This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/aAyjGidCRd4HZ3z28s7kHfI3sFQ.roa File: aAyjGidCRd4HZ3z28s7kHfI3sFQ.roa (raw, json) Hash identifier: yyghszcohtM5Wk9rUOZWwch/Wn48BU9LOtNcV0EZHsc= Subject key identifier: 68:0C:A3:1A:27:42:45:DE:07:67:7C:F6:F2:CE:E4:1D:F2:37:B0:54 Certificate issuer: /CN=63392e929317ae6bde08a5a3b98a2b701ddb893a Certificate serial: 019B7A5B4AD72E2CEA3F5A013D115C239C00 Authority key identifier: 63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/aAyjGidCRd4HZ3z28s7kHfI3sFQ.roa Signing time: Thu 01 Jan 2026 16:19:21 +0000 ROA not before: Thu 01 Jan 2026 16:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63801 IP address blocks: 2a12:f8c2:200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 13:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:4a:d7:2e:2c:ea:3f:5a:01:3d:11:5c:23:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63392e929317ae6bde08a5a3b98a2b701ddb893a Validity Not Before: Jan 1 16:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=680ca31a274245de07677cf6f2cee41df237b054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5c:93:8a:63:07:b8:99:48:1f:52:c3:44:4e: c3:90:e1:6f:e8:c3:44:4d:7d:a1:b1:a3:07:08:c6: e2:62:9c:7c:fc:d9:a8:7a:04:15:eb:17:b9:2e:d5: 87:00:46:d2:83:98:02:5f:86:c7:c3:a8:80:ca:fc: 2a:c0:69:fd:4d:c2:38:15:cc:3c:6f:83:11:e1:f1: b5:0a:b4:06:72:4d:1b:cd:11:21:5d:27:b7:7f:f8: 85:3f:81:e2:af:eb:9e:86:34:7e:29:b0:9f:eb:52: ed:bc:96:c6:23:52:a2:17:01:57:2e:0f:54:3a:ae: 86:7b:7d:54:ed:e6:40:86:ef:77:97:c3:48:87:57: cd:08:49:e1:fb:d0:42:bf:53:80:ce:d8:d1:42:c1: 6a:e1:5d:50:a3:7f:27:61:32:80:57:d8:a5:d4:47: 8b:6f:1f:1d:39:8e:b0:f2:28:2e:03:f8:16:5c:7a: 89:4b:a7:e2:2f:f4:8a:0d:53:6d:92:9e:52:ad:2c: 2c:e1:cf:05:82:20:6c:c0:59:2f:f5:3f:3b:df:a1: 67:38:bc:3e:c7:9a:e3:ed:f4:3b:0e:8d:9b:ae:8b: 58:01:00:b0:cc:18:78:8c:9d:c3:3d:9c:79:98:24: c9:58:fe:ae:4b:bc:b1:39:56:68:30:6b:6e:21:a8: 3b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:0C:A3:1A:27:42:45:DE:07:67:7C:F6:F2:CE:E4:1D:F2:37:B0:54 X509v3 Authority Key Identifier: keyid:63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/aAyjGidCRd4HZ3z28s7kHfI3sFQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:f8c2:200::/40 Signature Algorithm: sha256WithRSAEncryption 5d:00:62:2c:fa:48:a8:2d:f6:a7:97:44:30:28:90:1e:e1:d5: d6:8a:02:59:e7:9f:c9:c4:79:66:6e:2f:b8:02:1c:e7:d9:92: 89:5f:d6:6c:21:e2:f6:1a:85:9e:95:9c:d9:10:36:d4:34:99: 41:c9:bc:42:f3:7c:c3:b6:a8:e9:f9:00:c4:31:02:1b:f1:47: 7c:e2:b8:73:ba:85:b4:44:91:37:a4:84:57:a6:c5:53:b9:3b: 67:03:1d:21:9f:93:13:ed:b0:5d:c8:2e:c3:d7:4a:ac:eb:b0: 31:16:ba:4e:84:79:66:d5:9b:31:e3:f9:11:3b:1d:0e:9b:04: dc:41:b2:6d:bc:c7:a3:f9:84:59:21:b7:a3:69:86:d5:61:8a: 28:1a:c9:09:90:23:5f:47:32:df:f0:2a:d1:50:ec:9c:11:20: 5a:4d:7b:6e:48:43:92:10:cd:f0:3d:5e:57:03:77:38:1f:3a: 7b:de:f6:b6:48:6c:ce:35:32:6c:66:05:49:b7:8e:48:22:31: ae:a3:0a:c9:4e:83:15:67:54:1c:52:28:17:17:3b:4b:7d:8b: 4e:b4:4f:6f:e4:42:08:93:ea:1d:87:43:e0:da:1a:53:ab:cb: d8:31:99:32:56:b8:0e:45:95:08:fc:75:a7:2c:0d:51:19:46: 0a:ab:72:34 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt6W0rXLizqP1oBPRFcI5wAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMzkyZTkyOTMxN2FlNmJkZTA4YTVhM2I5OGEyYjcwMWRk Yjg5M2EwHhcNMjYwMTAxMTYxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODBjYTMxYTI3NDI0NWRlMDc2NzdjZjZmMmNlZTQxZGYyMzdiMDU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1yTimMHuJlIH1LDRE7DkOFv6MNE TX2hsaMHCMbiYpx8/NmoegQV6xe5LtWHAEbSg5gCX4bHw6iAyvwqwGn9TcI4Fcw8 b4MR4fG1CrQGck0bzREhXSe3f/iFP4Hir+uehjR+KbCf61LtvJbGI1KiFwFXLg9U Oq6Ge31U7eZAhu93l8NIh1fNCEnh+9BCv1OAztjRQsFq4V1Qo38nYTKAV9il1EeL bx8dOY6w8iguA/gWXHqJS6fiL/SKDVNtkp5SrSws4c8FgiBswFkv9T8736FnOLw+ x5rj7fQ7Do2brotYAQCwzBh4jJ3DPZx5mCTJWP6uS7yxOVZoMGtuIag7tQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFGgMoxonQkXeB2d89vLO5B3yN7BUMB8GA1UdIwQY MBaAFGM5LpKTF65r3gilo7mKK3Ad24k6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mZTcwMmUtYzI2Yi00NDI5LTk5YzEt ODcyNTBmNWEwN2NjLzEvYUF5akdpZENSZDRIWjN6MjhzN2tIZkkzc0ZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9mZTcwMmUtYzI2Yi00NDI5LTk5YzEtODcyNTBmNWEwN2Nj LzEvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhL4wgIw DQYJKoZIhvcNAQELBQADggEBAF0AYiz6SKgt9qeXRDAokB7h1daKAlnnn8nEeWZu L7gCHOfZkolf1mwh4vYahZ6VnNkQNtQ0mUHJvELzfMO2qOn5AMQxAhvxR3ziuHO6 hbREkTekhFemxVO5O2cDHSGfkxPtsF3ILsPXSqzrsDEWuk6EeWbVmzHj+RE7HQ6b BNxBsm28x6P5hFkht6NphtVhiigayQmQI19HMt/wKtFQ7JwRIFpNe25IQ5IQzfA9 XlcDdzgfOnve9rZIbM41MmxmBUm3jkgiMa6jCslOgxVnVBxSKBcXO0t9i060T2/k QgiT6h2HQ+DaGlOry9gxmTJWuA5FlQj8dacsDVEZRgqrcjQ= -----END CERTIFICATE-----Generated at Tue Feb 3 00:06:02 2026 by rpki-client