This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/YfMyPGlFQay4XtUl69r6YlXc52I.roa File: YfMyPGlFQay4XtUl69r6YlXc52I.roa (raw, json) Hash identifier: zlR6QaKzvKTV86jHP4U673IENr6AfQoJbkCTU4SbCLI= Subject key identifier: 61:F3:32:3C:69:45:41:AC:B8:5E:D5:25:EB:DA:FA:62:55:DC:E7:62 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E392B65D23E39D5F47BD7D528FD0AFF Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/YfMyPGlFQay4XtUl69r6YlXc52I.roa Signing time: Fri 02 Jan 2026 10:20:34 +0000 ROA not before: Fri 02 Jan 2026 10:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 53356 IP address blocks: 2a0c:b641:493::/48 maxlen: 48 2a0c:b642:1a0c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:2b:65:d2:3e:39:d5:f4:7b:d7:d5:28:fd:0a:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=61f3323c694541acb85ed525ebdafa6255dce762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:93:84:0e:60:13:f8:49:a9:b7:1b:70:57:71: 0f:4a:e0:01:53:46:a4:8b:ea:16:92:d3:51:66:1a: 71:b4:aa:be:b5:f9:0b:6d:2a:46:c8:10:0d:09:93: 59:02:c8:c7:03:6d:cc:5a:4b:44:f9:3a:75:9f:cd: 18:ab:bf:f4:1f:9e:2d:a2:97:26:d6:14:d6:4b:f0: 58:8d:b4:d7:b8:c8:a4:fc:fd:34:c0:9b:27:6c:02: 88:35:49:0d:dd:cc:c8:5a:26:a1:e5:e3:36:1b:f1: 9c:cd:3b:65:2a:59:30:de:fe:43:bd:72:f0:54:1c: 07:83:2d:dd:e6:32:40:c5:a8:83:d3:e5:12:1d:8d: 3e:9a:97:6b:bb:e1:aa:06:b1:8d:fd:f6:d9:1b:22: 2a:d5:18:39:1f:37:85:89:f8:7a:f7:d2:62:a1:ea: 75:82:fa:2b:42:71:b0:53:ef:54:90:82:be:44:2a: 40:ea:bb:65:ae:6d:3b:52:b5:53:c8:fb:0b:cb:a1: 29:bf:c1:16:f9:6f:ae:64:fb:a4:fa:d1:1a:76:27: 6c:e2:39:e4:88:f3:34:f6:65:b8:39:a8:e2:a9:d0: 14:46:be:d2:53:34:04:a0:01:e6:a6:67:85:ed:44: 6f:b4:da:7d:51:85:19:cc:df:b8:05:a4:4b:57:c9: 34:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:F3:32:3C:69:45:41:AC:B8:5E:D5:25:EB:DA:FA:62:55:DC:E7:62 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/YfMyPGlFQay4XtUl69r6YlXc52I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:493::/48 2a0c:b642:1a0c::/48 Signature Algorithm: sha256WithRSAEncryption 11:5f:68:60:59:bd:af:c3:d4:a8:81:c7:2b:41:c5:ad:18:0f: 86:f6:44:77:9f:62:c5:b6:e6:c5:e2:89:70:45:96:8a:0f:4b: 4a:b4:bc:eb:98:f3:22:f2:b9:cf:ac:15:d6:f3:e2:aa:6d:6d: a4:a3:64:33:1e:76:77:89:18:ca:88:ef:4c:8e:16:19:18:5b: 34:0f:7d:97:2e:b8:8c:65:a7:0d:1a:3f:9a:cc:46:bd:85:c0: ee:98:58:13:be:95:ac:fe:d5:15:1d:02:ce:c8:c2:d3:7d:c3: 6b:b5:ab:24:c6:72:03:62:5a:f2:d3:b4:0b:a3:01:6a:6c:b3: 5f:79:68:7d:af:2c:c1:28:9e:f5:92:04:32:1d:62:49:5d:bc: 11:5f:a9:d9:20:80:a9:ab:a1:2a:d6:d7:a7:43:66:92:fb:79: dd:d6:2f:e8:10:2b:e5:6d:e3:32:e4:97:ba:97:71:24:9d:aa: a5:aa:d4:99:35:dc:88:c9:69:6f:a6:4b:7d:f2:ae:7d:ca:7c: 54:2d:1c:fd:90:73:c4:cc:cf:f1:c0:68:ea:73:02:35:e9:dd: f2:39:cb:50:10:b1:39:f4:c7:af:25:88:69:03:95:89:3b:54: a1:5d:46:e4:c6:e1:9c:c4:bc:b2:da:77:43:1e:13:3e:5c:b2: 08:80:19:5d -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+OStl0j451fR719Uo/Qr/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MWYzMzIzYzY5NDU0MWFjYjg1ZWQ1MjVlYmRhZmE2MjU1ZGNlNzYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZOEDmAT+EmptxtwV3EPSuABU0ak i+oWktNRZhpxtKq+tfkLbSpGyBANCZNZAsjHA23MWktE+Tp1n80Yq7/0H54topcm 1hTWS/BYjbTXuMik/P00wJsnbAKINUkN3czIWiah5eM2G/GczTtlKlkw3v5DvXLw VBwHgy3d5jJAxaiD0+USHY0+mpdru+GqBrGN/fbZGyIq1Rg5HzeFifh699Jioep1 gvorQnGwU+9UkIK+RCpA6rtlrm07UrVTyPsLy6Epv8EW+W+uZPuk+tEadids4jnk iPM09mW4OajiqdAURr7SUzQEoAHmpmeF7URvtNp9UYUZzN+4BaRLV8k03wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFGHzMjxpRUGsuF7VJeva+mJV3OdiMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvWWZNeVBHbEZRYXk0WHRVbDY5cjZZbFhjNTJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgy2QQST AwcAKgy2QhoMMA0GCSqGSIb3DQEBCwUAA4IBAQARX2hgWb2vw9SogccrQcWtGA+G 9kR3n2LFtubF4olwRZaKD0tKtLzrmPMi8rnPrBXW8+KqbW2ko2QzHnZ3iRjKiO9M jhYZGFs0D32XLriMZacNGj+azEa9hcDumFgTvpWs/tUVHQLOyMLTfcNrtaskxnID Ylry07QLowFqbLNfeWh9ryzBKJ71kgQyHWJJXbwRX6nZIICpq6Eq1tenQ2aS+3nd 1i/oECvlbeMy5Je6l3EknaqlqtSZNdyIyWlvpkt98q59ynxULRz9kHPEzM/xwGjq cwI16d3yOctQELE59MevJYhpA5WJO1ShXUbkxuGcxLyy2ndDHhM+XLIIgBld -----END CERTIFICATE-----Generated at Mon Jan 19 23:22:05 2026 by rpki-client