This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/yb0ajEg9z1jtc-eQZB_4deWv04s.roa File: yb0ajEg9z1jtc-eQZB_4deWv04s.roa (raw, json) Hash identifier: JbsHaJRAdxnzkcLyQJbT2pfp0LO9DsZ4+5HMZ4E0Gmk= Subject key identifier: C9:BD:1A:8C:48:3D:CF:58:ED:73:E7:90:64:1F:F8:75:E5:AF:D3:8B Certificate issuer: /CN=40cd5a5038d5e12fe1c9d9f5c8664074c3dd0ac7 Certificate serial: 019B7CED875333C6445EA3EFCCEB381513AD Authority key identifier: 40:CD:5A:50:38:D5:E1:2F:E1:C9:D9:F5:C8:66:40:74:C3:DD:0A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QM1aUDjV4S_hydn1yGZAdMPdCsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/yb0ajEg9z1jtc-eQZB_4deWv04s.roa Signing time: Fri 02 Jan 2026 04:18:19 +0000 ROA not before: Fri 02 Jan 2026 04:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 2a10:afc0::/29 maxlen: 48 2a10:afc1:f000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.crl rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.mft rsync://rpki.ripe.net/repository/DEFAULT/QM1aUDjV4S_hydn1yGZAdMPdCsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:87:53:33:c6:44:5e:a3:ef:cc:eb:38:15:13:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40cd5a5038d5e12fe1c9d9f5c8664074c3dd0ac7 Validity Not Before: Jan 2 04:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9bd1a8c483dcf58ed73e790641ff875e5afd38b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:eb:f1:ca:4c:fe:3c:1e:9f:36:25:f8:97:b4: 49:5a:6c:00:d1:24:b5:0f:36:b4:fb:a1:50:4d:4f: cd:c0:e0:0e:8c:b8:79:b6:83:cb:93:f4:25:e3:9f: 01:fe:e3:9a:8c:3d:94:32:e2:cd:7a:40:9b:5e:7a: da:4b:f9:72:b9:c1:19:c5:80:02:07:dc:97:57:11: 73:51:f3:27:15:62:1f:ae:6a:bc:5b:41:2c:3c:e9: 10:dc:30:72:f9:9e:62:c8:b0:4e:f5:aa:2b:01:be: 6f:4b:71:0a:c2:44:cf:c1:69:c2:f1:fe:38:9f:13: 67:b0:b6:2c:95:70:1d:54:92:ad:72:ac:f7:1d:19: 9a:60:ab:9d:96:7a:74:27:6a:bd:db:34:22:89:20: 0f:73:43:e4:b0:51:3d:34:92:09:3a:4c:c5:90:68: 8a:a4:df:3f:49:0d:af:d4:0b:ca:c2:05:9d:af:02: 78:e9:e9:0b:90:79:13:ef:71:ff:b4:99:f4:8f:88: 82:57:61:31:90:57:2d:f3:ab:60:73:14:d1:e9:e4: c3:54:2c:3d:34:02:40:69:4a:40:fa:c5:1a:5b:35: 91:c9:ba:fd:20:7d:b1:74:3c:0b:eb:68:61:f4:3d: 67:dc:28:ad:df:f6:90:a7:12:17:db:64:8f:41:4b: 66:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:BD:1A:8C:48:3D:CF:58:ED:73:E7:90:64:1F:F8:75:E5:AF:D3:8B X509v3 Authority Key Identifier: keyid:40:CD:5A:50:38:D5:E1:2F:E1:C9:D9:F5:C8:66:40:74:C3:DD:0A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QM1aUDjV4S_hydn1yGZAdMPdCsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/yb0ajEg9z1jtc-eQZB_4deWv04s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:afc0::/29 Signature Algorithm: sha256WithRSAEncryption 16:24:2a:60:26:52:ee:8d:2a:02:e9:d3:3b:4d:01:1f:47:71: 43:d0:39:aa:59:dd:99:27:dc:72:8c:05:31:ae:79:85:c4:47: bd:87:e2:1e:88:fd:a4:9a:3f:3e:e1:07:14:cf:20:d5:26:8f: 65:d7:53:05:7d:ed:6c:28:6d:d0:53:2a:9b:78:b4:9a:1c:d5: d4:22:e1:a0:e1:67:3b:dc:99:a8:14:54:e1:fe:6e:13:f0:9e: 2a:52:51:75:83:ee:70:38:56:42:a4:c8:fd:b0:c7:08:a1:56: ba:b3:64:e7:4d:59:db:76:16:4e:91:1f:e4:60:7e:11:6f:a4: c1:28:aa:3c:6a:c3:0e:97:78:2f:0c:6b:d4:cf:8f:b8:1a:df: 8b:92:e0:7a:51:9b:c8:2a:c0:70:37:eb:6b:26:ed:dc:1b:1a: 36:0d:78:7f:46:23:6e:f5:b6:cc:27:85:95:06:06:a2:98:ae: 12:b8:ff:f5:bc:fa:dd:f5:cd:e5:cf:6d:be:7f:bd:60:fe:5c: 03:d2:4b:d9:d8:9a:f5:82:14:f8:87:a4:ce:33:0b:31:ad:47: c1:98:34:f9:53:d2:10:07:78:e0:15:5a:9a:7c:64:ea:c0:28: e3:09:b0:9b:4c:59:23:0b:f6:52:41:01:7b:5e:6e:47:5c:1f: 2a:2d:f3:d2 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt87YdTM8ZEXqPvzOs4FROtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwY2Q1YTUwMzhkNWUxMmZlMWM5ZDlmNWM4NjY0MDc0YzNk ZDBhYzcwHhcNMjYwMTAyMDQxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOWJkMWE4YzQ4M2RjZjU4ZWQ3M2U3OTA2NDFmZjg3NWU1YWZkMzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+vxykz+PB6fNiX4l7RJWmwA0SS1 Dza0+6FQTU/NwOAOjLh5toPLk/Ql458B/uOajD2UMuLNekCbXnraS/lyucEZxYAC B9yXVxFzUfMnFWIfrmq8W0EsPOkQ3DBy+Z5iyLBO9aorAb5vS3EKwkTPwWnC8f44 nxNnsLYslXAdVJKtcqz3HRmaYKudlnp0J2q92zQiiSAPc0PksFE9NJIJOkzFkGiK pN8/SQ2v1AvKwgWdrwJ46ekLkHkT73H/tJn0j4iCV2ExkFct86tgcxTR6eTDVCw9 NAJAaUpA+sUaWzWRybr9IH2xdDwL62hh9D1n3Cit3/aQpxIX22SPQUtmswIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFMm9GoxIPc9Y7XPnkGQf+HXlr9OLMB8GA1UdIwQY MBaAFEDNWlA41eEv4cnZ9chmQHTD3QrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU0xYVVEalY0U19oeWRuMXlHWkFkTVBkQ3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9jZWMxMTktNGM5OS00MTU4LTk5ZjEt NjU5YzY3MTkxMWYxLzEveWIwYWpFZzl6MWp0Yy1lUVpCXzRkZVd2MDRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9jZWMxMTktNGM5OS00MTU4LTk5ZjEtNjU5YzY3MTkxMWYx LzEvUU0xYVVEalY0U19oeWRuMXlHWkFkTVBkQ3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhCvwDAN BgkqhkiG9w0BAQsFAAOCAQEAFiQqYCZS7o0qAunTO00BH0dxQ9A5qlndmSfccowF Ma55hcRHvYfiHoj9pJo/PuEHFM8g1SaPZddTBX3tbCht0FMqm3i0mhzV1CLhoOFn O9yZqBRU4f5uE/CeKlJRdYPucDhWQqTI/bDHCKFWurNk501Z23YWTpEf5GB+EW+k wSiqPGrDDpd4Lwxr1M+PuBrfi5LgelGbyCrAcDfraybt3BsaNg14f0YjbvW2zCeF lQYGopiuErj/9bz63fXN5c9tvn+9YP5cA9JL2dia9YIU+IekzjMLMa1HwZg0+VPS EAd44BVamnxk6sAo4wmwm0xZIwv2UkEBe15uR1wfKi3z0g== -----END CERTIFICATE-----Generated at Wed Jan 7 23:48:12 2026 by rpki-client