This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Ytq6KsWMvjR8iTYBqjkFAVMbGRA.roa File: Ytq6KsWMvjR8iTYBqjkFAVMbGRA.roa (raw, json) Hash identifier: QcIQT0mfGA/H60P3m/BJTIlhmIQ0o/dBdxTa4sDMQKM= Subject key identifier: 62:DA:BA:2A:C5:8C:BE:34:7C:89:36:01:AA:39:05:01:53:1B:19:10 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D704F16A9DD38D2950E58D220ECF9 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Ytq6KsWMvjR8iTYBqjkFAVMbGRA.roa Signing time: Fri 02 Jan 2026 06:20:34 +0000 ROA not before: Fri 02 Jan 2026 06:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214801 IP address blocks: 2a10:2f00:1a1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 17:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:70:4f:16:a9:dd:38:d2:95:0e:58:d2:20:ec:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=62daba2ac58cbe347c893601aa390501531b1910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0c:54:20:ab:ff:c7:c7:52:18:e9:67:8d:34: 93:9f:9d:ef:6b:b3:4c:03:56:f3:7a:66:5e:da:0c: 4b:4b:6f:2b:d2:fd:e9:5b:bb:22:3f:98:ef:43:8b: 4a:3b:3f:3e:8e:bc:fd:f3:6d:5b:f4:0b:f8:20:7e: be:47:0b:16:4f:2d:cf:a2:1a:d1:09:63:ed:6e:0e: d9:b0:13:95:f8:06:34:79:3c:c5:84:a8:2b:38:ef: 18:e4:bc:ca:0d:32:78:48:1c:e6:0f:73:cf:49:89: 62:72:88:71:58:83:ca:00:d4:76:be:7f:fd:01:fa: 30:ec:cd:3b:06:87:fd:13:89:7a:fc:ce:9a:f7:1f: ca:d6:75:7b:25:b2:77:95:17:9f:8d:1b:4e:57:2f: 8c:5c:09:0c:b7:fb:59:4e:a8:82:f6:c0:41:e7:ea: 6d:24:e5:e9:9b:b0:bf:64:1f:6e:fa:38:1d:48:d2: 80:b5:15:3c:bf:8b:22:a6:e3:ff:54:97:84:bf:79: 98:6b:dc:bd:76:c6:d0:eb:f9:57:3d:e6:d5:03:b8: 74:87:e2:51:29:ae:f3:4a:10:c9:82:46:a4:14:0d: 64:df:7c:e3:4e:d0:c2:46:d1:8b:94:9d:c8:18:9e: 12:bf:4b:fe:6c:22:54:68:48:de:1c:d1:39:1d:5f: ae:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:DA:BA:2A:C5:8C:BE:34:7C:89:36:01:AA:39:05:01:53:1B:19:10 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Ytq6KsWMvjR8iTYBqjkFAVMbGRA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:2f00:1a1::/48 Signature Algorithm: sha256WithRSAEncryption 7e:c9:cc:0a:8d:01:29:42:24:1e:04:77:a1:73:43:1c:e7:5b: c1:b7:84:55:e0:2c:7f:d5:5a:20:5a:52:be:ba:27:ce:ce:b4: a0:62:68:bf:15:0f:cc:5b:5a:14:a5:c4:6e:7c:d7:40:e0:f4: 73:1d:4e:a9:f9:c9:79:67:a5:31:52:ae:af:e3:db:7b:a8:f2: 4a:4d:78:68:e2:3b:f3:e0:4f:aa:87:cc:58:98:87:64:b6:4e: 78:f1:73:ea:aa:5e:8b:66:c0:2d:e0:a3:c3:ec:12:3d:1b:35: 1a:80:e3:8d:2e:ed:10:34:12:0b:81:02:79:49:48:79:0f:a5: e1:9f:07:ab:0c:bc:7a:87:ca:54:07:ca:64:c8:5e:4f:60:6c: f5:a3:1d:69:ea:44:61:c2:97:73:93:4f:4d:3a:c4:ea:67:25: 3f:6b:4f:4b:28:35:b8:6e:a8:58:ab:01:c9:10:e6:31:10:03: f9:ae:bc:23:49:27:ba:66:bc:4a:58:59:35:33:93:4a:2d:2c: 86:b4:a6:34:78:e9:b8:45:bb:58:06:fe:41:91:01:78:84:e6: 13:f4:33:42:10:e3:08:3d:47:aa:a4:4c:93:01:b0:a1:b2:2d: 68:3c:a1:5f:51:61:eb:3e:01:43:08:34:b3:c4:28:be:21:c1: ae:8e:9f:68 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XXBPFqndONKVDljSIOz5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MmRhYmEyYWM1OGNiZTM0N2M4OTM2MDFhYTM5MDUwMTUzMWIxOTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAxUIKv/x8dSGOlnjTSTn53va7NM A1bzemZe2gxLS28r0v3pW7siP5jvQ4tKOz8+jrz9821b9Av4IH6+RwsWTy3PohrR CWPtbg7ZsBOV+AY0eTzFhKgrOO8Y5LzKDTJ4SBzmD3PPSYlicohxWIPKANR2vn/9 Afow7M07Bof9E4l6/M6a9x/K1nV7JbJ3lRefjRtOVy+MXAkMt/tZTqiC9sBB5+pt JOXpm7C/ZB9u+jgdSNKAtRU8v4sipuP/VJeEv3mYa9y9dsbQ6/lXPebVA7h0h+JR Ka7zShDJgkakFA1k33zjTtDCRtGLlJ3IGJ4Sv0v+bCJUaEjeHNE5HV+uJQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGLauirFjL40fIk2Aao5BQFTGxkQMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvWXRxNktzV012alI4aVRZQnFqa0ZBVk1iR1JBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhAvAAGh MA0GCSqGSIb3DQEBCwUAA4IBAQB+ycwKjQEpQiQeBHehc0Mc51vBt4RV4Cx/1Vog WlK+uifOzrSgYmi/FQ/MW1oUpcRufNdA4PRzHU6p+cl5Z6UxUq6v49t7qPJKTXho 4jvz4E+qh8xYmIdktk548XPqql6LZsAt4KPD7BI9GzUagOONLu0QNBILgQJ5SUh5 D6XhnwerDLx6h8pUB8pkyF5PYGz1ox1p6kRhwpdzk09NOsTqZyU/a09LKDW4bqhY qwHJEOYxEAP5rrwjSSe6ZrxKWFk1M5NKLSyGtKY0eOm4RbtYBv5BkQF4hOYT9DNC EOMIPUeqpEyTAbChsi1oPKFfUWHrPgFDCDSzxCi+IcGujp9o -----END CERTIFICATE-----Generated at Sat Jan 10 02:19:46 2026 by rpki-client