This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/yjLXNUiiSm9f32pyjx_bkcZUDBs.roa File: yjLXNUiiSm9f32pyjx_bkcZUDBs.roa (raw, json) Hash identifier: gTjMGoBVWAg+JBCsgCpISmNju9bWjqBK8bD0UsksmIg= Subject key identifier: CA:32:D7:35:48:A2:4A:6F:5F:DF:6A:72:8F:1F:DB:91:C6:54:0C:1B Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA706C766406890D7EFBF1799E54C64 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/yjLXNUiiSm9f32pyjx_bkcZUDBs.roa Signing time: Fri 02 Jan 2026 12:20:33 +0000 ROA not before: Fri 02 Jan 2026 12:20:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213625 IP address blocks: 2a0c:9a40:84e0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:06:c7:66:40:68:90:d7:ef:bf:17:99:e5:4c:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca32d73548a24a6f5fdf6a728f1fdb91c6540c1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:21:8c:0a:cb:aa:3a:52:78:33:e2:68:04:30: 79:2b:f2:af:03:8c:02:c0:ac:63:a5:d9:4b:d6:ee: 23:da:95:f8:d9:43:a3:3f:2a:38:02:78:fd:cd:77: 66:6c:15:18:d3:1b:31:0f:b1:ca:58:3c:1d:6c:ac: 82:50:a1:4f:3d:16:d4:23:e2:a6:a7:a7:68:b8:15: 41:43:28:8c:f9:62:1c:9d:af:55:41:e7:b9:13:8e: 35:5c:2b:3f:a3:9a:45:20:60:18:18:2e:df:00:e7: 54:89:ca:06:52:25:9c:05:a0:06:b5:ba:7a:ed:2e: f1:b3:38:b0:89:b9:f5:c0:b5:6b:ae:27:08:b3:59: 5a:08:e1:55:8d:38:c1:e1:52:d5:3d:85:a6:68:86: 3e:42:93:73:cf:32:98:99:aa:7b:f0:74:ff:4a:a0: 13:b0:fb:3b:e9:43:30:c6:44:18:de:55:77:6c:dc: 4b:da:e3:85:05:89:25:55:70:06:47:a3:64:ca:5b: da:3f:f7:c3:9a:aa:bd:70:a6:10:83:07:5d:1f:28: 9f:be:2a:e6:b7:71:13:54:1e:67:c7:6b:09:24:fb: 06:b2:0a:34:c3:b6:d5:b9:11:a3:02:e4:e0:6c:af: 7d:68:34:b3:71:b5:9e:c8:df:2b:34:19:cf:83:10: 22:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:32:D7:35:48:A2:4A:6F:5F:DF:6A:72:8F:1F:DB:91:C6:54:0C:1B X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/yjLXNUiiSm9f32pyjx_bkcZUDBs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:84e0::/48 Signature Algorithm: sha256WithRSAEncryption 37:9c:12:3b:94:ab:47:5a:3b:c5:90:ef:3f:ec:30:b9:f5:b9: 71:55:fd:4a:fe:ec:fb:c5:e3:a4:3a:e5:8a:29:54:e1:66:2d: 4a:52:5e:e7:93:be:ff:fc:36:20:94:14:b0:4e:17:2e:3e:36: 5e:c3:37:0b:3d:7c:35:61:9a:22:69:5b:c3:e0:71:b2:3d:86: 15:87:8b:b1:95:11:cd:1e:45:0a:84:c7:3f:0f:82:3e:a3:06: c7:95:21:7d:9f:bc:a9:33:e1:5c:fa:c9:14:a8:12:df:22:bd: 67:14:70:68:ba:c3:4e:a0:fe:3e:85:3e:c4:26:0b:b3:df:3e: e9:52:0b:0f:27:5c:dc:f8:3a:39:1d:83:08:f4:a6:d8:ce:1c: f5:21:69:08:71:b9:7a:56:2a:2a:9e:89:bb:4a:b7:e9:3b:44: 87:4a:b6:cc:77:e0:63:f4:7a:b5:10:ca:e4:53:c7:42:20:9d: fc:00:3a:ff:ec:06:09:b8:90:42:33:a3:14:f5:50:c2:2b:22: 22:b3:5e:d5:21:4c:0e:fe:4e:60:9f:38:36:22:c5:7c:4c:2e: 61:2c:af:3f:b4:8e:ba:58:b2:85:4c:86:f7:c2:67:60:fc:cf: 19:5e:b0:0b:04:99:59:f0:76:ea:f0:80:aa:07:4e:94:ce:2b: e7:a8:99:de -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pwbHZkBokNfvvxeZ5UxkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTMyZDczNTQ4YTI0YTZmNWZkZjZhNzI4ZjFmZGI5MWM2NTQwYzFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyGMCsuqOlJ4M+JoBDB5K/KvA4wC wKxjpdlL1u4j2pX42UOjPyo4Anj9zXdmbBUY0xsxD7HKWDwdbKyCUKFPPRbUI+Km p6douBVBQyiM+WIcna9VQee5E441XCs/o5pFIGAYGC7fAOdUicoGUiWcBaAGtbp6 7S7xsziwibn1wLVrricIs1laCOFVjTjB4VLVPYWmaIY+QpNzzzKYmap78HT/SqAT sPs76UMwxkQY3lV3bNxL2uOFBYklVXAGR6NkylvaP/fDmqq9cKYQgwddHyifvirm t3ETVB5nx2sJJPsGsgo0w7bVuRGjAuTgbK99aDSzcbWeyN8rNBnPgxAiuQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMoy1zVIokpvX99qco8f25HGVAwbMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEveWpMWE5VaWlTbTlmMzJweWp4X2JrY1pVREJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQITg MA0GCSqGSIb3DQEBCwUAA4IBAQA3nBI7lKtHWjvFkO8/7DC59blxVf1K/uz7xeOk OuWKKVThZi1KUl7nk77//DYglBSwThcuPjZewzcLPXw1YZoiaVvD4HGyPYYVh4ux lRHNHkUKhMc/D4I+owbHlSF9n7ypM+Fc+skUqBLfIr1nFHBousNOoP4+hT7EJguz 3z7pUgsPJ1zc+Do5HYMI9KbYzhz1IWkIcbl6Vioqnom7SrfpO0SHSrbMd+Bj9Hq1 EMrkU8dCIJ38ADr/7AYJuJBCM6MU9VDCKyIis17VIUwO/k5gnzg2IsV8TC5hLK8/ tI66WLKFTIb3wmdg/M8ZXrALBJlZ8Hbq8ICqB06UzivnqJne -----END CERTIFICATE-----Generated at Tue Jan 20 09:03:34 2026 by rpki-client