This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/ycftNmwxDGc3rASD0UvuuXQBETs.roa File: ycftNmwxDGc3rASD0UvuuXQBETs.roa (raw, json) Hash identifier: XsVXs8QnRkrL7GxOuGr64uEZSqAysMDoziZHgHM09Fw= Subject key identifier: C9:C7:ED:36:6C:31:0C:67:37:AC:04:83:D1:4B:EE:B9:74:01:11:3B Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a Certificate serial: 019B7FF1BA3EE5D1D754D942A5CAE1CCC50B Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/ycftNmwxDGc3rASD0UvuuXQBETs.roa Signing time: Fri 02 Jan 2026 18:21:46 +0000 ROA not before: Fri 02 Jan 2026 18:21:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205414 IP address blocks: 2a03:5840:260::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:ba:3e:e5:d1:d7:54:d9:42:a5:ca:e1:cc:c5:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a Validity Not Before: Jan 2 18:21:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9c7ed366c310c6737ac0483d14beeb97401113b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:db:79:21:e9:45:0f:25:c9:ec:9e:68:85:4a: a1:65:64:4e:e9:90:14:60:64:67:fc:5b:39:69:60: 51:8b:f9:21:7c:b7:20:76:68:c5:33:a5:c9:94:05: 65:57:cc:e2:05:36:4a:78:0f:d2:cb:76:78:ae:83: 35:4f:99:a5:aa:3e:ef:da:ca:a1:a1:99:2a:56:b4: 81:53:cf:95:e6:c4:9c:32:72:89:11:69:e4:a7:99: 9c:4a:c1:be:7b:b9:31:6b:45:66:97:07:6d:8e:68: cd:1e:97:11:af:ad:6a:cd:33:25:b1:31:9c:fa:f7: 92:d0:32:ea:18:fb:bb:82:37:bc:4e:01:30:06:c8: f0:38:e1:8c:24:38:73:a7:37:fb:bc:ae:32:3f:c0: 28:84:29:cf:cf:73:f0:0c:f9:c9:6a:da:d6:d6:c8: ae:bf:d3:a0:e6:cb:62:04:89:fb:05:28:e9:ec:eb: e2:dd:86:14:43:84:fa:12:21:0b:7b:7c:7a:dc:39: c6:2a:b2:b5:de:21:bb:37:50:ee:20:01:65:22:91: ba:81:e4:2a:5b:a4:73:9c:db:de:5b:3d:0e:2f:e3: 81:53:2c:c3:b3:f9:ea:43:96:79:c2:d2:c5:3e:bd: 83:ba:cf:79:c3:66:e9:76:32:72:73:fd:1e:35:f6: 88:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:C7:ED:36:6C:31:0C:67:37:AC:04:83:D1:4B:EE:B9:74:01:11:3B X509v3 Authority Key Identifier: keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/ycftNmwxDGc3rASD0UvuuXQBETs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:5840:260::/44 Signature Algorithm: sha256WithRSAEncryption 25:e7:af:cd:6f:0d:f5:b9:57:c7:a0:4a:d6:40:eb:c6:1c:b1: ca:5a:36:cb:66:ba:dc:2a:20:dd:ad:1f:27:e3:bd:f7:2a:3a: d2:02:b6:03:8b:4f:0b:e0:c3:36:cf:7b:5c:d4:a2:26:a0:4c: 6a:0b:d7:df:f6:6b:3c:66:c7:a2:2d:eb:51:f8:ee:54:62:44: dd:c6:16:34:7f:90:5d:41:3d:18:62:3b:f8:b7:9e:2e:f6:2b: f6:3b:ab:63:d0:98:2c:8c:ec:97:34:4a:5e:a0:75:10:f3:7c: ad:89:60:8a:c1:cf:a6:0e:88:71:ac:1c:6c:fb:62:f6:95:b8: 3b:14:37:82:14:71:84:16:c4:0f:fb:ee:ed:41:cb:0c:ca:17: 0f:d7:20:77:86:ec:ee:18:bb:ec:81:8c:99:87:f5:69:63:c5: 49:6d:c8:47:f4:fd:a6:83:53:53:4f:55:b3:35:ad:41:8c:0e: 60:09:1b:5e:6a:fa:58:5d:33:1f:95:70:2f:7c:17:c1:52:d2: 72:e9:2f:b1:2f:f7:60:c8:1c:a1:1c:5e:45:23:0d:22:c4:14: da:15:e0:d6:e3:1a:fb:46:96:1c:42:66:ca:30:f9:de:49:22: 3b:b1:ed:82:8f:2b:6a:13:48:b1:53:a1:ff:3e:72:6b:b2:e8: e2:55:ae:1b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/8bo+5dHXVNlCpcrhzMULMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3NzcwNWU4OWJiNjViNDcyZTRlMDE4NGQ2ZmU5YmZiOGM1 ODYzNWEwHhcNMjYwMTAyMTgyMTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOWM3ZWQzNjZjMzEwYzY3MzdhYzA0ODNkMTRiZWViOTc0MDExMTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9t5IelFDyXJ7J5ohUqhZWRO6ZAU YGRn/Fs5aWBRi/khfLcgdmjFM6XJlAVlV8ziBTZKeA/Sy3Z4roM1T5mlqj7v2sqh oZkqVrSBU8+V5sScMnKJEWnkp5mcSsG+e7kxa0VmlwdtjmjNHpcRr61qzTMlsTGc +veS0DLqGPu7gje8TgEwBsjwOOGMJDhzpzf7vK4yP8AohCnPz3PwDPnJatrW1siu v9Og5stiBIn7BSjp7Ovi3YYUQ4T6EiELe3x63DnGKrK13iG7N1DuIAFlIpG6geQq W6RznNveWz0OL+OBUyzDs/nqQ5Z5wtLFPr2Dus95w2bpdjJyc/0eNfaIuQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMnH7TZsMQxnN6wEg9FL7rl0ARE7MB8GA1UdIwQY MBaAFPd3BeibtltHLk4BhNb+m/uMWGNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYt NmNiODk3OTFkN2ZkLzEveWNmdE5td3hER2MzckFTRDBVdnV1WFFCRVRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYtNmNiODk3OTFkN2Zk LzEvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgNYQAJg MA0GCSqGSIb3DQEBCwUAA4IBAQAl56/Nbw31uVfHoErWQOvGHLHKWjbLZrrcKiDd rR8n4733KjrSArYDi08L4MM2z3tc1KImoExqC9ff9ms8ZseiLetR+O5UYkTdxhY0 f5BdQT0YYjv4t54u9iv2O6tj0JgsjOyXNEpeoHUQ83ytiWCKwc+mDohxrBxs+2L2 lbg7FDeCFHGEFsQP++7tQcsMyhcP1yB3huzuGLvsgYyZh/VpY8VJbchH9P2mg1NT T1WzNa1BjA5gCRteavpYXTMflXAvfBfBUtJy6S+xL/dgyByhHF5FIw0ixBTaFeDW 4xr7RpYcQmbKMPneSSI7se2CjytqE0ixU6H/PnJrsujiVa4b -----END CERTIFICATE-----Generated at Fri Jan 23 15:22:06 2026 by rpki-client