This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/00yd52u19AjGNJHv_HMF_Eo4wx4.roa File: 00yd52u19AjGNJHv_HMF_Eo4wx4.roa (raw, json) Hash identifier: XbtltjdDACXUYK7aOci0QiVpZfvlLP/GXwlvbV+yBnw= Subject key identifier: D3:4C:9D:E7:6B:B5:F4:08:C6:34:91:EF:FC:73:05:FC:4A:38:C3:1E Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B8FA8723D48B3D1ED8BEC173FBDDC0F05 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/00yd52u19AjGNJHv_HMF_Eo4wx4.roa Signing time: Mon 05 Jan 2026 19:35:39 +0000 ROA not before: Mon 05 Jan 2026 19:35:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215110 IP address blocks: 2a02:2fc0:1b::/48 maxlen: 48 2a02:2fc0:1e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8f:a8:72:3d:48:b3:d1:ed:8b:ec:17:3f:bd:dc:0f:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 5 19:35:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d34c9de76bb5f408c63491effc7305fc4a38c31e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9e:91:84:75:54:98:85:3c:9b:47:78:8f:af: e5:6a:b7:d3:30:c7:11:dd:95:d1:5a:f6:27:1a:7c: 8f:33:61:bc:99:8b:29:70:52:c8:6f:ac:c4:8e:3b: 5c:3c:ad:6f:22:3f:be:4a:33:2d:60:13:96:8c:9e: 67:26:88:d2:3a:25:ff:00:92:63:b6:45:9a:d9:26: a0:22:3c:a6:54:26:81:a4:6b:a7:6a:ae:63:10:b2: d5:5a:69:30:50:92:eb:91:11:5d:c9:31:3d:11:52: 0d:b8:c1:4b:2a:e9:e8:59:93:56:b3:65:20:05:fa: e6:b1:50:17:14:aa:3a:7c:e1:d5:11:dc:ab:b6:57: ea:d9:6e:69:03:2a:82:36:bb:2c:c3:05:5a:20:f8: 11:59:1e:43:81:e2:29:46:99:50:cc:a9:7b:56:30: 62:3a:00:c3:ba:fc:19:54:17:7a:d9:41:b0:b2:2d: 17:29:d4:63:5e:ef:24:a8:c5:88:8d:a7:8b:80:0a: 9c:6b:d2:81:3e:cc:b3:61:06:7b:c8:0e:5c:77:85: 9f:34:14:21:9a:b9:0a:c3:09:13:f1:3b:96:7e:d1: ea:5e:ca:07:9a:0c:68:8a:ab:c2:92:04:97:35:75: d0:5d:19:a9:00:28:f9:95:1d:dd:ac:89:9a:d6:65: 06:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:4C:9D:E7:6B:B5:F4:08:C6:34:91:EF:FC:73:05:FC:4A:38:C3:1E X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/00yd52u19AjGNJHv_HMF_Eo4wx4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:2fc0:1b::/48 2a02:2fc0:1e::/48 Signature Algorithm: sha256WithRSAEncryption d5:6d:3f:7a:fa:74:0d:a3:57:27:e9:0c:89:b3:5a:22:75:1b: 1f:eb:2d:c7:b9:a6:7f:2c:58:32:89:52:ec:b0:05:2b:40:0e: ca:0d:0a:dc:35:26:7c:99:b4:ff:ad:f3:b7:73:d3:61:64:63: 1e:ce:6f:26:44:72:66:dd:65:d3:63:5c:70:0a:59:ae:2d:15: b5:f8:79:f5:17:6d:4f:76:45:73:07:6f:66:4b:2a:02:4c:27: 01:d9:14:c5:e4:38:3e:c0:b4:4f:65:e5:38:ab:3a:1e:7e:e0: 4a:09:e3:ff:f7:34:d2:00:1d:aa:5d:37:91:71:e7:e4:e1:e6: 7b:08:31:21:75:52:71:b3:fe:7c:cd:a2:9c:d3:5b:54:b3:a0: dd:55:1a:5a:d7:12:67:0c:12:2a:0c:b8:8b:d5:45:06:ac:e6: c4:a8:75:92:1b:7e:90:d4:7c:ee:d2:77:2a:e1:14:d8:df:95: 4f:8d:f1:b2:e7:93:32:68:2e:71:6c:b3:8d:68:55:60:97:75: ac:c1:05:6f:4a:a4:8a:6c:75:de:9e:9b:76:3e:5c:be:28:62: fd:ba:cf:a5:4d:6a:ab:a2:83:ca:2f:25:b5:bd:31:18:fb:5e: 73:7c:46:54:50:a2:bd:c1:a6:b2:dd:3d:e5:a5:1b:30:08:6e: 0f:c6:80:3e -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZuPqHI9SLPR7YvsFz+93A8FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTA1MTkzNTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzRjOWRlNzZiYjVmNDA4YzYzNDkxZWZmYzczMDVmYzRhMzhjMzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqp6RhHVUmIU8m0d4j6/larfTMMcR 3ZXRWvYnGnyPM2G8mYspcFLIb6zEjjtcPK1vIj++SjMtYBOWjJ5nJojSOiX/AJJj tkWa2SagIjymVCaBpGunaq5jELLVWmkwUJLrkRFdyTE9EVINuMFLKunoWZNWs2Ug BfrmsVAXFKo6fOHVEdyrtlfq2W5pAyqCNrsswwVaIPgRWR5DgeIpRplQzKl7VjBi OgDDuvwZVBd62UGwsi0XKdRjXu8kqMWIjaeLgAqca9KBPsyzYQZ7yA5cd4WfNBQh mrkKwwkT8TuWftHqXsoHmgxoiqvCkgSXNXXQXRmpACj5lR3drIma1mUGPwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNNMnedrtfQIxjSR7/xzBfxKOMMeMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvMDB5ZDUydTE5QWpHTkpIdl9ITUZfRW80d3g0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgIvwAAb AwcAKgIvwAAeMA0GCSqGSIb3DQEBCwUAA4IBAQDVbT96+nQNo1cn6QyJs1oidRsf 6y3HuaZ/LFgyiVLssAUrQA7KDQrcNSZ8mbT/rfO3c9NhZGMezm8mRHJm3WXTY1xw ClmuLRW1+Hn1F21PdkVzB29mSyoCTCcB2RTF5Dg+wLRPZeU4qzoefuBKCeP/9zTS AB2qXTeRcefk4eZ7CDEhdVJxs/58zaKc01tUs6DdVRpa1xJnDBIqDLiL1UUGrObE qHWSG36Q1Hzu0ncq4RTY35VPjfGy55MyaC5xbLONaFVgl3WswQVvSqSKbHXenpt2 Ply+KGL9us+lTWqrooPKLyW1vTEY+15zfEZUUKK9waay3T3lpRswCG4PxoA+ -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:59 2026 by rpki-client