This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/yjL-lGvxbrOvUJk1d_SGj7vNUsY.roa File: yjL-lGvxbrOvUJk1d_SGj7vNUsY.roa (raw, json) Hash identifier: bbalEwfxx1lCJQAje/qBOH4arMv2FoCpdcNNHjNXCso= Subject key identifier: CA:32:FE:94:6B:F1:6E:B3:AF:50:99:35:77:F4:86:8F:BB:CD:52:C6 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E3956D9A0E96C972D46D54E1B9DEE1C Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/yjL-lGvxbrOvUJk1d_SGj7vNUsY.roa Signing time: Fri 02 Jan 2026 10:20:45 +0000 ROA not before: Fri 02 Jan 2026 10:20:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212053 IP address blocks: 2a0c:b641:720::/44 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:56:d9:a0:e9:6c:97:2d:46:d5:4e:1b:9d:ee:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca32fe946bf16eb3af50993577f4868fbbcd52c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a4:02:90:75:22:ec:0b:c9:c5:42:34:8a:d1: 8c:fd:34:41:8b:cc:72:d8:71:30:b4:4b:6f:77:b5: 6a:3f:0c:d2:44:aa:54:b5:af:70:0b:3f:f9:91:0e: 0d:fc:ad:00:57:ea:e0:d0:77:11:c9:78:2c:42:f7: 21:d2:2a:97:25:84:c4:69:7c:0e:0a:b2:04:4d:87: ac:b3:ef:b0:aa:8e:05:fb:f7:a8:a5:a5:a8:af:56: 0f:e7:1a:05:6e:34:9f:de:72:43:54:33:71:21:06: ea:e2:05:56:36:fd:49:30:66:5b:bb:d5:80:85:43: ee:5a:48:37:67:e8:07:e6:30:f0:cd:69:4b:89:78: 2d:6c:94:50:41:9c:52:67:af:4b:bb:fc:dd:45:b8: c4:df:e3:1a:2e:ca:52:57:27:e7:35:64:93:56:26: b7:cd:f5:6c:13:29:fe:a7:4a:24:4e:53:ef:82:c0: c8:fe:d9:e2:8c:ec:0e:87:15:28:cd:b2:e1:c4:33: 10:64:98:a1:83:24:28:06:f7:c0:92:e5:5d:a1:06: e7:4d:7d:af:b3:35:0c:74:69:35:4c:4d:4d:c7:38: b3:81:12:b6:f8:2c:30:ab:43:79:1a:25:8a:be:e1: 1c:37:3a:9e:bf:c9:6d:7e:85:51:93:0c:23:56:05: d7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:32:FE:94:6B:F1:6E:B3:AF:50:99:35:77:F4:86:8F:BB:CD:52:C6 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/yjL-lGvxbrOvUJk1d_SGj7vNUsY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:720::/44 Signature Algorithm: sha256WithRSAEncryption 4c:6b:01:0d:66:e7:19:13:42:82:db:70:b1:b0:14:d7:c5:64: e3:39:73:3f:ba:67:dc:d8:78:66:96:07:a8:b0:3a:e4:44:00: cc:f5:05:35:ff:fe:a3:77:40:48:99:0b:79:1e:49:89:73:f3: 86:34:37:41:0e:1d:d3:5a:09:4f:73:fe:8c:c3:65:00:35:e4: df:ce:4d:05:b9:ec:98:54:e7:e3:a8:42:2c:e5:a8:96:a6:fb: b7:a2:fc:17:6f:43:89:26:e6:19:ae:17:6e:de:51:d1:8c:b6: c0:f5:c1:fe:71:52:a2:c7:de:a0:db:cf:8d:48:b8:47:8a:29: 33:6b:6e:a0:63:b3:d6:96:b8:09:7a:2e:56:58:c2:20:6b:20: 81:1c:b7:17:b0:cd:4b:8d:c2:0f:76:fd:1b:dd:b5:be:8f:a5: aa:8c:5f:4d:04:bb:bb:db:e2:9b:c9:f3:fa:a9:b7:e2:e8:59: b4:cb:c8:b5:65:ea:71:1b:b6:95:73:5a:23:b8:aa:e4:d9:8c: c9:aa:4a:06:65:e5:56:d8:ab:b5:7e:f6:82:5a:07:c2:7a:d6: 51:69:aa:2b:fc:ab:22:da:8a:a5:db:b3:c8:d4:eb:25:8f:19: 8d:9c:63:29:93:03:9a:78:b8:be:62:17:2e:dd:03:0f:7d:48: c8:a3:65:2e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OVbZoOlsly1G1U4bne4cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTMyZmU5NDZiZjE2ZWIzYWY1MDk5MzU3N2Y0ODY4ZmJiY2Q1MmM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKQCkHUi7AvJxUI0itGM/TRBi8xy 2HEwtEtvd7VqPwzSRKpUta9wCz/5kQ4N/K0AV+rg0HcRyXgsQvch0iqXJYTEaXwO CrIETYess++wqo4F+/eopaWor1YP5xoFbjSf3nJDVDNxIQbq4gVWNv1JMGZbu9WA hUPuWkg3Z+gH5jDwzWlLiXgtbJRQQZxSZ69Lu/zdRbjE3+MaLspSVyfnNWSTVia3 zfVsEyn+p0okTlPvgsDI/tnijOwOhxUozbLhxDMQZJihgyQoBvfAkuVdoQbnTX2v szUMdGk1TE1NxzizgRK2+Cwwq0N5GiWKvuEcNzqev8ltfoVRkwwjVgXXrwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMoy/pRr8W6zr1CZNXf0ho+7zVLGMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEveWpMLWxHdnhick92VUprMWRfU0dqN3ZOVXNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQcg MA0GCSqGSIb3DQEBCwUAA4IBAQBMawENZucZE0KC23CxsBTXxWTjOXM/umfc2Hhm lgeosDrkRADM9QU1//6jd0BImQt5HkmJc/OGNDdBDh3TWglPc/6Mw2UANeTfzk0F ueyYVOfjqEIs5aiWpvu3ovwXb0OJJuYZrhdu3lHRjLbA9cH+cVKix96g28+NSLhH iikza26gY7PWlrgJei5WWMIgayCBHLcXsM1LjcIPdv0b3bW+j6WqjF9NBLu72+Kb yfP6qbfi6Fm0y8i1ZepxG7aVc1ojuKrk2YzJqkoGZeVW2Ku1fvaCWgfCetZRaaor /Ksi2oql27PI1OsljxmNnGMpkwOaeLi+Yhcu3QMPfUjIo2Uu -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:57 2026 by rpki-client