This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/yjynzysuy0GzP7hnh2aKhejGg3A.roa File: yjynzysuy0GzP7hnh2aKhejGg3A.roa (raw, json) Hash identifier: ECkBxNXBvDXnaUKq0KjLyvL1vwPnhfcqPfzbXoC0Lc8= Subject key identifier: CA:3C:A7:CF:2B:2E:CB:41:B3:3F:B8:67:87:66:8A:85:E8:C6:83:70 Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a Certificate serial: 019B7FF1BBB40AB7D6FCC77129A93ED35EED Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/yjynzysuy0GzP7hnh2aKhejGg3A.roa Signing time: Fri 02 Jan 2026 18:21:47 +0000 ROA not before: Fri 02 Jan 2026 18:21:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206705 IP address blocks: 2a03:5840:12c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:bb:b4:0a:b7:d6:fc:c7:71:29:a9:3e:d3:5e:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a Validity Not Before: Jan 2 18:21:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca3ca7cf2b2ecb41b33fb86787668a85e8c68370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:00:58:10:17:b3:3c:8b:fa:e5:1b:37:ed:ea: 69:21:a5:b1:c9:b8:81:b1:4b:7e:d9:47:37:ae:62: df:23:e8:89:4d:7d:c6:ba:69:21:57:ba:28:07:7a: e3:5b:71:4f:4a:c2:7a:c2:76:25:ce:47:3e:c9:61: 6b:1c:2b:1c:18:c1:14:60:39:de:4a:f8:e5:84:a3: ba:50:1a:23:18:0c:a9:3f:f8:0d:16:6c:23:2a:15: 89:5e:4b:4b:54:d3:26:36:b8:fb:dd:c1:d7:d8:40: 05:9e:08:1c:c9:c1:7a:0f:2d:1d:20:63:c1:e1:8b: c1:08:9f:39:9d:bb:e3:bb:93:d2:69:00:54:bd:ea: 30:97:d2:3a:ef:ba:17:04:48:8a:5a:3b:68:fb:d5: 3f:94:e1:b3:f3:f9:31:b7:20:41:26:cd:2a:59:f2: 85:fd:8e:5b:b4:1f:2f:87:f5:d8:c6:e0:60:de:38: d7:d1:84:da:5c:7b:17:98:5c:91:dc:46:5a:46:67: f7:85:48:bf:7d:4e:c0:05:66:c0:47:c7:3b:df:90: c7:14:ff:d5:e7:fe:a8:74:15:04:68:8a:ca:e7:41: cd:ba:bb:2b:ec:1f:e8:6e:26:37:1a:47:80:fe:f9: cd:a1:8d:8f:36:41:39:09:31:b0:25:37:4a:8a:a3: 46:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:3C:A7:CF:2B:2E:CB:41:B3:3F:B8:67:87:66:8A:85:E8:C6:83:70 X509v3 Authority Key Identifier: keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/yjynzysuy0GzP7hnh2aKhejGg3A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:5840:12c::/48 Signature Algorithm: sha256WithRSAEncryption b2:5f:b3:61:78:ec:13:ae:3f:4b:7f:68:1d:7a:3e:dd:d2:52: 98:12:1c:25:62:e2:5d:8b:df:b5:ca:5a:7a:65:d4:a7:11:d2: 1e:7b:f8:68:9f:27:6e:af:c1:27:a5:2a:bb:09:4f:22:ea:b1: ad:61:d8:eb:8c:65:4f:e0:c7:bc:6d:ba:64:b1:e2:ec:a5:cd: 59:b2:3a:2b:fa:c2:88:7b:dc:08:d7:7d:59:21:7c:29:0b:27: 5b:e2:4c:aa:c1:30:3d:dd:1d:c9:5e:ba:fc:9d:27:e7:b5:86: 61:8f:cc:e9:fb:f6:6e:dd:0a:b8:32:2e:ac:e0:60:86:cc:37: 83:1f:3d:a6:14:89:26:b0:c0:b7:ac:66:7c:e3:f7:f3:7f:d1: b5:2c:d7:3a:53:6f:10:27:13:0f:de:43:92:58:56:c3:c4:ef: be:05:3c:bd:f6:d0:62:e3:df:a0:bc:18:e2:f2:e9:90:86:bf: d5:33:54:5c:a4:b0:24:00:0d:03:41:47:5c:cb:8e:44:54:8e: 1d:b5:f1:a1:fa:52:5c:03:bd:42:21:ad:53:80:46:49:a4:d2: 77:1e:e8:28:b2:7b:c7:21:2a:75:10:4b:ee:e0:82:0b:46:1b: b5:00:7f:b9:c3:66:56:fd:27:41:b7:b2:da:ff:ed:a5:8a:6e: f9:cd:00:93 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/8bu0CrfW/MdxKak+017tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3NzcwNWU4OWJiNjViNDcyZTRlMDE4NGQ2ZmU5YmZiOGM1 ODYzNWEwHhcNMjYwMTAyMTgyMTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTNjYTdjZjJiMmVjYjQxYjMzZmI4Njc4NzY2OGE4NWU4YzY4MzcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQBYEBezPIv65Rs37eppIaWxybiB sUt+2Uc3rmLfI+iJTX3GumkhV7ooB3rjW3FPSsJ6wnYlzkc+yWFrHCscGMEUYDne SvjlhKO6UBojGAypP/gNFmwjKhWJXktLVNMmNrj73cHX2EAFnggcycF6Dy0dIGPB 4YvBCJ85nbvju5PSaQBUveowl9I677oXBEiKWjto+9U/lOGz8/kxtyBBJs0qWfKF /Y5btB8vh/XYxuBg3jjX0YTaXHsXmFyR3EZaRmf3hUi/fU7ABWbAR8c735DHFP/V 5/6odBUEaIrK50HNursr7B/obiY3GkeA/vnNoY2PNkE5CTGwJTdKiqNGnwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMo8p88rLstBsz+4Z4dmioXoxoNwMB8GA1UdIwQY MBaAFPd3BeibtltHLk4BhNb+m/uMWGNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYt NmNiODk3OTFkN2ZkLzEveWp5bnp5c3V5MEd6UDdobmgyYUtoZWpHZzNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYtNmNiODk3OTFkN2Zk LzEvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgNYQAEs MA0GCSqGSIb3DQEBCwUAA4IBAQCyX7NheOwTrj9Lf2gdej7d0lKYEhwlYuJdi9+1 ylp6ZdSnEdIee/honydur8EnpSq7CU8i6rGtYdjrjGVP4Me8bbpkseLspc1Zsjor +sKIe9wI131ZIXwpCydb4kyqwTA93R3JXrr8nSfntYZhj8zp+/Zu3Qq4Mi6s4GCG zDeDHz2mFIkmsMC3rGZ84/fzf9G1LNc6U28QJxMP3kOSWFbDxO++BTy99tBi49+g vBji8umQhr/VM1RcpLAkAA0DQUdcy45EVI4dtfGh+lJcA71CIa1TgEZJpNJ3Hugo snvHISp1EEvu4IILRhu1AH+5w2ZW/SdBt7La/+2lim75zQCT -----END CERTIFICATE-----Generated at Fri Jan 23 15:23:46 2026 by rpki-client