sdx6ZH/Q0hEm+1Vt12do9ZVA70RSgvJ8F9RT/NvVg5Y= -----END CERTIFICATE-----Generated at Mon Jan 12 05:16:05 2026 by rpki-client