This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/Y6t_kCbEk6ais70K_hKBXp4Quro.roa File: Y6t_kCbEk6ais70K_hKBXp4Quro.roa (raw, json) Hash identifier: l5cSwhwlEaGXCsl3EbJ8zLczFkFkA8pweq2SNrMzPq8= Subject key identifier: 63:AB:7F:90:26:C4:93:A6:A2:B3:BD:0A:FE:12:81:5E:9E:10:BA:BA Certificate issuer: /CN=fa64a1f7ca40b58116e6bc838e062f9c712228a4 Certificate serial: 019B7C801374C554342BC05EA9E5DEAE5C87 Authority key identifier: FA:64:A1:F7:CA:40:B5:81:16:E6:BC:83:8E:06:2F:9C:71:22:28:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/Y6t_kCbEk6ais70K_hKBXp4Quro.roa Signing time: Fri 02 Jan 2026 02:18:46 +0000 ROA not before: Fri 02 Jan 2026 02:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 213.109.176.0/24 maxlen: 24 213.109.177.0/24 maxlen: 24 213.109.178.0/24 maxlen: 24 213.109.179.0/24 maxlen: 24 2a00:de61::/40 maxlen: 48 2a00:de61:100::/40 maxlen: 48 2a00:de61:200::/40 maxlen: 48 2a00:de61:300::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:19:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:13:74:c5:54:34:2b:c0:5e:a9:e5:de:ae:5c:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa64a1f7ca40b58116e6bc838e062f9c712228a4 Validity Not Before: Jan 2 02:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63ab7f9026c493a6a2b3bd0afe12815e9e10baba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:04:0e:c4:cf:43:0d:47:c1:cc:71:55:8b:ea: 2f:7e:53:03:f2:af:75:30:8d:14:e4:2b:1e:a9:13: d8:4c:5d:fa:50:20:f4:10:45:71:1e:29:58:19:e3: e3:6c:e7:87:5a:da:d1:a7:e3:83:75:3a:ed:da:c0: 8c:cb:de:80:bc:a3:7c:62:96:9e:c9:96:5b:ae:65: c9:33:8c:33:0e:6e:69:f3:d8:b2:ab:e2:77:ed:85: 53:44:2b:f6:8d:1d:5a:61:9e:70:00:4e:4a:dd:6f: c1:58:26:34:b8:4e:0e:7e:55:83:ed:41:22:c4:96: 15:8d:03:f4:c8:e7:d9:f3:08:0b:87:5a:e2:2d:40: 40:6a:89:6b:4c:4b:02:78:b8:8f:c3:c3:f6:03:7e: 04:09:5a:56:25:55:ab:6a:32:9d:0e:7d:71:58:fd: d8:cf:b3:50:9f:00:52:20:37:e7:78:15:2c:ea:d6: 54:c6:47:5c:12:16:d5:ff:2b:f9:fd:be:dc:b8:58: 73:9e:07:7f:3e:bc:fc:c9:4f:29:b2:43:42:7b:eb: 28:b4:06:16:50:f7:21:c1:a2:94:2f:00:83:a7:d7: 60:04:6b:dc:c7:b5:23:a6:43:60:97:30:1d:2f:af: aa:45:75:1e:18:af:bd:b0:5d:1d:e1:71:ae:c8:b4: b7:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:AB:7F:90:26:C4:93:A6:A2:B3:BD:0A:FE:12:81:5E:9E:10:BA:BA X509v3 Authority Key Identifier: keyid:FA:64:A1:F7:CA:40:B5:81:16:E6:BC:83:8E:06:2F:9C:71:22:28:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/Y6t_kCbEk6ais70K_hKBXp4Quro.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.109.176.0/22 IPv6: 2a00:de61::/38 Signature Algorithm: sha256WithRSAEncryption d5:d7:e7:cf:81:95:84:39:e8:bf:96:06:ba:03:c1:8d:49:88: d2:e6:c4:8c:f2:5a:d0:71:8a:a7:c7:0f:9b:c1:6a:b9:d6:fb: 7f:01:38:64:91:9e:c5:90:14:14:00:c6:b0:c1:ab:14:a3:c6: b2:92:61:02:70:37:d7:04:21:4a:23:a7:1d:2c:49:3a:7c:60: 11:21:ba:bc:a7:aa:2c:14:4a:7e:7f:3e:77:2a:7e:1e:47:b0: a5:24:43:76:dd:a6:40:c7:df:b6:2e:f3:b1:90:a4:be:f7:b0: 6b:b5:e9:89:95:66:37:4e:4a:d3:23:26:11:7b:ea:91:f7:63: df:45:64:d6:1a:f4:f5:1c:6c:6e:ce:8e:9f:fb:e0:c1:db:26: 04:32:72:57:fd:7d:16:21:b9:ec:3d:a9:48:d0:76:e1:7b:fc: 40:3f:bf:62:e8:09:7d:9a:a1:22:f1:a0:ec:67:67:0e:71:e5: 47:ad:55:0b:d4:da:34:0e:b2:f6:04:4d:db:b4:8b:f4:b8:a0: 98:11:cb:a5:49:7a:b7:da:c3:1a:6a:5d:07:5d:46:a1:aa:70: 9e:92:f9:09:66:91:0b:34:83:ad:a8:08:29:be:fa:05:eb:d4: 27:ac:a3:59:0e:85:b6:a2:df:e2:c8:50:03:96:8d:88:eb:ca: eb:38:82:f0 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt8gBN0xVQ0K8BeqeXerlyHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhNjRhMWY3Y2E0MGI1ODExNmU2YmM4MzhlMDYyZjljNzEy MjI4YTQwHhcNMjYwMTAyMDIxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2M2FiN2Y5MDI2YzQ5M2E2YTJiM2JkMGFmZTEyODE1ZTllMTBiYWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwQOxM9DDUfBzHFVi+ovflMD8q91 MI0U5CseqRPYTF36UCD0EEVxHilYGePjbOeHWtrRp+ODdTrt2sCMy96AvKN8Ypae yZZbrmXJM4wzDm5p89iyq+J37YVTRCv2jR1aYZ5wAE5K3W/BWCY0uE4OflWD7UEi xJYVjQP0yOfZ8wgLh1riLUBAaolrTEsCeLiPw8P2A34ECVpWJVWrajKdDn1xWP3Y z7NQnwBSIDfneBUs6tZUxkdcEhbV/yv5/b7cuFhzngd/Prz8yU8pskNCe+sotAYW UPchwaKULwCDp9dgBGvcx7UjpkNglzAdL6+qRXUeGK+9sF0d4XGuyLS34QIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFGOrf5AmxJOmorO9Cv4SgV6eELq6MB8GA1UdIwQY MBaAFPpkoffKQLWBFua8g44GL5xxIiikMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1tU2g5OHBBdFlFVzVyeURqZ1l2bkhFaUtLUS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2YvYmEyN2ZiLTI1NTAtNDlhZC1iMGVm LTViODNkMGU5NjAxMi8xL1k2dF9rQ2JFazZhaXM3MEtfaEtCWHA0UXVyby5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvM2YvYmEyN2ZiLTI1NTAtNDlhZC1iMGVmLTViODNkMGU5NjAx Mi8xLzEtbVNoOThwQXRZRVc1cnlEamdZdm5IRWlLS1EuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwLwYIKwYBBQUHAQcBAf8EIDAeMAwEAgABMAYDBALVbbAw DgQCAAIwCAMGAioA3mEAMA0GCSqGSIb3DQEBCwUAA4IBAQDV1+fPgZWEOei/lga6 A8GNSYjS5sSM8lrQcYqnxw+bwWq51vt/AThkkZ7FkBQUAMawwasUo8aykmECcDfX BCFKI6cdLEk6fGARIbq8p6osFEp+fz53Kn4eR7ClJEN23aZAx9+2LvOxkKS+97Br temJlWY3TkrTIyYRe+qR92PfRWTWGvT1HGxuzo6f++DB2yYEMnJX/X0WIbnsPalI 0Hbhe/xAP79i6Al9mqEi8aDsZ2cOceVHrVUL1No0DrL2BE3btIv0uKCYEculSXq3 2sMaal0HXUahqnCekvkJZpELNIOtqAgpvvoF69QnrKNZDoW2ot/iyFADlo2I68rr OILw -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:17 2026 by rpki-client