This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/b5ny0I6myroaV2gIlV2OWTJewOs.roa File: b5ny0I6myroaV2gIlV2OWTJewOs.roa (raw, json) Hash identifier: 1SOsNtnc7p7zJV2khSELXYdFu6ZERNFVHA7Poj9pQEc= Subject key identifier: 6F:99:F2:D0:8E:A6:CA:BA:1A:57:68:08:95:5D:8E:59:32:5E:C0:EB Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Certificate serial: 019B7EA7512378F59A8B0F0B664756EF0974 Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/b5ny0I6myroaV2gIlV2OWTJewOs.roa Signing time: Fri 02 Jan 2026 12:20:53 +0000 ROA not before: Fri 02 Jan 2026 12:20:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202909 IP address blocks: 2a0a:79c0:1200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:51:23:78:f5:9a:8b:0f:0b:66:47:56:ef:09:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Validity Not Before: Jan 2 12:20:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f99f2d08ea6caba1a576808955d8e59325ec0eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:22:46:9c:c9:db:c5:04:e3:ad:b9:fb:e1:e5: 37:6b:75:ae:65:b8:7e:59:2b:a3:e7:dc:81:49:0a: b2:df:bd:4e:7c:ac:40:73:a1:28:2f:d3:a3:d5:ad: a9:58:9d:f0:d7:fa:71:3e:46:8b:44:c5:9a:a0:8c: 58:4b:30:56:20:8e:09:ae:cc:e1:c3:22:3f:85:f8: 21:1d:22:e6:7e:c7:c7:6c:f7:60:16:bd:7e:59:ca: 53:db:f4:4f:07:f1:f6:4b:ea:25:e0:60:00:6f:a1: 46:2b:bd:05:68:6b:cd:15:88:04:96:64:1f:a8:b1: a5:7a:d3:96:08:01:5a:4b:41:7e:b0:25:0a:e6:71: 5c:dd:bf:ea:2f:80:dc:25:71:24:12:9a:6a:c3:c2: b4:7c:17:67:62:82:1a:cc:ac:bc:50:e3:cd:43:27: 84:bf:d0:4c:ab:af:9d:cb:f5:e3:86:55:14:d8:c8: d5:a1:d0:6c:23:6f:6e:89:53:e8:df:e9:42:20:74: 6f:de:32:8e:7d:39:9e:78:b2:6b:b4:5f:39:df:0f: 4c:97:ad:a7:50:74:b1:30:fa:47:03:7c:18:cd:83: a4:3a:aa:f0:e9:7a:ea:f4:71:ee:c0:c3:56:72:43: f8:e0:20:4e:aa:ab:f2:05:a9:db:3e:4d:ca:7f:a7: 81:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:99:F2:D0:8E:A6:CA:BA:1A:57:68:08:95:5D:8E:59:32:5E:C0:EB X509v3 Authority Key Identifier: keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/b5ny0I6myroaV2gIlV2OWTJewOs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:79c0:1200::/40 Signature Algorithm: sha256WithRSAEncryption 41:e7:65:2a:70:67:e8:23:6e:3a:80:02:e2:d4:fb:5b:da:bf: 48:38:53:95:99:ab:da:d2:d1:8f:dd:8d:97:e5:24:45:33:2b: 23:31:f8:8a:08:a7:2b:e1:77:26:3b:fc:22:43:56:19:3e:99: e7:61:22:8f:93:e6:09:6a:9d:07:d7:ff:66:a2:78:15:8f:47: 39:41:f3:50:f4:b1:ab:35:d7:43:3d:f0:ed:3e:26:78:68:49: 53:5e:f1:20:1c:78:fc:f4:62:aa:6f:a7:b1:0b:c0:3f:c6:1e: 42:11:16:f7:f9:3b:27:3c:6b:b1:4f:aa:c7:d7:32:c3:b4:03: f0:3d:cb:cc:5b:98:e1:e5:47:02:6e:ba:a5:20:7a:90:a8:38: ec:84:e2:df:09:ff:e9:85:91:e1:fd:d5:8a:bc:6c:a0:15:6c: 77:fc:f4:78:ed:a7:d4:65:94:15:4b:a5:fa:54:3c:16:90:02: 0f:63:26:78:27:04:6f:23:73:fa:42:26:8f:38:c4:e8:4a:50: 26:10:d5:7f:09:47:e7:d3:18:ae:8b:93:23:9b:36:70:a7:96: 0b:bd:48:db:6f:3e:26:90:b4:a5:09:e7:19:7b:17:7d:d2:9f: 2a:2b:77:30:1a:b0:5b:66:63:6b:6b:fd:07:43:6f:ea:48:47: 3a:ed:ca:92 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+p1EjePWaiw8LZkdW7wl0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl ZDc5NTQwHhcNMjYwMTAyMTIyMDUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Zjk5ZjJkMDhlYTZjYWJhMWE1NzY4MDg5NTVkOGU1OTMyNWVjMGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SJGnMnbxQTjrbn74eU3a3WuZbh+ WSuj59yBSQqy371OfKxAc6EoL9Oj1a2pWJ3w1/pxPkaLRMWaoIxYSzBWII4Jrszh wyI/hfghHSLmfsfHbPdgFr1+WcpT2/RPB/H2S+ol4GAAb6FGK70FaGvNFYgElmQf qLGletOWCAFaS0F+sCUK5nFc3b/qL4DcJXEkEppqw8K0fBdnYoIazKy8UOPNQyeE v9BMq6+dy/XjhlUU2MjVodBsI29uiVPo3+lCIHRv3jKOfTmeeLJrtF853w9Ml62n UHSxMPpHA3wYzYOkOqrw6Xrq9HHuwMNWckP44CBOqqvyBanbPk3Kf6eBlwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFG+Z8tCOpsq6GldoCJVdjlkyXsDrMB8GA1UdIwQY MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt M2Q5MWVkZTViMmIxLzEvYjVueTBJNm15cm9hVjJnSWxWMk9XVEpld09zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgp5wBIw DQYJKoZIhvcNAQELBQADggEBAEHnZSpwZ+gjbjqAAuLU+1vav0g4U5WZq9rS0Y/d jZflJEUzKyMx+IoIpyvhdyY7/CJDVhk+medhIo+T5glqnQfX/2aieBWPRzlB81D0 sas110M98O0+JnhoSVNe8SAcePz0Yqpvp7ELwD/GHkIRFvf5Oyc8a7FPqsfXMsO0 A/A9y8xbmOHlRwJuuqUgepCoOOyE4t8J/+mFkeH91Yq8bKAVbHf89Hjtp9RllBVL pfpUPBaQAg9jJngnBG8jc/pCJo84xOhKUCYQ1X8JR+fTGK6LkyObNnCnlgu9SNtv PiaQtKUJ5xl7F33SnyordzAasFtmY2tr/QdDb+pIRzrtypI= -----END CERTIFICATE-----Generated at Tue Jan 20 22:47:40 2026 by rpki-client