This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/yKsYS3p3pMmY24LJw8eNUYYLTH8.roa File: yKsYS3p3pMmY24LJw8eNUYYLTH8.roa (raw, json) Hash identifier: 0HxPUpqsWNGGLpD0pcXxWUtF821n6pKFfwPlpJ0etpc= Subject key identifier: C8:AB:18:4B:7A:77:A4:C9:98:DB:82:C9:C3:C7:8D:51:86:0B:4C:7F Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Certificate serial: 019B7EA75D3C5F27DE678200F1B9CD45F044 Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/yKsYS3p3pMmY24LJw8eNUYYLTH8.roa Signing time: Fri 02 Jan 2026 12:20:56 +0000 ROA not before: Fri 02 Jan 2026 12:20:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208872 IP address blocks: 2a06:e881:6600::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:5d:3c:5f:27:de:67:82:00:f1:b9:cd:45:f0:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Validity Not Before: Jan 2 12:20:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8ab184b7a77a4c998db82c9c3c78d51860b4c7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9a:9a:86:09:8e:af:78:2a:a1:25:2c:f3:58: 40:1d:0c:86:5f:13:23:56:25:6c:49:1e:b2:cd:f2: 1b:fc:bb:64:4d:3f:59:9e:7a:d2:2b:ea:60:3d:d2: 37:09:dd:c4:d8:4a:58:a6:9f:c3:80:48:e3:33:d5: 7e:92:2a:a6:d1:72:3c:67:ca:ed:5a:c4:36:5b:42: b3:cf:4d:dc:c1:d8:0b:34:2e:00:7c:ff:98:0a:22: 79:67:e2:a9:14:36:b2:c2:a0:6b:54:54:36:c6:98: 68:ef:95:72:05:ef:f1:e4:80:ed:06:36:18:a9:ff: 63:3c:14:92:c9:5c:23:4d:5d:76:7e:0c:b9:ac:43: 72:1e:10:1c:f7:9f:56:bc:2c:d8:a2:1d:1a:cd:86: 6c:71:d9:b1:4e:60:dc:98:05:3c:53:72:12:fe:1b: f3:c1:cb:d0:92:3d:b6:8a:74:cb:2b:9f:5c:d0:2e: df:c2:ae:78:09:8d:9c:0d:d8:b6:30:21:59:90:dc: 48:f3:e7:be:3a:d8:e1:d3:3c:49:bf:2c:e7:65:08: 18:38:27:9a:0e:f8:d2:6f:c3:64:03:b9:69:4a:3a: 67:2b:81:7b:cd:20:ec:c5:5b:87:16:46:35:eb:96: 67:7b:32:38:50:16:d6:78:04:26:f8:a6:fa:8a:09: 3d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:AB:18:4B:7A:77:A4:C9:98:DB:82:C9:C3:C7:8D:51:86:0B:4C:7F X509v3 Authority Key Identifier: keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/yKsYS3p3pMmY24LJw8eNUYYLTH8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:e881:6600::/44 Signature Algorithm: sha256WithRSAEncryption 78:3e:92:f9:c6:ac:7e:81:43:f3:08:77:e8:ea:0d:3f:e1:b9: 75:31:2f:c2:4f:20:4c:5c:84:db:91:e5:c8:b7:5f:1b:4a:37: fb:94:90:92:aa:ce:77:c3:71:31:fe:e9:b6:4d:fb:fd:28:d0: 64:56:ad:89:a6:94:b1:ad:b1:34:01:11:93:29:4a:b9:35:49: de:cc:3f:3b:e5:fb:c2:62:07:85:b1:c7:2b:8b:e2:12:f9:3c: e9:93:76:9f:1a:39:d2:d5:93:95:d8:73:72:ba:35:a5:62:14: 58:25:9a:2b:53:82:d1:fd:53:f4:9c:72:4a:26:8b:af:17:73: 51:d6:e7:10:da:0a:04:30:52:84:80:50:e9:08:27:b5:c7:d3: f4:07:ac:61:59:05:8d:2c:a5:3c:f6:2b:ab:50:61:f4:bb:1d: 46:2f:d7:f3:22:b5:81:03:fd:77:8a:06:d7:db:63:16:ac:17: f1:97:5d:b1:4a:a4:3a:1b:24:cc:f5:74:b3:59:8e:e8:e6:e0: b3:82:a0:5a:76:53:19:f9:c6:21:f4:dc:b3:d7:10:ff:30:c4: 3f:0c:da:c0:46:52:74:63:20:f5:5e:3d:4f:49:ff:97:48:3a: 29:d8:2d:d8:ba:ab:22:a8:4c:b1:15:0c:30:2e:ba:fd:de:21: b1:b6:14:5e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+p108XyfeZ4IA8bnNRfBEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl ZDc5NTQwHhcNMjYwMTAyMTIyMDU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOGFiMTg0YjdhNzdhNGM5OThkYjgyYzljM2M3OGQ1MTg2MGI0YzdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppqahgmOr3gqoSUs81hAHQyGXxMj ViVsSR6yzfIb/LtkTT9ZnnrSK+pgPdI3Cd3E2EpYpp/DgEjjM9V+kiqm0XI8Z8rt WsQ2W0Kzz03cwdgLNC4AfP+YCiJ5Z+KpFDaywqBrVFQ2xpho75VyBe/x5IDtBjYY qf9jPBSSyVwjTV12fgy5rENyHhAc959WvCzYoh0azYZscdmxTmDcmAU8U3IS/hvz wcvQkj22inTLK59c0C7fwq54CY2cDdi2MCFZkNxI8+e+Otjh0zxJvyznZQgYOCea DvjSb8NkA7lpSjpnK4F7zSDsxVuHFkY165ZnezI4UBbWeAQm+Kb6igk9BQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMirGEt6d6TJmNuCycPHjVGGC0x/MB8GA1UdIwQY MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt M2Q5MWVkZTViMmIxLzEveUtzWVMzcDNwTW1ZMjRMSnc4ZU5VWVlMVEg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgbogWYA MA0GCSqGSIb3DQEBCwUAA4IBAQB4PpL5xqx+gUPzCHfo6g0/4bl1MS/CTyBMXITb keXIt18bSjf7lJCSqs53w3Ex/um2Tfv9KNBkVq2JppSxrbE0ARGTKUq5NUnezD87 5fvCYgeFsccri+IS+Tzpk3afGjnS1ZOV2HNyujWlYhRYJZorU4LR/VP0nHJKJouv F3NR1ucQ2goEMFKEgFDpCCe1x9P0B6xhWQWNLKU89iurUGH0ux1GL9fzIrWBA/13 igbX22MWrBfxl12xSqQ6GyTM9XSzWY7o5uCzgqBadlMZ+cYh9Nyz1xD/MMQ/DNrA RlJ0YyD1Xj1PSf+XSDop2C3YuqsiqEyxFQwwLrr93iGxthRe -----END CERTIFICATE-----Generated at Tue Jan 20 22:47:37 2026 by rpki-client