This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/73JWSJI-y2D3DT2gLvZayxJIazA.roa File: 73JWSJI-y2D3DT2gLvZayxJIazA.roa (raw, json) Hash identifier: F81SKHOyHMGw2W3WVKDvkYHqdyuIWrtjmtj6Z0Phuwo= Subject key identifier: EF:72:56:48:92:3E:CB:60:F7:0D:3D:A0:2E:F6:5A:CB:12:48:6B:30 Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B7910B3525BC1553EC7C99953C1EA2499 Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/73JWSJI-y2D3DT2gLvZayxJIazA.roa Signing time: Thu 01 Jan 2026 10:18:16 +0000 ROA not before: Thu 01 Jan 2026 10:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214480 IP address blocks: 2a12:bec4:17f0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:b3:52:5b:c1:55:3e:c7:c9:99:53:c1:ea:24:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 10:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ef725648923ecb60f70d3da02ef65acb12486b30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6b:47:e1:aa:f5:95:e1:cd:10:3f:c9:34:5f: ea:c1:82:b3:71:bc:6a:38:de:7c:0b:1a:95:22:08: dd:09:00:e4:4e:22:22:f4:db:56:c7:43:f3:a5:b1: fc:19:fd:3a:f4:c8:0c:de:6d:5e:a4:54:dc:f8:cd: e5:87:6c:62:10:31:4a:d3:be:4d:e1:c1:d3:d1:44: cf:95:aa:a2:ab:1a:52:f0:31:65:f8:e2:53:97:3b: 1b:d7:1a:3b:18:f5:50:59:bb:ff:6a:b6:71:95:18: d9:70:8a:63:6e:98:e9:72:57:2c:65:5e:b3:ef:9c: 47:f9:a2:3e:58:ad:59:26:6f:87:72:51:25:4f:0a: fc:24:8e:7d:5a:e0:f5:1d:7b:be:96:1d:2e:39:31: f9:35:96:a4:14:51:0e:3a:ba:6d:f3:36:2c:f2:43: 98:32:d8:31:a7:14:a9:9c:95:b3:ae:7a:57:91:d6: 1d:bf:ff:18:a8:63:88:7f:65:c6:b9:85:b6:69:86: b0:be:1c:4d:99:d6:30:26:90:d4:24:ea:66:a0:2d: d4:22:d4:32:7d:64:3c:1f:13:d6:3e:d6:65:a0:14: 1b:a3:06:1e:40:96:f5:7c:73:d5:ba:95:af:4f:00: 34:25:e2:2a:ca:04:9b:56:f3:a0:21:78:2d:29:1f: 9b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:72:56:48:92:3E:CB:60:F7:0D:3D:A0:2E:F6:5A:CB:12:48:6B:30 X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/73JWSJI-y2D3DT2gLvZayxJIazA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec4:17f0::/44 Signature Algorithm: sha256WithRSAEncryption 07:9c:ad:16:bc:a9:d9:38:43:1f:30:b8:c3:e3:ec:18:66:1f: 33:8a:8d:2e:e0:e6:e2:f9:19:ac:b4:2e:fd:de:63:44:b4:bd: 3a:55:a5:18:e7:bf:7a:c8:0b:49:6e:09:1e:6b:f8:8d:a9:10: 42:c8:83:a7:6b:a7:dd:97:ea:05:da:02:3e:53:8d:fc:bd:d1: b5:24:2f:f1:71:da:a8:66:52:a8:73:e1:6e:cd:98:03:60:18: 78:ef:90:e6:29:2e:44:b5:57:bc:60:a9:3f:b1:47:95:f8:e0: 72:43:ea:d8:eb:c5:e0:80:dc:22:8c:b7:ca:7e:4e:92:bd:9e: 6d:0d:b5:12:fd:cc:5a:37:ee:f6:2a:85:80:3d:eb:7e:95:fb: 92:22:e3:b1:26:c3:12:24:23:f8:ff:97:30:54:0c:ca:f2:d5: 1b:17:42:12:36:73:5a:9b:ea:a3:f5:50:e2:6b:8a:dd:71:99: f8:c1:c3:72:66:01:5d:4b:57:9b:62:d1:45:8a:2f:c3:62:3f: 8a:c4:f4:49:7b:b3:52:da:3f:c5:6a:1c:f9:6c:4d:9e:cc:58: 63:2f:0d:70:24:77:b2:3c:d0:b6:e9:f3:43:95:db:e0:86:6c: 0e:4a:c2:dd:51:bf:0f:f1:7a:de:91:d4:9c:ce:99:30:42:17: 4e:26:19:32 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5ELNSW8FVPsfJmVPB6iSZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAxMTAxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjcyNTY0ODkyM2VjYjYwZjcwZDNkYTAyZWY2NWFjYjEyNDg2YjMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWtH4ar1leHNED/JNF/qwYKzcbxq ON58CxqVIgjdCQDkTiIi9NtWx0PzpbH8Gf069MgM3m1epFTc+M3lh2xiEDFK075N 4cHT0UTPlaqiqxpS8DFl+OJTlzsb1xo7GPVQWbv/arZxlRjZcIpjbpjpclcsZV6z 75xH+aI+WK1ZJm+HclElTwr8JI59WuD1HXu+lh0uOTH5NZakFFEOOrpt8zYs8kOY MtgxpxSpnJWzrnpXkdYdv/8YqGOIf2XGuYW2aYawvhxNmdYwJpDUJOpmoC3UItQy fWQ8HxPWPtZloBQbowYeQJb1fHPVupWvTwA0JeIqygSbVvOgIXgtKR+brwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFO9yVkiSPstg9w09oC72WssSSGswMB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvNzNKV1NKSS15MkQzRFQyZ0x2WmF5eEpJYXpBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+xBfw MA0GCSqGSIb3DQEBCwUAA4IBAQAHnK0WvKnZOEMfMLjD4+wYZh8zio0u4Obi+Rms tC793mNEtL06VaUY5796yAtJbgkea/iNqRBCyIOna6fdl+oF2gI+U438vdG1JC/x cdqoZlKoc+FuzZgDYBh475DmKS5EtVe8YKk/sUeV+OByQ+rY68XggNwijLfKfk6S vZ5tDbUS/cxaN+72KoWAPet+lfuSIuOxJsMSJCP4/5cwVAzK8tUbF0ISNnNam+qj 9VDia4rdcZn4wcNyZgFdS1ebYtFFii/DYj+KxPRJe7NS2j/Fahz5bE2ezFhjLw1w JHeyPNC26fNDldvghmwOSsLdUb8P8XrekdSczpkwQhdOJhky -----END CERTIFICATE-----Generated at Tue Jan 20 02:48:06 2026 by rpki-client