This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Y9-xxrcFnsxDZauuv568t-PFy6A.roa File: Y9-xxrcFnsxDZauuv568t-PFy6A.roa (raw, json) Hash identifier: xIyIZR1hVpjqPtioz/biAZM6H7ey8FMbjIcIVI3aaQQ= Subject key identifier: 63:DF:B1:C6:B7:05:9E:CC:43:65:AB:AE:BF:9E:BC:B7:E3:C5:CB:A0 Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Certificate serial: 019B7EA5590E1B297A133B7E36C9E5D36C85 Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Y9-xxrcFnsxDZauuv568t-PFy6A.roa Signing time: Fri 02 Jan 2026 12:18:43 +0000 ROA not before: Fri 02 Jan 2026 12:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199415 IP address blocks: 2a10:4646:121::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 15:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:59:0e:1b:29:7a:13:3b:7e:36:c9:e5:d3:6c:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Validity Not Before: Jan 2 12:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63dfb1c6b7059ecc4365abaebf9ebcb7e3c5cba0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c2:ae:11:2f:89:5d:b3:04:15:f6:58:28:8b: 62:93:64:f0:4f:a0:bd:3a:9f:81:60:fe:83:6e:86: e6:7d:23:1e:76:88:52:b6:b5:d5:e6:f4:87:d5:72: 4d:5c:a4:8c:5f:6b:ef:c6:c3:97:37:0d:b3:94:c5: d8:5e:8b:31:e1:14:05:88:5e:eb:62:d6:d1:0d:96: 87:e6:02:f9:ed:21:3a:28:44:b2:20:e8:c3:28:8d: 19:c2:ce:5a:04:6d:cc:72:9e:d7:2e:66:ca:33:40: b8:3e:97:43:28:10:30:2d:c6:19:f6:ae:cf:5e:4a: 81:9a:21:f0:b7:f1:d7:18:03:8d:c8:cd:08:14:69: 39:75:73:4f:d1:6a:67:b0:18:23:45:0d:4f:0a:3e: 01:b6:5c:fd:bf:7c:e3:0a:48:6b:1b:89:7e:dc:67: 38:76:e7:a8:fb:95:63:98:d8:c0:5a:63:41:7b:df: e0:54:ee:27:4c:c7:6e:ee:2e:fe:49:39:fb:3f:df: 47:db:f6:77:ce:5a:2e:96:c3:a7:97:e8:dd:4f:db: c9:8b:15:8e:f1:d7:c3:3e:a4:32:32:b1:90:37:45: 08:1a:59:c7:94:a4:b6:9b:67:fd:f6:9e:ed:44:40: 52:c6:56:cb:4f:94:a1:d0:34:d2:3c:f9:d8:d4:b5: 4b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:DF:B1:C6:B7:05:9E:CC:43:65:AB:AE:BF:9E:BC:B7:E3:C5:CB:A0 X509v3 Authority Key Identifier: keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Y9-xxrcFnsxDZauuv568t-PFy6A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:4646:121::/48 Signature Algorithm: sha256WithRSAEncryption d5:a4:4f:d3:b1:d9:e6:5e:d3:b0:23:50:ed:1b:fa:39:4c:47: 8c:c6:fd:a3:28:d7:8e:f8:78:e7:1b:0b:23:a2:0a:8a:81:a3: 83:a4:11:33:7d:d9:f6:ed:63:36:65:ff:e3:7a:fe:12:53:de: 42:82:2d:30:9d:77:81:34:71:62:f8:6c:eb:de:12:4d:7b:41: 27:36:54:b5:1f:1c:e9:1a:52:8d:df:b4:19:ae:13:2a:02:0c: 5a:25:ac:30:64:55:81:0b:42:a9:02:d9:18:91:1c:63:cf:30: 7f:fd:1d:b4:cc:73:90:ef:31:81:50:52:c7:b2:af:ec:ee:93: 3a:0a:3e:c8:7b:31:0f:5f:27:a5:68:ad:ee:da:d7:ba:bd:32: 0e:37:96:02:6b:0f:e8:73:39:9b:af:dd:31:76:f4:5b:74:8c: 01:dd:b4:5c:b2:58:5a:68:3c:84:80:33:8a:9b:10:e2:93:4c: 7f:66:e6:36:3c:2e:92:bf:ee:e2:97:a5:51:46:be:9c:53:4e: 2b:2d:a2:43:30:0b:b2:5a:56:e9:ff:8b:83:4d:ab:d1:d0:20: 6f:36:94:cb:d3:0a:97:59:dc:57:e8:86:43:6e:b4:3b:2a:7f: 94:85:c8:1a:a2:f8:9c:59:b1:dd:f2:a0:75:6f:1f:b2:de:1d: 64:52:fb:5e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pVkOGyl6Ezt+Nsnl02yFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNmQyODE3NDkxZGQyY2QwNjc4MDY4ZTM1YTllZmM2ODY2 N2RmMDIwHhcNMjYwMTAyMTIxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2M2RmYjFjNmI3MDU5ZWNjNDM2NWFiYWViZjllYmNiN2UzYzVjYmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cKuES+JXbMEFfZYKItik2TwT6C9 Op+BYP6DbobmfSMedohStrXV5vSH1XJNXKSMX2vvxsOXNw2zlMXYXosx4RQFiF7r YtbRDZaH5gL57SE6KESyIOjDKI0Zws5aBG3Mcp7XLmbKM0C4PpdDKBAwLcYZ9q7P XkqBmiHwt/HXGAONyM0IFGk5dXNP0WpnsBgjRQ1PCj4Btlz9v3zjCkhrG4l+3Gc4 dueo+5VjmNjAWmNBe9/gVO4nTMdu7i7+STn7P99H2/Z3zloulsOnl+jdT9vJixWO 8dfDPqQyMrGQN0UIGlnHlKS2m2f99p7tREBSxlbLT5Sh0DTSPPnY1LVLhwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGPfsca3BZ7MQ2Wrrr+evLfjxcugMB8GA1UdIwQY MBaAFEptKBdJHdLNBngGjjWp78aGZ98CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMt YWU5MjgzZTc5NjRlLzEvWTkteHhyY0Zuc3hEWmF1dXY1Njh0LVBGeTZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMtYWU5MjgzZTc5NjRl LzEvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhBGRgEh MA0GCSqGSIb3DQEBCwUAA4IBAQDVpE/TsdnmXtOwI1DtG/o5TEeMxv2jKNeO+Hjn GwsjogqKgaODpBEzfdn27WM2Zf/jev4SU95Cgi0wnXeBNHFi+Gzr3hJNe0EnNlS1 HxzpGlKN37QZrhMqAgxaJawwZFWBC0KpAtkYkRxjzzB//R20zHOQ7zGBUFLHsq/s 7pM6Cj7IezEPXyelaK3u2te6vTION5YCaw/oczmbr90xdvRbdIwB3bRcslhaaDyE gDOKmxDik0x/ZuY2PC6Sv+7il6VRRr6cU04rLaJDMAuyWlbp/4uDTavR0CBvNpTL 0wqXWdxX6IZDbrQ7Kn+UhcgaovicWbHd8qB1bx+y3h1kUvte -----END CERTIFICATE-----Generated at Fri Jan 30 19:15:29 2026 by rpki-client