This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/YyXQ5LWdN9lgglhxeTp9KBkgXbk.roa File: YyXQ5LWdN9lgglhxeTp9KBkgXbk.roa (raw, json) Hash identifier: 9EmKpYjuF/NfWmuj/3bcI45brhkZhcbuWtmZ20pZtLI= Subject key identifier: 63:25:D0:E4:B5:9D:37:D9:60:82:58:71:79:3A:7D:28:19:20:5D:B9 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E394C0617D346AB6B5AF07654168CFA Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/YyXQ5LWdN9lgglhxeTp9KBkgXbk.roa Signing time: Fri 02 Jan 2026 10:20:42 +0000 ROA not before: Fri 02 Jan 2026 10:20:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210020 IP address blocks: 2a0c:b642:1030::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:4c:06:17:d3:46:ab:6b:5a:f0:76:54:16:8c:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6325d0e4b59d37d960825871793a7d2819205db9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:de:3b:27:60:0a:49:5c:39:c6:b8:51:79:c4: 4b:07:48:86:cd:2a:d8:3d:5e:0d:e4:e0:a0:c5:c8: da:9d:69:23:c5:8c:03:a2:ef:2c:94:48:8c:51:7d: 92:56:47:15:79:95:ef:33:df:77:f7:64:f1:87:bb: 05:f9:ee:d7:ac:8b:50:04:27:25:58:cc:df:c6:3e: 86:bb:30:87:49:3a:3d:b7:9a:3e:cc:0c:0f:7e:3f: e3:64:7d:ac:4b:77:20:2b:ae:e7:92:8a:a2:b3:6d: 47:b3:9f:30:02:62:d7:53:6d:ab:54:ba:ae:f3:c9: eb:d0:31:6c:26:c5:3c:3b:dd:6d:f9:f8:c9:8e:e6: c8:a6:19:cf:ed:0f:48:63:f4:97:a4:7a:54:27:1a: d8:dd:67:a6:2d:9e:75:ae:4b:35:4d:f4:0e:54:59: d1:61:63:e6:c9:65:4e:3b:b1:2a:fe:2a:f6:68:2b: a9:a6:8f:92:b0:f8:cd:52:5f:0c:a0:bd:10:15:e3: f2:d5:37:fb:b8:d0:cc:66:f1:6d:e1:c5:fc:f7:ce: ec:9c:51:6c:9d:6b:bb:b0:81:67:e1:32:cb:39:7e: d0:3d:5c:ea:a9:79:dc:5e:63:d2:3b:9e:0a:d2:6a: 47:70:bb:df:d2:ff:50:27:cc:1f:32:13:84:40:95: ac:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:25:D0:E4:B5:9D:37:D9:60:82:58:71:79:3A:7D:28:19:20:5D:B9 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/YyXQ5LWdN9lgglhxeTp9KBkgXbk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b642:1030::/44 Signature Algorithm: sha256WithRSAEncryption 4e:e5:60:54:5d:c7:a8:50:e4:95:df:31:e8:93:38:0d:27:fe: 87:ab:23:58:b8:9c:89:26:c3:4f:58:bf:db:88:d1:04:26:71: 73:d1:98:33:9a:f0:bd:e8:82:14:7c:f7:03:2b:68:1f:c5:0a: 10:8c:16:73:63:08:df:76:b1:bd:54:e0:75:aa:73:a4:cd:fb: e1:8f:b4:21:bf:98:2f:6c:15:c5:ab:f7:e0:2d:90:5c:09:ef: 00:a5:9f:3b:4d:47:13:75:fa:cc:f1:78:81:95:16:94:e4:d3: ee:95:5a:94:5a:6c:bb:11:ac:85:75:1c:67:e1:0f:89:3e:3d: 12:c2:b3:29:9e:d5:41:94:8b:8e:f0:3f:c5:8f:db:87:af:44: 72:18:1a:05:17:4a:2b:25:19:b3:d3:89:bb:30:9c:93:13:1c: 7d:33:e3:e2:04:f5:b0:b8:3e:5c:16:37:b8:0f:ac:96:75:e2: e0:0a:aa:ab:9f:fa:51:4f:fc:a0:a6:fb:e9:f3:4d:5d:db:50: 8c:ea:ce:cd:25:96:d2:d0:f3:d0:cf:e5:cb:05:8c:f9:5d:16: 3f:d6:19:84:2a:3b:1e:5b:2e:24:ef:bc:68:c6:e1:79:1d:26: 33:5b:d0:3c:06:88:9d:4a:ae:bc:b5:23:a4:99:0d:9e:13:67: 3a:ea:b4:2e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OUwGF9NGq2ta8HZUFoz6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzI1ZDBlNGI1OWQzN2Q5NjA4MjU4NzE3OTNhN2QyODE5MjA1ZGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3t47J2AKSVw5xrhRecRLB0iGzSrY PV4N5OCgxcjanWkjxYwDou8slEiMUX2SVkcVeZXvM99392Txh7sF+e7XrItQBCcl WMzfxj6GuzCHSTo9t5o+zAwPfj/jZH2sS3cgK67nkoqis21Hs58wAmLXU22rVLqu 88nr0DFsJsU8O91t+fjJjubIphnP7Q9IY/SXpHpUJxrY3WemLZ51rks1TfQOVFnR YWPmyWVOO7Eq/ir2aCuppo+SsPjNUl8MoL0QFePy1Tf7uNDMZvFt4cX8987snFFs nWu7sIFn4TLLOX7QPVzqqXncXmPSO54K0mpHcLvf0v9QJ8wfMhOEQJWsOQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGMl0OS1nTfZYIJYcXk6fSgZIF25MB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvWXlYUTVMV2ROOWxnZ2xoeGVUcDlLQmtnWGJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QhAw MA0GCSqGSIb3DQEBCwUAA4IBAQBO5WBUXceoUOSV3zHokzgNJ/6HqyNYuJyJJsNP WL/biNEEJnFz0ZgzmvC96IIUfPcDK2gfxQoQjBZzYwjfdrG9VOB1qnOkzfvhj7Qh v5gvbBXFq/fgLZBcCe8ApZ87TUcTdfrM8XiBlRaU5NPulVqUWmy7EayFdRxn4Q+J Pj0SwrMpntVBlIuO8D/Fj9uHr0RyGBoFF0orJRmz04m7MJyTExx9M+PiBPWwuD5c Fje4D6yWdeLgCqqrn/pRT/ygpvvp801d21CM6s7NJZbS0PPQz+XLBYz5XRY/1hmE KjseWy4k77xoxuF5HSYzW9A8BoidSq68tSOkmQ2eE2c66rQu -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:52 2026 by rpki-client