This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/yerjyJMlE4VsOfb7nGowWS7jGbI.roa File: yerjyJMlE4VsOfb7nGowWS7jGbI.roa (raw, json) Hash identifier: KR7jv/ZlrAqQI1C5XdfUmCM/mIU1WT5HKp+/N8WSrgE= Subject key identifier: C9:EA:E3:C8:93:25:13:85:6C:39:F6:FB:9C:6A:30:59:2E:E3:19:B2 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E3951C213CFDE712DA49CAD3F3846F4 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/yerjyJMlE4VsOfb7nGowWS7jGbI.roa Signing time: Fri 02 Jan 2026 10:20:44 +0000 ROA not before: Fri 02 Jan 2026 10:20:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210800 IP address blocks: 2a0c:b641:430::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:51:c2:13:cf:de:71:2d:a4:9c:ad:3f:38:46:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9eae3c8932513856c39f6fb9c6a30592ee319b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ea:21:16:03:24:b1:f6:34:d8:96:9d:41:7c: f7:05:a5:4f:b9:19:91:13:0a:2b:2c:cd:c9:f8:7f: a4:fc:97:d5:ce:ee:fc:8b:80:62:af:a0:9b:d7:de: fa:62:45:49:27:b4:e1:77:01:9c:cb:8a:d8:83:8a: 96:36:cc:50:28:a4:8f:2c:86:96:3e:b0:c7:dd:73: 92:f6:cf:dd:f6:9a:e4:f0:c1:bb:17:6f:cc:31:e7: ee:4a:bb:d7:8d:46:50:b9:87:a8:fe:95:15:0f:43: 48:17:fe:98:ee:b9:6e:37:ee:92:d4:d4:54:21:93: 40:a8:3d:91:20:c8:06:91:f4:13:f1:d7:bf:af:0b: d0:d2:50:bb:5c:e4:b3:1a:5d:8d:e7:5e:7d:bd:0f: f7:ac:62:e9:64:e3:a8:de:f3:00:de:40:62:54:40: fc:e2:87:91:ec:3f:df:c1:4c:a4:4c:a3:21:7a:d6: 5a:10:0c:cc:51:14:51:c8:8b:ca:1e:1b:bb:6c:6e: c3:11:ef:aa:9b:a7:66:af:c5:a6:36:3d:c8:4e:33: 4e:36:c3:ec:4b:5c:e0:b0:17:58:3c:12:ea:18:97: 40:cf:f1:1d:ce:62:9d:bf:76:98:d8:15:62:a5:f2: 61:17:51:85:2c:e1:59:36:d1:7e:9c:31:e3:18:cf: 12:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:EA:E3:C8:93:25:13:85:6C:39:F6:FB:9C:6A:30:59:2E:E3:19:B2 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/yerjyJMlE4VsOfb7nGowWS7jGbI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:430::/44 Signature Algorithm: sha256WithRSAEncryption 96:ec:7c:e1:bb:db:74:f2:36:08:f1:85:1c:0d:1f:8a:80:a2: e2:65:7e:12:93:4c:9d:0e:d4:b8:bc:b3:8c:b5:e1:8d:ec:24: a0:03:4c:fc:5b:b8:4f:d9:aa:f3:7b:71:16:a3:34:8d:7b:d8: 43:8e:c0:f1:03:27:a4:af:de:67:26:6f:a4:45:05:71:9d:98: 3d:91:6f:ba:12:bb:fe:00:80:69:ad:61:2b:1a:64:f3:4a:17: ed:62:dd:3c:b6:0c:91:78:9a:15:9a:7d:3a:2f:41:a6:b8:09: 08:72:82:a5:5e:d3:d5:3d:01:1e:3f:18:64:0d:f0:f7:38:a2: ef:ca:07:ef:73:7d:e6:85:46:97:8f:8c:74:b5:64:5e:d3:d2: cc:ea:b1:94:dd:f9:5e:44:b9:f2:89:19:b4:73:f5:c4:5b:be: 1f:c8:5e:b5:31:fa:fc:a0:19:ee:0b:09:c7:2c:f2:d0:09:40: ec:7c:cc:55:bd:bb:03:c7:61:4f:17:44:20:8c:7e:3a:69:44: a6:c0:7f:8d:12:1f:d5:64:bb:eb:77:4e:89:d3:9a:90:63:93: c1:1a:5d:11:4e:78:96:d1:e8:01:58:28:18:cd:14:15:49:4b: a3:eb:45:30:aa:8e:c8:61:75:b9:29:97:af:e9:e1:46:b4:fe: f6:6e:6e:10 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OVHCE8/ecS2knK0/OEb0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOWVhZTNjODkzMjUxMzg1NmMzOWY2ZmI5YzZhMzA1OTJlZTMxOWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOohFgMksfY02JadQXz3BaVPuRmR EworLM3J+H+k/JfVzu78i4Bir6Cb1976YkVJJ7ThdwGcy4rYg4qWNsxQKKSPLIaW PrDH3XOS9s/d9prk8MG7F2/MMefuSrvXjUZQuYeo/pUVD0NIF/6Y7rluN+6S1NRU IZNAqD2RIMgGkfQT8de/rwvQ0lC7XOSzGl2N5159vQ/3rGLpZOOo3vMA3kBiVED8 4oeR7D/fwUykTKMhetZaEAzMURRRyIvKHhu7bG7DEe+qm6dmr8WmNj3ITjNONsPs S1zgsBdYPBLqGJdAz/EdzmKdv3aY2BVipfJhF1GFLOFZNtF+nDHjGM8SkQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMnq48iTJROFbDn2+5xqMFku4xmyMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEveWVyanlKTWxFNFZzT2ZiN25Hb3dXUzdqR2JJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQQw MA0GCSqGSIb3DQEBCwUAA4IBAQCW7Hzhu9t08jYI8YUcDR+KgKLiZX4Sk0ydDtS4 vLOMteGN7CSgA0z8W7hP2arze3EWozSNe9hDjsDxAyekr95nJm+kRQVxnZg9kW+6 Erv+AIBprWErGmTzShftYt08tgyReJoVmn06L0GmuAkIcoKlXtPVPQEePxhkDfD3 OKLvygfvc33mhUaXj4x0tWRe09LM6rGU3fleRLnyiRm0c/XEW74fyF61Mfr8oBnu CwnHLPLQCUDsfMxVvbsDx2FPF0QgjH46aUSmwH+NEh/VZLvrd06J05qQY5PBGl0R TniW0egBWCgYzRQVSUuj60Uwqo7IYXW5KZev6eFGtP72bm4Q -----END CERTIFICATE-----Generated at Tue Jan 20 02:45:04 2026 by rpki-client