This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/y1n4GT33HMteadW2ztPhzmUzjvo.roa File: y1n4GT33HMteadW2ztPhzmUzjvo.roa (raw, json) Hash identifier: Lc6imqBDBEMy+3JdQwxmk+5FuU5O4x+1jub2kcMuSbA= Subject key identifier: CB:59:F8:19:3D:F7:1C:CB:5E:69:D5:B6:CE:D3:E1:CE:65:33:8E:FA Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D43ACC6D29847418B1042EEF20A28 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/y1n4GT33HMteadW2ztPhzmUzjvo.roa Signing time: Fri 02 Jan 2026 06:20:22 +0000 ROA not before: Fri 02 Jan 2026 06:20:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211722 IP address blocks: 2a0e:b107:12f0::/48 maxlen: 48 2a0e:b107:12f1::/48 maxlen: 48 2a0e:b107:12f2::/48 maxlen: 48 2a0e:b107:12f3::/48 maxlen: 48 2a0e:b107:12f4::/48 maxlen: 48 2a0e:b107:12f5::/48 maxlen: 48 2a0e:b107:12f6::/48 maxlen: 48 2a0e:b107:12f7::/48 maxlen: 48 2a0e:b107:12f8::/48 maxlen: 48 2a0e:b107:12fa::/48 maxlen: 48 2a0e:b107:12fb::/48 maxlen: 48 2a0e:b107:12fc::/48 maxlen: 48 2a0e:b107:12fd::/48 maxlen: 48 2a0e:b107:12fe::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:43:ac:c6:d2:98:47:41:8b:10:42:ee:f2:0a:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cb59f8193df71ccb5e69d5b6ced3e1ce65338efa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e5:32:c7:2f:42:9c:7f:b2:fd:99:4f:70:a6: b7:7f:88:ad:63:6a:15:e6:5f:fb:e1:57:d1:17:d9: 34:db:0b:d5:8b:9d:8f:18:3c:f7:84:8d:3f:ae:3b: cd:62:24:2a:a3:2e:52:5f:e3:eb:27:35:61:13:da: 2d:c5:00:c6:23:91:99:4e:61:77:a9:58:85:b3:0b: 75:d6:bb:77:14:0a:da:d8:8f:b0:10:d0:13:53:b5: 90:17:08:43:6b:8f:bd:34:0f:16:e9:02:46:0c:ec: b5:97:12:9a:03:47:95:a2:7b:14:29:0a:08:68:1d: de:86:55:fd:62:d7:81:35:be:7b:23:56:fb:c2:30: b6:50:d2:c3:49:ef:17:65:83:36:4e:10:91:b4:19: 3c:4a:e9:78:10:c6:8a:fb:12:67:89:3a:29:59:9f: b2:6b:80:87:f2:56:2a:64:fe:4e:64:33:96:d6:53: 09:9b:ce:11:84:0f:40:ff:96:88:49:60:49:7f:0e: a1:27:b0:cc:38:ad:5c:79:23:99:2e:fe:23:ef:50: 32:32:ac:03:a1:f8:83:20:4c:df:5d:20:c7:a3:05: f3:b8:dc:d8:a5:35:e7:63:41:a6:84:68:3d:96:2e: 7c:a7:75:12:16:f1:e7:c4:63:6a:1a:10:aa:f9:15: bc:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:59:F8:19:3D:F7:1C:CB:5E:69:D5:B6:CE:D3:E1:CE:65:33:8E:FA X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/y1n4GT33HMteadW2ztPhzmUzjvo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:12f0::-2a0e:b107:12f8:ffff:ffff:ffff:ffff:ffff 2a0e:b107:12fa::-2a0e:b107:12fe:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 97:32:19:e7:25:e1:63:06:4b:9f:d8:da:4c:8e:76:1e:fa:7d: 22:c2:fb:68:3c:ba:64:aa:89:74:e3:44:14:15:32:af:6b:ef: 89:9c:c2:0f:41:12:3d:0a:5a:3a:64:44:72:46:18:43:d2:2d: f0:61:b9:e9:90:9e:0a:5e:1b:c8:07:c4:f6:cf:43:da:e9:24: 4c:f3:cb:8a:3b:8b:ca:7a:cc:92:0e:89:b9:fc:0d:2d:f8:9d: ac:be:da:ab:c7:c3:2e:47:d9:1c:6d:df:13:68:51:d0:26:97: be:e5:3f:e6:94:6c:e3:9e:92:8a:3e:53:57:d8:6b:12:47:3c: 66:30:80:1b:ff:40:73:0e:1a:87:18:96:71:02:f8:ac:1f:c9: 37:e2:b0:f5:34:58:7a:fa:fe:0a:ff:74:a1:1e:31:3a:60:10: 4d:21:07:55:ad:49:1e:3d:d6:52:e2:13:19:78:07:72:15:90: ed:20:90:5c:b1:3b:c9:11:92:4c:bb:1c:a8:83:be:fe:88:3b: 18:55:ab:d6:c7:87:9d:0e:3b:d2:fa:c1:d1:ae:1c:b5:32:99: 67:42:a4:eb:8e:6d:32:a4:97:5f:6f:e5:ed:1e:29:a4:fc:39: ab:86:a3:e9:98:da:93:b4:d4:2e:96:2b:6c:86:3e:a6:0e:79: c5:53:76:7c -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt9XUOsxtKYR0GLEELu8gooMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjU5ZjgxOTNkZjcxY2NiNWU2OWQ1YjZjZWQzZTFjZTY1MzM4ZWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uUyxy9CnH+y/ZlPcKa3f4itY2oV 5l/74VfRF9k02wvVi52PGDz3hI0/rjvNYiQqoy5SX+PrJzVhE9otxQDGI5GZTmF3 qViFswt11rt3FAra2I+wENATU7WQFwhDa4+9NA8W6QJGDOy1lxKaA0eVonsUKQoI aB3ehlX9YteBNb57I1b7wjC2UNLDSe8XZYM2ThCRtBk8Sul4EMaK+xJniTopWZ+y a4CH8lYqZP5OZDOW1lMJm84RhA9A/5aISWBJfw6hJ7DMOK1ceSOZLv4j71AyMqwD ofiDIEzfXSDHowXzuNzYpTXnY0GmhGg9li58p3USFvHnxGNqGhCq+RW8yQIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFMtZ+Bk99xzLXmnVts7T4c5lM476MB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEveTFuNEdUMzNITXRlYWRXMnp0UGh6bVV6anZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAAjAoMBIDBwQqDrEH EvADBwAqDrEHEvgwEgMHASoOsQcS+gMHACoOsQcS/jANBgkqhkiG9w0BAQsFAAOC AQEAlzIZ5yXhYwZLn9jaTI52Hvp9IsL7aDy6ZKqJdONEFBUyr2vviZzCD0ESPQpa OmREckYYQ9It8GG56ZCeCl4byAfE9s9D2ukkTPPLijuLynrMkg6JufwNLfidrL7a q8fDLkfZHG3fE2hR0CaXvuU/5pRs456Sij5TV9hrEkc8ZjCAG/9Acw4ahxiWcQL4 rB/JN+Kw9TRYevr+Cv90oR4xOmAQTSEHVa1JHj3WUuITGXgHchWQ7SCQXLE7yRGS TLscqIO+/og7GFWr1seHnQ470vrB0a4ctTKZZ0Kk645tMqSXX2/l7R4ppPw5q4aj 6Zjak7TULpYrbIY+pg55xVN2fA== -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:48 2026 by rpki-client