This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/yy9nHvFXYIN8sbUELB16_WMVOuo.roa File: yy9nHvFXYIN8sbUELB16_WMVOuo.roa (raw, json) Hash identifier: 0UphQ0BGUr/nn9ZoesHvd8RcbTu2/2U4/QTxkA2BuLg= Subject key identifier: CB:2F:67:1E:F1:57:60:83:7C:B1:B5:04:2C:1D:7A:FD:63:15:3A:EA Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6C1A4F5520C2025BE68A9DB476FB1 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/yy9nHvFXYIN8sbUELB16_WMVOuo.roa Signing time: Fri 02 Jan 2026 12:20:16 +0000 ROA not before: Fri 02 Jan 2026 12:20:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1239 IP address blocks: 2a0c:9a40:82b0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:c1:a4:f5:52:0c:20:25:be:68:a9:db:47:6f:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cb2f671ef15760837cb1b5042c1d7afd63153aea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0e:4a:4d:95:80:68:c8:45:7d:de:84:1f:57: 28:6f:dc:e6:19:03:1f:04:9b:e0:cb:9f:1b:53:5c: 70:e8:91:93:17:7c:42:ea:10:63:f0:ed:de:32:06: 1d:2a:a6:79:9d:a5:b4:5b:dc:cb:ac:3f:76:b1:b0: 20:e7:08:0b:36:b1:ad:66:e3:72:27:ce:27:65:bd: 17:15:9b:39:89:1d:cb:21:24:05:eb:e3:18:64:c1: ac:73:1a:83:94:80:1b:a4:5e:d9:1c:db:b0:81:7e: 6f:d2:b8:ef:d2:63:ef:95:9b:ba:80:60:04:34:50: 17:63:3b:64:25:21:b1:72:fc:e2:83:24:b9:11:ee: f9:0d:ad:45:7c:3b:b6:14:41:32:47:e3:f2:c6:77: b9:28:da:6f:62:37:f6:57:7a:49:54:1f:7c:21:c9: 63:09:7b:4f:e2:3b:a6:cc:ad:45:64:d5:dc:38:f5: 58:24:dd:f8:2c:e3:b2:ef:05:cf:9e:9e:4e:60:44: ad:04:e5:d4:4f:33:f0:0c:eb:dd:75:5f:ed:e6:66: 92:76:cc:6c:b9:f7:4a:76:b1:f1:dd:f9:e5:ba:cd: cb:b7:a7:b4:3d:b3:e6:2f:82:38:8d:78:0a:f1:0b: 2f:c1:b3:4b:8e:a7:a5:cc:44:47:17:53:15:d5:60: b4:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:2F:67:1E:F1:57:60:83:7C:B1:B5:04:2C:1D:7A:FD:63:15:3A:EA X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/yy9nHvFXYIN8sbUELB16_WMVOuo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:82b0::/48 Signature Algorithm: sha256WithRSAEncryption b6:48:16:ce:e7:f3:90:ef:c9:14:98:f4:f8:36:57:45:0d:17: 02:aa:74:02:fc:ee:52:17:6e:b1:77:bc:a6:7e:41:a2:b7:b4: b6:fa:c7:e9:4f:cf:89:ff:8d:30:04:9b:3c:cb:d3:5a:6f:cf: df:17:34:9a:ae:a8:61:19:7c:a9:64:49:cd:5d:32:bb:aa:c9: af:6b:15:e2:2f:47:51:b0:be:2e:0a:08:10:dd:85:ed:31:ab: 7e:04:bf:dd:c4:42:06:1c:cc:dc:db:3d:1d:8d:18:cf:d7:dd: 56:00:12:3e:34:bc:9c:dc:a6:eb:b6:d3:3c:b1:a3:84:8e:0f: 16:42:55:0a:fa:76:dd:7b:8e:43:0f:f5:46:65:91:a6:ba:4a: 65:e8:d8:7c:3d:4f:11:23:ca:91:64:3e:0a:45:d8:91:7e:6a: 38:b7:3b:63:63:df:ce:81:a1:42:23:d3:74:8a:c6:b4:9d:f3: c2:be:26:8f:f6:de:49:72:4d:ee:51:9c:a5:46:e3:b8:67:fe: 8d:b4:b6:dd:0d:c5:cd:1d:6c:2d:da:92:4b:fb:02:8d:71:dd: c6:1c:de:7f:b8:a6:9c:6d:24:0f:62:0f:aa:2c:25:31:fa:1d: eb:bb:3c:27:e1:63:7c:e1:96:19:0f:64:27:e6:57:89:34:d6: 90:7c:69:20 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+psGk9VIMICW+aKnbR2+xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjJmNjcxZWYxNTc2MDgzN2NiMWI1MDQyYzFkN2FmZDYzMTUzYWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAog5KTZWAaMhFfd6EH1cob9zmGQMf BJvgy58bU1xw6JGTF3xC6hBj8O3eMgYdKqZ5naW0W9zLrD92sbAg5wgLNrGtZuNy J84nZb0XFZs5iR3LISQF6+MYZMGscxqDlIAbpF7ZHNuwgX5v0rjv0mPvlZu6gGAE NFAXYztkJSGxcvzigyS5Ee75Da1FfDu2FEEyR+Pyxne5KNpvYjf2V3pJVB98Iclj CXtP4jumzK1FZNXcOPVYJN34LOOy7wXPnp5OYEStBOXUTzPwDOvddV/t5maSdsxs ufdKdrHx3fnlus3Lt6e0PbPmL4I4jXgK8QsvwbNLjqelzERHF1MV1WC0IQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMsvZx7xV2CDfLG1BCwdev1jFTrqMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEveXk5bkh2RlhZSU44c2JVRUxCMTZfV01WT3VvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQIKw MA0GCSqGSIb3DQEBCwUAA4IBAQC2SBbO5/OQ78kUmPT4NldFDRcCqnQC/O5SF26x d7ymfkGit7S2+sfpT8+J/40wBJs8y9Nab8/fFzSarqhhGXypZEnNXTK7qsmvaxXi L0dRsL4uCggQ3YXtMat+BL/dxEIGHMzc2z0djRjP191WABI+NLyc3KbrttM8saOE jg8WQlUK+nbde45DD/VGZZGmukpl6Nh8PU8RI8qRZD4KRdiRfmo4tztjY9/OgaFC I9N0isa0nfPCviaP9t5Jck3uUZylRuO4Z/6NtLbdDcXNHWwt2pJL+wKNcd3GHN5/ uKacbSQPYg+qLCUx+h3ruzwn4WN84ZYZD2Qn5leJNNaQfGkg -----END CERTIFICATE-----Generated at Tue Jan 20 09:05:17 2026 by rpki-client