This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/y2a6KdhGkPiXtxfG-w0YaFa-FWQ.roa File: y2a6KdhGkPiXtxfG-w0YaFa-FWQ.roa (raw, json) Hash identifier: h3pRV3DAqC7d5FCCtaEybceEXDVivTMx7nMioi0L1JU= Subject key identifier: CB:66:BA:29:D8:46:90:F8:97:B7:17:C6:FB:0D:18:68:56:BE:15:64 Certificate issuer: /CN=334b09743ed2afd6afb47c58360ee3112a95cd34 Certificate serial: 019B7D5CC6B6ED40EECB85B3DB0562FF9344 Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/y2a6KdhGkPiXtxfG-w0YaFa-FWQ.roa Signing time: Fri 02 Jan 2026 06:19:50 +0000 ROA not before: Fri 02 Jan 2026 06:19:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397071 IP address blocks: 2a0c:5e00:7::/48 maxlen: 48 2a0c:5e00:7::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 15:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:c6:b6:ed:40:ee:cb:85:b3:db:05:62:ff:93:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34 Validity Not Before: Jan 2 06:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cb66ba29d84690f897b717c6fb0d186856be1564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:0e:6e:50:de:54:f9:2f:30:b6:5b:28:3e:20: e4:30:6a:bd:40:0b:db:2f:df:a0:df:6f:0c:c8:08: 52:55:48:88:11:c9:78:84:78:4e:29:9a:ca:45:2a: a5:ed:15:61:7e:8e:a3:ae:d3:8e:12:96:1a:dc:a1: 7b:67:e9:45:1a:c5:f7:1c:6b:30:94:15:c6:2a:de: 94:74:b2:ed:18:9d:bc:19:93:80:a3:9a:22:2f:f4: 83:4c:3f:e6:3b:19:18:67:f9:81:e0:07:d8:90:8a: 88:80:e1:47:3c:31:d0:58:d8:d0:fd:9f:ea:94:5e: a2:5b:22:9f:b4:40:ae:d8:0a:0e:63:0e:ac:b9:b1: 02:ed:8c:b9:d1:61:4b:15:bb:be:a8:3f:f6:f5:d2: 79:c7:73:25:0a:44:a7:c8:a4:d8:b7:c0:75:c9:a4: 18:ae:7c:8e:26:40:b0:18:7f:1b:c1:be:57:e2:e2: e7:99:36:19:05:c3:8a:bc:a1:c6:a6:25:c1:9e:45: 3d:99:e6:f5:33:11:f4:60:89:70:22:42:b0:f0:a5: d8:dd:0e:21:11:4d:aa:dd:0d:bf:6b:c5:ef:db:82: 15:57:26:a4:aa:04:d9:ed:fb:29:e6:2e:92:6f:12: 76:99:b1:15:f9:ac:74:42:d4:2f:bd:89:d7:af:37: 3f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:66:BA:29:D8:46:90:F8:97:B7:17:C6:FB:0D:18:68:56:BE:15:64 X509v3 Authority Key Identifier: keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/y2a6KdhGkPiXtxfG-w0YaFa-FWQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:5e00:7::/48 Signature Algorithm: sha256WithRSAEncryption 10:64:39:0f:7d:86:63:44:2a:4d:5b:df:75:f1:fc:ea:ca:b1: 1b:32:55:fe:38:21:a2:ec:cb:1f:9f:98:7f:a4:7e:c2:8a:5f: 7f:cc:e7:11:c8:e2:25:23:89:ca:5c:d3:f6:42:9b:4e:6c:19: dc:59:e4:da:57:a2:c1:75:8f:85:e5:32:90:a6:b6:15:92:8a: 05:54:fb:e8:8b:f5:95:e6:0a:79:7b:4c:2b:68:25:36:37:14: ee:36:5d:64:65:fb:30:61:01:1a:62:41:d7:e9:12:be:d2:45: b4:9f:6e:10:21:21:4f:4d:52:24:25:fa:fe:5e:a1:2f:2b:8b: af:e2:57:aa:7f:ea:39:27:9e:c9:bc:2f:a5:cc:52:6c:0b:cd: 83:a8:4b:ad:7f:6c:76:48:ce:2a:ab:cb:59:2e:a2:95:51:55: 8d:df:e0:6d:e1:7d:60:4f:a5:12:f0:aa:f9:8c:e3:26:f2:33: ba:5d:5f:33:af:20:21:f3:68:f7:62:37:e8:de:65:d1:a6:61: ab:f7:98:33:38:51:ad:0c:f2:a4:de:b0:79:d4:e3:32:5f:5c: ac:9a:6b:22:ec:f1:a3:39:72:5a:50:a3:6e:b6:86:04:43:05: b9:f2:c8:39:ac:f0:83:10:8b:10:f5:17:a7:65:87:35:36:d0: 12:04:f3:97 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XMa27UDuy4Wz2wVi/5NEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzNGIwOTc0M2VkMmFmZDZhZmI0N2M1ODM2MGVlMzExMmE5 NWNkMzQwHhcNMjYwMTAyMDYxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjY2YmEyOWQ4NDY5MGY4OTdiNzE3YzZmYjBkMTg2ODU2YmUxNTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3A5uUN5U+S8wtlsoPiDkMGq9QAvb L9+g328MyAhSVUiIEcl4hHhOKZrKRSql7RVhfo6jrtOOEpYa3KF7Z+lFGsX3HGsw lBXGKt6UdLLtGJ28GZOAo5oiL/SDTD/mOxkYZ/mB4AfYkIqIgOFHPDHQWNjQ/Z/q lF6iWyKftECu2AoOYw6subEC7Yy50WFLFbu+qD/29dJ5x3MlCkSnyKTYt8B1yaQY rnyOJkCwGH8bwb5X4uLnmTYZBcOKvKHGpiXBnkU9meb1MxH0YIlwIkKw8KXY3Q4h EU2q3Q2/a8Xv24IVVyakqgTZ7fsp5i6SbxJ2mbEV+ax0QtQvvYnXrzc/rwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMtmuinYRpD4l7cXxvsNGGhWvhVkMB8GA1UdIwQY MBaAFDNLCXQ+0q/Wr7R8WDYO4xEqlc00MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTBzSmREN1NyOWF2dEh4WU5nN2pFU3FWelRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9jZDQxMGYtOWRlNC00ZDgyLTgwOTEt NTllNzkyZmUxNGNjLzEveTJhNktkaEdrUGlYdHhmRy13MFlhRmEtRldRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9jZDQxMGYtOWRlNC00ZDgyLTgwOTEtNTllNzkyZmUxNGNj LzEvTTBzSmREN1NyOWF2dEh4WU5nN2pFU3FWelRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgxeAAAH MA0GCSqGSIb3DQEBCwUAA4IBAQAQZDkPfYZjRCpNW9918fzqyrEbMlX+OCGi7Msf n5h/pH7Cil9/zOcRyOIlI4nKXNP2QptObBncWeTaV6LBdY+F5TKQprYVkooFVPvo i/WV5gp5e0wraCU2NxTuNl1kZfswYQEaYkHX6RK+0kW0n24QISFPTVIkJfr+XqEv K4uv4leqf+o5J57JvC+lzFJsC82DqEutf2x2SM4qq8tZLqKVUVWN3+Bt4X1gT6US 8Kr5jOMm8jO6XV8zryAh82j3Yjfo3mXRpmGr95gzOFGtDPKk3rB51OMyX1ysmmsi 7PGjOXJaUKNutoYEQwW58sg5rPCDEIsQ9RenZYc1NtASBPOX -----END CERTIFICATE-----Generated at Fri Jan 2 22:41:35 2026 by rpki-client