This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/cYSlOixvw1IRH_A6U1PmGBfOnLc.roa File: cYSlOixvw1IRH_A6U1PmGBfOnLc.roa (raw, json) Hash identifier: ObOoQktNn2mk1CLRsAqDNu4BrgB8VABVPaTI7wXzkNQ= Subject key identifier: 71:84:A5:3A:2C:6F:C3:52:11:1F:F0:3A:53:53:E6:18:17:CE:9C:B7 Certificate issuer: /CN=ba23b07a3c0ac9e333f52e8b5d41a768a3d39025 Certificate serial: 019B7F847351CA0D2399D2D3737D9CA5C470 Authority key identifier: BA:23:B0:7A:3C:0A:C9:E3:33:F5:2E:8B:5D:41:A7:68:A3:D3:90:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uiOwejwKyeMz9S6LXUGnaKPTkCU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/cYSlOixvw1IRH_A6U1PmGBfOnLc.roa Signing time: Fri 02 Jan 2026 16:22:25 +0000 ROA not before: Fri 02 Jan 2026 16:22:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215593 IP address blocks: 2a0e:8340::/48 maxlen: 48 2a0e:8340:1::/48 maxlen: 48 2a0e:8340:2::/48 maxlen: 48 2a0e:8340:3::/48 maxlen: 48 2a0e:8340:4::/48 maxlen: 48 2a0e:8341::/32 maxlen: 32 2a0e:8342::/32 maxlen: 32 2a0e:8343::/32 maxlen: 32 2a0e:8344::/32 maxlen: 32 2a0e:8345::/32 maxlen: 32 2a0e:8346::/32 maxlen: 32 2a0e:8347::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.crl rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft rsync://rpki.ripe.net/repository/DEFAULT/uiOwejwKyeMz9S6LXUGnaKPTkCU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 10:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:73:51:ca:0d:23:99:d2:d3:73:7d:9c:a5:c4:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba23b07a3c0ac9e333f52e8b5d41a768a3d39025 Validity Not Before: Jan 2 16:22:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7184a53a2c6fc352111ff03a5353e61817ce9cb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e0:a8:c6:d9:b0:98:9b:56:eb:ce:41:4e:cb: ef:dd:c9:f7:52:79:65:b4:15:e9:5f:4a:71:9e:7e: f3:bf:5f:60:49:2a:e6:39:38:52:e0:d0:48:54:d7: 96:57:e1:5c:4c:1d:ae:ff:86:db:b5:c3:44:75:d0: b8:cf:51:ba:b4:ed:1b:6d:6f:9b:c5:00:dc:3b:7c: 7b:35:c9:84:fd:bb:10:27:06:a7:69:d1:a0:30:d0: 09:13:a7:43:6b:e9:3e:81:f4:2f:9f:16:f4:45:f1: ba:10:b4:40:ed:f2:45:35:fb:18:9e:ec:29:0b:bb: 56:e6:db:91:a3:ce:2a:3f:96:ca:e6:26:fa:73:59: 84:de:c4:7b:11:f6:92:14:5a:3f:6b:5e:fd:a6:13: a2:09:42:c7:e9:ff:1e:96:db:48:91:d3:29:c9:b2: 46:67:99:ab:b2:c1:a5:4e:45:80:f4:3b:62:6c:77: 69:f1:a1:8e:4e:69:16:ec:18:2c:f2:ca:47:0c:35: 11:98:5e:07:d2:77:ae:1e:5d:83:85:03:30:14:ad: ec:7f:26:d9:80:73:99:a5:ce:09:00:e7:84:4b:dd: 0e:ff:97:7c:8c:9c:a5:8b:a2:e1:e7:b5:f1:24:08: db:87:d3:17:40:dc:7f:be:5d:81:13:0e:54:89:15: b6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:84:A5:3A:2C:6F:C3:52:11:1F:F0:3A:53:53:E6:18:17:CE:9C:B7 X509v3 Authority Key Identifier: keyid:BA:23:B0:7A:3C:0A:C9:E3:33:F5:2E:8B:5D:41:A7:68:A3:D3:90:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uiOwejwKyeMz9S6LXUGnaKPTkCU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/cYSlOixvw1IRH_A6U1PmGBfOnLc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:8340::-2a0e:8340:4:ffff:ffff:ffff:ffff:ffff 2a0e:8341::-2a0e:8347:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 82:37:2b:8a:86:92:41:f0:18:00:fc:7e:c5:23:4f:6c:24:3a: 66:07:37:5b:3d:bd:1d:a3:45:11:8f:93:18:f4:90:5a:64:fc: 78:95:55:3a:cf:04:a1:94:8c:d1:e1:ed:3a:a0:33:e9:29:bd: 12:c0:4f:0e:85:bb:66:30:93:88:88:02:86:d6:2f:f8:34:5f: 6a:ba:71:05:15:4a:5c:57:6f:76:b4:15:71:b4:d1:d3:6b:15: 80:f8:04:1e:38:df:d2:67:0f:e9:db:bc:49:20:3c:ce:a5:48: 66:04:31:b9:f9:b7:8b:e6:77:76:7d:bc:ce:2d:4a:47:91:0d: 2d:18:e2:f3:98:06:0a:77:0b:66:eb:fe:65:1f:b1:96:e8:d0: 7c:28:a6:7a:64:54:6d:30:19:70:8a:7c:d8:76:d5:c4:50:0d: 55:05:49:5f:1c:a0:fc:39:7f:42:18:7c:60:89:0a:a2:0e:f5: 44:46:38:0f:50:d4:81:08:b4:19:9e:fa:fb:de:94:85:6f:63: 68:3c:50:2e:0b:a3:e2:c2:9b:4b:f1:64:a5:de:b1:6a:00:b3: 8c:cf:68:21:ff:de:1f:6f:3c:fb:a1:b4:2c:7e:7c:80:f0:ad: 95:38:27:e0:ed:d4:50:88:14:a2:7b:0d:78:be:c2:79:03:9a: aa:3e:ee:3b -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt/hHNRyg0jmdLTc32cpcRwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhMjNiMDdhM2MwYWM5ZTMzM2Y1MmU4YjVkNDFhNzY4YTNk MzkwMjUwHhcNMjYwMTAyMTYyMjI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTg0YTUzYTJjNmZjMzUyMTExZmYwM2E1MzUzZTYxODE3Y2U5Y2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuCoxtmwmJtW685BTsvv3cn3Unll tBXpX0pxnn7zv19gSSrmOThS4NBIVNeWV+FcTB2u/4bbtcNEddC4z1G6tO0bbW+b xQDcO3x7NcmE/bsQJwanadGgMNAJE6dDa+k+gfQvnxb0RfG6ELRA7fJFNfsYnuwp C7tW5tuRo84qP5bK5ib6c1mE3sR7EfaSFFo/a179phOiCULH6f8elttIkdMpybJG Z5mrssGlTkWA9DtibHdp8aGOTmkW7Bgs8spHDDURmF4H0neuHl2DhQMwFK3sfybZ gHOZpc4JAOeES90O/5d8jJyli6Lh57XxJAjbh9MXQNx/vl2BEw5UiRW2DwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFHGEpTosb8NSER/wOlNT5hgXzpy3MB8GA1UdIwQY MBaAFLojsHo8CsnjM/Uui11Bp2ij05AlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWlPd2Vqd0t5ZU16OVM2TFhVR25hS1BUa0NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8xMGQ1YjItODVlMy00OWVkLWJkYzEt ODA2OWM0Njc3MWNjLzEvY1lTbE9peHZ3MUlSSF9BNlUxUG1HQmZPbkxjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC8xMGQ1YjItODVlMy00OWVkLWJkYzEtODA2OWM0Njc3MWNj LzEvdWlPd2Vqd0t5ZU16OVM2TFhVR25hS1BUa0NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAAjAiMBADBQYqDoNA AwcAKg6DQAAEMA4DBQAqDoNBAwUDKg6DQDANBgkqhkiG9w0BAQsFAAOCAQEAgjcr ioaSQfAYAPx+xSNPbCQ6Zgc3Wz29HaNFEY+TGPSQWmT8eJVVOs8EoZSM0eHtOqAz 6Sm9EsBPDoW7ZjCTiIgChtYv+DRfarpxBRVKXFdvdrQVcbTR02sVgPgEHjjf0mcP 6du8SSA8zqVIZgQxufm3i+Z3dn28zi1KR5ENLRji85gGCncLZuv+ZR+xlujQfCim emRUbTAZcIp82HbVxFANVQVJXxyg/Dl/Qhh8YIkKog71REY4D1DUgQi0GZ76+96U hW9jaDxQLguj4sKbS/Fkpd6xagCzjM9oIf/eH288+6G0LH58gPCtlTgn4O3UUIgU onsNeL7CeQOaqj7uOw== -----END CERTIFICATE-----Generated at Wed Jan 21 16:32:38 2026 by rpki-client