This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/bEzbtCm5CNe-MvEBHqIPmPMulYA.roa File: bEzbtCm5CNe-MvEBHqIPmPMulYA.roa (raw, json) Hash identifier: udEN/VxmeRvditsO1O3EB+rspdAUzT1O/BK7zjQ/Aro= Subject key identifier: 6C:4C:DB:B4:29:B9:08:D7:BE:32:F1:01:1E:A2:0F:98:F3:2E:95:80 Certificate issuer: /CN=9051ebf8c28f817b7f148bfc95cc2b5b4cb30089 Certificate serial: 019B7A5B4B685A38AFCAF9005A1AAFEC2B10 Authority key identifier: 90:51:EB:F8:C2:8F:81:7B:7F:14:8B:FC:95:CC:2B:5B:4C:B3:00:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/bEzbtCm5CNe-MvEBHqIPmPMulYA.roa Signing time: Thu 01 Jan 2026 16:19:22 +0000 ROA not before: Thu 01 Jan 2026 16:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60939 IP address blocks: 2a13:5880::/30 maxlen: 30 2a13:5884::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:4b:68:5a:38:af:ca:f9:00:5a:1a:af:ec:2b:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9051ebf8c28f817b7f148bfc95cc2b5b4cb30089 Validity Not Before: Jan 1 16:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c4cdbb429b908d7be32f1011ea20f98f32e9580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:2a:29:bb:ad:89:37:12:47:2f:e3:3b:52:ec: ef:18:a7:a4:9c:1f:ae:e0:38:d3:de:f3:6d:6b:75: 90:91:ec:ed:d6:0c:e6:ed:ee:8e:14:74:7a:fe:5d: 2b:e6:d8:2b:51:2a:3f:99:0f:d2:00:bd:25:57:46: a7:31:60:72:c0:8d:9c:54:fe:4a:35:fb:64:7c:65: 45:66:6b:a7:1e:fb:ff:20:dd:e5:3a:29:d6:82:f7: 56:9a:80:f8:f4:39:ad:02:cd:73:0b:44:87:dc:c5: 13:e3:dc:ee:f2:d6:08:49:f4:27:99:69:00:a0:df: 1c:83:db:f9:f1:98:32:73:21:b8:5b:92:1c:06:c7: 6d:b0:d1:d9:42:d4:6d:7d:e5:8b:cf:59:e2:33:1b: e1:de:99:c7:9f:44:48:3a:68:eb:bc:20:86:29:a0: ac:be:d1:03:3f:0d:f8:df:a3:d9:94:26:04:08:31: 7c:f4:1c:3b:11:07:d6:ae:dd:3a:6a:8c:34:f0:d4: 67:b4:a9:b0:7b:58:88:fb:c0:3a:d4:94:cf:09:df: a5:6b:c5:8d:17:7d:c9:2f:9d:9f:be:19:6e:22:76: d8:84:1d:23:ee:fc:e5:19:c9:89:07:d6:f7:f9:73: 92:5c:73:be:7d:ff:1b:a2:d7:54:be:df:55:6e:43: 47:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:4C:DB:B4:29:B9:08:D7:BE:32:F1:01:1E:A2:0F:98:F3:2E:95:80 X509v3 Authority Key Identifier: keyid:90:51:EB:F8:C2:8F:81:7B:7F:14:8B:FC:95:CC:2B:5B:4C:B3:00:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/bEzbtCm5CNe-MvEBHqIPmPMulYA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:5880::/29 Signature Algorithm: sha256WithRSAEncryption 28:b7:0c:36:1f:70:61:24:e1:41:a3:90:cb:db:fd:e6:d4:81: 76:e8:a5:aa:79:c8:f4:c6:96:75:26:15:80:9f:d9:2f:1c:bf: 56:d6:0a:c0:94:a9:f1:11:6c:ec:21:92:16:ce:9b:86:32:48: 90:f6:8e:5d:28:9b:0a:52:6a:92:1b:4a:72:b4:57:ce:a7:86: 61:dd:03:94:16:f2:a3:80:bc:f2:c1:a1:7e:eb:e9:18:14:33: f4:42:9c:2d:b7:81:7d:2a:04:12:59:df:21:cb:5f:9c:0c:d5: a3:4f:c3:22:29:3d:7d:41:76:8c:26:38:8f:da:a6:c6:e9:96: c4:93:6c:79:33:d7:f5:82:3e:7e:4a:d3:e5:d5:a3:8c:b9:ec: 6c:7c:00:8d:de:19:74:21:6b:03:a2:06:6a:67:f0:ec:14:bb: 8c:8c:82:9e:bb:41:d7:32:ed:14:fb:2d:32:a4:10:a0:08:bf: 9b:89:58:9b:e0:2b:fc:b3:21:f3:79:72:a7:fb:c8:be:8f:87: e4:c0:1c:d9:10:33:d6:d1:d8:2d:82:3b:54:9b:91:98:01:50: 24:95:40:b3:c9:e1:87:19:8e:34:2d:4d:71:3d:d9:49:b8:e5: a3:90:35:f2:22:fc:b0:b7:90:59:74:84:96:d6:37:6e:bd:a1: 2c:09:a3:b1 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt6W0toWjivyvkAWhqv7CsQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwNTFlYmY4YzI4ZjgxN2I3ZjE0OGJmYzk1Y2MyYjViNGNi MzAwODkwHhcNMjYwMTAxMTYxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzRjZGJiNDI5YjkwOGQ3YmUzMmYxMDExZWEyMGY5OGYzMmU5NTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Sopu62JNxJHL+M7UuzvGKeknB+u 4DjT3vNta3WQkezt1gzm7e6OFHR6/l0r5tgrUSo/mQ/SAL0lV0anMWBywI2cVP5K NftkfGVFZmunHvv/IN3lOinWgvdWmoD49DmtAs1zC0SH3MUT49zu8tYISfQnmWkA oN8cg9v58ZgycyG4W5IcBsdtsNHZQtRtfeWLz1niMxvh3pnHn0RIOmjrvCCGKaCs vtEDPw3436PZlCYECDF89Bw7EQfWrt06aow08NRntKmwe1iI+8A61JTPCd+la8WN F33JL52fvhluInbYhB0j7vzlGcmJB9b3+XOSXHO+ff8botdUvt9VbkNHeQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFGxM27QpuQjXvjLxAR6iD5jzLpWAMB8GA1UdIwQY MBaAFJBR6/jCj4F7fxSL/JXMK1tMswCJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0ZIci1NS1BnWHRfRkl2OGxjd3JXMHl6QUlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My83OWI1OTctNmIwYy00ZDAzLWJmNDAt MzEyNDdmM2E0NTM5LzEvYkV6YnRDbTVDTmUtTXZFQkhxSVBtUE11bFlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My83OWI1OTctNmIwYy00ZDAzLWJmNDAtMzEyNDdmM2E0NTM5 LzEva0ZIci1NS1BnWHRfRkl2OGxjd3JXMHl6QUlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhNYgDAN BgkqhkiG9w0BAQsFAAOCAQEAKLcMNh9wYSThQaOQy9v95tSBduilqnnI9MaWdSYV gJ/ZLxy/VtYKwJSp8RFs7CGSFs6bhjJIkPaOXSibClJqkhtKcrRXzqeGYd0DlBby o4C88sGhfuvpGBQz9EKcLbeBfSoEElnfIctfnAzVo0/DIik9fUF2jCY4j9qmxumW xJNseTPX9YI+fkrT5dWjjLnsbHwAjd4ZdCFrA6IGamfw7BS7jIyCnrtB1zLtFPst MqQQoAi/m4lYm+Ar/LMh83lyp/vIvo+H5MAc2RAz1tHYLYI7VJuRmAFQJJVAs8nh hxmONC1NcT3ZSbjlo5A18iL8sLeQWXSEltY3br2hLAmjsQ== -----END CERTIFICATE-----Generated at Tue Feb 10 04:48:59 2026 by rpki-client