This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/k58Z7zz6xBBdgvKP-dqKkHufXjg.roa File: k58Z7zz6xBBdgvKP-dqKkHufXjg.roa (raw, json) Hash identifier: WNvtCl0JaNf0RTZTm5Dk8snmYWYu0LmjWQcA8Hf2ew8= Subject key identifier: 93:9F:19:EF:3C:FA:C4:10:5D:82:F2:8F:F9:DA:8A:90:7B:9F:5E:38 Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a Certificate serial: 019B7FF1B972815CE27BBFA356C7FD580D2A Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/k58Z7zz6xBBdgvKP-dqKkHufXjg.roa Signing time: Fri 02 Jan 2026 18:21:46 +0000 ROA not before: Fri 02 Jan 2026 18:21:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205232 IP address blocks: 2a03:5840:270::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:b9:72:81:5c:e2:7b:bf:a3:56:c7:fd:58:0d:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a Validity Not Before: Jan 2 18:21:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=939f19ef3cfac4105d82f28ff9da8a907b9f5e38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:20:e7:ca:69:75:7d:40:b0:04:96:c4:17:2d: 96:63:b3:7d:70:9c:c2:0b:90:24:b9:d1:04:e0:d3: c5:17:3e:74:c6:a4:f0:a8:fe:e9:35:61:e4:a1:8f: 90:69:6a:79:a8:8c:4b:75:31:6e:48:4f:0a:71:57: 21:84:e5:5c:02:e0:2f:1a:b5:92:5d:7d:70:8f:3a: b9:54:50:65:4a:72:ba:1e:7f:37:ef:65:e9:8a:ed: 20:bf:70:15:b8:0d:cb:0e:86:89:73:32:67:8d:f3: 0a:fa:32:cf:47:30:07:97:3e:57:20:31:f6:97:1a: f6:7f:11:c7:dd:e2:6a:87:66:2f:f3:11:49:8c:1d: 54:91:08:52:b8:8c:79:48:5e:01:ea:11:81:f7:f7: e2:c5:e1:54:f4:e9:22:08:a2:8c:10:c0:e5:2d:e4: d9:4b:48:15:15:16:81:96:a2:5d:01:a8:df:c9:77: b7:25:b3:70:31:87:fb:6e:ad:98:ba:34:73:9a:c6: c3:3b:7f:17:b9:9c:f0:75:6b:82:e7:19:d4:16:58: 23:55:db:92:ea:98:d9:44:3f:ec:1a:ae:f4:e1:18: 77:cd:5e:02:d3:e2:05:cb:64:ca:27:11:d2:1e:fc: 35:9f:2f:e3:49:e1:eb:b6:d8:53:d2:a0:3b:26:55: 13:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:9F:19:EF:3C:FA:C4:10:5D:82:F2:8F:F9:DA:8A:90:7B:9F:5E:38 X509v3 Authority Key Identifier: keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/k58Z7zz6xBBdgvKP-dqKkHufXjg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:5840:270::/44 Signature Algorithm: sha256WithRSAEncryption 48:15:ec:ab:91:eb:fa:b3:f1:55:e1:21:18:b4:94:cb:83:2a: cd:bc:18:2e:d5:6d:e2:59:34:50:94:d4:61:85:bc:eb:6e:84: 3c:ba:a3:d9:77:72:be:76:22:06:b3:8a:1f:65:44:3f:86:6e: d0:ff:77:e0:75:fd:5d:06:d5:49:59:ce:22:72:5f:d2:66:06: 55:43:97:57:d7:17:52:9b:be:10:fc:7e:96:fc:25:5c:e5:7f: cd:1c:68:39:51:b6:ca:7b:e0:2a:90:1e:8c:2d:00:17:14:e3: 45:e7:71:89:e9:b7:d8:1c:8a:7e:d3:ac:48:63:5c:59:99:8e: d3:13:be:5c:9a:e1:c5:f3:2f:28:d8:78:e9:d6:07:95:63:50: 7e:1c:a3:7c:37:fb:17:d4:0a:51:db:d6:cd:9c:9f:6a:93:83: fe:6d:a1:21:17:f8:51:a1:69:6c:bf:36:05:13:5b:ad:0d:07: 3f:1c:03:be:f0:90:14:e4:ff:94:a0:bf:83:03:60:bf:ee:78: 68:bd:0b:53:08:50:db:b0:a1:f2:4d:a6:80:32:15:3f:3c:dd: 87:03:93:5f:a8:48:11:65:76:54:5a:55:2e:51:33:32:5c:28: bc:03:7c:23:86:27:f6:4b:2b:e1:51:6f:67:87:25:34:f6:17: ac:28:a6:6d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/8blygVzie7+jVsf9WA0qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3NzcwNWU4OWJiNjViNDcyZTRlMDE4NGQ2ZmU5YmZiOGM1 ODYzNWEwHhcNMjYwMTAyMTgyMTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MzlmMTllZjNjZmFjNDEwNWQ4MmYyOGZmOWRhOGE5MDdiOWY1ZTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriDnyml1fUCwBJbEFy2WY7N9cJzC C5AkudEE4NPFFz50xqTwqP7pNWHkoY+QaWp5qIxLdTFuSE8KcVchhOVcAuAvGrWS XX1wjzq5VFBlSnK6Hn8372Xpiu0gv3AVuA3LDoaJczJnjfMK+jLPRzAHlz5XIDH2 lxr2fxHH3eJqh2Yv8xFJjB1UkQhSuIx5SF4B6hGB9/fixeFU9OkiCKKMEMDlLeTZ S0gVFRaBlqJdAajfyXe3JbNwMYf7bq2YujRzmsbDO38XuZzwdWuC5xnUFlgjVduS 6pjZRD/sGq704Rh3zV4C0+IFy2TKJxHSHvw1ny/jSeHrtthT0qA7JlUTkwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJOfGe88+sQQXYLyj/naipB7n144MB8GA1UdIwQY MBaAFPd3BeibtltHLk4BhNb+m/uMWGNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYt NmNiODk3OTFkN2ZkLzEvazU4Wjd6ejZ4QkJkZ3ZLUC1kcUtrSHVmWGpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYtNmNiODk3OTFkN2Zk LzEvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgNYQAJw MA0GCSqGSIb3DQEBCwUAA4IBAQBIFeyrkev6s/FV4SEYtJTLgyrNvBgu1W3iWTRQ lNRhhbzrboQ8uqPZd3K+diIGs4ofZUQ/hm7Q/3fgdf1dBtVJWc4icl/SZgZVQ5dX 1xdSm74Q/H6W/CVc5X/NHGg5UbbKe+AqkB6MLQAXFONF53GJ6bfYHIp+06xIY1xZ mY7TE75cmuHF8y8o2Hjp1geVY1B+HKN8N/sX1ApR29bNnJ9qk4P+baEhF/hRoWls vzYFE1utDQc/HAO+8JAU5P+UoL+DA2C/7nhovQtTCFDbsKHyTaaAMhU/PN2HA5Nf qEgRZXZUWlUuUTMyXCi8A3wjhif2SyvhUW9nhyU09hesKKZt -----END CERTIFICATE-----Generated at Fri Jan 23 15:23:46 2026 by rpki-client