This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/YWuBmwQUwNmG2d0Sx25tptE6fFU.roa File: YWuBmwQUwNmG2d0Sx25tptE6fFU.roa (raw, json) Hash identifier: iNIISs2jDeVDHKZOCbZ8PMhKAi8FQIK60SufGsx8cNU= Subject key identifier: 61:6B:81:9B:04:14:C0:D9:86:D9:DD:12:C7:6E:6D:A6:D1:3A:7C:55 Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019B7DCB7C921CE04D8449299A577F06957F Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/YWuBmwQUwNmG2d0Sx25tptE6fFU.roa Signing time: Fri 02 Jan 2026 08:20:46 +0000 ROA not before: Fri 02 Jan 2026 08:20:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204968 IP address blocks: 2a0d:6ec0::/29 maxlen: 29 2a0d:9740::/29 maxlen: 29 2a0d:b540::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:7c:92:1c:e0:4d:84:49:29:9a:57:7f:06:95:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Jan 2 08:20:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=616b819b0414c0d986d9dd12c76e6da6d13a7c55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:93:a5:ed:a4:b3:e1:f1:ef:cb:f5:79:04:5f: b6:cc:d3:91:35:ea:f7:b6:f2:32:30:57:3d:df:81: f9:f9:ac:7c:88:b2:f2:b9:00:27:3e:0b:4c:a2:99: e2:80:76:d5:be:8a:00:3c:93:da:70:6e:a2:be:ad: bd:4b:15:5d:6a:08:a0:52:65:30:b4:1b:b4:b0:33: a5:df:8d:86:17:08:b5:00:3b:af:12:7e:6a:b0:30: d4:6d:2a:31:db:8e:8b:60:19:49:6f:5a:3e:a9:bd: 95:b1:dc:d2:7c:a3:0b:6e:57:30:cf:4d:27:5d:ac: f9:34:a0:74:63:31:ee:0e:c7:3c:a3:0a:30:43:36: b4:9a:b4:3a:4a:61:f4:a4:08:d5:ff:55:bf:58:91: b1:f5:53:6c:53:f6:37:0a:fb:18:64:ef:b6:36:11: 76:ee:a9:08:de:db:32:16:ed:5f:02:8b:56:24:b8: 7c:13:71:9a:12:f6:fd:51:34:c3:3e:a5:ed:64:c5: 06:3a:b9:6a:62:39:08:58:4a:8b:53:20:72:72:17: ff:5f:b2:03:83:e6:1e:cc:e3:2c:0c:c2:44:84:20: 8e:b7:77:cc:07:d6:93:30:ba:26:1a:0f:67:51:b1: 74:bd:f8:0f:7b:b6:43:ef:0f:a9:e6:a8:01:77:e6: ec:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:6B:81:9B:04:14:C0:D9:86:D9:DD:12:C7:6E:6D:A6:D1:3A:7C:55 X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/YWuBmwQUwNmG2d0Sx25tptE6fFU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:6ec0::/29 2a0d:9740::/29 2a0d:b540::/29 Signature Algorithm: sha256WithRSAEncryption 8f:29:7f:83:a3:ba:70:02:13:90:da:56:f4:fc:bb:a6:e3:9a: 87:c2:df:bb:31:a5:5b:89:70:91:b8:ca:e0:e6:5c:a6:d3:36: 2a:08:17:95:ad:f7:e3:8d:0a:63:1c:2e:bd:42:b4:32:a1:74: 91:ff:3d:a2:c4:d0:89:c5:ad:e8:74:38:63:e8:ca:70:89:ff: 48:de:ba:e3:14:a4:e8:96:56:46:a6:4e:ab:57:70:23:4d:a4: 1e:61:da:85:65:fe:20:51:0e:bb:e1:eb:e6:fd:52:61:a2:68: b1:6a:f6:c2:03:10:26:19:8d:00:d1:09:49:3c:80:87:bc:09: ca:71:ab:9a:9c:dd:4a:da:65:46:66:20:76:5e:40:8b:7f:e1: 60:3d:59:52:5b:a9:a5:47:64:29:86:c7:1b:84:63:b5:66:15: 94:18:80:c0:f8:6a:6e:83:08:f7:ce:0c:79:d7:50:b2:09:7e: 4d:80:8f:c9:6b:6c:18:08:8a:45:59:1c:09:a1:ec:24:d9:be: 82:b6:bb:70:fa:50:6d:ef:38:ee:63:df:25:87:9d:38:f4:51: 68:d5:76:77:ce:e6:a3:88:6c:6a:99:04:e5:43:a3:af:e6:59: 88:59:78:6c:60:ce:85:4c:df:12:40:01:12:f1:15:53:64:90: f4:3c:21:11 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9y3ySHOBNhEkpmld/BpV/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjYwMTAyMDgyMDQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTZiODE5YjA0MTRjMGQ5ODZkOWRkMTJjNzZlNmRhNmQxM2E3YzU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZOl7aSz4fHvy/V5BF+2zNORNer3 tvIyMFc934H5+ax8iLLyuQAnPgtMopnigHbVvooAPJPacG6ivq29SxVdagigUmUw tBu0sDOl342GFwi1ADuvEn5qsDDUbSox246LYBlJb1o+qb2VsdzSfKMLblcwz00n Xaz5NKB0YzHuDsc8owowQza0mrQ6SmH0pAjV/1W/WJGx9VNsU/Y3CvsYZO+2NhF2 7qkI3tsyFu1fAotWJLh8E3GaEvb9UTTDPqXtZMUGOrlqYjkIWEqLUyBychf/X7ID g+YezOMsDMJEhCCOt3fMB9aTMLomGg9nUbF0vfgPe7ZD7w+p5qgBd+bslQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFGFrgZsEFMDZhtndEsdubabROnxVMB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvWVd1Qm13UVV3Tm1HMmQwU3gyNXRwdEU2ZkZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUDKg1uwAMF AyoNl0ADBQMqDbVAMA0GCSqGSIb3DQEBCwUAA4IBAQCPKX+Do7pwAhOQ2lb0/Lum 45qHwt+7MaVbiXCRuMrg5lym0zYqCBeVrffjjQpjHC69QrQyoXSR/z2ixNCJxa3o dDhj6Mpwif9I3rrjFKTollZGpk6rV3AjTaQeYdqFZf4gUQ674evm/VJhomixavbC AxAmGY0A0QlJPICHvAnKcauanN1K2mVGZiB2XkCLf+FgPVlSW6mlR2QphscbhGO1 ZhWUGIDA+Gpugwj3zgx511CyCX5NgI/Ja2wYCIpFWRwJoewk2b6Ctrtw+lBt7zju Y98lh5049FFo1XZ3zuajiGxqmQTlQ6Ov5lmIWXhsYM6FTN8SQAES8RVTZJD0PCER -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:34 2026 by rpki-client