This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/mJUpivoVuXF15nMJ-kikrEJbyCo.roa File: mJUpivoVuXF15nMJ-kikrEJbyCo.roa (raw, json) Hash identifier: 8m5Jcr8sW+1ubMqm2cWbO+Jv8v5uXQWJ9RSY0KaT5FU= Subject key identifier: 98:95:29:8A:FA:15:B9:71:75:E6:73:09:FA:48:A4:AC:42:5B:C8:2A Certificate issuer: /CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9 Certificate serial: 019B77594BFA26649757313836B2F4CC0E50 Authority key identifier: 51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/mJUpivoVuXF15nMJ-kikrEJbyCo.roa Signing time: Thu 01 Jan 2026 02:18:19 +0000 ROA not before: Thu 01 Jan 2026 02:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215581 IP address blocks: 2a13:cc82::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:4b:fa:26:64:97:57:31:38:36:b2:f4:cc:0e:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9 Validity Not Before: Jan 1 02:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9895298afa15b97175e67309fa48a4ac425bc82a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ae:e2:37:22:4d:27:d6:8f:e5:ff:8f:0f:dd: 46:fb:c5:f1:eb:22:06:6c:53:65:fa:84:7e:c8:3f: d2:f8:47:b0:69:c7:b1:22:74:bf:cd:6e:62:1c:0f: 7e:05:3e:14:93:05:0c:86:17:6d:81:01:eb:df:fc: e6:eb:35:91:a9:4f:81:9c:de:22:26:bd:18:1b:0e: 8c:61:f6:8e:ee:5a:db:33:f9:58:73:50:7c:52:4f: 11:71:17:4c:f5:a8:7e:2d:94:4d:2a:ef:b6:e8:04: fb:3a:02:65:4a:c4:b9:39:7f:63:ec:53:3a:83:0b: 43:e6:41:43:ea:8c:ed:c6:dd:73:bd:fa:98:14:cb: 0d:a4:9f:1f:da:6d:d1:0e:5a:50:82:77:56:2a:7e: 7b:fc:86:fc:44:0e:1b:e6:df:d8:d9:1a:28:8b:c9: 2c:c1:b2:ca:93:4d:69:b0:cd:6f:a6:fd:ce:01:0b: 8d:6e:2e:e5:89:1f:74:34:ae:44:05:cb:6f:7b:56: b5:56:25:c9:b1:93:3e:3e:c4:38:23:11:c2:06:98: 04:d5:da:2d:a1:a2:1e:a5:f5:0d:2e:c5:08:5b:b5: 53:60:5d:34:10:74:7e:45:e1:81:06:c6:27:be:39: 40:1a:2f:9f:73:13:fd:5e:31:bb:52:b6:b8:c5:23: 68:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:95:29:8A:FA:15:B9:71:75:E6:73:09:FA:48:A4:AC:42:5B:C8:2A X509v3 Authority Key Identifier: keyid:51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/mJUpivoVuXF15nMJ-kikrEJbyCo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:cc82::/48 Signature Algorithm: sha256WithRSAEncryption 28:8e:f6:2e:d2:74:c2:83:a4:65:34:95:89:ae:9f:90:fd:06: 40:d6:73:71:3e:20:20:e5:bf:d0:51:e5:8b:db:e6:a8:dc:22: 98:01:15:85:86:61:08:73:23:6d:1a:c2:d8:20:bb:30:58:14: 83:f6:f1:bb:d3:5c:5e:fe:c3:eb:d1:f9:8c:0f:f0:f4:f3:8f: 81:e2:21:84:59:7b:61:84:02:49:83:63:11:b3:7b:c0:31:93: 5e:38:cc:d1:20:72:5e:4d:ec:c0:7f:a5:24:ba:ad:85:7a:2f: 6c:af:53:fc:47:f5:5d:06:5a:1e:fa:07:44:43:0d:b4:95:97: 8d:78:65:2e:d8:d9:be:53:89:35:28:2b:d5:c3:68:5a:8f:9a: 28:3f:15:eb:a1:98:7d:23:c8:30:7c:4b:c9:07:55:3d:82:5c: 41:77:f2:f3:c2:a2:1c:1e:a6:18:15:1d:ed:65:79:23:0a:44: a4:c8:96:46:75:35:ef:31:34:a1:ae:8c:c3:7c:94:d6:f4:3c: bc:12:32:c6:00:86:2b:24:4d:1f:31:9c:e2:e9:d5:0a:46:e4: 27:e3:53:c1:ea:e9:24:43:8d:d1:0d:c0:5a:f7:53:a4:e1:26: da:b2:93:2b:85:f4:e8:e4:60:0f:85:de:22:dc:fe:10:21:48: 4c:a7:6b:46 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WUv6JmSXVzE4NrL0zA5QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxN2EwYzk2ODQyYmFmYzlmNjMwYmExNGI4M2VhNzliZDEy YTUzYjkwHhcNMjYwMTAxMDIxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODk1Mjk4YWZhMTViOTcxNzVlNjczMDlmYTQ4YTRhYzQyNWJjODJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA267iNyJNJ9aP5f+PD91G+8Xx6yIG bFNl+oR+yD/S+EewacexInS/zW5iHA9+BT4UkwUMhhdtgQHr3/zm6zWRqU+BnN4i Jr0YGw6MYfaO7lrbM/lYc1B8Uk8RcRdM9ah+LZRNKu+26AT7OgJlSsS5OX9j7FM6 gwtD5kFD6oztxt1zvfqYFMsNpJ8f2m3RDlpQgndWKn57/Ib8RA4b5t/Y2Rooi8ks wbLKk01psM1vpv3OAQuNbi7liR90NK5EBctve1a1ViXJsZM+PsQ4IxHCBpgE1dot oaIepfUNLsUIW7VTYF00EHR+ReGBBsYnvjlAGi+fcxP9XjG7Ura4xSNoNwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJiVKYr6FblxdeZzCfpIpKxCW8gqMB8GA1UdIwQY MBaAFFF6DJaEK6/J9jC6FLg+p5vRKlO5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xNGU0OTItODUyNS00ZWVjLTg0YmMt YjBlYjY3MTVlMGFmLzEvbUpVcGl2b1Z1WEYxNW5NSi1raWtyRUpieUNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8xNGU0OTItODUyNS00ZWVjLTg0YmMtYjBlYjY3MTVlMGFm LzEvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhPMggAA MA0GCSqGSIb3DQEBCwUAA4IBAQAojvYu0nTCg6RlNJWJrp+Q/QZA1nNxPiAg5b/Q UeWL2+ao3CKYARWFhmEIcyNtGsLYILswWBSD9vG701xe/sPr0fmMD/D084+B4iGE WXthhAJJg2MRs3vAMZNeOMzRIHJeTezAf6Ukuq2Fei9sr1P8R/VdBloe+gdEQw20 lZeNeGUu2Nm+U4k1KCvVw2haj5ooPxXroZh9I8gwfEvJB1U9glxBd/LzwqIcHqYY FR3tZXkjCkSkyJZGdTXvMTShrozDfJTW9Dy8EjLGAIYrJE0fMZzi6dUKRuQn41PB 6ukkQ43RDcBa91Ok4SbaspMrhfTo5GAPhd4i3P4QIUhMp2tG -----END CERTIFICATE-----Generated at Wed Jan 7 22:30:54 2026 by rpki-client