This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/ym0w1cReqBylheC3xkqexBP3tgU.roa File: ym0w1cReqBylheC3xkqexBP3tgU.roa (raw, json) Hash identifier: zFKUp71k5SpR7ghjnbVLoDMDBWhAa4PbF+krqnsksRE= Subject key identifier: CA:6D:30:D5:C4:5E:A8:1C:A5:85:E0:B7:C6:4A:9E:C4:13:F7:B6:05 Certificate issuer: /CN=43206c3e568db78a76cbab142e0e5bf4f682efe6 Certificate serial: 019B77C6E83F40D0BFFC77F6E12B67C67748 Authority key identifier: 43:20:6C:3E:56:8D:B7:8A:76:CB:AB:14:2E:0E:5B:F4:F6:82:EF:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QyBsPlaNt4p2y6sULg5b9PaC7-Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/ym0w1cReqBylheC3xkqexBP3tgU.roa Signing time: Thu 01 Jan 2026 04:18:02 +0000 ROA not before: Thu 01 Jan 2026 04:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 680 IP address blocks: 141.65.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.crl rsync://rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.mft rsync://rpki.ripe.net/repository/DEFAULT/QyBsPlaNt4p2y6sULg5b9PaC7-Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:e8:3f:40:d0:bf:fc:77:f6:e1:2b:67:c6:77:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43206c3e568db78a76cbab142e0e5bf4f682efe6 Validity Not Before: Jan 1 04:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca6d30d5c45ea81ca585e0b7c64a9ec413f7b605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:90:0b:de:82:ca:ca:5c:a2:4c:f0:1f:ae:22: fc:d7:30:dc:57:91:ce:12:b0:ac:c8:15:20:f9:8f: ef:14:2c:42:f8:bf:2e:85:23:cd:94:90:f5:90:f7: 8d:a1:75:35:28:ae:24:35:af:00:a0:17:a5:72:93: 12:17:c2:4b:f8:40:d0:72:17:25:c3:40:78:64:82: 71:79:14:66:18:5b:bb:0e:ec:32:0e:e9:a1:8e:34: 92:03:92:6a:02:d8:dd:6a:dd:44:0e:47:35:db:92: de:cd:6f:d6:02:91:cc:f5:d7:c0:82:89:51:7d:f3: 3a:62:95:34:23:07:d1:69:0e:a1:36:d5:42:e2:cb: 88:5a:92:af:d0:a8:75:f5:76:cb:f5:50:68:6b:51: b2:e5:3c:9c:ba:9e:15:e1:64:3d:44:16:2d:7c:b0: 64:d3:cd:cf:8c:96:3c:5e:29:5e:cd:84:79:52:f1: 21:ae:a4:29:93:a3:85:77:8f:2a:f2:f5:8c:f7:5b: bb:fa:87:ee:27:fa:67:7b:91:d4:1d:0b:3a:cc:29: 65:fa:4d:3e:9a:d1:90:98:14:d7:ba:81:eb:11:75: f5:76:9e:31:ee:1e:47:0d:81:c1:9a:27:17:32:c9: 16:24:ba:13:9a:ed:62:70:85:4c:07:00:db:93:2a: ff:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:6D:30:D5:C4:5E:A8:1C:A5:85:E0:B7:C6:4A:9E:C4:13:F7:B6:05 X509v3 Authority Key Identifier: keyid:43:20:6C:3E:56:8D:B7:8A:76:CB:AB:14:2E:0E:5B:F4:F6:82:EF:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QyBsPlaNt4p2y6sULg5b9PaC7-Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/ym0w1cReqBylheC3xkqexBP3tgU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.65.0.0/16 Signature Algorithm: sha256WithRSAEncryption 50:30:40:8d:d0:ef:a6:8c:dd:46:bc:1a:c9:b4:4d:1b:ab:44: e6:7b:d1:98:d4:e2:f4:4c:f4:6c:5c:d7:f7:94:72:8b:92:25: 69:c8:7e:9e:e2:b3:d3:48:fb:2d:fc:79:b0:cb:2b:4c:f4:4b: cf:29:83:ed:31:3e:3f:e5:2c:fc:08:19:f6:64:33:a3:2b:05: cb:41:2f:96:90:ed:3a:69:67:c8:39:da:54:13:87:41:03:3c: 1d:b2:2f:79:16:06:59:f5:78:d8:17:6d:44:fa:ca:41:89:e5: be:94:b6:44:35:07:a6:dd:c5:88:e1:33:6b:06:cd:84:5e:b9: 9f:ce:29:ad:fd:4d:f8:44:48:c2:8b:65:4f:af:26:4d:0a:90: 19:ad:1a:81:60:54:09:54:7c:74:6e:9b:a7:23:23:04:ce:69: 91:ff:75:8f:6c:9c:7a:b4:8e:02:cf:d1:53:0f:ae:fa:9e:b0: 35:f4:16:04:5e:94:08:df:35:2e:a9:b6:d5:cc:5d:6c:71:6a: e9:02:3f:d8:bf:61:d6:4b:79:a3:61:d6:2f:05:49:32:c5:0a: c3:a7:cd:fc:a4:6d:28:54:e7:f9:a9:ba:1d:76:66:14:9c:9f: 8c:10:0e:2e:ae:6e:ea:91:36:9c:7b:71:d6:56:a2:82:3d:ea: 5c:e7:1b:4c -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt3xug/QNC//Hf24StnxndIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMjA2YzNlNTY4ZGI3OGE3NmNiYWIxNDJlMGU1YmY0ZjY4 MmVmZTYwHhcNMjYwMTAxMDQxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTZkMzBkNWM0NWVhODFjYTU4NWUwYjdjNjRhOWVjNDEzZjdiNjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZAL3oLKylyiTPAfriL81zDcV5HO ErCsyBUg+Y/vFCxC+L8uhSPNlJD1kPeNoXU1KK4kNa8AoBelcpMSF8JL+EDQchcl w0B4ZIJxeRRmGFu7DuwyDumhjjSSA5JqAtjdat1EDkc125LezW/WApHM9dfAgolR ffM6YpU0IwfRaQ6hNtVC4suIWpKv0Kh19XbL9VBoa1Gy5Tycup4V4WQ9RBYtfLBk 083PjJY8XilezYR5UvEhrqQpk6OFd48q8vWM91u7+ofuJ/pne5HUHQs6zCll+k0+ mtGQmBTXuoHrEXX1dp4x7h5HDYHBmicXMskWJLoTmu1icIVMBwDbkyr/9QIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFMptMNXEXqgcpYXgt8ZKnsQT97YFMB8GA1UdIwQY MBaAFEMgbD5WjbeKdsurFC4OW/T2gu/mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXlCc1BsYU50NHAyeTZzVUxnNWI5UGFDNy1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny82MzM4M2ItYzgyNC00MTViLTk2ZmQt YjMyZmRiYTE4ZTFjLzEveW0wdzFjUmVxQnlsaGVDM3hrcWV4QlAzdGdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny82MzM4M2ItYzgyNC00MTViLTk2ZmQtYjMyZmRiYTE4ZTFj LzEvUXlCc1BsYU50NHAyeTZzVUxnNWI5UGFDNy1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjUEwDQYJ KoZIhvcNAQELBQADggEBAFAwQI3Q76aM3Ua8Gsm0TRurROZ70ZjU4vRM9Gxc1/eU couSJWnIfp7is9NI+y38ebDLK0z0S88pg+0xPj/lLPwIGfZkM6MrBctBL5aQ7Tpp Z8g52lQTh0EDPB2yL3kWBln1eNgXbUT6ykGJ5b6UtkQ1B6bdxYjhM2sGzYReuZ/O Ka39TfhESMKLZU+vJk0KkBmtGoFgVAlUfHRum6cjIwTOaZH/dY9snHq0jgLP0VMP rvqesDX0FgRelAjfNS6pttXMXWxxaukCP9i/YdZLeaNh1i8FSTLFCsOnzfykbShU 5/mpuh12ZhScn4wQDi6ubuqRNpx7cdZWooI96lznG0w= -----END CERTIFICATE-----Generated at Tue Jan 27 11:25:39 2026 by rpki-client