This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/YOHjYDxSlo2XiACC2SMmBkmN038.roa File: YOHjYDxSlo2XiACC2SMmBkmN038.roa (raw, json) Hash identifier: 2XOwLoQfhpbJi+zmFbfcm7KdL6WERrmi+51OI77y6NY= Subject key identifier: 60:E1:E3:60:3C:52:96:8D:97:88:00:82:D9:23:26:06:49:8D:D3:7F Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA7053841A57B86006B76586ACD2E39 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/YOHjYDxSlo2XiACC2SMmBkmN038.roa Signing time: Fri 02 Jan 2026 12:20:33 +0000 ROA not before: Fri 02 Jan 2026 12:20:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213437 IP address blocks: 2a0c:9a40:8f00::/48 maxlen: 48 2a0c:9a40:8f10::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:05:38:41:a5:7b:86:00:6b:76:58:6a:cd:2e:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=60e1e3603c52968d97880082d9232606498dd37f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e4:4c:39:d5:e2:19:6c:74:50:c1:19:b0:62: 18:fe:68:0e:df:8a:47:a4:fb:85:a3:3d:7b:a8:db: 10:63:39:4e:69:f9:66:e1:78:01:a7:90:80:39:1f: 71:2a:9f:d4:d1:98:55:d3:53:6d:08:8c:c1:02:18: 25:49:53:77:cc:a2:60:c4:bb:9b:0e:7e:6a:39:77: 22:42:0f:3a:1e:34:b9:9c:c7:93:b6:c9:2b:f3:b1: c8:d9:48:eb:34:8f:46:a6:33:bc:90:53:97:b4:71: b9:ff:db:eb:dd:8b:50:a9:27:62:83:58:48:1c:44: d7:45:71:3a:68:0a:c4:8d:3f:3d:63:5c:36:0c:04: 01:39:a0:15:eb:58:58:74:b1:36:43:ae:b3:03:73: f8:64:43:31:60:e4:a1:d4:68:23:d2:ac:b5:1c:f5: a7:f3:22:e5:fc:69:f4:e2:b9:3b:e4:5c:99:d3:4a: 3c:b4:10:de:ae:77:4d:41:e3:04:98:0c:d0:4d:30: af:90:82:da:d0:72:78:e4:78:91:87:98:d8:8a:f1: c8:0a:59:b8:d2:af:8a:fb:bb:11:26:fd:48:d8:c2: 6b:68:b0:6b:2d:58:43:5a:9f:66:02:db:2a:46:04: a5:88:05:26:ba:b1:3c:76:0b:b1:f2:23:f4:9d:04: bd:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:E1:E3:60:3C:52:96:8D:97:88:00:82:D9:23:26:06:49:8D:D3:7F X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/YOHjYDxSlo2XiACC2SMmBkmN038.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8f00::/48 2a0c:9a40:8f10::/44 Signature Algorithm: sha256WithRSAEncryption b0:53:4a:ab:4a:25:dc:f4:a4:cd:7d:ec:63:a7:56:f2:a5:18: e2:07:83:a1:16:7f:d7:55:5e:56:74:d1:0a:6e:37:21:60:20: 1c:67:cf:f6:b7:5b:93:ff:5c:1f:1b:3a:c3:35:68:86:2f:46: 70:be:2a:11:5a:4c:00:2c:58:10:ea:30:8f:e9:be:1e:ad:43: c2:f5:36:cb:28:94:b2:0b:39:a5:8a:c0:c0:d3:71:09:36:f5: 92:3c:91:8f:62:50:c1:8e:bb:fe:bd:d7:36:b3:8a:b0:4a:91: 3d:f1:5b:fc:d2:0e:e4:25:45:9e:02:bb:f9:79:43:4a:b8:50: 94:84:fa:78:a0:d5:1b:e6:27:16:99:9e:f8:bd:d3:a2:79:ed: f7:ea:e2:13:4b:f5:4b:ba:29:46:db:f2:0c:e5:a0:3a:07:5b: 2b:73:65:ab:40:f3:ce:a4:c5:ba:b4:e1:0c:0b:df:e2:a1:e1: 1d:3d:75:89:71:1f:b4:08:8f:92:71:32:14:4c:00:5a:b1:c6: b6:0b:24:44:79:e3:83:88:45:33:40:16:60:05:95:cd:53:79: 46:b4:5b:12:00:6e:d7:36:2d:b3:19:9c:91:3b:e7:63:07:15: f4:4f:5a:32:55:93:78:d0:e3:42:82:a1:28:f8:95:8e:89:f7: 82:e7:03:da -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+pwU4QaV7hgBrdlhqzS45MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MGUxZTM2MDNjNTI5NjhkOTc4ODAwODJkOTIzMjYwNjQ5OGRkMzdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveRMOdXiGWx0UMEZsGIY/mgO34pH pPuFoz17qNsQYzlOaflm4XgBp5CAOR9xKp/U0ZhV01NtCIzBAhglSVN3zKJgxLub Dn5qOXciQg86HjS5nMeTtskr87HI2UjrNI9GpjO8kFOXtHG5/9vr3YtQqSdig1hI HETXRXE6aArEjT89Y1w2DAQBOaAV61hYdLE2Q66zA3P4ZEMxYOSh1Ggj0qy1HPWn 8yLl/Gn04rk75FyZ00o8tBDerndNQeMEmAzQTTCvkILa0HJ45HiRh5jYivHIClm4 0q+K+7sRJv1I2MJraLBrLVhDWp9mAtsqRgSliAUmurE8dgux8iP0nQS96QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFGDh42A8UpaNl4gAgtkjJgZJjdN/MB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvWU9IallEeFNsbzJYaUFDQzJTTW1Ca21OMDM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgyaQI8A AwcEKgyaQI8QMA0GCSqGSIb3DQEBCwUAA4IBAQCwU0qrSiXc9KTNfexjp1bypRji B4OhFn/XVV5WdNEKbjchYCAcZ8/2t1uT/1wfGzrDNWiGL0ZwvioRWkwALFgQ6jCP 6b4erUPC9TbLKJSyCzmlisDA03EJNvWSPJGPYlDBjrv+vdc2s4qwSpE98Vv80g7k JUWeArv5eUNKuFCUhPp4oNUb5icWmZ74vdOiee336uITS/VLuilG2/IM5aA6B1sr c2WrQPPOpMW6tOEMC9/ioeEdPXWJcR+0CI+ScTIUTABasca2CyREeeODiEUzQBZg BZXNU3lGtFsSAG7XNi2zGZyRO+djBxX0T1oyVZN40ONCgqEo+JWOifeC5wPa -----END CERTIFICATE-----Generated at Tue Jan 20 09:05:53 2026 by rpki-client