This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/YjIsM4Uno7ILYs53JtLji9bmdRM.roa File: YjIsM4Uno7ILYs53JtLji9bmdRM.roa (raw, json) Hash identifier: T20Rm6nai402HDN+LFukerdCiUhxMnqEcLW4G63DHyI= Subject key identifier: 62:32:2C:33:85:27:A3:B2:0B:62:CE:77:26:D2:E3:8B:D6:E6:75:13 Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a Certificate serial: 019B79EC07B1673F6026010F73CC49949043 Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/YjIsM4Uno7ILYs53JtLji9bmdRM.roa Signing time: Thu 01 Jan 2026 14:17:49 +0000 ROA not before: Thu 01 Jan 2026 14:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197438 IP address blocks: 2a05:4140:2200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:07:b1:67:3f:60:26:01:0f:73:cc:49:94:90:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a Validity Not Before: Jan 1 14:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=62322c338527a3b20b62ce7726d2e38bd6e67513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a1:ae:b0:36:c9:13:90:e1:de:fe:a9:c3:2a: 96:e8:76:7c:12:29:2d:98:00:60:b3:73:c9:87:df: 96:3c:d5:50:09:ba:53:84:11:6f:3e:04:4f:7b:59: c1:e6:d8:7b:78:44:21:99:43:f3:51:8b:57:6d:69: 89:32:52:35:5a:f6:20:e6:1d:5d:b8:fa:cf:aa:76: f6:92:b9:95:9c:51:fc:dd:5b:a8:38:e7:ba:0f:b5: 42:d6:a6:92:02:71:6b:ae:e9:3c:92:80:40:52:38: 48:f4:bd:db:5c:41:5c:2f:32:10:f5:09:ac:6c:46: 25:bb:41:9a:3a:ee:44:20:7d:ca:b6:79:52:57:13: ea:8a:8e:04:ee:d8:bf:00:43:b5:96:7b:cf:84:1d: e2:b7:28:3e:cc:8e:71:96:a8:b0:1f:27:9e:20:5c: 93:c3:4d:07:44:a8:85:79:a3:eb:44:9e:0c:cd:a7: 84:b0:a2:0b:e1:e6:96:ec:59:c5:63:33:cd:8d:ab: ad:91:72:79:1f:49:fd:3a:7e:db:93:33:ba:2d:64: 36:07:6f:89:0f:0e:52:b6:b4:e9:dc:93:6d:0e:41: 19:03:bd:c6:4a:9d:39:11:25:71:73:37:c4:57:70: 58:06:27:91:ee:87:fe:f6:a8:ec:8c:2f:2f:6e:f4: f0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:32:2C:33:85:27:A3:B2:0B:62:CE:77:26:D2:E3:8B:D6:E6:75:13 X509v3 Authority Key Identifier: keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/YjIsM4Uno7ILYs53JtLji9bmdRM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:4140:2200::/40 Signature Algorithm: sha256WithRSAEncryption 5a:c7:33:10:cb:85:26:e6:2a:43:c0:d8:67:3f:59:7d:91:03: 78:19:99:e6:7c:51:db:eb:94:2e:83:82:a3:a8:51:a7:83:4c: cb:e4:cb:89:b0:d8:5c:d3:63:77:27:bd:fa:ae:8c:d3:a9:45: 05:8c:6b:92:e3:09:3a:2c:e7:b7:08:99:c3:1f:dd:69:55:80: e1:91:08:d4:69:aa:25:c1:24:97:ad:81:90:81:cb:ac:13:6f: 48:8a:24:a5:61:12:f9:2c:92:46:b9:3a:d4:8c:d2:0c:f7:23: 89:23:7a:c2:80:21:c9:be:23:45:57:80:3a:40:0b:0e:eb:c9: 56:39:06:4f:db:70:85:33:7b:c2:07:1b:0b:05:55:5e:e5:66: c2:94:f5:ec:03:b6:32:fa:3b:17:37:d2:de:8d:92:52:f1:4f: a5:7f:80:c6:2b:01:b4:4c:37:44:90:b4:fe:dd:90:c8:2a:90: 5b:0e:42:d1:98:82:d4:17:37:2c:81:11:7d:d3:64:ba:66:56: c6:27:35:63:bb:e6:b8:be:a6:f4:47:fd:29:a7:ba:cf:86:57: 93:9d:6f:18:51:1f:21:fd:4c:79:59:84:39:9e:bb:54:10:84: 0c:68:60:eb:f3:c8:cb:2c:53:4c:e3:0b:dc:01:dd:37:08:b2: 08:13:59:c1 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt57AexZz9gJgEPc8xJlJBDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NGM2MGFkZWIwY2Q1NzY4Y2Y3NTZmNTYyYjFiNWNjNWI5 YzE4MGEwHhcNMjYwMTAxMTQxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjMyMmMzMzg1MjdhM2IyMGI2MmNlNzcyNmQyZTM4YmQ2ZTY3NTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqGusDbJE5Dh3v6pwyqW6HZ8Eikt mABgs3PJh9+WPNVQCbpThBFvPgRPe1nB5th7eEQhmUPzUYtXbWmJMlI1WvYg5h1d uPrPqnb2krmVnFH83VuoOOe6D7VC1qaSAnFrruk8koBAUjhI9L3bXEFcLzIQ9Qms bEYlu0GaOu5EIH3KtnlSVxPqio4E7ti/AEO1lnvPhB3ityg+zI5xlqiwHyeeIFyT w00HRKiFeaPrRJ4MzaeEsKIL4eaW7FnFYzPNjautkXJ5H0n9On7bkzO6LWQ2B2+J Dw5StrTp3JNtDkEZA73GSp05ESVxczfEV3BYBieR7of+9qjsjC8vbvTw2wIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFGIyLDOFJ6OyC2LOdybS44vW5nUTMB8GA1UdIwQY MBaAFMdMYK3rDNV2jPdW9WKxtcxbnBgKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMt ODg1ZTg0ZTc1MTJlLzEvWWpJc000VW5vN0lMWXM1M0p0TGppOWJtZFJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMtODg1ZTg0ZTc1MTJl LzEveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgVBQCIw DQYJKoZIhvcNAQELBQADggEBAFrHMxDLhSbmKkPA2Gc/WX2RA3gZmeZ8UdvrlC6D gqOoUaeDTMvky4mw2FzTY3cnvfqujNOpRQWMa5LjCTos57cImcMf3WlVgOGRCNRp qiXBJJetgZCBy6wTb0iKJKVhEvkskka5OtSM0gz3I4kjesKAIcm+I0VXgDpACw7r yVY5Bk/bcIUze8IHGwsFVV7lZsKU9ewDtjL6Oxc30t6NklLxT6V/gMYrAbRMN0SQ tP7dkMgqkFsOQtGYgtQXNyyBEX3TZLpmVsYnNWO75ri+pvRH/Smnus+GV5OdbxhR HyH9THlZhDmeu1QQhAxoYOvzyMssU0zjC9wB3TcIsggTWcE= -----END CERTIFICATE-----Generated at Wed Jan 21 16:14:52 2026 by rpki-client