This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/r-YbuiLOjDtLbgqIKWUGylG27HA.roa File: r-YbuiLOjDtLbgqIKWUGylG27HA.roa (raw, json) Hash identifier: CKYtlUTCJPkniQ27OPoJcO3BQmhOoE6SvFv1q1Znej0= Subject key identifier: AF:E6:1B:BA:22:CE:8C:3B:4B:6E:0A:88:29:65:06:CA:51:B6:EC:70 Certificate issuer: /CN=9dabc626ac264066b1c5c709a48477f3788361de Certificate serial: 019B7EA58170C83E42F93D618DA1A1895827 Authority key identifier: 9D:AB:C6:26:AC:26:40:66:B1:C5:C7:09:A4:84:77:F3:78:83:61:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/r-YbuiLOjDtLbgqIKWUGylG27HA.roa Signing time: Fri 02 Jan 2026 12:18:54 +0000 ROA not before: Fri 02 Jan 2026 12:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212746 IP address blocks: 2001:678:c2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.crl rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:81:70:c8:3e:42:f9:3d:61:8d:a1:a1:89:58:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dabc626ac264066b1c5c709a48477f3788361de Validity Not Before: Jan 2 12:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=afe61bba22ce8c3b4b6e0a88296506ca51b6ec70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:71:c7:21:f0:97:eb:8b:3a:cb:2e:59:37:2f: e3:6b:6a:70:6c:61:03:33:0b:f4:7a:3e:b3:ce:5e: 63:d6:37:c2:7c:35:d2:b3:07:91:3a:e4:c6:f9:de: c0:2f:81:dc:b4:43:00:84:85:f6:d8:db:3c:60:d3: 69:2d:5e:c6:81:34:7a:08:a6:12:70:d9:5e:cc:5a: cf:f3:ee:f7:38:e2:0d:44:04:fa:2c:f1:50:85:b1: fe:f0:72:76:c2:a8:63:7b:c8:b4:6a:a1:8a:d0:85: 48:c9:58:3c:5b:5e:a2:16:44:c7:a6:17:92:2c:33: 2b:5b:c9:8f:86:06:ef:71:73:15:b2:78:de:67:80: 12:bc:d2:5f:e5:b6:8e:ba:98:d2:0d:25:6c:cd:f2: 09:6d:1d:b6:e5:e9:a5:24:fb:d5:5a:c0:fc:05:04: 7f:03:37:05:0b:fb:36:2e:3e:ec:47:99:40:19:65: b5:26:86:08:b4:38:d7:b1:51:49:a0:df:e6:59:b5: f2:34:93:67:47:f6:1a:f0:d4:10:44:56:51:a8:1b: e5:6f:b1:d7:76:2a:b3:20:31:0b:43:f0:16:3d:95: a5:25:28:82:ff:b1:a6:2f:d6:cc:62:65:a0:8d:58: 00:22:db:dd:53:37:41:aa:6b:02:01:cd:97:8e:02: c0:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:E6:1B:BA:22:CE:8C:3B:4B:6E:0A:88:29:65:06:CA:51:B6:EC:70 X509v3 Authority Key Identifier: keyid:9D:AB:C6:26:AC:26:40:66:B1:C5:C7:09:A4:84:77:F3:78:83:61:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/r-YbuiLOjDtLbgqIKWUGylG27HA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:c2c::/48 Signature Algorithm: sha256WithRSAEncryption a9:ef:63:6d:55:5d:e5:d8:78:27:4f:b7:7a:c6:e8:a9:5a:5e: 22:43:de:d8:de:e5:9a:f7:b9:f7:d2:00:6e:a1:f2:29:7a:f4: 42:c1:99:d2:1b:6f:ef:90:66:30:df:63:58:a2:5f:9c:81:eb: b4:0b:25:91:98:0e:e1:68:64:72:7a:3a:de:80:38:18:8a:7b: 03:f2:e4:58:3f:ea:5a:6c:0f:5a:2f:52:e6:a7:43:57:e1:59: d2:44:23:89:84:96:15:70:d9:02:1e:84:8f:0f:d6:ce:7b:df: e1:7e:55:3c:72:79:42:c0:52:c1:4d:19:84:93:a4:f1:df:80: aa:55:80:09:5c:67:8a:d3:4a:be:06:b5:10:63:e2:14:f5:1f: e5:dc:09:da:e2:45:98:d5:f0:e3:75:16:91:21:89:23:0f:31: 4e:72:9f:cc:54:ef:83:c6:ab:20:0b:90:dd:ae:2d:45:93:2b: 40:a1:60:a6:a8:50:ae:47:30:62:ce:f0:9c:8f:fe:b8:e8:d6: 74:d0:22:9f:e4:51:d4:aa:ed:fd:17:d6:c2:3a:2a:03:fd:60: 3b:8a:36:d2:63:fc:a5:45:e9:c2:93:68:bc:af:ff:06:e7:65: 0b:c4:3d:ff:d7:06:34:d1:bb:36:0f:5b:9a:21:0b:48:d0:b3: b8:15:c6:93 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pYFwyD5C+T1hjaGhiVgnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYWJjNjI2YWMyNjQwNjZiMWM1YzcwOWE0ODQ3N2YzNzg4 MzYxZGUwHhcNMjYwMTAyMTIxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZmU2MWJiYTIyY2U4YzNiNGI2ZTBhODgyOTY1MDZjYTUxYjZlYzcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3HHIfCX64s6yy5ZNy/ja2pwbGED Mwv0ej6zzl5j1jfCfDXSsweROuTG+d7AL4HctEMAhIX22Ns8YNNpLV7GgTR6CKYS cNlezFrP8+73OOINRAT6LPFQhbH+8HJ2wqhje8i0aqGK0IVIyVg8W16iFkTHpheS LDMrW8mPhgbvcXMVsnjeZ4ASvNJf5baOupjSDSVszfIJbR225emlJPvVWsD8BQR/ AzcFC/s2Lj7sR5lAGWW1JoYItDjXsVFJoN/mWbXyNJNnR/Ya8NQQRFZRqBvlb7HX diqzIDELQ/AWPZWlJSiC/7GmL9bMYmWgjVgAItvdUzdBqmsCAc2XjgLADQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFK/mG7oizow7S24KiCllBspRtuxwMB8GA1UdIwQY MBaAFJ2rxiasJkBmscXHCaSEd/N4g2HeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmF2R0pxd21RR2F4eGNjSnBJUjM4M2lEWWQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8xOWIwMDgtYjZmOS00MjcxLWIxMzAt MGI3ZTM4YTEyMmZlLzEvci1ZYnVpTE9qRHRMYmdxSUtXVUd5bEcyN0hBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy8xOWIwMDgtYjZmOS00MjcxLWIxMzAtMGI3ZTM4YTEyMmZl LzEvbmF2R0pxd21RR2F4eGNjSnBJUjM4M2lEWWQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAws MA0GCSqGSIb3DQEBCwUAA4IBAQCp72NtVV3l2HgnT7d6xuipWl4iQ97Y3uWa97n3 0gBuofIpevRCwZnSG2/vkGYw32NYol+cgeu0CyWRmA7haGRyejregDgYinsD8uRY P+pabA9aL1Lmp0NX4VnSRCOJhJYVcNkCHoSPD9bOe9/hflU8cnlCwFLBTRmEk6Tx 34CqVYAJXGeK00q+BrUQY+IU9R/l3Ana4kWY1fDjdRaRIYkjDzFOcp/MVO+Dxqsg C5Ddri1FkytAoWCmqFCuRzBizvCcj/646NZ00CKf5FHUqu39F9bCOioD/WA7ijbS Y/ylRenCk2i8r/8G52ULxD3/1wY00bs2D1uaIQtI0LO4FcaT -----END CERTIFICATE-----Generated at Mon Jan 26 17:25:36 2026 by rpki-client