This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Y-f33F84rg_C2yN6JytSVMI8-Yk.roa File: Y-f33F84rg_C2yN6JytSVMI8-Yk.roa (raw, json) Hash identifier: vpYEQwml8V1R4JhaxVyfhtNT2GECHX1K2ECr9xdocGs= Subject key identifier: 63:E7:F7:DC:5F:38:AE:0F:C2:DB:23:7A:27:2B:52:54:C2:3C:F9:89 Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B79109E05BEDE351677BCEB9F0010CBF4 Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Y-f33F84rg_C2yN6JytSVMI8-Yk.roa Signing time: Thu 01 Jan 2026 10:18:10 +0000 ROA not before: Thu 01 Jan 2026 10:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202585 IP address blocks: 2a12:bec0:5e0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:9e:05:be:de:35:16:77:bc:eb:9f:00:10:cb:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 10:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63e7f7dc5f38ae0fc2db237a272b5254c23cf989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2b:cd:fa:3f:8a:9c:fd:dd:c6:b9:a4:cb:dc: a1:2e:62:3f:ef:9c:96:d4:3a:0d:75:69:0f:5f:30: d4:de:e6:74:3c:79:f6:eb:ed:24:2c:3a:52:d5:40: 92:01:e8:e2:da:ad:ba:56:77:e7:9e:0d:36:ec:6d: 72:67:45:ea:ea:b2:e7:2f:31:c3:24:be:c0:68:bc: 32:d8:3f:bf:ab:a9:d9:fa:f8:03:8d:94:c8:45:3e: 13:5e:38:77:e8:0c:2c:cf:36:74:50:e1:36:d7:9e: c9:60:0d:59:3c:33:73:13:e6:e9:da:45:c7:06:fb: fa:2b:bb:2b:ba:d6:d9:0f:48:84:1c:7c:a2:e7:de: 49:8c:ca:66:42:e6:17:9e:e7:27:1b:18:04:ae:3c: 8d:1f:3a:ed:d5:cd:73:a2:b8:02:b8:ce:c5:b4:60: 90:46:ae:93:a7:e5:36:ce:0c:5c:de:b9:52:19:3c: 23:e9:49:0d:b1:a9:a5:fe:42:1a:05:5d:33:7a:39: bf:a3:dd:e1:a2:e2:83:5c:f4:38:f2:7a:e5:75:d8: 25:bf:2c:d8:97:34:80:64:00:b1:db:17:a0:30:61: 7e:ee:61:02:d6:16:ea:fa:63:5d:63:8b:a7:95:72: dc:2f:8a:98:99:6a:49:aa:79:36:04:d4:ac:b1:3f: 00:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:E7:F7:DC:5F:38:AE:0F:C2:DB:23:7A:27:2B:52:54:C2:3C:F9:89 X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Y-f33F84rg_C2yN6JytSVMI8-Yk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec0:5e0::/44 Signature Algorithm: sha256WithRSAEncryption ad:cc:e4:ec:55:b3:75:25:ca:3b:92:82:75:3d:a1:4d:7e:9c: 32:d7:f2:b9:71:ad:b0:8b:59:43:f0:8a:72:21:59:32:69:d8: 2c:a0:62:80:25:3a:46:28:24:f9:2d:77:5a:33:98:9a:20:84: 9d:b8:11:bb:55:b1:a1:5a:c5:33:99:5a:89:2f:dd:cd:e4:93: 97:62:eb:b7:b6:a9:4d:7b:52:20:42:02:c6:e6:7c:c6:4c:84: d5:f5:c6:76:b2:9f:d9:7c:27:52:9e:a3:14:19:47:a0:81:ce: ae:57:11:29:57:e2:8d:53:8d:18:30:65:c6:ea:dc:4f:cd:30: b7:c3:e3:f4:34:e5:4e:8b:93:05:cb:66:31:56:60:f0:e1:fa: 1a:41:e3:ce:9b:59:20:2b:9b:1f:2c:6c:6b:80:62:ff:fd:d7: 43:9e:c2:60:79:65:4c:2e:99:e9:b6:0b:df:66:98:06:29:65: 65:02:82:45:69:56:18:5f:d0:10:8f:70:f7:bf:98:86:ec:69: 02:8a:2b:4e:c5:b0:2e:43:a1:07:09:74:7f:24:16:81:6e:c3: 97:a4:20:33:20:7c:4c:ba:c0:cb:bd:92:10:5b:4f:6e:e9:73: 46:2a:25:c4:31:e2:2d:32:36:05:b9:b4:87:d8:c0:8f:f7:99: ff:db:ec:ed -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EJ4Fvt41Fne8658AEMv0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAxMTAxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2M2U3ZjdkYzVmMzhhZTBmYzJkYjIzN2EyNzJiNTI1NGMyM2NmOTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyvN+j+KnP3dxrmky9yhLmI/75yW 1DoNdWkPXzDU3uZ0PHn26+0kLDpS1UCSAeji2q26Vnfnng027G1yZ0Xq6rLnLzHD JL7AaLwy2D+/q6nZ+vgDjZTIRT4TXjh36AwszzZ0UOE2157JYA1ZPDNzE+bp2kXH Bvv6K7srutbZD0iEHHyi595JjMpmQuYXnucnGxgErjyNHzrt1c1zorgCuM7FtGCQ Rq6Tp+U2zgxc3rlSGTwj6UkNsaml/kIaBV0zejm/o93houKDXPQ48nrlddglvyzY lzSAZACx2xegMGF+7mEC1hbq+mNdY4unlXLcL4qYmWpJqnk2BNSssT8AJQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGPn99xfOK4PwtsjeicrUlTCPPmJMB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvWS1mMzNGODRyZ19DMnlONkp5dFNWTUk4LVlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+wAXg MA0GCSqGSIb3DQEBCwUAA4IBAQCtzOTsVbN1Jco7koJ1PaFNfpwy1/K5ca2wi1lD 8IpyIVkyadgsoGKAJTpGKCT5LXdaM5iaIISduBG7VbGhWsUzmVqJL93N5JOXYuu3 tqlNe1IgQgLG5nzGTITV9cZ2sp/ZfCdSnqMUGUeggc6uVxEpV+KNU40YMGXG6txP zTC3w+P0NOVOi5MFy2YxVmDw4foaQePOm1kgK5sfLGxrgGL//ddDnsJgeWVMLpnp tgvfZpgGKWVlAoJFaVYYX9AQj3D3v5iG7GkCiitOxbAuQ6EHCXR/JBaBbsOXpCAz IHxMusDLvZIQW09u6XNGKiXEMeItMjYFubSH2MCP95n/2+zt -----END CERTIFICATE-----Generated at Tue Jan 20 02:50:00 2026 by rpki-client