This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Rk--y3ymv2wt_PoYEO1BuaeEKmw.roa File: Rk--y3ymv2wt_PoYEO1BuaeEKmw.roa (raw, json) Hash identifier: BQDRdB0h3uOqX3ulqlszWX0pQqv6VzYBiMXRrDpVNHs= Subject key identifier: 46:4F:BE:CB:7C:A6:BF:6C:2D:FC:FA:18:10:ED:41:B9:A7:84:2A:6C Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B7910C7B0D853A182FCC5708AE541DA63 Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Rk--y3ymv2wt_PoYEO1BuaeEKmw.roa Signing time: Thu 01 Jan 2026 10:18:21 +0000 ROA not before: Thu 01 Jan 2026 10:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216102 IP address blocks: 2a12:bec0:560::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:c7:b0:d8:53:a1:82:fc:c5:70:8a:e5:41:da:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 10:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=464fbecb7ca6bf6c2dfcfa1810ed41b9a7842a6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:df:a3:90:78:c3:38:3c:08:0e:e6:34:56:57: e5:c5:d4:32:fc:7f:ad:c2:3b:30:9c:e9:65:ec:c5: 2c:fc:9c:42:ad:83:c5:61:3d:c2:72:7d:f3:30:44: a2:0a:57:73:a3:f5:7e:09:07:99:b5:c6:32:ee:03: f4:a0:d2:88:b9:bc:7e:01:8b:40:c1:9a:fb:5b:62: 92:e4:d8:aa:4c:ca:6c:64:45:2d:db:4d:83:e2:cc: 4b:32:3a:0f:46:11:7c:87:e1:f7:3a:d4:98:05:fd: a9:79:3d:e1:aa:db:40:dc:99:84:4d:35:ab:60:96: 02:12:82:17:d6:57:e9:4e:00:08:fe:b3:13:50:9a: 9e:e8:93:6d:d4:2f:5e:34:36:e2:7f:fc:69:a5:8d: 08:33:16:62:76:e3:46:bc:3d:34:3b:19:cb:ba:ca: 55:37:fb:ea:b6:f6:58:a2:ad:74:ae:bf:e2:93:03: 86:e6:b2:0a:2d:31:31:7f:3e:89:87:72:13:00:fc: e3:48:36:77:41:cd:b4:c7:48:6f:30:2f:92:43:0f: 86:22:b7:6d:cf:f7:7f:35:36:65:ab:eb:d6:a0:6a: b1:81:88:14:2e:c1:af:32:0d:58:31:4b:b1:11:53: 93:5d:ed:65:68:d3:5d:a2:3d:5d:55:f3:c9:c8:0a: 8e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:4F:BE:CB:7C:A6:BF:6C:2D:FC:FA:18:10:ED:41:B9:A7:84:2A:6C X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Rk--y3ymv2wt_PoYEO1BuaeEKmw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec0:560::/44 Signature Algorithm: sha256WithRSAEncryption 42:09:50:4d:2f:45:38:d1:8f:a5:d4:f3:cc:b2:c6:b0:f0:33: c4:d5:33:4d:6b:f3:29:6c:bf:e0:f8:f5:66:d2:41:66:d4:bb: 90:30:49:93:31:67:f8:32:d1:cd:c5:cc:70:6e:6d:86:4e:e4: 73:be:62:f1:f8:bd:8b:a8:b4:d2:99:f7:23:bd:7a:2d:d7:35: e9:c3:45:98:8a:a2:bd:b7:49:5e:2a:83:7d:a6:ac:a9:c2:78: 79:94:c4:18:aa:9b:bd:d2:04:77:25:fb:42:6b:80:54:b9:17: e2:85:2b:08:f5:d3:92:bf:8e:e3:8d:0f:3f:b3:cc:10:54:96: a5:40:af:84:70:1b:ed:74:0f:4e:b5:46:09:7d:eb:da:ad:25: 64:cc:38:ec:60:a2:80:e8:e7:ef:21:58:85:1b:e8:1c:3f:68: e8:61:c1:1b:1a:39:d2:7c:a5:17:e3:a2:e3:db:d7:77:df:47: ee:45:59:c0:fe:16:f2:b9:e9:7b:05:1f:28:01:4c:42:12:6c: cb:84:a3:d9:fc:2e:8f:3d:34:8c:c7:f4:5c:d2:d6:19:02:66: 8d:5c:2f:fc:be:6f:cf:d4:00:13:1c:51:b5:e6:6c:26:55:eb: 73:06:32:d7:7d:11:bf:00:43:4f:7b:4d:42:af:ba:1a:2d:35: a6:3f:25:aa -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EMew2FOhgvzFcIrlQdpjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAxMTAxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjRmYmVjYjdjYTZiZjZjMmRmY2ZhMTgxMGVkNDFiOWE3ODQyYTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnt+jkHjDODwIDuY0VlflxdQy/H+t wjswnOll7MUs/JxCrYPFYT3Ccn3zMESiCldzo/V+CQeZtcYy7gP0oNKIubx+AYtA wZr7W2KS5NiqTMpsZEUt202D4sxLMjoPRhF8h+H3OtSYBf2peT3hqttA3JmETTWr YJYCEoIX1lfpTgAI/rMTUJqe6JNt1C9eNDbif/xppY0IMxZiduNGvD00OxnLuspV N/vqtvZYoq10rr/ikwOG5rIKLTExfz6Jh3ITAPzjSDZ3Qc20x0hvMC+SQw+GIrdt z/d/NTZlq+vWoGqxgYgULsGvMg1YMUuxEVOTXe1laNNdoj1dVfPJyAqOlwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEZPvst8pr9sLfz6GBDtQbmnhCpsMB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvUmstLXkzeW12Mnd0X1BvWUVPMUJ1YWVFS213LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+wAVg MA0GCSqGSIb3DQEBCwUAA4IBAQBCCVBNL0U40Y+l1PPMssaw8DPE1TNNa/MpbL/g +PVm0kFm1LuQMEmTMWf4MtHNxcxwbm2GTuRzvmLx+L2LqLTSmfcjvXot1zXpw0WY iqK9t0leKoN9pqypwnh5lMQYqpu90gR3JftCa4BUuRfihSsI9dOSv47jjQ8/s8wQ VJalQK+EcBvtdA9OtUYJfevarSVkzDjsYKKA6OfvIViFG+gcP2joYcEbGjnSfKUX 46Lj29d330fuRVnA/hbyuel7BR8oAUxCEmzLhKPZ/C6PPTSMx/Rc0tYZAmaNXC/8 vm/P1AATHFG15mwmVetzBjLXfRG/AENPe01Cr7oaLTWmPyWq -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:20 2026 by rpki-client