This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/YI0VjaW3GgmQyec_10qUg4dywOk.roa File: YI0VjaW3GgmQyec_10qUg4dywOk.roa (raw, json) Hash identifier: fy/kcIbR7ZuPH//tdZQWwxmUCpHN6Ph0X+x/wtOLQzw= Subject key identifier: 60:8D:15:8D:A5:B7:1A:09:90:C9:E7:3F:D7:4A:94:83:87:72:C0:E9 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019BA3CCF2AB326859FA0BF7A6425AEC0ADF Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/YI0VjaW3GgmQyec_10qUg4dywOk.roa Signing time: Fri 09 Jan 2026 17:27:56 +0000 ROA not before: Fri 09 Jan 2026 17:27:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211626 IP address blocks: 2a0e:97c0:930::/44 maxlen: 48 2a0e:97c0:93a::/48 maxlen: 48 2a0e:97c0:93b::/48 maxlen: 48 2a0e:97c0:93c::/48 maxlen: 48 2a0e:97c0:93d::/48 maxlen: 48 2a0e:97c0:93e::/48 maxlen: 48 2a0e:97c0:93f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a3:cc:f2:ab:32:68:59:fa:0b:f7:a6:42:5a:ec:0a:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 9 17:27:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=608d158da5b71a0990c9e73fd74a94838772c0e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ab:35:45:15:6c:42:ae:5c:8e:2a:1d:a9:e9: 68:73:25:5e:ec:36:f1:de:b1:52:13:b5:9f:49:12: d5:16:3c:94:a4:a1:77:a4:cd:58:bc:74:38:4e:b4: e3:bb:6b:12:a6:33:34:8c:b2:d9:c3:9f:17:00:a7: d4:06:c4:39:0f:91:19:00:d2:ec:0a:16:25:68:ae: fb:8e:5f:5b:3b:8d:60:2c:39:d2:16:38:2a:a2:0d: ae:d5:74:96:9d:5a:8b:44:2a:e0:34:e2:23:a6:41: 59:49:18:3a:79:6c:37:3e:e2:51:e4:98:ad:f5:83: 6a:ca:9f:d6:4a:c5:21:bb:c5:89:51:8a:9b:07:da: 8f:7d:5d:29:a6:03:17:c1:0e:0c:7c:96:be:07:f7: 3e:77:8d:cf:b4:50:f5:f0:fa:63:0f:1c:54:5c:d9: 1a:dd:87:9a:cb:4a:21:80:f6:76:c5:90:fa:d2:7c: 69:38:3a:ca:da:2f:20:2e:49:5c:3f:c5:f6:0f:1e: 38:15:ef:b8:9e:1f:01:05:7e:24:73:a7:56:61:ed: 52:f9:b8:2b:5d:81:d1:a5:20:52:45:59:ad:50:39: 68:39:9a:16:7b:67:cb:bb:2d:32:a5:ff:0f:9b:d0: c3:15:84:63:25:62:5a:f4:0d:ff:86:9a:cf:93:a5: 01:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:8D:15:8D:A5:B7:1A:09:90:C9:E7:3F:D7:4A:94:83:87:72:C0:E9 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/YI0VjaW3GgmQyec_10qUg4dywOk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:930::/44 Signature Algorithm: sha256WithRSAEncryption c0:36:e3:21:62:37:e1:31:0d:25:aa:c3:75:ae:a3:f6:94:ed: a4:24:4f:84:f1:3f:08:35:72:73:f2:9b:ca:20:76:c8:27:56: 6d:17:b8:91:4b:9d:53:c7:4f:9e:4f:0c:5b:36:6f:cb:39:2e: a5:b0:24:4d:0a:75:14:98:67:d5:e1:eb:06:34:c6:e2:c5:0d: 80:5b:86:04:aa:ba:ee:a1:a9:e1:6f:2a:4e:68:32:91:28:55: 4b:79:fb:0c:a2:a1:63:e4:e3:e1:09:e2:84:9e:5a:31:3c:cc: e4:9f:6e:77:b6:ee:2a:51:f5:2f:b6:40:0e:78:0e:90:44:1c: e9:f4:97:b0:1a:cf:75:36:45:ff:fa:43:73:7c:76:76:94:5e: 91:37:9a:cc:0e:ba:a1:5a:6b:f6:d5:8e:e3:4e:d5:59:73:e6: 84:5b:79:41:18:94:e7:63:cd:65:b6:15:13:9a:a0:d2:83:9a: 64:b7:2f:9c:b6:50:6c:75:8f:dd:ad:9c:e3:87:7b:52:59:76: e4:09:3f:b1:6a:22:e2:99:dc:d1:9b:57:38:da:03:19:71:32: 52:58:b0:0a:ec:8f:c9:55:09:5e:39:ba:85:2c:f5:04:38:92: 65:f2:ca:ad:cd:fb:96:ca:03:6a:81:ff:8a:44:f5:e6:8a:d6: 8b:3a:71:10 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZujzPKrMmhZ+gv3pkJa7ArfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTA5MTcyNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDhkMTU4ZGE1YjcxYTA5OTBjOWU3M2ZkNzRhOTQ4Mzg3NzJjMGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAias1RRVsQq5cjiodqelocyVe7Dbx 3rFSE7WfSRLVFjyUpKF3pM1YvHQ4TrTju2sSpjM0jLLZw58XAKfUBsQ5D5EZANLs ChYlaK77jl9bO41gLDnSFjgqog2u1XSWnVqLRCrgNOIjpkFZSRg6eWw3PuJR5Jit 9YNqyp/WSsUhu8WJUYqbB9qPfV0ppgMXwQ4MfJa+B/c+d43PtFD18PpjDxxUXNka 3Yeay0ohgPZ2xZD60nxpODrK2i8gLklcP8X2Dx44Fe+4nh8BBX4kc6dWYe1S+bgr XYHRpSBSRVmtUDloOZoWe2fLuy0ypf8Pm9DDFYRjJWJa9A3/hprPk6UBpwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGCNFY2ltxoJkMnnP9dKlIOHcsDpMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvWUkwVmphVzNHZ21ReWVjXzEwcVVnNGR5d09rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwAkw MA0GCSqGSIb3DQEBCwUAA4IBAQDANuMhYjfhMQ0lqsN1rqP2lO2kJE+E8T8INXJz 8pvKIHbIJ1ZtF7iRS51Tx0+eTwxbNm/LOS6lsCRNCnUUmGfV4esGNMbixQ2AW4YE qrruoanhbypOaDKRKFVLefsMoqFj5OPhCeKEnloxPMzkn253tu4qUfUvtkAOeA6Q RBzp9JewGs91NkX/+kNzfHZ2lF6RN5rMDrqhWmv21Y7jTtVZc+aEW3lBGJTnY81l thUTmqDSg5pkty+ctlBsdY/drZzjh3tSWXbkCT+xaiLimdzRm1c42gMZcTJSWLAK 7I/JVQleObqFLPUEOJJl8sqtzfuWygNqgf+KRPXmitaLOnEQ -----END CERTIFICATE-----Generated at Mon Jan 12 01:05:31 2026 by rpki-client