This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/YiSRyD3T9EqkxC_vsLTbpd4-1ic.roa File: YiSRyD3T9EqkxC_vsLTbpd4-1ic.roa (raw, json) Hash identifier: rH3OH+nKD7gxgdOxb/Eod9szmTSLhYFd7UVaSZRZpws= Subject key identifier: 62:24:91:C8:3D:D3:F4:4A:A4:C4:2F:EF:B0:B4:DB:A5:DE:3E:D6:27 Certificate issuer: /CN=5e399fba9aae9d2d6ffe52ae8c74ae38fc6c1af1 Certificate serial: 019B7910FBDE81ABA1521825C802D8D8ACD0 Authority key identifier: 5E:39:9F:BA:9A:AE:9D:2D:6F:FE:52:AE:8C:74:AE:38:FC:6C:1A:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/YiSRyD3T9EqkxC_vsLTbpd4-1ic.roa Signing time: Thu 01 Jan 2026 10:18:34 +0000 ROA not before: Thu 01 Jan 2026 10:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212895 IP address blocks: 2a11:6c7::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.crl rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:fb:de:81:ab:a1:52:18:25:c8:02:d8:d8:ac:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e399fba9aae9d2d6ffe52ae8c74ae38fc6c1af1 Validity Not Before: Jan 1 10:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=622491c83dd3f44aa4c42fefb0b4dba5de3ed627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:92:80:9a:1e:6f:aa:e0:35:e8:ec:af:ce:b5: b6:a7:3d:3e:31:72:e5:75:15:48:ed:9b:7f:11:d0: 7a:38:20:fe:1f:9e:be:c6:d4:9e:bc:ab:d3:f0:b6: a9:f9:44:be:e9:a0:e2:3a:a1:56:3a:16:d6:69:51: f4:f1:6c:76:35:2d:a0:d1:dc:71:52:08:a9:f1:2d: cb:b5:99:2a:9c:ad:23:e0:5c:ee:f2:49:4e:a7:76: c0:8c:7e:0c:b7:ad:49:27:04:46:52:dc:55:b8:f8: 4f:8e:54:9b:f9:fd:f5:cd:1b:b8:10:7b:67:ee:43: 28:87:e5:91:2b:6a:e7:41:c2:47:3a:b9:4d:73:b6: 75:f8:ad:87:75:0b:85:20:3c:aa:42:de:83:90:63: 9a:49:90:7c:6b:5a:b9:70:ad:ef:8d:0e:9c:23:81: 1c:d9:f0:bb:2a:0c:4d:13:b1:b5:37:4d:fa:4c:35: 21:25:b9:40:27:f7:2e:a9:26:22:e0:b8:bd:b3:c4: ec:4c:0e:07:49:8a:dd:d4:bc:64:7f:65:73:39:c4: 0b:87:11:75:31:e9:ae:cb:27:af:12:60:1d:b5:dc: 2d:0b:1f:bb:bd:29:92:1a:44:b5:29:8f:de:28:fa: 2c:41:f2:f6:b1:25:e1:df:6d:00:6f:8c:ba:3d:73: d8:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:24:91:C8:3D:D3:F4:4A:A4:C4:2F:EF:B0:B4:DB:A5:DE:3E:D6:27 X509v3 Authority Key Identifier: keyid:5E:39:9F:BA:9A:AE:9D:2D:6F:FE:52:AE:8C:74:AE:38:FC:6C:1A:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/YiSRyD3T9EqkxC_vsLTbpd4-1ic.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:6c7::/32 Signature Algorithm: sha256WithRSAEncryption 30:6f:ac:2d:df:8f:59:ab:0d:17:ef:98:7f:43:63:ca:ed:1a: 56:82:12:82:50:30:ef:76:f0:55:9c:bd:cc:a9:87:bd:23:92: b2:97:53:61:fd:1b:9c:00:5d:08:b6:44:c9:2c:63:e0:b4:84: f5:2e:af:87:d5:c3:2b:a8:b1:97:e9:92:5a:bc:53:47:c9:8d: 5c:9d:3f:d3:7e:8b:18:51:38:ed:9b:59:bf:d4:31:a8:fa:b9: 32:ac:b1:98:b1:0b:ce:91:87:2a:58:7c:92:97:69:d5:d8:0e: 5c:a2:55:64:75:43:ca:f6:db:ee:9a:48:43:26:fc:99:c7:b1: ae:13:32:65:66:46:04:d8:7c:00:6d:ff:ee:da:d8:b4:96:62: 56:56:bf:4f:7d:f1:48:25:9f:51:1d:a3:c2:7b:94:8a:70:9c: 0c:8b:ec:13:f0:73:d5:28:43:9c:14:36:44:fc:9f:a2:f1:b7: e2:21:8c:ef:2c:3f:b0:46:56:f0:6d:86:11:df:b7:b1:51:1a: d5:4a:67:7d:2d:33:24:e6:d8:4b:62:b5:67:8c:d9:f3:cc:32: 44:be:45:d4:24:f3:32:94:e9:ce:3c:e2:45:37:00:12:46:0a: 4b:7e:96:dc:5c:8d:51:42:60:d1:8d:00:c7:db:2d:08:c2:bf: 1f:0e:58:88 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt5EPvegauhUhglyALY2KzQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMzk5ZmJhOWFhZTlkMmQ2ZmZlNTJhZThjNzRhZTM4ZmM2 YzFhZjEwHhcNMjYwMTAxMTAxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjI0OTFjODNkZDNmNDRhYTRjNDJmZWZiMGI0ZGJhNWRlM2VkNjI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15KAmh5vquA16OyvzrW2pz0+MXLl dRVI7Zt/EdB6OCD+H56+xtSevKvT8Lap+US+6aDiOqFWOhbWaVH08Wx2NS2g0dxx Ugip8S3LtZkqnK0j4Fzu8klOp3bAjH4Mt61JJwRGUtxVuPhPjlSb+f31zRu4EHtn 7kMoh+WRK2rnQcJHOrlNc7Z1+K2HdQuFIDyqQt6DkGOaSZB8a1q5cK3vjQ6cI4Ec 2fC7KgxNE7G1N036TDUhJblAJ/cuqSYi4Li9s8TsTA4HSYrd1Lxkf2VzOcQLhxF1 MemuyyevEmAdtdwtCx+7vSmSGkS1KY/eKPosQfL2sSXh320Ab4y6PXPY7wIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFGIkkcg90/RKpMQv77C026XePtYnMB8GA1UdIwQY MBaAFF45n7qarp0tb/5Srox0rjj8bBrxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGptZnVwcXVuUzF2X2xLdWpIU3VPUHhzR3ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9iOTFkMDUtNmEwMy00MGVkLWE5ODMt YmQ4MDlkOWRlZGI5LzEvWWlTUnlEM1Q5RXFreENfdnNMVGJwZDQtMWljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9iOTFkMDUtNmEwMy00MGVkLWE5ODMtYmQ4MDlkOWRlZGI5 LzEvWGptZnVwcXVuUzF2X2xLdWpIU3VPUHhzR3ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhEGxzAN BgkqhkiG9w0BAQsFAAOCAQEAMG+sLd+PWasNF++Yf0Njyu0aVoISglAw73bwVZy9 zKmHvSOSspdTYf0bnABdCLZEySxj4LSE9S6vh9XDK6ixl+mSWrxTR8mNXJ0/036L GFE47ZtZv9QxqPq5MqyxmLELzpGHKlh8kpdp1dgOXKJVZHVDyvbb7ppIQyb8mcex rhMyZWZGBNh8AG3/7trYtJZiVla/T33xSCWfUR2jwnuUinCcDIvsE/Bz1ShDnBQ2 RPyfovG34iGM7yw/sEZW8G2GEd+3sVEa1UpnfS0zJObYS2K1Z4zZ88wyRL5F1CTz MpTpzjziRTcAEkYKS36W3FyNUUJg0Y0Ax9stCMK/Hw5YiA== -----END CERTIFICATE-----Generated at Mon Jan 26 06:33:37 2026 by rpki-client