This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/79iCRRESN5wvVuF1ZDTTK9eU7Ls.roa File: 79iCRRESN5wvVuF1ZDTTK9eU7Ls.roa (raw, json) Hash identifier: TwC1wXoC93k+BHbzoiYuNzyC7OKrVNYd/odjfeNYJLg= Subject key identifier: EF:D8:82:45:11:12:37:9C:2F:56:E1:75:64:34:D3:2B:D7:94:EC:BB Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B7910962C2113F0607FC12642D8B31BE6 Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/79iCRRESN5wvVuF1ZDTTK9eU7Ls.roa Signing time: Thu 01 Jan 2026 10:18:08 +0000 ROA not before: Thu 01 Jan 2026 10:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199654 IP address blocks: 2a12:bec0:200::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:96:2c:21:13:f0:60:7f:c1:26:42:d8:b3:1b:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 10:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=efd882451112379c2f56e1756434d32bd794ecbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:eb:aa:21:32:ad:08:73:40:f5:a8:a0:19:47: 48:cc:e7:3a:a2:51:f1:50:51:e9:46:ef:9c:f7:54: f9:24:83:c3:12:93:1a:1e:c8:a6:65:a6:8d:9a:21: cc:35:20:bd:39:65:72:c4:9a:73:b8:59:71:f8:b5: cf:8a:5d:2c:68:72:a8:74:4b:d1:3c:95:0d:09:fd: a1:df:a3:be:f8:16:0a:30:c9:7a:a1:21:b8:9a:9d: ff:a6:46:a6:c7:e6:f8:3f:fd:b5:a5:f6:61:cf:e1: a5:a6:46:81:9a:4b:8f:e0:77:e4:25:59:36:02:6d: b9:e4:36:33:af:b1:7a:38:53:3a:d8:d0:b6:45:8e: c5:5e:b5:42:ef:98:9f:04:f3:fa:87:6e:ca:cf:e7: f7:55:0b:a1:0a:6a:fc:0d:b7:cd:d9:f6:a4:d4:eb: b7:6d:36:27:79:fc:6b:74:94:e0:ca:16:f7:c6:8c: ca:e6:b4:e9:12:ce:3d:49:4b:e0:f9:4e:8b:c5:1a: b2:51:4b:e7:df:7f:99:86:ef:28:98:34:e4:5d:ca: 2a:50:8f:5d:69:65:63:9b:45:66:b4:75:be:24:29: ac:3a:6a:bd:6d:11:15:c5:df:dc:af:c7:de:89:cf: a0:93:53:bd:ce:d0:dc:4c:15:47:51:60:78:f1:14: b4:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:D8:82:45:11:12:37:9C:2F:56:E1:75:64:34:D3:2B:D7:94:EC:BB X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/79iCRRESN5wvVuF1ZDTTK9eU7Ls.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec0:200::/44 Signature Algorithm: sha256WithRSAEncryption 8a:12:7d:69:b0:25:1d:00:d9:53:5b:cc:b9:9f:17:42:d0:9a: 2b:c4:4e:da:6a:1a:6c:49:5a:47:92:74:8e:68:ae:e1:ee:02: 26:8c:46:6a:7c:77:a0:3e:d9:f0:8e:ac:ce:6b:41:eb:b7:f4: f3:18:b4:4d:96:10:12:b9:74:26:57:f2:3e:a2:12:9a:11:0a: 0f:0b:79:19:fc:a7:10:5c:4d:48:b6:06:8a:0b:52:ed:3c:fc: 42:2b:bd:9d:87:80:42:70:81:dc:0b:63:a9:51:ee:79:33:79: 6f:1a:d7:17:5d:96:74:b2:ec:bd:59:c5:fb:59:0e:40:24:02: b9:2d:a2:7f:76:28:3b:4b:17:05:12:97:97:ba:01:4c:87:7f: 60:b8:58:87:8e:5d:31:a9:34:83:da:f7:81:a0:e8:a2:35:f3: 46:31:3c:9e:f7:c7:2a:04:42:7d:58:0d:c5:b4:05:42:bf:79: f1:ec:dd:93:b2:18:d8:60:0f:f9:2a:f7:17:4e:90:6f:9f:ef: 71:b5:d9:58:94:42:ec:00:bf:05:df:5e:50:bd:8e:36:0b:ad: eb:90:d2:37:d5:d6:81:dd:6b:ad:1e:3b:c0:1d:c5:4b:0a:a1: 74:9d:4d:cc:ec:d8:e1:60:95:a8:7b:fd:41:c8:46:cc:35:13: e1:a3:5f:06 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EJYsIRPwYH/BJkLYsxvmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAxMTAxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZmQ4ODI0NTExMTIzNzljMmY1NmUxNzU2NDM0ZDMyYmQ3OTRlY2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+uqITKtCHNA9aigGUdIzOc6olHx UFHpRu+c91T5JIPDEpMaHsimZaaNmiHMNSC9OWVyxJpzuFlx+LXPil0saHKodEvR PJUNCf2h36O++BYKMMl6oSG4mp3/pkamx+b4P/21pfZhz+GlpkaBmkuP4HfkJVk2 Am255DYzr7F6OFM62NC2RY7FXrVC75ifBPP6h27Kz+f3VQuhCmr8DbfN2fak1Ou3 bTYnefxrdJTgyhb3xozK5rTpEs49SUvg+U6LxRqyUUvn33+Zhu8omDTkXcoqUI9d aWVjm0VmtHW+JCmsOmq9bREVxd/cr8feic+gk1O9ztDcTBVHUWB48RS0qwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFO/YgkUREjecL1bhdWQ00yvXlOy7MB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvNzlpQ1JSRVNONXd2VnVGMVpEVFRLOWVVN0xzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+wAIA MA0GCSqGSIb3DQEBCwUAA4IBAQCKEn1psCUdANlTW8y5nxdC0JorxE7aahpsSVpH knSOaK7h7gImjEZqfHegPtnwjqzOa0Hrt/TzGLRNlhASuXQmV/I+ohKaEQoPC3kZ /KcQXE1ItgaKC1LtPPxCK72dh4BCcIHcC2OpUe55M3lvGtcXXZZ0suy9WcX7WQ5A JAK5LaJ/dig7SxcFEpeXugFMh39guFiHjl0xqTSD2veBoOiiNfNGMTye98cqBEJ9 WA3FtAVCv3nx7N2TshjYYA/5KvcXTpBvn+9xtdlYlELsAL8F315QvY42C63rkNI3 1daB3WutHjvAHcVLCqF0nU3M7NjhYJWoe/1ByEbMNRPho18G -----END CERTIFICATE-----Generated at Mon Jan 19 23:21:59 2026 by rpki-client