This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/604a53-c658-4ef2-8ceb-d7a829ce76e7/1/73YyR5FHSrGikXmoFdt-u87EbLY.roa File: 73YyR5FHSrGikXmoFdt-u87EbLY.roa (raw, json) Hash identifier: tDxXok8jabxviQSDV+iOxxhZu5aLP8xDqLw+KYO6rW8= Subject key identifier: EF:76:32:47:91:47:4A:B1:A2:91:79:A8:15:DB:7E:BB:CE:C4:6C:B6 Certificate issuer: /CN=b6b77ec224c0b98ef979d0b0c5e587e4cb41f6c2 Certificate serial: 019B76EAAE08CF62A18D5B0E1B21A235BED1 Authority key identifier: B6:B7:7E:C2:24:C0:B9:8E:F9:79:D0:B0:C5:E5:87:E4:CB:41:F6:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/trd-wiTAuY75edCwxeWH5MtB9sI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/604a53-c658-4ef2-8ceb-d7a829ce76e7/1/73YyR5FHSrGikXmoFdt-u87EbLY.roa Signing time: Thu 01 Jan 2026 00:17:30 +0000 ROA not before: Thu 01 Jan 2026 00:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61218 IP address blocks: 2a14:c700::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/604a53-c658-4ef2-8ceb-d7a829ce76e7/1/trd-wiTAuY75edCwxeWH5MtB9sI.crl rsync://rpki.ripe.net/repository/DEFAULT/38/604a53-c658-4ef2-8ceb-d7a829ce76e7/1/trd-wiTAuY75edCwxeWH5MtB9sI.mft rsync://rpki.ripe.net/repository/DEFAULT/trd-wiTAuY75edCwxeWH5MtB9sI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:ae:08:cf:62:a1:8d:5b:0e:1b:21:a2:35:be:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6b77ec224c0b98ef979d0b0c5e587e4cb41f6c2 Validity Not Before: Jan 1 00:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ef76324791474ab1a29179a815db7ebbcec46cb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a8:70:09:98:3a:2c:50:01:46:23:cd:4b:2f: 69:3b:d9:c5:d2:d9:f3:33:ca:8f:29:cd:7c:b5:3b: a8:4e:09:4b:ec:32:24:a2:34:3d:ff:aa:78:99:6a: 43:88:75:9b:47:73:ec:20:3e:a3:24:39:f4:cc:4f: 64:20:eb:d0:fe:ba:f1:1a:b1:f1:73:e3:10:2c:9a: 21:46:b8:e8:ae:d8:70:1c:07:17:65:8f:89:c8:b9: 7f:86:95:7a:48:cd:6a:b7:98:78:b1:00:3a:d3:7f: d7:6c:71:da:0a:79:19:bd:c2:97:8b:b7:7a:49:e0: 12:a2:51:76:38:a4:7e:82:d3:7e:55:8d:df:a1:3e: 13:d4:25:f3:85:f7:ae:b8:bc:0b:25:e7:f8:29:a0: af:dd:b2:39:66:4f:99:e3:9a:b6:a8:2c:32:d0:fd: 1e:87:c1:c8:b1:db:e0:27:f1:7b:fe:da:04:98:51: 71:29:77:7c:b2:59:91:7f:3d:98:ed:e9:cd:eb:77: fe:58:b8:12:9d:7b:ae:e6:9a:24:59:dd:a5:fa:b5: a8:bb:0f:e3:c0:30:4c:eb:6d:30:de:f2:87:8b:3c: 47:6e:06:61:7d:4d:3f:35:8c:8f:f9:f1:f7:f2:56: 25:e9:00:07:c3:83:ee:da:89:64:25:7e:39:45:4c: 05:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:76:32:47:91:47:4A:B1:A2:91:79:A8:15:DB:7E:BB:CE:C4:6C:B6 X509v3 Authority Key Identifier: keyid:B6:B7:7E:C2:24:C0:B9:8E:F9:79:D0:B0:C5:E5:87:E4:CB:41:F6:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/trd-wiTAuY75edCwxeWH5MtB9sI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/604a53-c658-4ef2-8ceb-d7a829ce76e7/1/73YyR5FHSrGikXmoFdt-u87EbLY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/604a53-c658-4ef2-8ceb-d7a829ce76e7/1/trd-wiTAuY75edCwxeWH5MtB9sI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:c700::/29 Signature Algorithm: sha256WithRSAEncryption 98:bf:c9:bc:fc:20:a2:8b:a9:83:b7:5f:4c:ed:b0:1d:3b:08: 32:8d:44:7e:c3:35:94:67:4a:03:6a:a0:88:81:fb:ca:d6:6a: 2e:5f:62:b5:c4:e7:8d:52:2e:18:85:01:c6:7d:ad:55:97:b2: 20:ae:7e:46:bd:d3:8c:2f:0b:74:14:c1:62:bf:9e:33:e3:44: aa:2e:ec:33:ba:8e:34:f8:9b:cd:da:c3:4b:20:a8:6f:3e:9c: c7:18:bc:9a:54:46:fd:42:8a:64:61:10:ba:e5:63:61:89:bd: 3c:6f:b2:23:a4:23:fd:18:32:66:4c:f1:9b:95:1c:d8:a1:16: 36:66:0a:f1:18:da:e3:1a:63:85:95:52:8d:71:0a:07:0f:94: a6:cf:05:66:3b:71:4f:e2:40:ca:a7:20:b4:89:73:99:95:96: 57:d8:3f:58:3a:43:75:6b:90:79:64:25:16:96:32:6a:67:e5: 4b:2d:7b:72:3f:76:4b:a9:a8:0a:60:f7:1f:99:31:7a:eb:8a: b6:2e:93:d4:45:4d:b2:d1:f2:b9:bf:f2:5e:3a:00:21:f5:6e: 3c:3d:35:44:39:cd:26:13:bb:b5:84:62:84:a4:39:25:88:cc: 2c:be:52:3d:1c:10:fa:d6:f2:73:0f:a3:16:59:7a:80:f5:3e: 3d:f6:fe:80 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt26q4Iz2KhjVsOGyGiNb7RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2Yjc3ZWMyMjRjMGI5OGVmOTc5ZDBiMGM1ZTU4N2U0Y2I0 MWY2YzIwHhcNMjYwMTAxMDAxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjc2MzI0NzkxNDc0YWIxYTI5MTc5YTgxNWRiN2ViYmNlYzQ2Y2I2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6hwCZg6LFABRiPNSy9pO9nF0tnz M8qPKc18tTuoTglL7DIkojQ9/6p4mWpDiHWbR3PsID6jJDn0zE9kIOvQ/rrxGrHx c+MQLJohRrjorthwHAcXZY+JyLl/hpV6SM1qt5h4sQA603/XbHHaCnkZvcKXi7d6 SeASolF2OKR+gtN+VY3foT4T1CXzhfeuuLwLJef4KaCv3bI5Zk+Z45q2qCwy0P0e h8HIsdvgJ/F7/toEmFFxKXd8slmRfz2Y7enN63f+WLgSnXuu5pokWd2l+rWouw/j wDBM620w3vKHizxHbgZhfU0/NYyP+fH38lYl6QAHw4Pu2olkJX45RUwFoQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFO92MkeRR0qxopF5qBXbfrvOxGy2MB8GA1UdIwQY MBaAFLa3fsIkwLmO+XnQsMXlh+TLQfbCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHJkLXdpVEF1WTc1ZWRDd3hlV0g1TXRCOXNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC82MDRhNTMtYzY1OC00ZWYyLThjZWIt ZDdhODI5Y2U3NmU3LzEvNzNZeVI1RkhTckdpa1htb0ZkdC11ODdFYkxZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC82MDRhNTMtYzY1OC00ZWYyLThjZWItZDdhODI5Y2U3NmU3 LzEvdHJkLXdpVEF1WTc1ZWRDd3hlV0g1TXRCOXNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhTHADAN BgkqhkiG9w0BAQsFAAOCAQEAmL/JvPwgooupg7dfTO2wHTsIMo1EfsM1lGdKA2qg iIH7ytZqLl9itcTnjVIuGIUBxn2tVZeyIK5+Rr3TjC8LdBTBYr+eM+NEqi7sM7qO NPibzdrDSyCobz6cxxi8mlRG/UKKZGEQuuVjYYm9PG+yI6Qj/RgyZkzxm5Uc2KEW NmYK8Rja4xpjhZVSjXEKBw+Ups8FZjtxT+JAyqcgtIlzmZWWV9g/WDpDdWuQeWQl FpYyamflSy17cj92S6moCmD3H5kxeuuKti6T1EVNstHyub/yXjoAIfVuPD01RDnN JhO7tYRihKQ5JYjMLL5SPRwQ+tbycw+jFll6gPU+Pfb+gA== -----END CERTIFICATE-----Generated at Mon Jan 26 19:06:04 2026 by rpki-client