This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/czUEc-UKq5Cer9PihQFNOdk6jIs.roa File: czUEc-UKq5Cer9PihQFNOdk6jIs.roa (raw, json) Hash identifier: vjMyzi15ZHYh/dsTiV6tYJ9XkPG62RUWeSWxynf2V1M= Subject key identifier: 73:35:04:73:E5:0A:AB:90:9E:AF:D3:E2:85:01:4D:39:D9:3A:8C:8B Certificate issuer: /CN=9051ebf8c28f817b7f148bfc95cc2b5b4cb30089 Certificate serial: 019B7A5B4B00037DBC6A3A65B784A4C8C1D5 Authority key identifier: 90:51:EB:F8:C2:8F:81:7B:7F:14:8B:FC:95:CC:2B:5B:4C:B3:00:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/czUEc-UKq5Cer9PihQFNOdk6jIs.roa Signing time: Thu 01 Jan 2026 16:19:21 +0000 ROA not before: Thu 01 Jan 2026 16:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 53358 IP address blocks: 2a13:5880::/30 maxlen: 30 2a13:5884::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:4b:00:03:7d:bc:6a:3a:65:b7:84:a4:c8:c1:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9051ebf8c28f817b7f148bfc95cc2b5b4cb30089 Validity Not Before: Jan 1 16:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=73350473e50aab909eafd3e285014d39d93a8c8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ec:0b:c4:4e:e9:df:65:ef:dc:3c:64:bc:cc: c2:9a:9c:95:c5:dd:04:8a:82:d7:21:e5:7f:e1:6f: e4:be:c0:5b:fd:9d:c4:16:be:12:b7:49:b5:69:44: 43:37:aa:2c:44:7f:97:76:7e:4b:ab:58:f0:7d:36: 1d:af:56:94:99:c4:0b:bb:23:98:08:d5:dc:f3:84: 32:9c:99:e7:8f:bf:ee:d1:08:28:3b:e6:85:7e:a8: c9:93:eb:1b:b6:5e:c4:c1:95:94:28:57:ed:c7:cc: 11:0d:b5:af:f0:4c:68:77:4c:ac:37:cb:29:5f:9b: 6e:d1:0e:14:e9:b5:8f:db:df:33:84:90:7a:1a:56: fc:19:62:40:b5:f1:68:df:4c:91:af:d9:b3:12:bb: e8:8b:81:00:2e:e0:09:03:46:8e:dd:ab:b6:82:7e: a5:ac:eb:d8:6e:40:04:6b:6a:14:89:2f:b8:51:79: fc:23:ac:8a:fd:ba:49:e1:08:81:b9:b4:37:e4:a1: 7a:59:46:72:20:80:5e:41:99:2f:49:b9:87:63:d2: af:16:dd:60:aa:4e:3c:13:21:4a:d0:95:6f:79:3e: 16:78:1b:73:3c:a8:d8:48:f8:46:1c:dc:0b:e8:1d: 7a:40:30:d6:1d:79:f1:14:76:0f:e4:34:9a:e3:d0: 1c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:35:04:73:E5:0A:AB:90:9E:AF:D3:E2:85:01:4D:39:D9:3A:8C:8B X509v3 Authority Key Identifier: keyid:90:51:EB:F8:C2:8F:81:7B:7F:14:8B:FC:95:CC:2B:5B:4C:B3:00:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/czUEc-UKq5Cer9PihQFNOdk6jIs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:5880::/29 Signature Algorithm: sha256WithRSAEncryption 30:49:f9:24:fe:c8:fb:45:da:09:ed:d2:e0:ef:f3:cb:bc:d4: 51:98:57:35:96:18:32:63:ee:f9:74:69:98:e4:26:8a:98:ca: a2:f0:81:b3:4a:4b:d8:89:1a:c3:2e:35:97:b1:a0:19:e2:94: 8b:90:91:26:98:a3:86:6c:8f:22:9e:00:36:60:6d:de:0d:4f: b5:05:b7:fe:bf:05:1c:34:09:c0:e3:38:12:32:c2:66:c4:35: ee:87:11:e7:68:30:ca:a5:db:63:e5:9b:b2:09:54:41:cd:3b: 9e:a3:bd:3d:23:ad:ff:e7:38:a4:06:18:83:b2:50:ae:d1:a7: a5:d9:5f:58:a8:67:6b:86:84:da:2d:4a:de:df:00:16:e7:d9: cb:f7:78:19:2d:4d:25:0c:9c:d2:ea:59:be:a6:f2:37:23:33: 9e:7b:73:36:32:2b:ad:63:76:e3:88:c3:ef:63:1a:d0:b6:16: 1d:c2:18:34:9f:06:40:4a:94:76:a3:9a:42:19:f1:23:6f:2c: 5c:48:32:eb:04:cd:e5:db:02:ea:26:d5:b2:8d:4a:2b:4b:8d: 8b:7c:2e:29:bf:4f:30:fd:f9:1a:e0:a3:2c:d5:90:6d:b6:3b: fd:51:c5:c1:af:2b:08:e1:2b:a3:66:49:c2:e7:23:55:29:74: 83:2d:19:d9 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt6W0sAA328ajplt4SkyMHVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwNTFlYmY4YzI4ZjgxN2I3ZjE0OGJmYzk1Y2MyYjViNGNi MzAwODkwHhcNMjYwMTAxMTYxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzM1MDQ3M2U1MGFhYjkwOWVhZmQzZTI4NTAxNGQzOWQ5M2E4YzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyewLxE7p32Xv3DxkvMzCmpyVxd0E ioLXIeV/4W/kvsBb/Z3EFr4St0m1aURDN6osRH+Xdn5Lq1jwfTYdr1aUmcQLuyOY CNXc84QynJnnj7/u0QgoO+aFfqjJk+sbtl7EwZWUKFftx8wRDbWv8Exod0ysN8sp X5tu0Q4U6bWP298zhJB6Glb8GWJAtfFo30yRr9mzErvoi4EALuAJA0aO3au2gn6l rOvYbkAEa2oUiS+4UXn8I6yK/bpJ4QiBubQ35KF6WUZyIIBeQZkvSbmHY9KvFt1g qk48EyFK0JVveT4WeBtzPKjYSPhGHNwL6B16QDDWHXnxFHYP5DSa49Ac1wIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFHM1BHPlCquQnq/T4oUBTTnZOoyLMB8GA1UdIwQY MBaAFJBR6/jCj4F7fxSL/JXMK1tMswCJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0ZIci1NS1BnWHRfRkl2OGxjd3JXMHl6QUlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My83OWI1OTctNmIwYy00ZDAzLWJmNDAt MzEyNDdmM2E0NTM5LzEvY3pVRWMtVUtxNUNlcjlQaWhRRk5PZGs2aklzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My83OWI1OTctNmIwYy00ZDAzLWJmNDAtMzEyNDdmM2E0NTM5 LzEva0ZIci1NS1BnWHRfRkl2OGxjd3JXMHl6QUlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhNYgDAN BgkqhkiG9w0BAQsFAAOCAQEAMEn5JP7I+0XaCe3S4O/zy7zUUZhXNZYYMmPu+XRp mOQmipjKovCBs0pL2Ikawy41l7GgGeKUi5CRJpijhmyPIp4ANmBt3g1PtQW3/r8F HDQJwOM4EjLCZsQ17ocR52gwyqXbY+WbsglUQc07nqO9PSOt/+c4pAYYg7JQrtGn pdlfWKhna4aE2i1K3t8AFufZy/d4GS1NJQyc0upZvqbyNyMznntzNjIrrWN244jD 72Ma0LYWHcIYNJ8GQEqUdqOaQhnxI28sXEgy6wTN5dsC6ibVso1KK0uNi3wuKb9P MP35GuCjLNWQbbY7/VHFwa8rCOEro2ZJwucjVSl0gy0Z2Q== -----END CERTIFICATE-----Generated at Tue Feb 10 04:26:44 2026 by rpki-client