This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/kJ79XeVCgRV25HKpL8ktREfXHlw.roa File: kJ79XeVCgRV25HKpL8ktREfXHlw.roa (raw, json) Hash identifier: 7gNr/5O63l4yUAcolVBkp40kuH2WYLPsyzzPi2c2gEI= Subject key identifier: 90:9E:FD:5D:E5:42:81:15:76:E4:72:A9:2F:C9:2D:44:47:D7:1E:5C Certificate issuer: /CN=4d3f54f304e6b851608c293978b16ba51ac0350e Certificate serial: 019B7D5CE81C5DB08D477EFBB28ED6B49B71 Authority key identifier: 4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/kJ79XeVCgRV25HKpL8ktREfXHlw.roa Signing time: Fri 02 Jan 2026 06:19:59 +0000 ROA not before: Fri 02 Jan 2026 06:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8434 IP address blocks: 2001:67c:2f50::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:e8:1c:5d:b0:8d:47:7e:fb:b2:8e:d6:b4:9b:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d3f54f304e6b851608c293978b16ba51ac0350e Validity Not Before: Jan 2 06:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=909efd5de542811576e472a92fc92d4447d71e5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e1:8d:18:24:44:f8:fd:4f:8b:e5:96:99:3d: 1b:c4:9a:f2:36:74:89:3a:0b:24:f9:ad:7d:8e:3f: fe:45:81:0e:c9:99:9c:58:a2:b6:08:ec:11:f3:80: 5d:0e:f9:c9:b5:2e:cf:d8:0f:d3:27:17:6e:8a:d8: 61:65:87:25:98:8f:4c:6c:c5:79:a4:0c:e2:fe:6f: e6:ee:cf:e5:25:fa:b1:32:f8:22:d2:5a:3b:cb:83: bb:a4:9f:97:23:eb:8d:19:53:7b:bd:0b:b8:40:ee: e8:f0:26:7d:94:dc:b7:84:5b:2c:eb:d3:11:0f:fe: f0:9d:74:4c:1a:76:d9:62:c6:ba:47:32:7c:8d:a0: 72:3b:dc:01:91:74:c0:0a:42:c3:a6:9e:59:4b:c4: ea:be:38:91:da:57:96:5f:12:f6:06:4d:9e:85:42: b1:12:38:ec:0a:aa:76:72:d4:1b:88:49:e1:98:dd: 14:92:f9:df:7e:0c:8a:83:81:02:54:a5:88:f4:f5: 9b:a6:ee:67:6f:b8:07:16:36:44:3d:88:c3:f3:2c: cf:a2:5e:ae:9f:31:dd:6d:14:89:ec:c0:f5:3a:cf: bc:5d:e2:3c:d8:a3:fe:28:fe:5c:b3:e4:4b:a8:0d: c1:6d:b5:8e:88:e7:48:85:af:7c:20:0a:d1:88:68: 56:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:9E:FD:5D:E5:42:81:15:76:E4:72:A9:2F:C9:2D:44:47:D7:1E:5C X509v3 Authority Key Identifier: keyid:4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/kJ79XeVCgRV25HKpL8ktREfXHlw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2f50::/48 Signature Algorithm: sha256WithRSAEncryption 8f:17:9b:a3:9a:96:40:df:5d:b3:c1:70:af:0c:df:ae:2e:1b: 4b:66:f3:50:a7:67:77:a2:fd:a5:8c:c9:1a:9c:08:31:d1:11: a2:5a:dd:af:af:ad:43:0f:d3:a7:33:35:6f:9b:12:26:ff:19: 5f:52:68:5d:47:9e:6a:9c:fd:b6:f0:6d:4c:bb:3e:d8:e7:64: d7:30:b5:bf:72:b5:ce:fc:7e:0c:05:54:01:42:36:bb:bc:65: 0c:0d:2f:17:cf:cf:bb:9a:40:43:45:3b:8f:14:5d:c1:c0:7d: 05:af:f3:b3:e2:a8:48:17:a7:2a:dc:11:dd:dc:14:84:e7:f8: 15:5c:f3:b2:1b:3c:d0:44:bb:da:c2:5e:c0:c5:00:81:8e:34: 7e:c6:93:95:1f:84:3b:53:66:e2:68:e8:fc:12:bb:09:a9:67: 81:6a:c0:ec:ec:1f:57:6d:67:02:b3:cc:69:3b:1e:93:a3:8f: 95:ab:80:48:0e:25:fe:93:43:e8:c5:8e:f7:61:a1:87:b6:d6: cb:12:aa:2b:5e:fc:dd:23:23:32:14:5e:5c:43:ab:23:83:99: a4:85:29:4c:d7:b0:fc:2e:2a:c8:5e:cb:9a:a3:d0:d8:60:fa: 01:65:c8:80:29:e7:54:d5:ba:c3:42:4e:9e:84:76:75:11:a9: 1e:35:17:17 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XOgcXbCNR377so7WtJtxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkM2Y1NGYzMDRlNmI4NTE2MDhjMjkzOTc4YjE2YmE1MWFj MDM1MGUwHhcNMjYwMTAyMDYxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDllZmQ1ZGU1NDI4MTE1NzZlNDcyYTkyZmM5MmQ0NDQ3ZDcxZTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuGNGCRE+P1Pi+WWmT0bxJryNnSJ Ogsk+a19jj/+RYEOyZmcWKK2COwR84BdDvnJtS7P2A/TJxduithhZYclmI9MbMV5 pAzi/m/m7s/lJfqxMvgi0lo7y4O7pJ+XI+uNGVN7vQu4QO7o8CZ9lNy3hFss69MR D/7wnXRMGnbZYsa6RzJ8jaByO9wBkXTACkLDpp5ZS8TqvjiR2leWXxL2Bk2ehUKx EjjsCqp2ctQbiEnhmN0UkvnffgyKg4ECVKWI9PWbpu5nb7gHFjZEPYjD8yzPol6u nzHdbRSJ7MD1Os+8XeI82KP+KP5cs+RLqA3BbbWOiOdIha98IArRiGhWdQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJCe/V3lQoEVduRyqS/JLURH1x5cMB8GA1UdIwQY MBaAFE0/VPME5rhRYIwpOXixa6UawDUOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFQ5VTh3VG11RkZnakNrNWVMRnJwUnJBTlE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9iNzM3ZjYtMzA0Yi00YzRmLWI4ODct NzExMDgyNThmMWI5LzEva0o3OVhlVkNnUlYyNUhLcEw4a3RSRWZYSGx3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9iNzM3ZjYtMzA0Yi00YzRmLWI4ODctNzExMDgyNThmMWI5 LzEvVFQ5VTh3VG11RkZnakNrNWVMRnJwUnJBTlE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfC9Q MA0GCSqGSIb3DQEBCwUAA4IBAQCPF5ujmpZA312zwXCvDN+uLhtLZvNQp2d3ov2l jMkanAgx0RGiWt2vr61DD9OnMzVvmxIm/xlfUmhdR55qnP228G1Muz7Y52TXMLW/ crXO/H4MBVQBQja7vGUMDS8Xz8+7mkBDRTuPFF3BwH0Fr/Oz4qhIF6cq3BHd3BSE 5/gVXPOyGzzQRLvawl7AxQCBjjR+xpOVH4Q7U2biaOj8ErsJqWeBasDs7B9XbWcC s8xpOx6To4+Vq4BIDiX+k0PoxY73YaGHttbLEqorXvzdIyMyFF5cQ6sjg5mkhSlM 17D8LirIXsuao9DYYPoBZciAKedU1brDQk6ehHZ1EakeNRcX -----END CERTIFICATE-----Generated at Mon Jan 26 14:13:00 2026 by rpki-client