This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/YXXUHYwrWBeSR2VG94NV5vqHNlQ.roa File: YXXUHYwrWBeSR2VG94NV5vqHNlQ.roa (raw, json) Hash identifier: Gwnm4Vsq48kLU0hCIA+oRgHTCilqqqVQhr/04UYg0wU= Subject key identifier: 61:75:D4:1D:8C:2B:58:17:92:47:65:46:F7:83:55:E6:FA:87:36:54 Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d Certificate serial: 019B7E38AED936A654FDDB354083A6B269A2 Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/YXXUHYwrWBeSR2VG94NV5vqHNlQ.roa Signing time: Fri 02 Jan 2026 10:20:02 +0000 ROA not before: Fri 02 Jan 2026 10:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47778 IP address blocks: 2a13:a5c7:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:ae:d9:36:a6:54:fd:db:35:40:83:a6:b2:69:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d Validity Not Before: Jan 2 10:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6175d41d8c2b581792476546f78355e6fa873654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:87:58:d8:28:2d:71:ae:07:58:7f:d8:ff:2b: a6:d5:71:72:fd:a4:99:09:f5:b2:17:84:8a:b9:6a: 1f:60:34:40:15:07:ea:c9:33:34:ad:f1:33:50:12: cc:40:81:3b:a6:68:f7:56:46:c6:58:8a:7d:db:fa: 30:f7:e8:fa:75:de:ec:15:82:86:a1:02:51:0a:78: ae:b4:30:17:e7:2a:9e:d7:80:b3:5c:b7:49:5d:66: c9:90:4e:7d:23:ec:b9:cd:9d:9a:3c:97:2b:6c:49: 99:5e:e7:18:c4:8f:82:59:40:9c:23:3e:ac:9d:4b: 97:c5:47:70:40:a7:0b:99:70:8e:ef:bc:3c:59:be: 74:c0:b9:37:e3:62:17:17:09:08:98:ea:f3:39:98: 96:a6:13:b1:2c:31:7c:7a:ea:e0:21:6a:9b:47:84: 0a:be:4e:f0:0d:30:3b:ae:ea:64:e6:7a:05:f5:65: 62:05:f9:53:97:94:f4:36:74:14:f3:28:a1:74:e9: 4b:ca:92:18:08:53:04:62:fa:8e:c4:c6:88:0c:eb: 1e:17:0d:b5:50:49:20:42:05:fb:0b:74:60:44:f8: 0a:5d:15:81:ce:e0:cb:7f:7b:8e:eb:87:a0:c9:a4: 48:9d:51:74:15:f1:a7:39:49:0e:cc:40:7a:ed:5a: f0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:75:D4:1D:8C:2B:58:17:92:47:65:46:F7:83:55:E6:FA:87:36:54 X509v3 Authority Key Identifier: keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/YXXUHYwrWBeSR2VG94NV5vqHNlQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:a5c7:1000::/40 Signature Algorithm: sha256WithRSAEncryption b1:86:b5:84:1a:12:2d:de:3e:cf:d7:1a:9a:74:2c:b0:47:5c: 12:56:7b:6a:17:a6:ff:4a:e1:16:34:48:2f:6e:66:b6:44:91: 9f:11:92:f9:34:89:95:21:41:b2:f6:86:bd:31:ab:53:93:52: 31:c7:88:4f:17:6b:5d:25:57:de:d8:d2:49:a0:81:35:1b:33: 42:25:54:73:48:f5:b1:c4:6b:5c:4c:20:11:26:1a:05:fa:e4: d9:7e:44:24:84:3f:b0:57:84:10:98:9d:06:58:91:88:33:4d: ee:4c:36:a4:35:fd:6f:2e:38:5b:e5:1a:3d:ca:44:01:d0:08: f9:93:44:c9:7b:ab:f9:48:72:f7:81:70:d0:f1:b5:1b:4c:57: ce:56:7d:e8:0a:67:86:f6:ea:42:80:7e:d8:9b:1f:36:88:3e: 1a:e9:9e:14:78:39:e7:be:7f:d8:61:49:21:fd:36:3b:c5:19: 83:04:fc:12:46:98:18:4d:b8:84:20:fe:81:a3:5b:db:a3:eb: 88:f4:d5:a3:12:4e:ce:df:99:64:79:dd:d0:25:c5:e3:9a:5b: 64:87:8f:82:4f:68:05:f0:aa:a7:bb:a8:ef:04:9a:ed:f0:f8: 63:46:26:21:1c:05:f3:2b:0c:ff:80:ed:9f:17:f0:e0:06:45: 57:4a:20:97 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+OK7ZNqZU/ds1QIOmsmmiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkZDZlZTAxMGI5OTBhMzM3MzU3NTZiNGZlMmYzZDNjMjY3 MWRkOWQwHhcNMjYwMTAyMTAyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTc1ZDQxZDhjMmI1ODE3OTI0NzY1NDZmNzgzNTVlNmZhODczNjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7YdY2Cgtca4HWH/Y/yum1XFy/aSZ CfWyF4SKuWofYDRAFQfqyTM0rfEzUBLMQIE7pmj3VkbGWIp92/ow9+j6dd7sFYKG oQJRCniutDAX5yqe14CzXLdJXWbJkE59I+y5zZ2aPJcrbEmZXucYxI+CWUCcIz6s nUuXxUdwQKcLmXCO77w8Wb50wLk342IXFwkImOrzOZiWphOxLDF8eurgIWqbR4QK vk7wDTA7rupk5noF9WViBflTl5T0NnQU8yihdOlLypIYCFMEYvqOxMaIDOseFw21 UEkgQgX7C3RgRPgKXRWBzuDLf3uO64egyaRInVF0FfGnOUkOzEB67Vrw5wIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFGF11B2MK1gXkkdlRveDVeb6hzZUMB8GA1UdIwQY MBaAFP3W7gELmQozc1dWtP4vPTwmcd2dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDct NjNjNzIxY2YxZjU2LzEvWVhYVUhZd3JXQmVTUjJWRzk0TlY1dnFITmxRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDctNjNjNzIxY2YxZjU2 LzEvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhOlxxAw DQYJKoZIhvcNAQELBQADggEBALGGtYQaEi3ePs/XGpp0LLBHXBJWe2oXpv9K4RY0 SC9uZrZEkZ8Rkvk0iZUhQbL2hr0xq1OTUjHHiE8Xa10lV97Y0kmggTUbM0IlVHNI 9bHEa1xMIBEmGgX65Nl+RCSEP7BXhBCYnQZYkYgzTe5MNqQ1/W8uOFvlGj3KRAHQ CPmTRMl7q/lIcveBcNDxtRtMV85WfegKZ4b26kKAftibHzaIPhrpnhR4Oee+f9hh SSH9NjvFGYME/BJGmBhNuIQg/oGjW9uj64j01aMSTs7fmWR53dAlxeOaW2SHj4JP aAXwqqe7qO8Emu3w+GNGJiEcBfMrDP+A7Z8X8OAGRVdKIJc= -----END CERTIFICATE-----Generated at Mon Jan 5 03:51:00 2026 by rpki-client