This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/yh2PEsZ9UDaugOmoMIKXuAdsVFw.roa File: yh2PEsZ9UDaugOmoMIKXuAdsVFw.roa (raw, json) Hash identifier: TCna7EpSFr4lfjYOySai5z740Ru/qtb8PTejE+HpBVY= Subject key identifier: CA:1D:8F:12:C6:7D:50:36:AE:80:E9:A8:30:82:97:B8:07:6C:54:5C Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E391F37ACE1EA363E7ED8BBAE6D6DDD Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/yh2PEsZ9UDaugOmoMIKXuAdsVFw.roa Signing time: Fri 02 Jan 2026 10:20:31 +0000 ROA not before: Fri 02 Jan 2026 10:20:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 2a0c:b641:1d0::/44 maxlen: 48 2a0c:b641:7b0::/44 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 17 Jan 2026 21:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:1f:37:ac:e1:ea:36:3e:7e:d8:bb:ae:6d:6d:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca1d8f12c67d5036ae80e9a8308297b8076c545c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f5:13:28:7e:4e:d3:e6:81:3f:c3:98:8f:f5: 6a:d1:9b:5c:15:38:be:20:69:25:fd:7b:06:a8:be: 95:38:62:b6:22:1f:78:16:97:1f:aa:f3:1c:52:91: 10:70:09:1d:63:13:f4:4d:d7:36:73:5e:06:ca:ee: bd:cb:2d:42:40:8d:08:9e:3b:c1:e1:99:f5:51:30: 32:bc:4c:4a:a1:04:d5:02:4b:04:a4:df:76:70:7e: c8:0c:e0:5a:a0:ea:50:66:2f:7b:21:ad:6f:b9:19: 97:43:7a:82:51:95:bf:3b:fb:4f:c2:f3:cc:f3:81: 28:be:d7:49:0b:52:b9:9c:2a:d5:41:0b:95:7b:bf: b3:06:51:8f:54:17:d1:e1:a7:72:65:11:6d:b3:be: cc:fe:50:ae:c1:67:17:f5:03:43:e9:b4:9e:a1:12: 27:43:3e:a7:69:4f:41:23:29:26:1f:f8:ef:62:9f: 70:38:3f:7d:e5:dd:c8:fa:c0:89:82:74:21:00:80: 7a:81:24:de:73:e2:8d:92:36:8c:e4:a8:86:8a:35: 42:74:5f:c0:94:d3:cd:ce:76:e0:ba:57:8d:a1:90: 80:a6:b4:c3:2b:ed:55:b6:9b:3b:64:67:74:58:13: 3c:16:ba:86:84:a6:49:6f:ba:3e:7a:95:58:f4:0e: 58:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:1D:8F:12:C6:7D:50:36:AE:80:E9:A8:30:82:97:B8:07:6C:54:5C X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/yh2PEsZ9UDaugOmoMIKXuAdsVFw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:1d0::/44 2a0c:b641:7b0::/44 Signature Algorithm: sha256WithRSAEncryption 5b:98:6b:a0:e5:94:c2:dc:96:92:9d:29:7f:76:f6:8f:99:42: ca:aa:5b:f8:be:08:c9:4c:df:ca:31:47:1c:ff:53:ad:5c:37: 98:46:65:67:10:c3:28:50:63:6e:78:e2:f5:74:2f:51:ac:94: 08:dc:08:61:8b:49:de:4f:3a:0d:e3:84:e0:f2:22:a2:5f:e1: f3:89:1a:28:82:c8:75:35:d0:a3:40:24:3a:ac:ef:11:1e:c4: a8:72:c6:9b:4f:c6:38:11:1b:ae:e5:ef:14:84:1d:37:73:b6: bb:8b:13:e3:0f:8a:a5:c7:d9:62:6f:0c:29:cc:5d:0d:ae:38: 48:96:58:3a:c6:77:d8:91:af:dc:89:17:65:7d:79:71:eb:70: 43:5e:0f:2b:2d:ab:85:a3:ca:86:c4:7a:df:ea:a0:2d:c5:2a: 16:b0:d2:99:6a:fc:d6:7c:ba:62:72:6a:43:3e:1b:7d:5e:cc: ec:a6:3d:fe:26:2e:4d:08:20:fd:6a:fe:9d:2f:72:0d:55:a4: 52:03:e0:04:6f:cf:75:01:07:55:26:3d:3b:32:2b:86:76:2b: 48:70:6d:a0:d8:40:7f:7e:99:f3:1b:02:29:2b:e2:61:3c:47: 2e:d9:f4:4a:6d:4d:6c:41:af:f3:11:30:89:79:9c:79:93:84: 31:45:21:c3 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+OR83rOHqNj5+2LuubW3dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTFkOGYxMmM2N2Q1MDM2YWU4MGU5YTgzMDgyOTdiODA3NmM1NDVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvUTKH5O0+aBP8OYj/Vq0ZtcFTi+ IGkl/XsGqL6VOGK2Ih94FpcfqvMcUpEQcAkdYxP0Tdc2c14Gyu69yy1CQI0InjvB 4Zn1UTAyvExKoQTVAksEpN92cH7IDOBaoOpQZi97Ia1vuRmXQ3qCUZW/O/tPwvPM 84EovtdJC1K5nCrVQQuVe7+zBlGPVBfR4adyZRFts77M/lCuwWcX9QND6bSeoRIn Qz6naU9BIykmH/jvYp9wOD995d3I+sCJgnQhAIB6gSTec+KNkjaM5KiGijVCdF/A lNPNznbguleNoZCAprTDK+1Vtps7ZGd0WBM8FrqGhKZJb7o+epVY9A5YdwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFModjxLGfVA2roDpqDCCl7gHbFRcMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEveWgyUEVzWjlVRGF1Z09tb01JS1h1QWRzVkZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKgy2QQHQ AwcEKgy2QQewMA0GCSqGSIb3DQEBCwUAA4IBAQBbmGug5ZTC3JaSnSl/dvaPmULK qlv4vgjJTN/KMUcc/1OtXDeYRmVnEMMoUGNueOL1dC9RrJQI3Ahhi0neTzoN44Tg 8iKiX+HziRoogsh1NdCjQCQ6rO8RHsSocsabT8Y4ERuu5e8UhB03c7a7ixPjD4ql x9libwwpzF0NrjhIllg6xnfYka/ciRdlfXlx63BDXg8rLauFo8qGxHrf6qAtxSoW sNKZavzWfLpicmpDPht9Xszspj3+Ji5NCCD9av6dL3INVaRSA+AEb891AQdVJj07 MiuGditIcG2g2EB/fpnzGwIpK+JhPEcu2fRKbU1sQa/zETCJeZx5k4QxRSHD -----END CERTIFICATE-----Generated at Sat Jan 17 06:46:10 2026 by rpki-client