This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/YMlojSojXsI2HBIediVAZQR53Uw.roa File: YMlojSojXsI2HBIediVAZQR53Uw.roa (raw, json) Hash identifier: JmufbrfZpdywXGEriwFTpVhWPjQ10Wi0s4R9uPOJmgM= Subject key identifier: 60:C9:68:8D:2A:23:5E:C2:36:1C:12:1E:76:25:40:65:04:79:DD:4C Certificate issuer: /CN=a13471b5002a4eb6496125cf58737f0debadae7b Certificate serial: 019B78A33A589784B00B865A5FAD7CF9EEA4 Authority key identifier: A1:34:71:B5:00:2A:4E:B6:49:61:25:CF:58:73:7F:0D:EB:AD:AE:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/YMlojSojXsI2HBIediVAZQR53Uw.roa Signing time: Thu 01 Jan 2026 08:18:41 +0000 ROA not before: Thu 01 Jan 2026 08:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215509 IP address blocks: 2001:67c:de8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.crl rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:3a:58:97:84:b0:0b:86:5a:5f:ad:7c:f9:ee:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a13471b5002a4eb6496125cf58737f0debadae7b Validity Not Before: Jan 1 08:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=60c9688d2a235ec2361c121e762540650479dd4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fa:3d:4c:be:a4:85:79:58:eb:ca:2a:8e:66: 07:09:00:3d:d6:bc:6a:0c:a7:af:e7:44:8c:2a:1f: 58:13:e4:c6:68:a0:4b:c1:12:e6:f9:8b:48:74:a5: e3:e2:69:ff:5c:b3:0c:ff:2f:e4:1f:02:23:2b:92: 64:05:e6:f4:56:5a:63:55:39:4a:47:53:ad:ff:04: 23:5e:e6:56:b6:18:4a:20:50:50:b0:f0:e3:20:c8: 7f:f8:2d:03:08:c4:89:87:24:99:67:9d:af:2c:c1: cb:14:58:6c:a2:2e:d0:ed:2e:25:a6:e7:54:07:54: b1:91:48:a0:57:ef:d3:17:b4:ce:09:6d:18:31:a4: 50:dd:13:56:64:62:9b:be:7a:94:4a:9e:f9:2e:6f: 31:9a:84:1c:5e:86:f3:2b:35:88:d1:d9:c2:a9:b8: 1d:2f:ab:c1:3f:92:de:0c:ce:36:68:55:5c:17:39: a1:fd:59:a9:44:ef:27:70:7f:94:3c:75:de:a2:51: 26:7a:77:02:5b:2d:b9:6a:15:7e:40:4c:82:78:f0: 5f:21:a2:ac:32:03:c3:e2:41:29:bb:66:93:82:3e: 4d:ae:a2:ed:69:78:20:55:af:7a:72:32:2c:58:54: 7d:6f:22:c3:c2:12:d7:8b:ed:dc:87:35:66:fb:de: 78:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:C9:68:8D:2A:23:5E:C2:36:1C:12:1E:76:25:40:65:04:79:DD:4C X509v3 Authority Key Identifier: keyid:A1:34:71:B5:00:2A:4E:B6:49:61:25:CF:58:73:7F:0D:EB:AD:AE:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/YMlojSojXsI2HBIediVAZQR53Uw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:de8::/48 Signature Algorithm: sha256WithRSAEncryption 64:c4:91:2a:f0:32:3d:f9:70:f5:7b:b7:9e:fb:44:f8:30:42: e2:8d:b0:a1:0c:39:08:a8:b9:a9:d7:bf:8b:89:60:96:01:1c: 3b:2c:a6:4d:ff:71:42:fd:56:26:ea:b7:c5:b7:c2:e7:da:81: 1c:84:26:24:2d:98:94:18:6c:45:6f:a6:e5:6a:57:da:73:f3: 02:12:79:54:b4:0c:65:e2:86:a8:13:1f:fe:75:71:14:42:72: de:ab:46:f0:f5:fe:58:7f:84:07:bc:54:06:56:ec:3d:e2:28: cf:e6:c1:5b:59:a7:42:e1:24:72:6b:db:41:63:d0:20:34:bf: a5:5e:61:c5:23:51:ef:68:62:00:be:c6:ce:bf:6d:8d:9c:e4: 8e:2a:2c:ac:d9:60:81:a2:81:54:95:fc:7f:7f:02:ff:95:42: 14:a4:02:3a:0e:07:bc:97:0f:02:74:c0:6b:c5:63:02:83:21: 81:37:b7:89:4b:f2:41:29:64:3e:e1:d3:d1:10:50:76:9d:c3: e3:d0:27:e1:fe:2c:ec:25:c6:c5:71:14:80:8e:23:d1:15:f5: bc:ce:60:8e:3f:d0:54:7c:9e:3d:ec:87:a3:e5:f6:c9:ba:b1: 78:0f:c6:0a:1b:b0:83:0e:be:6d:0d:bc:b8:79:86:a0:5c:3a: 59:06:1e:17 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt4ozpYl4SwC4ZaX618+e6kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExMzQ3MWI1MDAyYTRlYjY0OTYxMjVjZjU4NzM3ZjBkZWJh ZGFlN2IwHhcNMjYwMTAxMDgxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MGM5Njg4ZDJhMjM1ZWMyMzYxYzEyMWU3NjI1NDA2NTA0NzlkZDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPo9TL6khXlY68oqjmYHCQA91rxq DKev50SMKh9YE+TGaKBLwRLm+YtIdKXj4mn/XLMM/y/kHwIjK5JkBeb0VlpjVTlK R1Ot/wQjXuZWthhKIFBQsPDjIMh/+C0DCMSJhySZZ52vLMHLFFhsoi7Q7S4lpudU B1SxkUigV+/TF7TOCW0YMaRQ3RNWZGKbvnqUSp75Lm8xmoQcXobzKzWI0dnCqbgd L6vBP5LeDM42aFVcFzmh/VmpRO8ncH+UPHXeolEmencCWy25ahV+QEyCePBfIaKs MgPD4kEpu2aTgj5NrqLtaXggVa96cjIsWFR9byLDwhLXi+3chzVm+954hQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGDJaI0qI17CNhwSHnYlQGUEed1MMB8GA1UdIwQY MBaAFKE0cbUAKk62SWElz1hzfw3rra57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1RSeHRRQXFUclpKWVNYUFdITl9EZXV0cm5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9kOWU4N2ItNDUwYS00MTUyLWEyNDIt ZDY5MTBiMjFhYjQyLzEvWU1sb2pTb2pYc0kySEJJZWRpVkFaUVI1M1V3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9kOWU4N2ItNDUwYS00MTUyLWEyNDItZDY5MTBiMjFhYjQy LzEvb1RSeHRRQXFUclpKWVNYUFdITl9EZXV0cm5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA3o MA0GCSqGSIb3DQEBCwUAA4IBAQBkxJEq8DI9+XD1e7ee+0T4MELijbChDDkIqLmp 17+LiWCWARw7LKZN/3FC/VYm6rfFt8Ln2oEchCYkLZiUGGxFb6blalfac/MCEnlU tAxl4oaoEx/+dXEUQnLeq0bw9f5Yf4QHvFQGVuw94ijP5sFbWadC4SRya9tBY9Ag NL+lXmHFI1HvaGIAvsbOv22NnOSOKiys2WCBooFUlfx/fwL/lUIUpAI6Dge8lw8C dMBrxWMCgyGBN7eJS/JBKWQ+4dPREFB2ncPj0Cfh/izsJcbFcRSAjiPRFfW8zmCO P9BUfJ497Iej5fbJurF4D8YKG7CDDr5tDby4eYagXDpZBh4X -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:32 2026 by rpki-client