This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/mcf3J15fRvYrn846y3Yea17pLXg.roa File: mcf3J15fRvYrn846y3Yea17pLXg.roa (raw, json) Hash identifier: IlGgd5zYV1z3LqkjT3/hmuKnMAHZSjWaugLji8fBoNA= Subject key identifier: 99:C7:F7:27:5E:5F:46:F6:2B:9F:CE:3A:CB:76:1E:6B:5E:E9:2D:78 Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5 Certificate serial: 019B0C821415E1CDB17763B8F969816FD222 Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/mcf3J15fRvYrn846y3Yea17pLXg.roa Signing time: Thu 11 Dec 2025 08:23:30 +0000 ROA not before: Thu 11 Dec 2025 08:23:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 199436 IP address blocks: 2a0f:7802:e000::/39 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 14:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:82:14:15:e1:cd:b1:77:63:b8:f9:69:81:6f:d2:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcead390625edba1408108df57cea47160d70e5 Validity Not Before: Dec 11 08:23:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=99c7f7275e5f46f62b9fce3acb761e6b5ee92d78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:15:76:45:60:26:bb:71:6c:15:38:1a:20:74: c4:ac:d0:9a:78:46:36:0b:3b:de:7b:2a:d2:f4:b5: 7a:7e:6a:a1:0e:af:eb:c0:d2:21:e2:e8:2e:9e:aa: 16:40:44:ab:50:3e:87:ad:18:2d:42:6e:ef:56:94: 4b:49:ee:37:37:ab:1b:e4:e7:49:dd:b0:bc:ef:dc: 70:e9:94:96:86:14:b7:16:52:39:2a:b1:a4:8c:ec: 89:27:a8:b2:c5:70:dc:ba:cf:51:59:93:12:bf:18: 8e:d7:2d:99:2b:18:da:a8:74:2d:f6:ac:d4:02:ae: 9e:d0:c5:29:48:40:be:b5:5b:82:ee:60:8f:8c:04: d8:f2:66:bd:9e:09:a0:6f:56:1c:1d:f2:00:d4:ff: 67:78:4b:55:d6:20:05:a0:fb:b9:0b:8e:7f:ff:86: d6:b0:8e:38:39:0e:f1:f9:1e:88:00:af:32:67:62: b2:1e:63:bc:f8:ef:15:50:e0:8c:bf:6d:6a:81:03: 3e:c9:60:6f:b9:8b:e2:bc:4c:b9:4a:bf:12:7f:cd: d0:03:7d:e1:26:de:e2:d0:03:24:68:67:11:fd:c8: 89:ec:16:a6:a9:96:d4:e4:cf:4e:13:1e:9f:7a:bf: 61:60:ab:d0:8b:82:cd:e9:ea:aa:9d:e9:d1:02:b0: ea:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C7:F7:27:5E:5F:46:F6:2B:9F:CE:3A:CB:76:1E:6B:5E:E9:2D:78 X509v3 Authority Key Identifier: keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/mcf3J15fRvYrn846y3Yea17pLXg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:7802:e000::/39 Signature Algorithm: sha256WithRSAEncryption 1b:62:b5:38:d7:33:a0:9c:b4:fa:33:e4:44:ae:7f:6f:59:30: eb:85:9a:a2:92:c8:3c:e8:e5:c7:ca:64:cd:2d:ee:91:02:d9: 9b:5c:81:d1:33:66:9d:50:fa:b4:65:f2:fc:aa:b1:c1:12:c0: 15:b7:56:c2:42:e4:ce:bf:f5:28:70:ec:6b:d3:91:21:a6:00: 8e:2f:81:96:59:8a:68:4f:f6:c3:e6:b3:c0:fb:15:7f:80:a3: 9a:bb:63:b5:6b:5c:e6:d5:19:41:b5:bb:20:a4:58:f0:60:7b: 96:ab:89:85:5a:f8:69:c9:c4:55:ca:6a:da:3f:de:ed:92:f8: ba:13:24:e5:ef:53:42:c5:cf:c1:85:89:dd:d4:60:58:58:5b: 7a:ec:29:6f:5e:2f:8e:b9:9e:7b:92:88:94:49:b3:38:56:c1: 2f:d8:0e:52:fc:19:d5:e9:71:48:c6:6c:0b:99:a0:98:09:3e: db:df:04:c4:be:f9:e4:69:36:70:24:54:fe:22:3c:e3:12:66: 2a:71:0b:57:e0:8d:6d:e0:4a:f5:d1:f6:57:9a:b0:c1:71:93: d0:47:0e:16:b6:3b:2b:2a:ae:d1:63:59:16:3f:97:f7:05:e9: c8:eb:0a:25:d6:a5:97:9f:18:4e:39:67:cc:32:53:6e:f2:a7: ed:fa:e0:23 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZsMghQV4c2xd2O4+WmBb9IiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw ZDcwZTUwHhcNMjUxMjExMDgyMzMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OWM3ZjcyNzVlNWY0NmY2MmI5ZmNlM2FjYjc2MWU2YjVlZTkyZDc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRV2RWAmu3FsFTgaIHTErNCaeEY2 CzveeyrS9LV6fmqhDq/rwNIh4ugunqoWQESrUD6HrRgtQm7vVpRLSe43N6sb5OdJ 3bC879xw6ZSWhhS3FlI5KrGkjOyJJ6iyxXDcus9RWZMSvxiO1y2ZKxjaqHQt9qzU Aq6e0MUpSEC+tVuC7mCPjATY8ma9ngmgb1YcHfIA1P9neEtV1iAFoPu5C45//4bW sI44OQ7x+R6IAK8yZ2KyHmO8+O8VUOCMv21qgQM+yWBvuYvivEy5Sr8Sf83QA33h Jt7i0AMkaGcR/ciJ7BamqZbU5M9OEx6fer9hYKvQi4LN6eqqnenRArDqjQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFJnH9ydeX0b2K5/OOst2Hmte6S14MB8GA1UdIwQY MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt ZjViNmE3MThmNGI1LzEvbWNmM0oxNWZSdllybjg0NnkzWWVhMTdwTFhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1 LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBKg94AuAw DQYJKoZIhvcNAQELBQADggEBABtitTjXM6CctPoz5ESuf29ZMOuFmqKSyDzo5cfK ZM0t7pEC2ZtcgdEzZp1Q+rRl8vyqscESwBW3VsJC5M6/9Shw7GvTkSGmAI4vgZZZ imhP9sPms8D7FX+Ao5q7Y7VrXObVGUG1uyCkWPBge5ariYVa+GnJxFXKato/3u2S +LoTJOXvU0LFz8GFid3UYFhYW3rsKW9eL465nnuSiJRJszhWwS/YDlL8GdXpcUjG bAuZoJgJPtvfBMS++eRpNnAkVP4iPOMSZipxC1fgjW3gSvXR9leasMFxk9BHDha2 OysqrtFjWRY/l/cF6cjrCiXWpZefGE45Z8wyU27yp+364CM= -----END CERTIFICATE-----Generated at Fri Dec 19 21:20:41 2025 by rpki-client