This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/yINiCi-fcEAzzbT8ry3F24_HnBw.roa File: yINiCi-fcEAzzbT8ry3F24_HnBw.roa (raw, json) Hash identifier: DTnC3s+dTYZX9VNSoLxZjlybV3sMyllGW6D2HGEmUQ8= Subject key identifier: C8:83:62:0A:2F:9F:70:40:33:CD:B4:FC:AF:2D:C5:DB:8F:C7:9C:1C Certificate issuer: /CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44 Certificate serial: 019B797F18F26502239319C15CB30827E01B Authority key identifier: 29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/yINiCi-fcEAzzbT8ry3F24_HnBw.roa Signing time: Thu 01 Jan 2026 12:18:51 +0000 ROA not before: Thu 01 Jan 2026 12:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205964 IP address blocks: 2a14:c882::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 18:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:18:f2:65:02:23:93:19:c1:5c:b3:08:27:e0:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44 Validity Not Before: Jan 1 12:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c883620a2f9f704033cdb4fcaf2dc5db8fc79c1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:77:23:80:88:a7:6e:57:21:c4:f9:ea:7f:e7: 4a:39:57:1c:0c:aa:50:3d:9b:df:82:c0:8e:af:49: 7f:3b:e3:19:7e:c8:6b:12:2a:47:c0:9d:dd:e6:15: d4:cd:ef:1a:ae:62:33:f7:cb:79:7f:e6:35:e4:0e: 5f:e5:38:be:34:aa:7e:e2:48:b8:3f:1e:c5:1a:71: bb:b6:9f:6f:36:6b:27:df:59:8b:8c:bd:d3:76:63: 93:c6:d3:17:fd:bd:0d:f3:a3:b6:7f:99:4e:7c:89: 72:67:ac:f2:6c:79:c5:66:34:46:fc:3a:14:3d:03: 50:83:9a:19:31:24:97:1e:1c:9d:06:ef:d9:6f:b4: d4:e5:b9:bc:4f:b5:50:64:5e:5b:df:fa:70:82:0f: a1:d5:4b:61:53:f3:13:b2:36:18:f0:a2:8c:ea:1e: e5:54:8a:e5:cb:f6:54:0b:1f:e4:49:0e:65:d7:3b: 9d:b7:c4:06:09:6e:13:57:c7:fb:c3:7e:55:2a:70: e2:d0:bc:4b:13:10:05:5e:b9:23:5a:0e:1f:f0:be: 68:4d:a7:1a:56:23:29:a9:2b:48:8f:8b:6e:c0:5a: 2c:80:76:55:37:ab:ef:1e:53:40:40:6c:ae:b4:1a: fe:ec:c3:91:7c:aa:ef:5e:91:af:05:b4:cb:a6:da: b3:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:83:62:0A:2F:9F:70:40:33:CD:B4:FC:AF:2D:C5:DB:8F:C7:9C:1C X509v3 Authority Key Identifier: keyid:29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/yINiCi-fcEAzzbT8ry3F24_HnBw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:c882::/33 Signature Algorithm: sha256WithRSAEncryption 8f:64:20:89:7e:67:52:6f:db:72:57:e7:ad:ef:e4:af:8f:9c: 13:f5:38:2a:ce:50:14:36:d0:cc:60:be:c3:6d:ce:06:35:5c: ad:55:6e:cf:4c:52:a4:f2:c4:d7:a0:cc:e4:f8:57:89:4a:9e: b4:f0:e5:3f:b5:9e:a0:5e:9d:6d:45:1d:2b:eb:2d:56:72:ba: 56:c0:fd:a7:d5:cb:fb:da:5c:68:c7:ee:96:66:f1:80:c6:ec: 25:a2:34:26:94:da:85:64:df:ee:a1:82:1a:b9:01:78:46:57: f7:0b:69:1f:b8:73:f3:50:6c:81:91:c0:ff:67:ee:59:95:7a: 3b:89:50:fb:3d:72:23:cd:0b:38:80:7b:6e:7a:79:39:35:b7: 4f:15:12:60:56:a1:08:d8:36:ce:e3:6d:cf:94:b5:2e:5b:e9: 22:b9:96:fd:d6:ab:65:ec:bf:74:eb:d5:fe:de:5d:7b:5d:e6: 7e:53:34:fd:1a:8d:72:c8:b2:af:8f:50:a7:3a:2f:dd:18:52: 28:ca:3b:99:9d:cd:b9:79:fd:fd:bd:42:02:b3:b3:b0:f9:3a: 7b:10:32:2b:ef:d9:71:ad:4a:03:bf:e8:0c:5b:f9:30:47:bd: d3:a1:8f:2f:69:7a:cb:36:65:9f:b0:a5:8c:cd:bb:6d:fe:44: 06:91:19:98 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt5fxjyZQIjkxnBXLMIJ+AbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZmE3ZGQ2M2YyZTJkODdiNWY3ODUwMDkzYzc0M2JiZmJl MTRlNDQwHhcNMjYwMTAxMTIxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODgzNjIwYTJmOWY3MDQwMzNjZGI0ZmNhZjJkYzVkYjhmYzc5YzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3cjgIinblchxPnqf+dKOVccDKpQ PZvfgsCOr0l/O+MZfshrEipHwJ3d5hXUze8armIz98t5f+Y15A5f5Ti+NKp+4ki4 Px7FGnG7tp9vNmsn31mLjL3TdmOTxtMX/b0N86O2f5lOfIlyZ6zybHnFZjRG/DoU PQNQg5oZMSSXHhydBu/Zb7TU5bm8T7VQZF5b3/pwgg+h1UthU/MTsjYY8KKM6h7l VIrly/ZUCx/kSQ5l1zudt8QGCW4TV8f7w35VKnDi0LxLExAFXrkjWg4f8L5oTaca ViMpqStIj4tuwFosgHZVN6vvHlNAQGyutBr+7MORfKrvXpGvBbTLptqzdQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFMiDYgovn3BAM820/K8txduPx5wcMB8GA1UdIwQY MBaAFCn6fdY/Li2HtfeFAJPHQ7v74U5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8yYzBjYmYtMTFmNy00YjZkLWI4OGUt NzlmN2I2ZWE3YzE0LzEveUlOaUNpLWZjRUF6emJUOHJ5M0YyNF9IbkJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8yYzBjYmYtMTFmNy00YjZkLWI4OGUtNzlmN2I2ZWE3YzE0 LzEvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYHKhTIggAw DQYJKoZIhvcNAQELBQADggEBAI9kIIl+Z1Jv23JX563v5K+PnBP1OCrOUBQ20Mxg vsNtzgY1XK1Vbs9MUqTyxNegzOT4V4lKnrTw5T+1nqBenW1FHSvrLVZyulbA/afV y/vaXGjH7pZm8YDG7CWiNCaU2oVk3+6hghq5AXhGV/cLaR+4c/NQbIGRwP9n7lmV ejuJUPs9ciPNCziAe256eTk1t08VEmBWoQjYNs7jbc+UtS5b6SK5lv3Wq2Xsv3Tr 1f7eXXtd5n5TNP0ajXLIsq+PUKc6L90YUijKO5mdzbl5/f29QgKzs7D5OnsQMivv 2XGtSgO/6Axb+TBHvdOhjy9pess2ZZ+wpYzNu23+RAaRGZg= -----END CERTIFICATE-----Generated at Sun Jan 25 03:16:15 2026 by rpki-client