This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/ymGU-blAl3Eiudw-0pPU5E8cWuM.roa File: ymGU-blAl3Eiudw-0pPU5E8cWuM.roa (raw, json) Hash identifier: sR3zp4LyEopkmIvV+/IzzZmry6sELnZ6ai0YOhaDCBY= Subject key identifier: CA:61:94:F9:B9:40:97:71:22:B9:DC:3E:D2:93:D4:E4:4F:1C:5A:E3 Certificate issuer: /CN=e680478faec8b67ddfece6357cf25cf2ca1d85d0 Certificate serial: 019B7AC8B8A5660B8330B9AE8B0ED4AEFC58 Authority key identifier: E6:80:47:8F:AE:C8:B6:7D:DF:EC:E6:35:7C:F2:5C:F2:CA:1D:85:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/ymGU-blAl3Eiudw-0pPU5E8cWuM.roa Signing time: Thu 01 Jan 2026 18:18:53 +0000 ROA not before: Thu 01 Jan 2026 18:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207424 IP address blocks: 2001:67c:2fc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.crl rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:b8:a5:66:0b:83:30:b9:ae:8b:0e:d4:ae:fc:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e680478faec8b67ddfece6357cf25cf2ca1d85d0 Validity Not Before: Jan 1 18:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca6194f9b940977122b9dc3ed293d4e44f1c5ae3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:48:7c:22:54:fe:e3:b1:7c:33:e5:fb:a5:0f: 19:11:af:53:62:21:cf:2e:ab:59:3f:27:5e:27:25: 93:1d:66:5e:e3:48:7c:55:3a:fb:ae:03:ab:92:09: 0a:bb:7a:34:48:a3:43:03:af:1d:03:9a:67:ba:0b: 84:c8:25:32:01:ec:48:ce:8d:5b:91:86:ba:57:7f: b2:95:d0:47:75:08:e2:42:bb:2a:41:35:d2:b1:6d: 25:2a:14:0d:13:db:a6:fe:e8:00:9f:21:08:b4:90: 57:54:fe:6d:ec:24:51:69:e4:7a:ee:2b:b0:d2:96: 3d:2b:cd:3b:66:2d:42:94:b8:c5:21:ac:50:8b:c8: 86:37:25:78:b9:ff:d8:ca:de:da:17:77:97:73:8c: ab:57:3a:f7:14:ba:41:cb:78:4f:77:fc:2e:6f:a4: 16:51:39:42:ef:45:76:39:ea:16:27:69:71:f1:a4: 63:ed:1e:36:d0:11:94:d7:07:9b:73:8a:1e:40:23: f0:20:4b:ed:a0:6e:91:92:af:73:c3:0f:79:04:d9: 7f:ae:99:38:01:d3:f2:f5:54:af:a0:75:e8:7f:29: c4:ce:a8:95:bb:a1:c7:12:1b:2e:a3:5c:17:12:ad: 56:af:d3:85:98:d3:e4:5d:24:51:bf:4a:62:e6:80: 62:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:61:94:F9:B9:40:97:71:22:B9:DC:3E:D2:93:D4:E4:4F:1C:5A:E3 X509v3 Authority Key Identifier: keyid:E6:80:47:8F:AE:C8:B6:7D:DF:EC:E6:35:7C:F2:5C:F2:CA:1D:85:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/ymGU-blAl3Eiudw-0pPU5E8cWuM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2fc0::/48 Signature Algorithm: sha256WithRSAEncryption 83:58:d0:30:f2:a5:f8:ff:9a:df:08:c9:62:5d:e4:e5:02:fc: b6:08:06:ca:75:3c:1a:39:71:bc:d7:fa:1f:a7:b3:e6:4b:ae: 74:3e:ec:4f:64:46:1f:68:5f:ca:29:2e:e5:ec:36:b1:1f:ee: 12:dd:b6:57:1e:e3:b7:f9:df:33:3d:30:3f:08:4f:d6:e3:3d: a0:ef:8b:09:aa:da:94:78:70:f8:70:a9:71:6e:e7:5c:8d:9a: aa:b5:5f:3d:03:b5:36:b9:1c:b1:4e:80:1c:e5:37:23:88:e2: f6:95:66:2e:6a:cc:92:01:ae:70:15:27:55:5c:ff:cb:b4:b4: 0e:96:75:da:9c:0f:0e:9a:3a:b8:c5:d9:c6:c7:12:50:2d:6b: 9e:05:c6:8a:b7:c9:d1:c5:50:63:84:dc:f3:f5:d8:dc:a6:f7: 34:4b:77:1f:23:b3:de:6f:70:4e:4e:33:57:1e:74:9f:cd:36: 76:52:1d:00:67:29:6f:1a:4b:a2:9a:78:48:79:cf:36:67:2c: 63:f6:fe:10:b8:a7:3a:fd:b0:2a:af:76:e6:9b:b6:a6:b4:8f: 42:63:ba:45:de:a4:d9:9f:c2:02:ab:35:53:3d:2a:a8:df:76: 5d:2b:28:d4:36:9d:3f:b2:16:96:9d:dd:cd:f0:c5:b2:c1:74: 8b:53:15:2f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6yLilZguDMLmuiw7UrvxYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2ODA0NzhmYWVjOGI2N2RkZmVjZTYzNTdjZjI1Y2YyY2Ex ZDg1ZDAwHhcNMjYwMTAxMTgxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTYxOTRmOWI5NDA5NzcxMjJiOWRjM2VkMjkzZDRlNDRmMWM1YWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0h8IlT+47F8M+X7pQ8ZEa9TYiHP LqtZPydeJyWTHWZe40h8VTr7rgOrkgkKu3o0SKNDA68dA5pnuguEyCUyAexIzo1b kYa6V3+yldBHdQjiQrsqQTXSsW0lKhQNE9um/ugAnyEItJBXVP5t7CRRaeR67iuw 0pY9K807Zi1ClLjFIaxQi8iGNyV4uf/Yyt7aF3eXc4yrVzr3FLpBy3hPd/wub6QW UTlC70V2OeoWJ2lx8aRj7R420BGU1webc4oeQCPwIEvtoG6Rkq9zww95BNl/rpk4 AdPy9VSvoHXofynEzqiVu6HHEhsuo1wXEq1Wr9OFmNPkXSRRv0pi5oBirwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMphlPm5QJdxIrncPtKT1ORPHFrjMB8GA1UdIwQY MBaAFOaAR4+uyLZ93+zmNXzyXPLKHYXQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNW9CSGo2N0l0bjNmN09ZMWZQSmM4c29kaGRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8yNWEwMWItNWZiMC00NDRlLWEyYzct MzM5YzlkNDg3NzRjLzEveW1HVS1ibEFsM0VpdWR3LTBwUFU1RThjV3VNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi8yNWEwMWItNWZiMC00NDRlLWEyYzctMzM5YzlkNDg3NzRj LzEvNW9CSGo2N0l0bjNmN09ZMWZQSmM4c29kaGRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfC/A MA0GCSqGSIb3DQEBCwUAA4IBAQCDWNAw8qX4/5rfCMliXeTlAvy2CAbKdTwaOXG8 1/ofp7PmS650PuxPZEYfaF/KKS7l7DaxH+4S3bZXHuO3+d8zPTA/CE/W4z2g74sJ qtqUeHD4cKlxbudcjZqqtV89A7U2uRyxToAc5TcjiOL2lWYuasySAa5wFSdVXP/L tLQOlnXanA8Omjq4xdnGxxJQLWueBcaKt8nRxVBjhNzz9djcpvc0S3cfI7Peb3BO TjNXHnSfzTZ2Uh0AZylvGkuimnhIec82Zyxj9v4QuKc6/bAqr3bmm7amtI9CY7pF 3qTZn8ICqzVTPSqo33ZdKyjUNp0/shaWnd3N8MWywXSLUxUv -----END CERTIFICATE-----Generated at Sun Jan 11 16:13:03 2026 by rpki-client