This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/YfhZN1rvYedILm2du-oxwDuXwII.roa File: YfhZN1rvYedILm2du-oxwDuXwII.roa (raw, json) Hash identifier: 1MM4hTU9iOP9WXhxURJe8eevSMx2ycuXX53SNHSXcr8= Subject key identifier: 61:F8:59:37:5A:EF:61:E7:48:2E:6D:9D:BB:EA:31:C0:3B:97:C0:82 Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019B7F82BDFDE09B9FCCDBC31F05554E2A27 Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/YfhZN1rvYedILm2du-oxwDuXwII.roa Signing time: Fri 02 Jan 2026 16:20:33 +0000 ROA not before: Fri 02 Jan 2026 16:20:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44754 IP address blocks: 2a0b:b87:ffe8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 07:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:bd:fd:e0:9b:9f:cc:db:c3:1f:05:55:4e:2a:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Jan 2 16:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=61f859375aef61e7482e6d9dbbea31c03b97c082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:48:ce:ca:9b:07:e7:fc:4c:54:91:af:b1:f9: 22:5d:d3:f6:9a:c4:e1:87:17:de:b3:d8:8f:c3:47: 88:75:4e:3e:f8:84:9a:80:e3:cc:5d:c5:fd:e4:a2: 75:b8:ab:b4:29:f8:29:0e:87:9f:c0:86:37:fc:62: 86:4a:e8:ee:d9:9b:d1:5e:2b:3c:41:60:e3:40:d7: e5:5c:18:42:f4:c2:f0:f5:09:15:c2:72:e7:85:c4: c1:fd:83:9d:fc:15:f8:3e:90:9f:af:60:54:af:29: a3:b0:9b:c6:61:ed:b9:6b:3e:eb:ef:65:ee:9f:d4: f7:e5:c6:8b:72:75:c2:3c:b2:f8:e8:fe:fe:c9:7f: 1b:27:af:5b:ae:6d:9a:bf:30:e1:2a:07:c5:56:78: a2:84:b6:f5:0e:21:f0:d6:ac:35:a6:1b:15:8e:8b: df:77:b7:02:76:f6:df:1f:c9:37:85:61:6e:01:65: f8:4d:1b:5a:a7:4b:7e:b4:f2:58:c7:09:05:16:af: d4:de:ba:9d:86:3a:c5:42:76:7c:c5:78:0c:bb:e4: 70:36:b8:1f:04:9b:bd:dd:aa:db:ae:d0:ee:42:18: 4f:26:16:73:9e:07:75:c0:f5:79:df:07:e3:aa:4e: 48:b0:fa:87:a4:77:6d:27:26:02:2d:f8:87:3b:00: 26:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:F8:59:37:5A:EF:61:E7:48:2E:6D:9D:BB:EA:31:C0:3B:97:C0:82 X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/YfhZN1rvYedILm2du-oxwDuXwII.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:b87:ffe8::/48 Signature Algorithm: sha256WithRSAEncryption ce:40:31:e7:6e:aa:04:a5:1d:97:b7:7f:4c:1f:c1:a5:77:4a: d5:dd:40:de:ed:36:da:84:aa:14:90:9c:25:ad:91:12:bc:ad: 68:b4:89:e6:4e:42:85:dc:3d:b0:e2:13:fb:45:a5:b1:ac:01: 37:9a:91:7f:8a:16:cf:b7:ef:d5:78:2f:22:d2:03:22:13:81: 5d:72:c6:e0:76:ef:5c:45:fb:15:da:d7:43:3a:13:0b:47:b7: fc:25:49:ff:e1:37:87:a9:31:a5:52:8d:22:1a:4c:18:a9:23: ce:b7:40:cd:23:38:de:e9:25:12:68:2b:03:a2:ea:ae:80:51: 65:e4:8a:2c:1b:51:67:cf:70:d4:30:43:32:cb:56:3a:6c:80: f3:53:af:2c:6f:7e:27:eb:2a:74:dd:ef:2d:d7:66:2b:fe:99: 0d:60:87:7d:96:dd:75:02:d4:7c:73:b8:5b:26:62:72:d5:a7: 62:aa:82:ca:ca:1d:56:b3:38:a5:c8:2c:31:b8:34:93:8a:b5: e8:18:c3:16:22:ed:da:84:3f:df:83:70:d0:26:d0:e1:2f:74: ba:aa:71:93:c1:d7:9c:da:fd:e0:4a:c7:dc:7b:a8:ad:f7:4d: 4f:77:b2:34:13:0a:2c:1e:61:97:0c:5e:8d:fe:ca:91:e5:6e: ec:2e:43:1d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/gr394JufzNvDHwVVTionMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjYwMTAyMTYyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MWY4NTkzNzVhZWY2MWU3NDgyZTZkOWRiYmVhMzFjMDNiOTdjMDgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkjOypsH5/xMVJGvsfkiXdP2msTh hxfes9iPw0eIdU4++ISagOPMXcX95KJ1uKu0KfgpDoefwIY3/GKGSuju2ZvRXis8 QWDjQNflXBhC9MLw9QkVwnLnhcTB/YOd/BX4PpCfr2BUrymjsJvGYe25az7r72Xu n9T35caLcnXCPLL46P7+yX8bJ69brm2avzDhKgfFVniihLb1DiHw1qw1phsVjovf d7cCdvbfH8k3hWFuAWX4TRtap0t+tPJYxwkFFq/U3rqdhjrFQnZ8xXgMu+RwNrgf BJu93arbrtDuQhhPJhZzngd1wPV53wfjqk5IsPqHpHdtJyYCLfiHOwAmgwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGH4WTda72HnSC5tnbvqMcA7l8CCMB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEvWWZoWk4xcnZZZWRJTG0yZHUtb3h3RHVYd0lJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgsLh//o MA0GCSqGSIb3DQEBCwUAA4IBAQDOQDHnbqoEpR2Xt39MH8Gld0rV3UDe7TbahKoU kJwlrZESvK1otInmTkKF3D2w4hP7RaWxrAE3mpF/ihbPt+/VeC8i0gMiE4Fdcsbg du9cRfsV2tdDOhMLR7f8JUn/4TeHqTGlUo0iGkwYqSPOt0DNIzje6SUSaCsDouqu gFFl5IosG1Fnz3DUMEMyy1Y6bIDzU68sb34n6yp03e8t12Yr/pkNYId9lt11AtR8 c7hbJmJy1adiqoLKyh1WszilyCwxuDSTirXoGMMWIu3ahD/fg3DQJtDhL3S6qnGT wdec2v3gSsfce6it901Pd7I0EwosHmGXDF6N/sqR5W7sLkMd -----END CERTIFICATE-----Generated at Tue Jan 20 15:17:57 2026 by rpki-client