This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/YsxaGCVazEI8gLXssMBg4T2Wu9Y.roa File: YsxaGCVazEI8gLXssMBg4T2Wu9Y.roa (raw, json) Hash identifier: 9ItJnohaY42iO8QoTca1wBJ8OifBj0yX84PZIsEIUy8= Subject key identifier: 62:CC:5A:18:25:5A:CC:42:3C:80:B5:EC:B0:C0:60:E1:3D:96:BB:D6 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA709D33CB545C1DD5AACA310FDE0AA Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/YsxaGCVazEI8gLXssMBg4T2Wu9Y.roa Signing time: Fri 02 Jan 2026 12:20:34 +0000 ROA not before: Fri 02 Jan 2026 12:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214006 IP address blocks: 2a0c:9a40:8620::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:09:d3:3c:b5:45:c1:dd:5a:ac:a3:10:fd:e0:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=62cc5a18255acc423c80b5ecb0c060e13d96bbd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b2:74:8a:ac:fa:cd:bf:79:44:68:70:93:2b: e0:c9:5b:ac:ea:4e:0c:f3:5d:c8:2b:00:47:e2:18: 19:87:0d:85:ce:bf:c0:92:8e:53:ac:47:28:19:de: 1f:c5:23:0d:85:cb:6b:23:d0:07:54:3c:41:a5:9a: 02:59:c2:d9:74:71:61:b7:76:b0:42:6b:b2:9d:5f: ee:78:2c:1e:03:a4:f8:e4:72:60:8d:d7:f7:2d:1b: 86:b1:06:be:48:16:04:97:72:6b:98:25:9a:25:ac: a8:2e:d7:7d:f3:65:67:c8:dc:81:18:70:84:9a:f5: fc:36:19:25:ff:d0:44:26:ea:27:c8:54:e8:26:b1: 8b:24:11:e7:39:5e:c3:3a:8b:bd:b4:99:b1:ab:c4: 97:46:06:26:74:a7:5c:d5:7c:7d:73:db:8a:64:cd: 6e:cf:47:22:8f:12:fe:6a:90:4b:7e:78:cc:b7:52: a9:f7:a1:ca:be:ec:29:67:65:78:76:68:2c:f3:46: f8:bb:f3:9b:f4:c0:40:5a:c9:56:99:c0:9a:4b:c9: 48:82:83:c2:83:90:4b:c6:c2:e4:94:5f:be:67:b4: 5c:d6:df:4f:20:9d:64:f5:90:ff:b2:35:2f:56:66: d6:e2:b2:42:76:35:65:47:c4:ca:1b:a1:fa:b3:13: fe:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:CC:5A:18:25:5A:CC:42:3C:80:B5:EC:B0:C0:60:E1:3D:96:BB:D6 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/YsxaGCVazEI8gLXssMBg4T2Wu9Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8620::/48 Signature Algorithm: sha256WithRSAEncryption c2:4f:d3:f9:ec:a4:b7:a9:be:68:1b:30:95:4c:a5:71:c6:2e: 05:7e:d0:c4:0c:e7:12:f9:39:f1:0d:3e:5b:34:b8:fb:a4:34: 46:c8:12:43:f8:4b:57:2b:a3:ad:6e:dc:44:e7:77:12:4c:87: 43:bf:a9:5d:f0:7c:35:b1:14:ea:78:18:18:44:cd:07:bd:f6: bc:50:ce:1a:37:21:e8:3b:83:26:f2:33:01:e0:0d:90:7c:c9: 4d:d4:23:61:51:c7:5a:f8:89:19:f9:e5:e1:e2:61:63:fd:34: a2:37:38:55:bc:06:a0:74:e2:8a:c0:97:3b:89:47:78:94:3e: aa:25:3a:1d:db:25:b7:fc:cc:48:b6:0a:24:61:d0:6c:26:ae: d4:bc:ed:bc:81:b4:6b:dd:83:7a:ec:77:7a:50:1b:a2:4c:e2: fd:3e:a7:a8:df:bc:98:2e:6a:15:9c:69:e9:13:a0:25:d3:1a: e7:5c:80:be:ca:4d:10:a9:e5:9a:b1:f9:b1:55:36:8f:db:79: c6:b6:dd:12:e2:04:7b:bb:bc:69:fe:7d:77:d4:33:b8:a6:e3: 3a:a2:21:67:c5:3e:08:ce:1a:dd:33:f8:bd:c8:29:9a:89:53: 46:2c:e5:cd:94:6d:12:ae:38:16:f6:71:62:c7:6f:d8:24:0f: 64:9e:9f:39 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pwnTPLVFwd1arKMQ/eCqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MmNjNWExODI1NWFjYzQyM2M4MGI1ZWNiMGMwNjBlMTNkOTZiYmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbJ0iqz6zb95RGhwkyvgyVus6k4M 813IKwBH4hgZhw2Fzr/Ako5TrEcoGd4fxSMNhctrI9AHVDxBpZoCWcLZdHFht3aw QmuynV/ueCweA6T45HJgjdf3LRuGsQa+SBYEl3JrmCWaJayoLtd982VnyNyBGHCE mvX8Nhkl/9BEJuonyFToJrGLJBHnOV7DOou9tJmxq8SXRgYmdKdc1Xx9c9uKZM1u z0cijxL+apBLfnjMt1Kp96HKvuwpZ2V4dmgs80b4u/Ob9MBAWslWmcCaS8lIgoPC g5BLxsLklF++Z7Rc1t9PIJ1k9ZD/sjUvVmbW4rJCdjVlR8TKG6H6sxP+AwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGLMWhglWsxCPIC17LDAYOE9lrvWMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvWXN4YUdDVmF6RUk4Z0xYc3NNQmc0VDJXdTlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQIYg MA0GCSqGSIb3DQEBCwUAA4IBAQDCT9P57KS3qb5oGzCVTKVxxi4FftDEDOcS+Tnx DT5bNLj7pDRGyBJD+EtXK6OtbtxE53cSTIdDv6ld8Hw1sRTqeBgYRM0Hvfa8UM4a NyHoO4Mm8jMB4A2QfMlN1CNhUcda+IkZ+eXh4mFj/TSiNzhVvAagdOKKwJc7iUd4 lD6qJTod2yW3/MxItgokYdBsJq7UvO28gbRr3YN67Hd6UBuiTOL9Pqeo37yYLmoV nGnpE6Al0xrnXIC+yk0QqeWasfmxVTaP23nGtt0S4gR7u7xp/n131DO4puM6oiFn xT4IzhrdM/i9yCmaiVNGLOXNlG0SrjgW9nFix2/YJA9knp85 -----END CERTIFICATE-----Generated at Tue Jan 20 09:06:15 2026 by rpki-client