This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/Yi_0sb2Cd1tYZiiWIymmt_L8-nc.roa File: Yi_0sb2Cd1tYZiiWIymmt_L8-nc.roa (raw, json) Hash identifier: ZfN0GVzt124vq1vIJ26ojNWgsCUqMSJ0wE5cCnsN3gQ= Subject key identifier: 62:2F:F4:B1:BD:82:77:5B:58:66:28:96:23:29:A6:B7:F2:FC:FA:77 Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Certificate serial: 019B7AC82A2ED70E76B5FAFAA0F2E571E961 Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/Yi_0sb2Cd1tYZiiWIymmt_L8-nc.roa Signing time: Thu 01 Jan 2026 18:18:16 +0000 ROA not before: Thu 01 Jan 2026 18:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 26042 IP address blocks: 2a11:2a47::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 08:26:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:2a:2e:d7:0e:76:b5:fa:fa:a0:f2:e5:71:e9:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Validity Not Before: Jan 1 18:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=622ff4b1bd82775b586628962329a6b7f2fcfa77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d9:7e:b7:9c:ed:6a:4f:a9:5b:ee:b3:eb:5a: a3:fd:26:c2:aa:02:f2:ca:6b:af:bd:91:51:33:d7: f6:dc:22:11:d2:79:d1:16:03:10:97:8d:2e:bc:4d: 93:a8:2b:37:44:54:26:3a:50:aa:ba:e6:3b:e5:0b: df:ba:70:c4:6d:35:4d:fd:a7:37:60:a8:44:14:b5: 9d:09:71:99:d0:ae:51:3c:66:1b:c1:82:ca:cc:fc: ad:32:c1:41:fb:0c:02:06:97:cd:cb:e7:d2:4e:83: 3f:ea:cf:ee:2e:fa:0f:e6:f5:b3:d2:a2:9c:c6:f2: 4d:41:76:48:df:1d:84:40:24:bd:13:31:8d:ce:e9: e4:4c:6b:90:7e:e9:89:24:7c:71:fe:fa:66:6a:27: 67:05:fb:e3:7c:47:3f:43:d5:df:89:d8:d7:a9:10: fa:c4:d3:54:e9:13:0d:09:ec:fb:54:73:b2:55:4f: 12:f4:05:c8:ea:8d:7d:71:29:88:f3:77:f2:4a:9b: 29:7a:32:06:9e:87:06:e4:2d:b6:0c:af:eb:7e:1b: 5e:1b:23:ea:66:4a:b5:35:6e:39:09:93:b7:24:8b: 21:ba:2b:f4:e8:c1:24:aa:f4:06:e7:6f:c0:2c:bb: 5f:0e:9c:f3:a1:30:e6:c0:32:ea:ca:b7:59:1b:07: d6:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:2F:F4:B1:BD:82:77:5B:58:66:28:96:23:29:A6:B7:F2:FC:FA:77 X509v3 Authority Key Identifier: keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/Yi_0sb2Cd1tYZiiWIymmt_L8-nc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:2a47::/32 Signature Algorithm: sha256WithRSAEncryption 74:c4:b0:b6:ac:0d:88:35:9d:34:3a:26:ef:b0:a0:b6:0e:d5: 08:69:53:cb:82:c9:66:92:89:d1:6c:ff:6a:7b:2e:9d:8b:ce: 72:2c:eb:2c:00:17:f9:98:ae:56:d5:f9:06:b7:3c:ca:26:a7: 2b:85:78:b2:3d:d1:c0:d0:71:34:d8:81:07:2b:7e:cd:b6:8f: 60:9f:73:89:47:2e:30:0d:12:7e:85:4b:c4:a1:10:e3:b3:cb: c9:a3:47:8b:00:05:63:32:45:b6:6b:4d:9e:e8:2a:ad:8b:23: 05:bc:35:fe:f4:93:b7:ce:0c:e6:10:e9:56:8f:f2:43:a1:d1: 46:3f:a0:93:5c:cb:dd:f3:67:5d:9e:fb:d3:e2:33:8e:40:e3: 6d:14:f1:db:e3:f2:99:7a:26:80:08:9a:01:05:a3:4a:6f:bb: cb:6a:e8:07:8d:de:03:6c:0c:9a:12:65:9b:c7:c2:91:99:af: bb:55:e9:8e:53:92:55:79:f4:05:83:79:78:0e:f1:1f:f8:46: 5d:13:99:2c:b0:38:15:5e:6a:22:a0:00:04:5b:0d:97:8c:f5: 2c:05:1e:63:57:4f:f7:7d:0c:40:a9:1d:fe:2c:62:40:39:09: ba:c3:ab:92:dc:6d:58:20:09:e7:e1:ee:c6:e0:9d:0b:5d:fa: 0f:e5:2c:c8 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt6yCou1w52tfr6oPLlcelhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMjBkZGQzOThkYWM4ZjYyY2MxMjUyNjMyNWYxODIxZmI3 MjRmNzUwHhcNMjYwMTAxMTgxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjJmZjRiMWJkODI3NzViNTg2NjI4OTYyMzI5YTZiN2YyZmNmYTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNl+t5ztak+pW+6z61qj/SbCqgLy ymuvvZFRM9f23CIR0nnRFgMQl40uvE2TqCs3RFQmOlCquuY75QvfunDEbTVN/ac3 YKhEFLWdCXGZ0K5RPGYbwYLKzPytMsFB+wwCBpfNy+fSToM/6s/uLvoP5vWz0qKc xvJNQXZI3x2EQCS9EzGNzunkTGuQfumJJHxx/vpmaidnBfvjfEc/Q9XfidjXqRD6 xNNU6RMNCez7VHOyVU8S9AXI6o19cSmI83fySpspejIGnocG5C22DK/rfhteGyPq Zkq1NW45CZO3JIshuiv06MEkqvQG52/ALLtfDpzzoTDmwDLqyrdZGwfWDQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFGIv9LG9gndbWGYoliMpprfy/Pp3MB8GA1UdIwQY MBaAFG0g3dOY2sj2LMElJjJfGCH7ck91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmIt MzZkZTY1NzIzMmJlLzEvWWlfMHNiMkNkMXRZWmlpV0l5bW10X0w4LW5jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmItMzZkZTY1NzIzMmJl LzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhEqRzAN BgkqhkiG9w0BAQsFAAOCAQEAdMSwtqwNiDWdNDom77Cgtg7VCGlTy4LJZpKJ0Wz/ ansunYvOcizrLAAX+ZiuVtX5Brc8yianK4V4sj3RwNBxNNiBByt+zbaPYJ9ziUcu MA0SfoVLxKEQ47PLyaNHiwAFYzJFtmtNnugqrYsjBbw1/vSTt84M5hDpVo/yQ6HR Rj+gk1zL3fNnXZ770+IzjkDjbRTx2+PymXomgAiaAQWjSm+7y2roB43eA2wMmhJl m8fCkZmvu1XpjlOSVXn0BYN5eA7xH/hGXROZLLA4FV5qIqAABFsNl4z1LAUeY1dP 930MQKkd/ixiQDkJusOrktxtWCAJ5+HuxuCdC136D+UsyA== -----END CERTIFICATE-----Generated at Wed Jan 21 12:44:16 2026 by rpki-client