This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/yu2aFMueSSoMrW6rWl1Hv3i6uAI.roa File: yu2aFMueSSoMrW6rWl1Hv3i6uAI.roa (raw, json) Hash identifier: FYaI+RnJ6n0uaO0MEdkYt6sLn4+LgzAURUhn0uI+9QQ= Subject key identifier: CA:ED:9A:14:CB:9E:49:2A:0C:AD:6E:AB:5A:5D:47:BF:78:BA:B8:02 Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B802EA07A383F11AEC52F5297E8289303 Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/yu2aFMueSSoMrW6rWl1Hv3i6uAI.roa Signing time: Fri 02 Jan 2026 19:28:17 +0000 ROA not before: Fri 02 Jan 2026 19:28:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214630 IP address blocks: 2a12:bec4:1c40::/44 maxlen: 48 2a12:bec4:1d50::/44 maxlen: 48 2a12:bec4:1dc0::/44 maxlen: 48 2a12:bec4:1ec0::/44 maxlen: 48 2a12:bec4:1f20::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:80:2e:a0:7a:38:3f:11:ae:c5:2f:52:97:e8:28:93:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 2 19:28:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=caed9a14cb9e492a0cad6eab5a5d47bf78bab802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5a:d4:02:79:af:43:bb:c7:24:df:e6:2b:54: 27:77:8e:5d:42:ec:1a:10:b5:d3:e2:5c:93:6f:94: fa:2b:30:99:e7:be:70:57:de:85:31:2b:61:f0:cf: d4:42:21:eb:71:cb:df:c4:80:cd:f6:d5:18:7a:70: 77:e8:3e:03:50:63:e4:17:d4:ed:70:00:94:e8:1b: 14:a5:55:98:a9:93:fb:c4:22:64:71:49:47:bb:a9: b8:54:c9:17:55:3a:d5:ce:83:f6:79:91:f4:68:38: da:b6:1d:78:55:47:9d:4f:64:08:cb:53:30:78:7d: 12:5d:23:93:11:f1:fe:07:69:1e:3b:3f:6c:e9:24: 38:1a:1c:6d:45:60:6f:39:ea:67:3e:19:f2:5b:ad: 30:4b:4c:21:90:77:c0:a2:85:7f:50:39:d2:97:e7: f0:ef:31:99:69:3d:00:d7:cf:d5:6b:23:88:1b:d2: 24:ce:60:94:6f:24:66:31:6f:ec:cd:be:55:9b:a3: 76:aa:e8:05:62:cf:c3:81:90:04:f2:fd:c5:08:9f: 26:2d:66:c9:a2:5d:50:5c:5b:ac:36:27:6d:9e:c8: a3:17:97:83:28:e9:d5:b3:3a:a0:e9:c9:5e:ad:39: 00:d9:6a:95:5f:2c:cc:7e:cd:8c:19:81:21:2a:06: 43:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:ED:9A:14:CB:9E:49:2A:0C:AD:6E:AB:5A:5D:47:BF:78:BA:B8:02 X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/yu2aFMueSSoMrW6rWl1Hv3i6uAI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec4:1c40::/44 2a12:bec4:1d50::/44 2a12:bec4:1dc0::/44 2a12:bec4:1ec0::/44 2a12:bec4:1f20::/44 Signature Algorithm: sha256WithRSAEncryption 3b:b2:e1:6d:a5:38:68:3d:ec:cb:10:61:27:c2:73:61:02:f7: 20:42:f0:f5:3b:82:ef:2c:55:c3:06:2a:fa:d3:19:75:aa:47: cb:61:73:fd:49:23:e8:9b:9e:ac:57:6d:be:36:c3:07:04:89: d5:6a:55:f0:a5:16:dd:b5:04:66:99:bc:d5:88:99:7e:09:07: 96:8e:a0:8e:c8:91:2f:c0:7b:af:b6:2b:96:90:d6:5b:c6:a9: e2:6a:5b:31:92:8c:04:cc:c0:da:75:3a:66:90:10:44:ef:5a: 81:c3:99:e4:34:8a:33:3f:28:f1:e9:da:56:1b:c2:53:55:1b: 6c:34:6c:97:f9:6f:4a:6c:fc:6a:e2:13:50:16:44:d4:38:d3: e0:ca:4a:cd:96:2a:6e:2b:10:ac:d8:7a:5a:2c:59:5a:87:b8: 02:f7:c0:fc:ae:6b:a4:12:25:7f:ae:4b:03:d2:76:0d:08:c3: 8e:6e:1f:4f:25:04:d5:70:d3:6c:89:aa:4f:5e:98:e1:f5:e5: b2:55:df:2a:6e:f5:c9:d7:15:d8:98:14:f4:c2:51:4d:60:44: 01:25:f4:de:98:5b:14:2e:78:dc:48:04:39:f6:4e:13:ed:93: cd:ee:89:ca:ae:8b:50:c0:77:5c:a7:93:9e:4c:9d:4d:5d:4d: a1:88:68:1a -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZuALqB6OD8RrsUvUpfoKJMDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAyMTkyODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYWVkOWExNGNiOWU0OTJhMGNhZDZlYWI1YTVkNDdiZjc4YmFiODAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFrUAnmvQ7vHJN/mK1Qnd45dQuwa ELXT4lyTb5T6KzCZ575wV96FMSth8M/UQiHrccvfxIDN9tUYenB36D4DUGPkF9Tt cACU6BsUpVWYqZP7xCJkcUlHu6m4VMkXVTrVzoP2eZH0aDjath14VUedT2QIy1Mw eH0SXSOTEfH+B2keOz9s6SQ4GhxtRWBvOepnPhnyW60wS0whkHfAooV/UDnSl+fw 7zGZaT0A18/VayOIG9IkzmCUbyRmMW/szb5Vm6N2qugFYs/DgZAE8v3FCJ8mLWbJ ol1QXFusNidtnsijF5eDKOnVszqg6clerTkA2WqVXyzMfs2MGYEhKgZDZwIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFMrtmhTLnkkqDK1uq1pdR794urgCMB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEveXUyYUZNdWVTU29Nclc2cldsMUh2M2k2dUFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAzBAIAAjAtAwcEKhK+xBxA AwcEKhK+xB1QAwcEKhK+xB3AAwcEKhK+xB7AAwcEKhK+xB8gMA0GCSqGSIb3DQEB CwUAA4IBAQA7suFtpThoPezLEGEnwnNhAvcgQvD1O4LvLFXDBir60xl1qkfLYXP9 SSPom56sV22+NsMHBInValXwpRbdtQRmmbzViJl+CQeWjqCOyJEvwHuvtiuWkNZb xqnialsxkowEzMDadTpmkBBE71qBw5nkNIozPyjx6dpWG8JTVRtsNGyX+W9KbPxq 4hNQFkTUONPgykrNlipuKxCs2HpaLFlah7gC98D8rmukEiV/rksD0nYNCMOObh9P JQTVcNNsiapPXpjh9eWyVd8qbvXJ1xXYmBT0wlFNYEQBJfTemFsULnjcSAQ59k4T 7ZPN7onKrotQwHdcp5OeTJ1NXU2hiGga -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:25 2026 by rpki-client