This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/y9q7WcPPyW8EEr7xX3Q9ZszGX50.roa File: y9q7WcPPyW8EEr7xX3Q9ZszGX50.roa (raw, json) Hash identifier: ioQ6JkXM6IrvGRi0l/o4hjvJaJWf+IDjPOT/KeKQ/Xo= Subject key identifier: CB:DA:BB:59:C3:CF:C9:6F:04:12:BE:F1:5F:74:3D:66:CC:C6:5F:9D Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019B7F82D2BD404908366EE71DBD4E8D8B94 Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/y9q7WcPPyW8EEr7xX3Q9ZszGX50.roa Signing time: Fri 02 Jan 2026 16:20:38 +0000 ROA not before: Fri 02 Jan 2026 16:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209862 IP address blocks: 2a0b:b87:ff17::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 07:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:d2:bd:40:49:08:36:6e:e7:1d:bd:4e:8d:8b:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Jan 2 16:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cbdabb59c3cfc96f0412bef15f743d66ccc65f9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0a:37:fd:e1:49:99:3f:cb:3b:5a:2f:74:76: 90:a9:0a:35:a2:4c:1b:0b:25:8b:c6:70:b1:0e:d8: b5:f0:c5:02:1c:72:05:d7:ed:a2:90:af:3f:c3:d3: dd:6a:b8:99:84:f5:a4:25:39:62:1f:1a:d0:39:2e: 1d:a4:50:f6:a9:d3:3d:8b:71:8f:8f:a3:05:bc:76: f0:d7:b8:17:97:bf:18:aa:8e:a8:43:57:b6:d8:a3: 4c:d9:57:36:d8:4c:2b:a6:56:63:b6:e1:2f:a0:b1: 0d:68:0e:5f:8c:d7:0a:ca:cb:22:ad:2f:85:83:67: a4:ee:a8:4e:33:20:7f:53:61:65:2c:49:45:17:4d: 29:a7:6f:0c:a1:96:6f:bb:1f:00:68:2e:da:23:f0: 3c:ba:4f:f1:a4:92:5d:e7:74:3c:01:2c:41:48:9e: ea:5b:2d:a5:9f:16:f3:fa:ee:c6:42:aa:0c:dd:ad: 19:09:69:df:01:32:83:d6:50:30:37:2f:33:20:c0: 7a:dc:e9:7c:64:66:d2:da:dd:8c:b5:a6:3c:ef:e2: a3:fc:a3:71:0f:3d:f7:31:87:9b:2f:9f:9c:1b:35: 01:e0:8b:3f:04:be:9f:01:51:87:79:90:fa:0e:6a: c7:9a:85:69:23:64:1f:ea:0f:5b:55:66:b1:c7:c1: e9:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:DA:BB:59:C3:CF:C9:6F:04:12:BE:F1:5F:74:3D:66:CC:C6:5F:9D X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/y9q7WcPPyW8EEr7xX3Q9ZszGX50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:b87:ff17::/48 Signature Algorithm: sha256WithRSAEncryption 85:45:2b:2f:87:05:f8:e0:d3:29:9f:3e:6a:23:52:ef:7b:1f: 95:c7:d3:f7:66:7b:73:14:76:4f:37:4c:c4:39:e2:00:83:12: ca:5e:7b:70:6b:08:3f:62:5b:59:15:3e:f7:ae:73:d4:01:ef: 7f:dd:91:6a:00:86:a9:c2:6a:b9:c2:b8:ee:3a:86:92:f9:ba: 6b:83:05:d9:96:ed:a9:ca:c0:2e:00:31:a2:4d:88:98:76:5b: 43:c1:c9:21:35:ce:ca:05:65:b7:5c:d6:55:12:9d:96:d9:ea: 0a:f5:f0:5c:16:bf:71:74:08:61:75:ec:ea:4c:de:e0:a1:72: 0d:97:17:75:40:d3:71:cc:d6:9f:c9:3f:52:d3:09:fa:81:9a: 5e:71:a3:61:2f:32:1e:7b:3b:82:be:12:f8:a8:df:4e:42:3d: b0:b6:ca:70:ee:a9:2c:f0:11:3d:e6:0a:a7:f6:03:9c:a0:e6: 6a:a1:59:16:0b:ed:f6:27:5f:43:cc:2e:42:2d:c6:52:8e:a4: 9e:ea:f1:af:50:42:68:79:72:fa:9f:e8:0c:8c:4e:ee:eb:b3: e9:27:6f:2f:c9:f9:dc:ae:aa:7b:d3:d8:2e:5d:f3:15:19:fc: 92:4d:d9:ed:e2:44:56:0f:b1:19:21:36:94:aa:38:c7:79:54: 51:10:fa:a9 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/gtK9QEkINm7nHb1OjYuUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjYwMTAyMTYyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYmRhYmI1OWMzY2ZjOTZmMDQxMmJlZjE1Zjc0M2Q2NmNjYzY1ZjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAo3/eFJmT/LO1ovdHaQqQo1okwb CyWLxnCxDti18MUCHHIF1+2ikK8/w9PdariZhPWkJTliHxrQOS4dpFD2qdM9i3GP j6MFvHbw17gXl78Yqo6oQ1e22KNM2Vc22EwrplZjtuEvoLENaA5fjNcKyssirS+F g2ek7qhOMyB/U2FlLElFF00pp28MoZZvux8AaC7aI/A8uk/xpJJd53Q8ASxBSJ7q Wy2lnxbz+u7GQqoM3a0ZCWnfATKD1lAwNy8zIMB63Ol8ZGbS2t2MtaY87+Kj/KNx Dz33MYebL5+cGzUB4Is/BL6fAVGHeZD6DmrHmoVpI2Qf6g9bVWaxx8HpfwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMvau1nDz8lvBBK+8V90PWbMxl+dMB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEveTlxN1djUFB5VzhFRXI3eFgzUTlac3pHWDUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgsLh/8X MA0GCSqGSIb3DQEBCwUAA4IBAQCFRSsvhwX44NMpnz5qI1Lvex+Vx9P3ZntzFHZP N0zEOeIAgxLKXntwawg/YltZFT73rnPUAe9/3ZFqAIapwmq5wrjuOoaS+bprgwXZ lu2pysAuADGiTYiYdltDwckhNc7KBWW3XNZVEp2W2eoK9fBcFr9xdAhhdezqTN7g oXINlxd1QNNxzNafyT9S0wn6gZpecaNhLzIeezuCvhL4qN9OQj2wtspw7qks8BE9 5gqn9gOcoOZqoVkWC+32J19DzC5CLcZSjqSe6vGvUEJoeXL6n+gMjE7u67PpJ28v yfncrqp709guXfMVGfySTdnt4kRWD7EZITaUqjjHeVRREPqp -----END CERTIFICATE-----Generated at Tue Jan 20 15:20:56 2026 by rpki-client