This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/YneOEnzEW4Dtf07TGmtqqlmSII4.roa
File: YneOEnzEW4Dtf07TGmtqqlmSII4.roa (raw, json)
Hash identifier: AxE0htOb7ZgF0SMVjDRW7HpcPqY0CxuTAWUxKS6MjCA=
Subject key identifier: 62:77:8E:12:7C:C4:5B:80:ED:7F:4E:D3:1A:6B:6A:AA:59:92:20:8E
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019B7D5D60CA6DF35389412DD9D8EAD21B43
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/YneOEnzEW4Dtf07TGmtqqlmSII4.roa
Signing time: Fri 02 Jan 2026 06:20:30 +0000
ROA not before: Fri 02 Jan 2026 06:20:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213286
IP address blocks: 2a10:2f00:131::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Jan 2026 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5d:60:ca:6d:f3:53:89:41:2d:d9:d8:ea:d2:1b:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 06:20:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=62778e127cc45b80ed7f4ed31a6b6aaa5992208e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:78:9b:8f:5c:fa:03:d6:e8:4a:86:aa:ec:9d:
3a:2a:d6:ab:64:47:8f:94:d3:0a:85:f3:cf:4a:65:
31:af:0d:c0:49:e4:66:24:79:3b:d8:54:23:04:e6:
70:e2:85:47:7e:8c:17:1e:df:6a:74:67:ce:33:d2:
3f:ee:52:fc:0d:17:ef:db:41:4f:1f:b1:9c:e2:2a:
b5:2d:8c:e8:05:90:25:0d:8d:5f:7c:27:66:37:bd:
72:10:b2:db:3d:e3:1d:40:a6:b5:d9:bf:7e:e7:d3:
75:3e:d5:dc:6e:d0:f2:c8:25:33:7b:3c:8a:35:7b:
da:69:41:89:15:ee:53:ca:53:f8:26:db:ab:80:6b:
b0:7a:54:4b:78:dd:88:57:1a:f7:9e:27:64:50:6d:
52:0c:96:d0:2f:44:aa:cb:0e:6f:5a:fb:87:e8:f3:
51:c7:6c:1c:ed:2f:3f:9c:27:ef:08:5b:67:69:8e:
c1:16:7c:d8:f2:8e:0f:f1:e5:61:d9:13:8e:c6:30:
0c:d7:9a:a6:2c:68:54:5b:53:1b:6d:da:87:c6:74:
ef:a2:6e:6b:af:4f:58:94:68:30:6b:d3:44:e8:4c:
fb:8f:98:8a:99:b9:ac:13:d0:5c:29:a2:ec:d4:f7:
5d:3d:9f:c3:95:81:90:fe:69:07:7b:45:ae:1e:67:
e7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:77:8E:12:7C:C4:5B:80:ED:7F:4E:D3:1A:6B:6A:AA:59:92:20:8E
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/YneOEnzEW4Dtf07TGmtqqlmSII4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f00:131::/48
Signature Algorithm: sha256WithRSAEncryption
a9:98:53:b0:ed:2e:af:d4:d2:a4:b0:63:4a:97:fe:cc:40:7b:
50:1b:4f:bf:44:a5:e4:dd:63:0f:26:b4:db:c8:3b:0f:be:42:
b3:c3:f4:76:b7:4e:e4:7e:32:c1:65:66:de:7e:88:a7:ac:5f:
85:b0:8c:63:20:10:b3:e6:cb:9e:d7:eb:fd:0f:4b:fa:fb:b8:
bc:8e:34:0e:d8:5a:67:ed:4c:c5:08:f1:e5:9e:03:94:f5:73:
62:15:bc:30:fe:c4:33:cb:b5:24:e3:f5:fa:05:3a:f4:5c:ba:
4b:f4:0e:e4:46:34:46:6d:27:3a:a5:ad:b7:f6:52:86:95:9e:
a6:fb:85:23:d0:cc:a0:0b:0f:ee:ae:24:92:82:9e:2a:19:45:
62:ae:c3:a6:42:ca:e3:21:d9:75:ec:92:2f:53:a7:9e:c8:dc:
01:51:76:e3:a5:73:5f:08:43:cf:6b:5b:38:8a:d3:a1:4b:f6:
07:b6:a4:a6:d0:fd:85:9e:e5:a6:fb:33:c4:12:03:c6:2c:94:
b2:a2:3b:1f:2b:b2:e7:1d:b5:ea:d7:01:88:68:2f:40:84:c8:
15:de:a2:d2:15:1e:a1:b8:33:95:ee:98:41:cf:cc:52:51:c5:
12:a9:f9:6a:b8:53:82:c4:33:6d:6d:ca:c8:51:cc:e9:a5:93:
69:62:b6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 13:12:08 2026 by rpki-client