This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Y_i7ZIgb5nCEoa8Ay04tefFRojU.roa File: Y_i7ZIgb5nCEoa8Ay04tefFRojU.roa (raw, json) Hash identifier: I3KA1OgiMH91erGTIEhQe5CCPFDCaofsKQH1X/RU2rE= Subject key identifier: 63:F8:BB:64:88:1B:E6:70:84:A1:AF:00:CB:4E:2D:79:F1:51:A2:35 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6EE9A079E2FDDF24EB3F7CFFA5B43 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Y_i7ZIgb5nCEoa8Ay04tefFRojU.roa Signing time: Fri 02 Jan 2026 12:20:27 +0000 ROA not before: Fri 02 Jan 2026 12:20:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207196 IP address blocks: 2a0c:9a46:d00::/40 maxlen: 48 2a0c:9a46:e00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:ee:9a:07:9e:2f:dd:f2:4e:b3:f7:cf:fa:5b:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63f8bb64881be67084a1af00cb4e2d79f151a235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:67:87:1c:f1:d7:9b:c5:51:97:73:40:c1:a5: 8b:b2:1b:c7:f6:18:9c:96:7d:35:6d:33:e1:96:d4: d6:25:63:0f:67:8c:dc:7a:37:cd:c7:27:4c:8a:57: 87:de:ad:73:ab:1f:61:d7:78:8d:40:80:cb:ea:c4: 9e:52:a9:d4:93:a3:55:20:f6:08:db:f2:16:84:7b: aa:72:83:7a:0c:94:33:70:c0:6b:f3:06:59:bf:fa: 6f:57:c1:bd:db:c7:db:93:27:9c:6d:eb:42:ef:48: 53:00:0d:c0:2c:45:51:9c:22:f6:62:0f:b2:4d:e9: 50:31:f1:85:50:86:15:aa:eb:c0:23:c0:41:46:0a: de:e6:9e:10:57:4b:64:b1:c6:fe:0c:ad:ee:b9:96: 8d:ef:2f:3e:9e:ac:c6:f2:41:72:11:57:0d:83:a8: ff:a5:67:9e:81:2c:bc:c5:a0:da:38:a3:c2:c2:c1: 67:c7:b0:cc:03:bb:9b:37:f7:60:aa:86:0b:54:c4: 07:38:c8:22:38:e0:fd:61:b8:d1:42:24:a8:bb:45: b8:95:ba:2b:ee:18:19:dc:eb:d3:4e:5a:59:33:be: a6:c0:29:97:77:32:ac:b6:25:e0:6c:38:0b:d1:b5: ff:33:a4:84:2e:66:cd:57:71:09:3e:07:28:64:66: 2f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:F8:BB:64:88:1B:E6:70:84:A1:AF:00:CB:4E:2D:79:F1:51:A2:35 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Y_i7ZIgb5nCEoa8Ay04tefFRojU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a46:d00::-2a0c:9a46:eff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 66:85:8e:e6:cc:d6:bf:33:3e:21:08:a4:3b:c4:f9:e9:9c:dd: 27:01:7d:71:12:e9:bd:63:62:d7:b6:70:92:49:cc:57:8d:e1: 1e:12:98:b7:df:d8:8e:23:7e:0a:6e:5c:1b:80:44:5b:29:c9: 53:ca:00:ba:68:17:75:42:84:7d:16:9d:24:a1:96:c0:5f:37: 36:d8:10:1c:93:50:78:50:bc:78:4b:4f:aa:62:e6:69:b7:ff: 0e:ec:61:0f:f8:e8:fa:d4:b8:34:77:84:68:dc:14:20:9c:7b: bf:5b:20:23:e0:7b:85:9e:97:56:dd:58:3c:4b:68:ea:ff:b6: 8f:86:8d:31:fa:d4:b4:61:38:48:e5:d3:09:a6:d6:ff:02:87: 52:43:44:f0:84:de:10:46:e5:b9:f6:9f:94:af:61:8f:f3:49: 82:d0:89:eb:ef:f2:47:2c:9f:3d:aa:d2:a1:b4:1b:61:e5:f4: a3:47:fd:ea:5c:73:f0:2d:42:41:78:aa:b3:c2:07:56:c4:d3: 4d:2c:cd:89:e2:a5:f7:86:c3:0b:b0:f6:94:16:8a:c2:6b:9d: 49:b5:f5:a0:02:b4:c6:bd:06:5e:72:86:ea:25:be:27:d8:e2: 9b:4f:12:0a:33:45:5f:27:3f:da:5d:b9:21:61:04:0c:74:c4: ba:b0:59:e5 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+pu6aB54v3fJOs/fP+ltDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2M2Y4YmI2NDg4MWJlNjcwODRhMWFmMDBjYjRlMmQ3OWYxNTFhMjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmeHHPHXm8VRl3NAwaWLshvH9hic ln01bTPhltTWJWMPZ4zcejfNxydMileH3q1zqx9h13iNQIDL6sSeUqnUk6NVIPYI 2/IWhHuqcoN6DJQzcMBr8wZZv/pvV8G928fbkyecbetC70hTAA3ALEVRnCL2Yg+y TelQMfGFUIYVquvAI8BBRgre5p4QV0tkscb+DK3uuZaN7y8+nqzG8kFyEVcNg6j/ pWeegSy8xaDaOKPCwsFnx7DMA7ubN/dgqoYLVMQHOMgiOOD9YbjRQiSou0W4lbor 7hgZ3OvTTlpZM76mwCmXdzKstiXgbDgL0bX/M6SELmbNV3EJPgcoZGYvPQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFGP4u2SIG+ZwhKGvAMtOLXnxUaI1MB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvWV9pN1pJZ2I1bkNFb2E4QXkwNHRlZkZSb2pVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASMBADBgAqDJpG DQMGACoMmkYOMA0GCSqGSIb3DQEBCwUAA4IBAQBmhY7mzNa/Mz4hCKQ7xPnpnN0n AX1xEum9Y2LXtnCSScxXjeEeEpi339iOI34KblwbgERbKclTygC6aBd1QoR9Fp0k oZbAXzc22BAck1B4ULx4S0+qYuZpt/8O7GEP+Oj61Lg0d4Ro3BQgnHu/WyAj4HuF npdW3Vg8S2jq/7aPho0x+tS0YThI5dMJptb/AodSQ0TwhN4QRuW59p+Ur2GP80mC 0Inr7/JHLJ89qtKhtBth5fSjR/3qXHPwLUJBeKqzwgdWxNNNLM2J4qX3hsMLsPaU ForCa51JtfWgArTGvQZecobqJb4n2OKbTxIKM0VfJz/aXbkhYQQMdMS6sFnl -----END CERTIFICATE-----Generated at Sat Jan 10 22:07:02 2026 by rpki-client