This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/CNbyub_ywtPJGqzP5UZEA0DNtXg.roa File: CNbyub_ywtPJGqzP5UZEA0DNtXg.roa (raw, json) Hash identifier: 9XO75azpd4xnA1Fcmx7YElMcl6h2AUZai5Sul1ZnzbI= Subject key identifier: 08:D6:F2:B9:BF:F2:C2:D3:C9:1A:AC:CF:E5:46:44:03:40:CD:B5:78 Certificate issuer: /CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6 Certificate serial: 019B76EB473239523BBC1B088E9E8A225FEC Authority key identifier: C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/CNbyub_ywtPJGqzP5UZEA0DNtXg.roa Signing time: Thu 01 Jan 2026 00:18:09 +0000 ROA not before: Thu 01 Jan 2026 00:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212191 IP address blocks: 2a0e:e0c0::/32 maxlen: 32 2a0e:e0c1::/32 maxlen: 32 2a0e:e0c2::/32 maxlen: 32 2a0e:e0c3::/32 maxlen: 32 2a0e:e0c4::/32 maxlen: 32 2a0e:e0c5::/32 maxlen: 32 2a0e:e0c6::/32 maxlen: 32 2a0e:e0c7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:47:32:39:52:3b:bc:1b:08:8e:9e:8a:22:5f:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6 Validity Not Before: Jan 1 00:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=08d6f2b9bff2c2d3c91aaccfe546440340cdb578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:35:18:7a:6d:42:2a:49:ea:ef:63:65:7a:ce: 72:ef:92:5e:74:34:65:9e:fc:1a:7c:e0:b7:23:30: e0:a9:ef:6e:fc:1d:cd:3f:35:6e:a7:19:1d:26:45: 24:9e:8c:6f:2c:5b:51:c6:ce:a2:23:33:c0:c7:e8: 91:4e:66:ed:c8:63:ab:70:ed:79:a4:aa:37:c7:c3: 59:b5:14:bd:1a:95:08:c8:e2:33:21:bb:63:d5:33: 10:56:14:99:c5:53:39:42:71:bb:be:93:35:78:38: 36:d9:17:00:57:9b:70:b2:c7:9d:86:dc:af:67:77: 60:2f:81:9f:fe:3a:19:38:5b:24:3d:59:29:6f:b6: d4:11:65:4b:3f:68:34:3f:01:ef:e4:5e:79:10:7c: 06:e4:c9:27:31:c9:89:24:6c:7a:ec:6f:3b:24:bd: e6:5a:34:48:e9:10:b3:76:09:e5:5a:85:da:ed:87: 83:21:1a:ab:ec:e5:3a:97:63:ca:d6:ee:d2:9c:4f: 64:bc:17:a2:f8:93:c3:60:f6:55:27:54:3f:f1:d6: b9:0d:c9:44:58:4f:d0:d7:e0:31:e2:3c:4c:9f:c3: d4:51:58:cf:07:2d:7b:4e:95:15:e8:e8:fa:cf:b5: f7:c3:e8:4d:d6:79:4c:29:cf:d4:d3:91:b1:6b:a3: f4:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:D6:F2:B9:BF:F2:C2:D3:C9:1A:AC:CF:E5:46:44:03:40:CD:B5:78 X509v3 Authority Key Identifier: keyid:C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/CNbyub_ywtPJGqzP5UZEA0DNtXg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:e0c0::/29 Signature Algorithm: sha256WithRSAEncryption 21:af:11:43:d9:19:ac:3b:af:81:30:7d:19:89:0f:06:23:4f: 58:c9:22:43:7c:1b:4d:78:c7:9e:25:47:ef:39:73:d3:79:82: 00:27:66:24:01:ee:78:36:81:0f:c7:2f:b2:5c:19:66:7c:6f: 89:a0:fa:e8:25:d3:ad:93:02:d7:24:e6:11:19:5f:2b:26:b7: 08:cc:f5:37:fe:2c:b4:77:8f:79:4c:f3:39:a0:15:b7:53:53: 8f:27:4f:25:00:a3:6e:d4:74:c4:3f:2e:ca:d9:b9:08:fe:56: 98:3f:c1:06:1e:4d:b4:dd:6f:2c:79:be:09:4d:aa:ac:51:2c: 71:85:0a:d2:bf:02:b4:85:5b:d6:fe:8c:07:85:7f:1b:63:50: b8:ae:44:91:71:9c:6f:5c:d7:04:16:bf:4d:6d:c0:19:9b:93: 0f:af:eb:07:ee:e4:ea:f1:e6:18:38:95:8a:99:b6:37:51:e2: f3:4f:82:1f:4a:20:f4:4d:5a:6d:db:01:a4:1f:09:12:7f:d8: 25:4e:5a:1b:89:48:d5:a6:4b:3e:19:5d:20:ed:61:39:07:b6: 05:35:ca:4c:45:21:0e:be:d6:f2:27:36:66:6d:ac:0e:28:9c: 16:db:ec:29:92:14:4a:fa:e2:42:dd:9d:e1:50:98:7f:ca:35: 8d:3c:e7:02 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt260cyOVI7vBsIjp6KIl/sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMmFjOWIxNGZkMjYxYThkMjc2M2FhZDQxNzQzMmJlYmM0 OWEwZDYwHhcNMjYwMTAxMDAxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOGQ2ZjJiOWJmZjJjMmQzYzkxYWFjY2ZlNTQ2NDQwMzQwY2RiNTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzUYem1CKknq72Nles5y75JedDRl nvwafOC3IzDgqe9u/B3NPzVupxkdJkUknoxvLFtRxs6iIzPAx+iRTmbtyGOrcO15 pKo3x8NZtRS9GpUIyOIzIbtj1TMQVhSZxVM5QnG7vpM1eDg22RcAV5twssedhtyv Z3dgL4Gf/joZOFskPVkpb7bUEWVLP2g0PwHv5F55EHwG5MknMcmJJGx67G87JL3m WjRI6RCzdgnlWoXa7YeDIRqr7OU6l2PK1u7SnE9kvBei+JPDYPZVJ1Q/8da5DclE WE/Q1+Ax4jxMn8PUUVjPBy17TpUV6Oj6z7X3w+hN1nlMKc/U05Gxa6P0jQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFAjW8rm/8sLTyRqsz+VGRANAzbV4MB8GA1UdIwQY MBaAFMEqybFP0mGo0nY6rUF0Mr68SaDWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS83MDExZGQtYzJkOS00MzQxLTkyMzYt MjE2N2NmMDFjZjRhLzEvQ05ieXViX3l3dFBKR3F6UDVVWkVBMEROdFhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS83MDExZGQtYzJkOS00MzQxLTkyMzYtMjE2N2NmMDFjZjRh LzEvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg7gwDAN BgkqhkiG9w0BAQsFAAOCAQEAIa8RQ9kZrDuvgTB9GYkPBiNPWMkiQ3wbTXjHniVH 7zlz03mCACdmJAHueDaBD8cvslwZZnxviaD66CXTrZMC1yTmERlfKya3CMz1N/4s tHePeUzzOaAVt1NTjydPJQCjbtR0xD8uytm5CP5WmD/BBh5NtN1vLHm+CU2qrFEs cYUK0r8CtIVb1v6MB4V/G2NQuK5EkXGcb1zXBBa/TW3AGZuTD6/rB+7k6vHmGDiV ipm2N1Hi80+CH0og9E1abdsBpB8JEn/YJU5aG4lI1aZLPhldIO1hOQe2BTXKTEUh Dr7W8ic2Zm2sDiicFtvsKZIUSvriQt2d4VCYf8o1jTznAg== -----END CERTIFICATE-----Generated at Tue Feb 10 05:47:25 2026 by rpki-client