This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/yVE21tDWf8pIbJPaNEFvlqWs5S8.roa File: yVE21tDWf8pIbJPaNEFvlqWs5S8.roa (raw, json) Hash identifier: /s/T4/kJHqK5Iy8LiwKiThvm44bVkF3RkzYsyWQ5r4A= Subject key identifier: C9:51:36:D6:D0:D6:7F:CA:48:6C:93:DA:34:41:6F:96:A5:AC:E5:2F Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797EAF0546A24BCB04296E390A224C91 Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/yVE21tDWf8pIbJPaNEFvlqWs5S8.roa Signing time: Thu 01 Jan 2026 12:18:23 +0000 ROA not before: Thu 01 Jan 2026 12:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208679 IP address blocks: 2a0e:aa07:e035::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:af:05:46:a2:4b:cb:04:29:6e:39:0a:22:4c:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c95136d6d0d67fca486c93da34416f96a5ace52f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:00:fd:ac:76:78:6c:15:5e:9e:05:9f:d9:26: 02:a1:da:72:2c:0a:b2:c3:fe:0b:ed:2a:18:73:fe: 5c:39:e8:89:fe:1b:42:bb:fe:57:e6:2a:af:93:a6: 29:25:a7:72:3b:fa:66:8e:81:ba:e2:50:21:88:ea: f8:f5:b8:cd:83:45:c7:b1:3b:b7:5a:ea:02:93:41: 51:0b:09:5d:1d:c8:8b:de:68:c8:ed:81:b2:eb:5d: e7:ee:9e:c3:11:ab:40:5a:be:43:cf:0f:b6:21:13: 0c:b8:81:fa:af:6c:37:74:6d:92:43:20:c2:28:18: 7a:f3:ca:70:9c:b3:c8:7a:d5:c8:dc:16:60:34:47: 92:d9:1b:a5:93:20:9b:19:5f:b4:e4:0a:3a:81:71: c8:89:0b:0c:07:a9:db:26:7c:64:f8:00:82:ce:1f: 6b:57:69:a3:94:2f:7b:b9:d8:1d:bd:eb:6f:ea:24: 33:61:88:b6:f1:cb:d0:a5:43:fe:be:8e:17:54:28: 96:45:63:cc:65:9a:12:5e:fb:6e:88:c2:12:28:95: e8:10:b1:83:4f:6a:58:e4:0c:ca:06:0e:58:b2:48: b6:2d:8f:ee:c5:9c:1e:99:06:94:e0:56:e2:84:61: 78:09:1d:53:0b:50:82:7c:52:e4:ab:a1:06:7b:fc: d8:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:51:36:D6:D0:D6:7F:CA:48:6C:93:DA:34:41:6F:96:A5:AC:E5:2F X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/yVE21tDWf8pIbJPaNEFvlqWs5S8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa07:e035::/48 Signature Algorithm: sha256WithRSAEncryption 9d:ad:2e:f9:5a:42:cd:13:ce:b3:2d:58:51:69:26:a8:ca:6f: be:68:d1:77:a7:fd:08:d9:65:6d:38:ff:0c:a2:55:fe:e3:0e: af:c0:f7:93:12:cb:1b:d9:13:44:88:46:e5:9c:e0:df:22:00: 41:90:f6:a5:5c:db:69:8a:4a:db:37:e6:3e:0d:cb:a7:5a:d0: 1e:77:2d:fa:aa:60:f2:be:3b:2b:5e:0d:3d:34:c6:a8:02:30: a1:c6:25:cd:c1:19:4b:a5:b4:12:c1:9f:14:a6:72:0e:06:1d: d3:97:fc:69:e2:d8:0a:6d:82:a0:61:cd:7a:ed:c9:49:04:88: 24:2b:af:de:e5:cf:5d:9a:4c:4d:f0:07:05:96:60:74:c7:9b: dd:47:30:9a:57:e6:2a:49:65:2c:a5:85:55:4a:17:a1:e3:db: c1:88:75:15:71:d8:45:bf:e5:5f:7d:f7:b5:4f:3a:4e:de:23: a2:b2:f5:90:12:87:83:c1:fc:70:fd:a4:0d:d2:14:74:97:34: 1b:7a:e7:29:58:e6:35:1b:5f:13:64:f4:77:0e:05:94:33:4d: f6:a5:37:4c:b6:4f:2d:df:af:be:bc:60:f5:f0:b8:2f:60:12: f5:bf:c5:58:27:47:e0:26:13:41:ee:54:78:4e:1e:c7:6b:45: 63:8d:7c:8d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5fq8FRqJLywQpbjkKIkyRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTUxMzZkNmQwZDY3ZmNhNDg2YzkzZGEzNDQxNmY5NmE1YWNlNTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAD9rHZ4bBVengWf2SYCodpyLAqy w/4L7SoYc/5cOeiJ/htCu/5X5iqvk6YpJadyO/pmjoG64lAhiOr49bjNg0XHsTu3 WuoCk0FRCwldHciL3mjI7YGy613n7p7DEatAWr5Dzw+2IRMMuIH6r2w3dG2SQyDC KBh688pwnLPIetXI3BZgNEeS2RulkyCbGV+05Ao6gXHIiQsMB6nbJnxk+ACCzh9r V2mjlC97udgdvetv6iQzYYi28cvQpUP+vo4XVCiWRWPMZZoSXvtuiMISKJXoELGD T2pY5AzKBg5Yski2LY/uxZwemQaU4FbihGF4CR1TC1CCfFLkq6EGe/zYxwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMlRNtbQ1n/KSGyT2jRBb5alrOUvMB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEveVZFMjF0RFdmOHBJYkpQYU5FRnZscVdzNVM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6qB+A1 MA0GCSqGSIb3DQEBCwUAA4IBAQCdrS75WkLNE86zLVhRaSaoym++aNF3p/0I2WVt OP8MolX+4w6vwPeTEssb2RNEiEblnODfIgBBkPalXNtpikrbN+Y+DcunWtAedy36 qmDyvjsrXg09NMaoAjChxiXNwRlLpbQSwZ8UpnIOBh3Tl/xp4tgKbYKgYc167clJ BIgkK6/e5c9dmkxN8AcFlmB0x5vdRzCaV+YqSWUspYVVSheh49vBiHUVcdhFv+Vf ffe1TzpO3iOisvWQEoeDwfxw/aQN0hR0lzQbeucpWOY1G18TZPR3DgWUM032pTdM tk8t36++vGD18LgvYBL1v8VYJ0fgJhNB7lR4Th7Ha0VjjXyN -----END CERTIFICATE-----Generated at Tue Jan 6 21:31:19 2026 by rpki-client