This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/ykWRXNeMP8QrkZ0oKLpZAp9Wrko.roa File: ykWRXNeMP8QrkZ0oKLpZAp9Wrko.roa (raw, json) Hash identifier: l55DPJbT/MSJ5habMB18BHTnchn2TSfiKFibmYZWnws= Subject key identifier: CA:45:91:5C:D7:8C:3F:C4:2B:91:9D:28:28:BA:59:02:9F:56:AE:4A Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Certificate serial: 019B7EA753CCAD7D05CD97302451356A6926 Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/ykWRXNeMP8QrkZ0oKLpZAp9Wrko.roa Signing time: Fri 02 Jan 2026 12:20:53 +0000 ROA not before: Fri 02 Jan 2026 12:20:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205212 IP address blocks: 2a06:e881:3200::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 12:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:53:cc:ad:7d:05:cd:97:30:24:51:35:6a:69:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Validity Not Before: Jan 2 12:20:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca45915cd78c3fc42b919d2828ba59029f56ae4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:bf:ce:5d:5c:db:e8:22:6e:bf:ea:88:1f:d0: a4:e7:4b:67:5e:e7:20:5e:4a:3b:23:b5:66:6e:c6: 43:23:03:05:b8:70:67:e9:1d:37:af:dd:f0:b5:c1: c2:c4:00:bf:b6:db:01:91:10:b1:9e:9f:ea:51:85: ee:e1:40:19:bc:7c:a6:ba:32:14:20:1c:10:b0:3e: 6b:42:07:da:9f:32:0f:f5:92:6a:9d:a6:5e:21:b1: 2c:0d:40:27:71:9f:e5:be:78:95:a6:dd:e9:57:9f: c8:15:0b:d6:d7:52:d9:54:a2:22:83:fe:94:86:c3: ae:29:91:9c:11:ac:bc:f5:df:76:19:09:59:e6:02: 1e:06:dc:b4:9b:15:bb:39:58:47:74:4a:a8:29:fb: cf:e7:17:c4:c0:ff:4e:3d:d3:d3:c6:fc:96:e6:49: 80:1f:63:95:e6:ba:eb:cd:81:33:bf:d3:c8:7e:81: c3:2e:5f:fd:75:c3:c6:4d:9f:77:68:00:64:5b:88: 7d:51:d9:6d:0b:b2:32:06:ac:15:97:9b:1d:81:6c: a2:4e:97:e9:a2:52:08:ad:1e:c8:7f:df:14:fb:de: 70:9c:b9:2f:ca:ca:9b:6d:ed:1e:9f:1e:7f:3e:e8: 4f:4f:f9:02:25:e5:a0:f6:6f:9a:dc:0f:27:e7:7a: f6:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:45:91:5C:D7:8C:3F:C4:2B:91:9D:28:28:BA:59:02:9F:56:AE:4A X509v3 Authority Key Identifier: keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/ykWRXNeMP8QrkZ0oKLpZAp9Wrko.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:e881:3200::/44 Signature Algorithm: sha256WithRSAEncryption 73:3f:21:b3:63:57:08:f1:76:b0:7c:ed:05:11:c0:9d:75:98: 7c:c5:38:0e:9d:8d:aa:0e:b2:0e:f4:ff:76:6f:e3:3e:c1:f0: d4:a8:89:57:bb:61:f6:b7:01:98:1a:2d:b8:4c:ab:64:7a:61: 94:22:ef:e1:3c:e9:90:09:29:ee:74:29:78:a7:bf:1e:a5:35: 66:97:90:a3:fa:ab:18:8b:2e:32:71:65:4b:49:57:75:84:e8: 65:a7:7f:c8:6b:8c:76:96:94:a3:49:4f:2e:1a:b6:37:9c:b9: 6a:71:ac:69:b5:ec:5c:ef:a6:1d:7d:d7:9f:0f:e3:63:c3:8f: 52:d9:6f:a8:eb:75:d2:27:b1:49:a8:27:99:fe:d2:35:04:b4: 72:24:80:26:fe:f6:48:db:49:21:ea:60:e5:9a:95:0a:6c:4f: da:73:b9:a1:2a:26:b0:b3:f4:72:12:3c:f6:d0:d8:b5:f6:83: 9d:13:2f:29:3c:81:72:92:30:0c:43:ad:52:78:dc:57:f8:73: 83:43:68:91:7d:dd:1d:ab:e2:3e:9d:c3:e7:cd:25:3b:a3:17: 0b:47:76:53:0a:d5:82:f7:43:e4:89:6b:16:1d:01:97:79:18: 87:aa:3b:d0:83:7b:d5:90:55:55:ec:9b:db:fc:35:5c:11:c3: 16:61:f7:8c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+p1PMrX0FzZcwJFE1amkmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl ZDc5NTQwHhcNMjYwMTAyMTIyMDUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTQ1OTE1Y2Q3OGMzZmM0MmI5MTlkMjgyOGJhNTkwMjlmNTZhZTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxL/OXVzb6CJuv+qIH9Ck50tnXucg Xko7I7VmbsZDIwMFuHBn6R03r93wtcHCxAC/ttsBkRCxnp/qUYXu4UAZvHymujIU IBwQsD5rQgfanzIP9ZJqnaZeIbEsDUAncZ/lvniVpt3pV5/IFQvW11LZVKIig/6U hsOuKZGcEay89d92GQlZ5gIeBty0mxW7OVhHdEqoKfvP5xfEwP9OPdPTxvyW5kmA H2OV5rrrzYEzv9PIfoHDLl/9dcPGTZ93aABkW4h9UdltC7IyBqwVl5sdgWyiTpfp olIIrR7If98U+95wnLkvysqbbe0enx5/PuhPT/kCJeWg9m+a3A8n53r2KQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMpFkVzXjD/EK5GdKCi6WQKfVq5KMB8GA1UdIwQY MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt M2Q5MWVkZTViMmIxLzEveWtXUlhOZU1QOFFya1owb0tMcFpBcDlXcmtvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgbogTIA MA0GCSqGSIb3DQEBCwUAA4IBAQBzPyGzY1cI8XawfO0FEcCddZh8xTgOnY2qDrIO 9P92b+M+wfDUqIlXu2H2twGYGi24TKtkemGUIu/hPOmQCSnudCl4p78epTVml5Cj +qsYiy4ycWVLSVd1hOhlp3/Ia4x2lpSjSU8uGrY3nLlqcaxptexc76YdfdefD+Nj w49S2W+o63XSJ7FJqCeZ/tI1BLRyJIAm/vZI20kh6mDlmpUKbE/ac7mhKiaws/Ry Ejz20Ni19oOdEy8pPIFykjAMQ61SeNxX+HODQ2iRfd0dq+I+ncPnzSU7oxcLR3ZT CtWC90PkiWsWHQGXeRiHqjvQg3vVkFVV7Jvb/DVcEcMWYfeM -----END CERTIFICATE-----Generated at Tue Jan 20 18:18:47 2026 by rpki-client