This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bYiLveRsDlX78OsxGY3h5GANwkU.roa File: bYiLveRsDlX78OsxGY3h5GANwkU.roa (raw, json) Hash identifier: 7RIU6dRlDTBOGvkvNbaGxFh//l+X7XqnppaYQdzpO8E= Subject key identifier: 6D:88:8B:BD:E4:6C:0E:55:FB:F0:EB:31:19:8D:E1:E4:60:0D:C2:45 Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Certificate serial: 019B7AC82B953A459579B9B255A286BA6B16 Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bYiLveRsDlX78OsxGY3h5GANwkU.roa Signing time: Thu 01 Jan 2026 18:18:17 +0000 ROA not before: Thu 01 Jan 2026 18:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43182 IP address blocks: 2a0d:f740::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 08:26:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:2b:95:3a:45:95:79:b9:b2:55:a2:86:ba:6b:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Validity Not Before: Jan 1 18:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d888bbde46c0e55fbf0eb31198de1e4600dc245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:be:d1:ae:be:58:f1:41:16:c0:d4:fa:32:a0: 91:5d:f8:91:a6:6b:96:0d:51:ee:fd:44:3b:73:14: 49:6a:a7:d1:60:6b:f3:64:ad:9b:69:d2:7a:a5:79: cf:71:3a:50:7d:50:24:84:e4:90:a0:d7:b3:f2:76: 95:e1:cb:3f:9d:6e:b3:34:34:45:3c:c7:99:74:21: 33:a5:b6:3a:9f:72:03:e3:63:a3:36:33:f6:1d:11: 4e:9b:02:aa:07:09:45:f6:73:0d:65:8c:b3:10:31: bf:a6:38:69:eb:df:9b:91:7b:9f:a6:bb:64:52:40: ce:9e:9e:8a:3a:15:e4:21:e1:5f:9a:eb:7d:3d:8e: c1:f2:89:71:ce:9b:36:c6:00:85:91:9d:51:96:47: 2e:2d:9c:2c:99:9d:7c:bb:3f:88:ae:16:19:86:22: 56:af:ac:56:79:60:9f:ff:28:d0:6e:19:c3:18:b9: 5b:79:13:d1:3a:78:f7:47:28:46:1c:24:84:1e:ca: a8:8e:c2:23:db:21:6b:03:86:ac:bf:28:50:f4:71: f6:2b:cb:0d:8c:54:d6:ce:84:3e:be:ac:ef:9c:7b: e9:7e:90:fa:02:58:d7:ab:80:ea:34:20:3d:c2:54: 57:c8:73:b4:57:47:b5:6b:34:ae:5f:62:2b:1c:99: df:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:88:8B:BD:E4:6C:0E:55:FB:F0:EB:31:19:8D:E1:E4:60:0D:C2:45 X509v3 Authority Key Identifier: keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bYiLveRsDlX78OsxGY3h5GANwkU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:f740::/32 Signature Algorithm: sha256WithRSAEncryption 08:21:e2:56:5c:0c:9b:f4:f1:e9:22:32:4a:61:72:b9:b8:08: 56:18:3b:e6:a5:22:35:5c:ed:03:6b:45:32:8c:85:81:e3:15: 20:00:75:4a:70:d0:05:17:5e:8e:1b:0f:c5:f1:ca:7b:f1:3f: 01:2a:3b:22:15:d8:a8:48:e5:cb:0a:71:eb:07:24:5e:90:a8: 2d:8f:98:a0:aa:07:e6:2d:b2:5b:df:34:d5:8d:d1:98:69:a1: 29:81:4b:a8:31:22:e1:69:f3:df:f1:6c:47:a7:1b:87:87:f2: 5a:26:40:ef:03:65:ac:c9:5c:bb:17:40:0a:f7:16:e8:42:3b: 28:f9:bb:f2:c0:6b:38:3b:83:0c:72:cb:09:17:24:79:a1:34: 10:63:f7:48:c4:8d:43:a2:53:4d:69:26:c0:20:aa:b5:40:95: 62:a6:0b:96:bd:69:39:c1:b2:67:0d:14:d3:d6:b9:bd:ce:d7: 20:cb:fb:d7:a4:77:16:31:f1:bf:de:91:1a:2e:cd:cc:0a:4b: 25:34:82:f5:f9:0b:5f:33:db:e6:91:5f:e8:e9:ab:4e:c1:73: ac:c2:14:d5:2f:8b:8f:a2:9d:2b:58:31:88:b2:f4:68:53:6e: da:0a:fd:95:a0:de:a4:9f:c2:af:50:e0:f1:48:5f:67:b9:b0: b3:73:24:a3 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt6yCuVOkWVebmyVaKGumsWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMjBkZGQzOThkYWM4ZjYyY2MxMjUyNjMyNWYxODIxZmI3 MjRmNzUwHhcNMjYwMTAxMTgxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDg4OGJiZGU0NmMwZTU1ZmJmMGViMzExOThkZTFlNDYwMGRjMjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo77Rrr5Y8UEWwNT6MqCRXfiRpmuW DVHu/UQ7cxRJaqfRYGvzZK2badJ6pXnPcTpQfVAkhOSQoNez8naV4cs/nW6zNDRF PMeZdCEzpbY6n3ID42OjNjP2HRFOmwKqBwlF9nMNZYyzEDG/pjhp69+bkXufprtk UkDOnp6KOhXkIeFfmut9PY7B8olxzps2xgCFkZ1RlkcuLZwsmZ18uz+IrhYZhiJW r6xWeWCf/yjQbhnDGLlbeRPROnj3RyhGHCSEHsqojsIj2yFrA4asvyhQ9HH2K8sN jFTWzoQ+vqzvnHvpfpD6AljXq4DqNCA9wlRXyHO0V0e1azSuX2IrHJnfLQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFG2Ii73kbA5V+/DrMRmN4eRgDcJFMB8GA1UdIwQY MBaAFG0g3dOY2sj2LMElJjJfGCH7ck91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmIt MzZkZTY1NzIzMmJlLzEvYllpTHZlUnNEbFg3OE9zeEdZM2g1R0FOd2tVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmItMzZkZTY1NzIzMmJl LzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKg33QDAN BgkqhkiG9w0BAQsFAAOCAQEACCHiVlwMm/Tx6SIySmFyubgIVhg75qUiNVztA2tF MoyFgeMVIAB1SnDQBRdejhsPxfHKe/E/ASo7IhXYqEjlywpx6wckXpCoLY+YoKoH 5i2yW9801Y3RmGmhKYFLqDEi4Wnz3/FsR6cbh4fyWiZA7wNlrMlcuxdACvcW6EI7 KPm78sBrODuDDHLLCRckeaE0EGP3SMSNQ6JTTWkmwCCqtUCVYqYLlr1pOcGyZw0U 09a5vc7XIMv716R3FjHxv96RGi7NzApLJTSC9fkLXzPb5pFf6OmrTsFzrMIU1S+L j6KdK1gxiLL0aFNu2gr9laDepJ/Cr1Dg8UhfZ7mws3Mkow== -----END CERTIFICATE-----Generated at Wed Jan 21 12:44:27 2026 by rpki-client