This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/ymMzgM5dBT_YOae8wQEnZJNr5_o.roa File: ymMzgM5dBT_YOae8wQEnZJNr5_o.roa (raw, json) Hash identifier: 8iQ2HnVrJ1ouA66E7AEYZTPoE9rVpNmS/F8H4rMxEKw= Subject key identifier: CA:63:33:80:CE:5D:05:3F:D8:39:A7:BC:C1:01:27:64:93:6B:E7:FA Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Certificate serial: 019B7EA75E4038906BBEF369E91915CED803 Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/ymMzgM5dBT_YOae8wQEnZJNr5_o.roa Signing time: Fri 02 Jan 2026 12:20:56 +0000 ROA not before: Fri 02 Jan 2026 12:20:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209075 IP address blocks: 2a0a:79c0:900::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 12:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:5e:40:38:90:6b:be:f3:69:e9:19:15:ce:d8:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Validity Not Before: Jan 2 12:20:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca633380ce5d053fd839a7bcc1012764936be7fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ba:3f:df:b7:a4:ec:11:c7:c7:b5:2b:8c:8e: e3:73:3f:17:de:a2:82:3f:7a:80:80:67:af:99:93: 72:f4:73:e3:64:6a:bb:b3:a7:32:2e:1d:9f:c2:0e: 2f:c2:37:7f:54:74:15:b0:68:8b:14:a1:86:62:d4: 20:e2:80:87:6d:b1:50:1a:1d:22:0b:57:7f:43:75: 48:e3:f0:be:ee:89:2e:0b:3b:c0:e1:32:bc:2b:0f: f4:ee:2a:af:3f:7a:b8:0b:0f:eb:39:9f:9a:d0:49: 46:b5:9e:5e:55:48:68:ba:e2:27:ee:86:d1:33:a2: e9:2a:4b:84:e8:b3:48:9e:84:1e:01:ba:2e:b5:b4: 7a:c7:35:0c:35:e6:75:c4:eb:74:ed:6b:b1:64:68: be:d0:b9:55:09:90:e1:13:3d:90:cb:87:6e:7a:e7: b8:ff:e4:47:9f:54:39:c0:8d:a9:0d:5e:32:6e:ba: a8:79:23:85:ac:7f:48:54:6d:a3:d2:ab:b8:a8:bd: e0:8b:4e:59:9b:78:3c:9b:c0:0e:ca:34:b0:3a:6b: 8d:65:35:b2:7b:1b:5d:b2:74:e0:e5:92:88:4f:55: e7:c9:74:eb:02:83:3e:5d:1e:f2:4c:90:71:0e:bf: ca:6a:f0:ff:ae:1e:60:4f:07:d8:5c:3e:d9:08:db: 62:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:63:33:80:CE:5D:05:3F:D8:39:A7:BC:C1:01:27:64:93:6B:E7:FA X509v3 Authority Key Identifier: keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/ymMzgM5dBT_YOae8wQEnZJNr5_o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:79c0:900::/44 Signature Algorithm: sha256WithRSAEncryption a1:82:6e:f6:31:17:6e:d2:50:34:35:52:24:f2:bb:0c:91:09: 37:56:81:9f:d7:c8:9b:35:fe:be:06:2a:ac:bb:42:8d:fb:6e: 1f:98:e7:78:d2:e9:41:d2:d6:c5:0b:b0:b3:e6:02:a2:29:4f: 6e:94:8f:2f:ce:b7:09:a5:81:89:7b:a3:9a:1e:80:4f:a9:af: 4e:69:fb:e9:50:a5:66:99:b2:92:87:d0:cb:09:8a:d5:75:ff: df:cb:e3:79:5d:f0:26:25:6b:d5:94:db:21:c3:e6:28:62:02: a4:02:fb:48:ab:38:1e:37:d1:da:8c:91:e5:78:8c:27:b2:0a: f0:22:1c:1e:2f:cb:6e:6e:8f:b0:fb:cc:ae:86:29:fe:a1:0e: 12:34:73:2e:23:1d:30:bc:54:59:3f:71:b2:4d:59:6e:93:60: f2:79:d2:87:fe:da:09:c7:97:e3:f6:1a:7b:d8:5b:46:16:3e: 70:57:04:76:91:e2:3e:15:89:7a:d1:ff:0f:27:9e:15:0f:e0: 1c:95:5d:c7:1e:4f:79:a3:ee:15:0a:12:07:80:96:e4:66:d1: bd:12:84:69:ea:2e:da:ae:3d:c8:17:d5:f3:cf:46:68:ea:82: 0e:79:94:a7:21:68:59:7c:b7:58:05:93:8a:ff:72:2c:fb:89: 41:93:f0:5d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+p15AOJBrvvNp6RkVztgDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl ZDc5NTQwHhcNMjYwMTAyMTIyMDU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTYzMzM4MGNlNWQwNTNmZDgzOWE3YmNjMTAxMjc2NDkzNmJlN2ZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbo/37ek7BHHx7UrjI7jcz8X3qKC P3qAgGevmZNy9HPjZGq7s6cyLh2fwg4vwjd/VHQVsGiLFKGGYtQg4oCHbbFQGh0i C1d/Q3VI4/C+7okuCzvA4TK8Kw/07iqvP3q4Cw/rOZ+a0ElGtZ5eVUhouuIn7obR M6LpKkuE6LNInoQeAboutbR6xzUMNeZ1xOt07WuxZGi+0LlVCZDhEz2Qy4dueue4 /+RHn1Q5wI2pDV4ybrqoeSOFrH9IVG2j0qu4qL3gi05Zm3g8m8AOyjSwOmuNZTWy extdsnTg5ZKIT1XnyXTrAoM+XR7yTJBxDr/KavD/rh5gTwfYXD7ZCNtiJwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMpjM4DOXQU/2DmnvMEBJ2STa+f6MB8GA1UdIwQY MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt M2Q5MWVkZTViMmIxLzEveW1NemdNNWRCVF9ZT2FlOHdRRW5aSk5yNV9vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgp5wAkA MA0GCSqGSIb3DQEBCwUAA4IBAQChgm72MRdu0lA0NVIk8rsMkQk3VoGf18ibNf6+ Biqsu0KN+24fmOd40ulB0tbFC7Cz5gKiKU9ulI8vzrcJpYGJe6OaHoBPqa9Oafvp UKVmmbKSh9DLCYrVdf/fy+N5XfAmJWvVlNshw+YoYgKkAvtIqzgeN9HajJHleIwn sgrwIhweL8tubo+w+8yuhin+oQ4SNHMuIx0wvFRZP3GyTVluk2DyedKH/toJx5fj 9hp72FtGFj5wVwR2keI+FYl60f8PJ54VD+AclV3HHk95o+4VChIHgJbkZtG9EoRp 6i7arj3IF9Xzz0Zo6oIOeZSnIWhZfLdYBZOK/3Is+4lBk/Bd -----END CERTIFICATE-----Generated at Tue Jan 20 22:47:35 2026 by rpki-client