This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/yHQN8cWjZJSj8-u46Gu-gsyRDTU.roa File: yHQN8cWjZJSj8-u46Gu-gsyRDTU.roa (raw, json) Hash identifier: EHU24D0qUh2tmsJEt6bSbVEdFShB4gt4fc5fgyaoi/w= Subject key identifier: C8:74:0D:F1:C5:A3:64:94:A3:F3:EB:B8:E8:6B:BE:82:CC:91:0D:35 Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9 Certificate serial: 019B7C8091155244DD4AB8FE17ABB4769D76 Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/yHQN8cWjZJSj8-u46Gu-gsyRDTU.roa Signing time: Fri 02 Jan 2026 02:19:19 +0000 ROA not before: Fri 02 Jan 2026 02:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33823 IP address blocks: 2a05:b680::/48 maxlen: 56 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:91:15:52:44:dd:4a:b8:fe:17:ab:b4:76:9d:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9 Validity Not Before: Jan 2 02:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8740df1c5a36494a3f3ebb8e86bbe82cc910d35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:85:cc:fe:f8:f7:17:f2:a2:12:eb:59:ff:20: 2a:56:7b:a3:e9:64:5e:4a:79:7d:49:08:3f:fe:4d: af:1b:b5:6b:4d:93:f4:30:d6:67:3d:8b:2a:d1:b6: b7:47:c7:6f:ee:96:29:cd:9f:1c:7b:a7:4a:45:fd: 46:8e:3b:3f:ea:65:25:d2:28:58:1f:1c:17:fb:d7: 7b:01:e1:e1:a3:29:5e:c2:68:17:ce:e3:1c:4f:1c: 8b:6e:74:a4:4c:0e:81:c1:c6:5f:f9:79:96:8e:6a: 16:4b:2a:76:72:9e:28:76:f7:a9:a3:e7:58:ea:07: d0:f1:a4:e6:be:cd:36:f2:e3:55:2a:93:21:d2:1c: 31:f1:25:73:9b:46:20:00:e6:d5:36:2d:bb:ac:2b: b5:b5:55:8d:29:58:31:b9:a6:2c:e7:ef:60:0f:87: 38:32:cc:94:5b:6d:aa:fc:1d:ee:85:a0:17:76:11: b6:cc:10:7f:49:f7:a7:b6:e1:f8:1f:ae:1a:92:d0: 99:2e:e8:eb:b2:af:88:70:a2:6f:3b:05:59:f7:5a: 5d:d0:2b:67:fc:7d:e4:b0:57:45:36:b9:59:75:15: 08:3e:ce:03:f5:3f:7b:33:4c:70:8a:0a:98:97:85: 26:5f:e2:f4:1d:43:a0:d9:86:0d:33:69:8a:ba:ee: fa:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:74:0D:F1:C5:A3:64:94:A3:F3:EB:B8:E8:6B:BE:82:CC:91:0D:35 X509v3 Authority Key Identifier: keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/yHQN8cWjZJSj8-u46Gu-gsyRDTU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:b680::/48 Signature Algorithm: sha256WithRSAEncryption b5:4c:a7:ab:e8:32:e4:c4:c2:9d:0b:4c:49:2f:3c:d3:e4:b8: a3:61:d2:6b:d5:36:bf:40:ae:d0:81:52:d5:e2:83:b3:4e:6a: cd:9b:55:2a:13:65:7a:e3:4d:49:0d:0b:8d:be:f6:4b:c7:eb: 4d:64:c9:43:2f:d0:47:9b:ab:6d:20:6f:cf:c6:cd:4b:0f:3e: 72:23:ee:ad:fa:29:a4:dd:cc:1a:d2:09:ab:6c:c7:a2:07:3c: 41:33:69:8e:11:54:ec:08:7f:3f:c6:cf:15:e3:7d:10:ac:00: d7:5c:61:b4:65:78:14:c4:c4:c4:94:4d:2d:be:b9:07:e7:ba: 40:3f:26:bf:c8:79:0a:ca:ec:8e:ce:f3:a9:c9:69:22:08:6b: 3c:24:8b:30:34:6a:2e:f7:bc:8f:15:99:73:09:f3:71:d0:a3: ad:0d:65:ae:cf:fb:67:6a:1a:6a:e1:a9:88:49:33:82:7d:84: f6:96:95:5d:29:8d:dd:ed:87:c3:ed:28:28:8c:91:c7:81:54: fe:ed:22:54:9a:85:56:44:bd:4b:99:a8:0a:e4:82:17:b1:34: 6b:49:42:4f:b2:6a:24:25:40:50:b0:cf:d7:a9:a8:c9:8e:ab: a9:e2:90:15:98:c9:e7:bd:d6:82:c2:fb:cf:cc:53:f0:24:c9: 72:5b:55:9f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8gJEVUkTdSrj+F6u0dp12MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNTg5NTJkMzkzOTM1ZjBkM2JjZTgxNGZkOTE3OGQwNDY5 M2FlYjkwHhcNMjYwMTAyMDIxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODc0MGRmMWM1YTM2NDk0YTNmM2ViYjhlODZiYmU4MmNjOTEwZDM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoXM/vj3F/KiEutZ/yAqVnuj6WRe Snl9SQg//k2vG7VrTZP0MNZnPYsq0ba3R8dv7pYpzZ8ce6dKRf1Gjjs/6mUl0ihY HxwX+9d7AeHhoylewmgXzuMcTxyLbnSkTA6BwcZf+XmWjmoWSyp2cp4odvepo+dY 6gfQ8aTmvs028uNVKpMh0hwx8SVzm0YgAObVNi27rCu1tVWNKVgxuaYs5+9gD4c4 MsyUW22q/B3uhaAXdhG2zBB/SfentuH4H64aktCZLujrsq+IcKJvOwVZ91pd0Ctn /H3ksFdFNrlZdRUIPs4D9T97M0xwigqYl4UmX+L0HUOg2YYNM2mKuu76TQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMh0DfHFo2SUo/PruOhrvoLMkQ01MB8GA1UdIwQY MBaAFP5YlS05OTXw07zoFP2ReNBGk665MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUt NWQ0OGI2NWNlNTczLzEveUhRTjhjV2paSlNqOC11NDZHdS1nc3lSRFRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUtNWQ0OGI2NWNlNTcz LzEvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgW2gAAA MA0GCSqGSIb3DQEBCwUAA4IBAQC1TKer6DLkxMKdC0xJLzzT5LijYdJr1Ta/QK7Q gVLV4oOzTmrNm1UqE2V6401JDQuNvvZLx+tNZMlDL9BHm6ttIG/Pxs1LDz5yI+6t +imk3cwa0gmrbMeiBzxBM2mOEVTsCH8/xs8V430QrADXXGG0ZXgUxMTElE0tvrkH 57pAPya/yHkKyuyOzvOpyWkiCGs8JIswNGou97yPFZlzCfNx0KOtDWWuz/tnahpq 4amISTOCfYT2lpVdKY3d7YfD7SgojJHHgVT+7SJUmoVWRL1LmagK5IIXsTRrSUJP smokJUBQsM/XqajJjqup4pAVmMnnvdaCwvvPzFPwJMlyW1Wf -----END CERTIFICATE-----Generated at Wed Jan 21 10:48:13 2026 by rpki-client