This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/y_Cp0Ost5PqmlG4Hk_lC2iR2YZ8.roa File: y_Cp0Ost5PqmlG4Hk_lC2iR2YZ8.roa (raw, json) Hash identifier: x+U/bdDPmhe7n+Wg1yqeuhWGZvsQ5Fcm1ldpfk9dBgs= Subject key identifier: CB:F0:A9:D0:EB:2D:E4:FA:A6:94:6E:07:93:F9:42:DA:24:76:61:9F Certificate issuer: /CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44 Certificate serial: 019B797F1491DB700F512EB41A5F229CDBCB Authority key identifier: 29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/y_Cp0Ost5PqmlG4Hk_lC2iR2YZ8.roa Signing time: Thu 01 Jan 2026 12:18:50 +0000 ROA not before: Thu 01 Jan 2026 12:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 133944 IP address blocks: 2a14:c884:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 18:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:14:91:db:70:0f:51:2e:b4:1a:5f:22:9c:db:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44 Validity Not Before: Jan 1 12:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cbf0a9d0eb2de4faa6946e0793f942da2476619f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b2:23:00:3b:95:0d:a4:eb:30:b6:db:b0:f9: 47:5a:cc:06:b8:dd:ce:ab:18:16:c1:b2:c1:a9:16: 52:0d:92:a4:00:9f:bc:4a:2f:3b:20:c2:fd:d3:da: 3c:26:a8:2b:2a:d5:d5:59:d4:19:d7:cf:ab:2c:a3: 8b:5e:13:5f:b3:1f:7e:63:a4:c6:a3:52:df:6d:c5: 84:6a:c4:cb:ff:f2:d4:c7:30:ba:90:26:b7:76:88: e0:85:16:20:19:6b:6c:1f:9f:be:f5:45:3a:02:ef: 97:cb:41:65:0c:49:89:82:02:73:1d:8a:2e:8d:5e: b0:b0:1f:0c:c3:d9:6d:a8:45:f9:8b:6a:8d:3d:89: c0:2e:6d:f4:0a:39:67:21:db:46:b3:53:02:02:63: d5:b3:8d:1d:87:1d:d6:cb:11:2b:f3:a9:2e:7e:0b: 98:bc:95:14:9a:5b:78:94:1d:e1:c4:a4:4b:23:c2: a2:3b:23:f6:42:8f:60:88:a0:63:e2:ff:54:f9:a3: 79:db:e9:2b:8d:9b:d2:46:79:e8:b8:2f:7b:fb:98: 52:02:51:44:ba:46:0e:a8:5e:14:0c:70:d9:f1:f4: cb:64:46:25:26:61:39:38:86:7e:d8:6b:3b:3b:bb: 6b:5c:8a:b7:da:a1:82:b3:d5:3e:bf:fb:46:49:cf: c6:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:F0:A9:D0:EB:2D:E4:FA:A6:94:6E:07:93:F9:42:DA:24:76:61:9F X509v3 Authority Key Identifier: keyid:29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/y_Cp0Ost5PqmlG4Hk_lC2iR2YZ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:c884:8000::/33 Signature Algorithm: sha256WithRSAEncryption 64:a1:cd:2f:9a:af:ca:7f:b2:fe:fc:22:e1:f5:9f:d7:16:bf: ca:a7:c2:b5:25:ef:c2:6c:a9:c9:43:06:c5:15:8f:19:b2:dc: b6:ab:77:b0:af:77:20:ed:92:32:98:7e:27:ce:8f:62:e7:04: 99:b2:b9:b6:2f:c0:47:bf:67:81:bd:72:a3:ee:e3:3b:e9:e4: 3c:f8:05:51:0c:77:c0:4e:c3:83:fa:df:23:f2:ad:63:4e:9c: 87:f1:0e:f3:bd:98:32:3c:af:bf:b5:07:3d:88:92:77:d9:38: ef:d4:30:df:6e:91:6a:25:6b:f9:a8:f5:87:c0:46:a9:64:33: d6:e6:79:72:e9:92:c2:f8:9b:b9:ff:48:ba:91:90:7d:cf:7a: ac:5c:4c:5a:6c:32:77:8c:34:0c:2a:2d:f6:d3:2c:c7:10:e3: cf:6f:5a:15:09:7e:8b:2f:2d:36:e5:01:8d:07:b6:b2:ae:8a: 54:bd:08:ba:33:9a:37:2a:42:c0:d6:b7:f7:83:79:2d:e4:68: 6d:00:ac:23:61:3b:b7:46:b2:99:b9:42:b1:7a:75:4f:8a:2f: f2:e2:e4:20:ab:c1:d7:5d:c6:f7:69:5d:be:6f:77:03:62:6f: 13:55:d0:aa:25:f9:e9:8a:f1:e7:5c:3e:7d:ce:90:00:c3:f1: cb:7d:96:55 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt5fxSR23APUS60Gl8inNvLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZmE3ZGQ2M2YyZTJkODdiNWY3ODUwMDkzYzc0M2JiZmJl MTRlNDQwHhcNMjYwMTAxMTIxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYmYwYTlkMGViMmRlNGZhYTY5NDZlMDc5M2Y5NDJkYTI0NzY2MTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLIjADuVDaTrMLbbsPlHWswGuN3O qxgWwbLBqRZSDZKkAJ+8Si87IML909o8JqgrKtXVWdQZ18+rLKOLXhNfsx9+Y6TG o1LfbcWEasTL//LUxzC6kCa3dojghRYgGWtsH5++9UU6Au+Xy0FlDEmJggJzHYou jV6wsB8Mw9ltqEX5i2qNPYnALm30CjlnIdtGs1MCAmPVs40dhx3WyxEr86kufguY vJUUmlt4lB3hxKRLI8KiOyP2Qo9giKBj4v9U+aN52+krjZvSRnnouC97+5hSAlFE ukYOqF4UDHDZ8fTLZEYlJmE5OIZ+2Gs7O7trXIq32qGCs9U+v/tGSc/GMQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFMvwqdDrLeT6ppRuB5P5QtokdmGfMB8GA1UdIwQY MBaAFCn6fdY/Li2HtfeFAJPHQ7v74U5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8yYzBjYmYtMTFmNy00YjZkLWI4OGUt NzlmN2I2ZWE3YzE0LzEveV9DcDBPc3Q1UHFtbEc0SGtfbEMyaVIyWVo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8yYzBjYmYtMTFmNy00YjZkLWI4OGUtNzlmN2I2ZWE3YzE0 LzEvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYHKhTIhIAw DQYJKoZIhvcNAQELBQADggEBAGShzS+ar8p/sv78IuH1n9cWv8qnwrUl78JsqclD BsUVjxmy3Lard7CvdyDtkjKYfifOj2LnBJmyubYvwEe/Z4G9cqPu4zvp5Dz4BVEM d8BOw4P63yPyrWNOnIfxDvO9mDI8r7+1Bz2IknfZOO/UMN9ukWola/mo9YfARqlk M9bmeXLpksL4m7n/SLqRkH3PeqxcTFpsMneMNAwqLfbTLMcQ489vWhUJfosvLTbl AY0HtrKuilS9CLozmjcqQsDWt/eDeS3kaG0ArCNhO7dGspm5QrF6dU+KL/Li5CCr wdddxvdpXb5vdwNibxNV0Kol+emK8edcPn3OkADD8ct9llU= -----END CERTIFICATE-----Generated at Sun Jan 25 03:14:27 2026 by rpki-client