This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/y-2B7Heu1rGpX8p8S1xmImRJfmg.roa File: y-2B7Heu1rGpX8p8S1xmImRJfmg.roa (raw, json) Hash identifier: VU8Kq8yjmQnYFPZE6aeBTwB0l24HqjIEBBCbFYavMoI= Subject key identifier: CB:ED:81:EC:77:AE:D6:B1:A9:5F:CA:7C:4B:5C:66:22:64:49:7E:68 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CF312C3501498B6E7D67B438D9E52 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/y-2B7Heu1rGpX8p8S1xmImRJfmg.roa Signing time: Fri 02 Jan 2026 06:20:02 +0000 ROA not before: Fri 02 Jan 2026 06:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203345 IP address blocks: 2a0e:b107:1a10::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:f3:12:c3:50:14:98:b6:e7:d6:7b:43:8d:9e:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cbed81ec77aed6b1a95fca7c4b5c662264497e68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a3:81:c4:f1:a9:e0:4d:c9:f2:f1:12:98:00: 57:c0:4d:55:21:42:89:b6:c4:aa:a2:b3:16:b2:91: 68:93:82:30:64:94:e4:2a:95:ee:90:d6:aa:f0:85: 1b:02:36:41:72:a9:73:10:73:b6:56:b8:d2:1a:16: 22:49:2f:62:cd:06:8b:ac:b1:08:5f:2e:f9:e7:59: f1:52:82:bb:7e:a6:75:c5:57:38:cc:5d:78:0f:2d: 0a:b0:e2:39:12:82:79:af:32:56:c7:a3:3f:3a:fe: 07:20:a4:98:84:fc:9c:46:3a:25:bf:7e:c5:5f:d4: c2:81:e5:55:59:05:47:e6:70:e0:a7:a4:82:14:96: e2:1a:75:65:a2:26:51:36:94:eb:8a:f0:cf:59:7d: 31:93:b6:98:79:0b:56:42:07:0e:69:13:c8:37:ea: ac:01:61:0b:b7:0f:a0:a3:e0:ff:ea:6b:3b:a6:74: 13:d4:27:f3:cf:d7:56:bf:3a:ec:f6:c8:b4:c0:00: c2:b7:e5:68:89:11:7c:21:94:6a:3f:db:fb:e6:a5: c1:a2:df:65:9c:af:9b:a7:be:3f:31:06:2a:cb:84: b9:6b:ae:1d:c8:34:f0:36:07:5e:f0:7e:da:99:89: 37:f3:39:0d:5a:dc:87:e2:d8:c1:a2:1b:87:ce:e8: f8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:ED:81:EC:77:AE:D6:B1:A9:5F:CA:7C:4B:5C:66:22:64:49:7E:68 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/y-2B7Heu1rGpX8p8S1xmImRJfmg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:1a10::/44 Signature Algorithm: sha256WithRSAEncryption 06:87:17:bd:5f:3a:8b:c5:cc:44:1c:c3:de:e9:9f:f1:39:42: 6c:58:fe:49:71:c5:15:f5:dd:54:3f:2c:a3:fc:bd:8a:dd:6f: 32:04:2f:4f:1a:54:6e:5e:2c:f5:d4:48:c9:15:24:93:9e:c8: e0:1f:05:d0:a4:2f:79:6e:c3:30:17:d5:fa:5a:bc:db:78:4c: dc:13:70:15:6b:f5:a4:f9:81:f6:19:66:4f:e7:1f:08:c2:82: 1e:6d:9b:e8:8f:9d:9b:b7:bd:67:ba:b0:61:7e:5f:b4:70:73: 5a:7e:ae:10:73:e8:98:f9:b7:89:32:c6:e5:f4:19:43:ec:04: 74:7e:ad:8e:4e:75:39:aa:25:f3:15:27:b4:8a:59:34:ae:1e: ba:bc:c1:7e:e0:96:db:41:84:f9:41:e5:f4:9e:97:d0:70:dd: eb:c2:0e:88:9a:17:1a:53:b3:3f:b5:a4:66:aa:96:82:92:d3: 73:0d:31:22:fe:4d:24:31:27:92:de:35:cc:32:bc:0c:c9:c4: 04:42:da:77:08:5b:ad:2d:9a:a2:97:98:74:68:3e:33:8d:ce: 22:92:5a:e8:5a:b5:bd:de:8a:d0:b2:f5:82:f2:dd:e3:ae:bb: ba:56:c4:bc:7a:55:51:4e:a3:65:09:c2:e7:a7:13:5f:97:8a: b2:1c:46:cd -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XPMSw1AUmLbn1ntDjZ5SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYmVkODFlYzc3YWVkNmIxYTk1ZmNhN2M0YjVjNjYyMjY0NDk3ZTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqOBxPGp4E3J8vESmABXwE1VIUKJ tsSqorMWspFok4IwZJTkKpXukNaq8IUbAjZBcqlzEHO2VrjSGhYiSS9izQaLrLEI Xy7551nxUoK7fqZ1xVc4zF14Dy0KsOI5EoJ5rzJWx6M/Ov4HIKSYhPycRjolv37F X9TCgeVVWQVH5nDgp6SCFJbiGnVloiZRNpTrivDPWX0xk7aYeQtWQgcOaRPIN+qs AWELtw+go+D/6ms7pnQT1Cfzz9dWvzrs9si0wADCt+VoiRF8IZRqP9v75qXBot9l nK+bp74/MQYqy4S5a64dyDTwNgde8H7amYk38zkNWtyH4tjBohuHzuj4kQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMvtgex3rtaxqV/KfEtcZiJkSX5oMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEveS0yQjdIZXUxckdwWDhwOFMxeG1JbVJKZm1nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBxoQ MA0GCSqGSIb3DQEBCwUAA4IBAQAGhxe9XzqLxcxEHMPe6Z/xOUJsWP5JccUV9d1U Pyyj/L2K3W8yBC9PGlRuXiz11EjJFSSTnsjgHwXQpC95bsMwF9X6WrzbeEzcE3AV a/Wk+YH2GWZP5x8IwoIebZvoj52bt71nurBhfl+0cHNafq4Qc+iY+beJMsbl9BlD 7AR0fq2OTnU5qiXzFSe0ilk0rh66vMF+4JbbQYT5QeX0npfQcN3rwg6ImhcaU7M/ taRmqpaCktNzDTEi/k0kMSeS3jXMMrwMycQEQtp3CFutLZqil5h0aD4zjc4iklro WrW93orQsvWC8t3jrru6VsS8elVRTqNlCcLnpxNfl4qyHEbN -----END CERTIFICATE-----Generated at Fri Jan 9 13:12:05 2026 by rpki-client