This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/Y5gKLRwpUMqFwTEscCxgZWU2sQY.roa File: Y5gKLRwpUMqFwTEscCxgZWU2sQY.roa (raw, json) Hash identifier: ZuEdcXKIOLBAaLr/kpTxnRgJ83HAeWNucKuIyBBaRCI= Subject key identifier: 63:98:0A:2D:1C:29:50:CA:85:C1:31:2C:70:2C:60:65:65:36:B1:06 Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0 Certificate serial: 019B7758F1B9185C2B3265E140DA293B09DD Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/Y5gKLRwpUMqFwTEscCxgZWU2sQY.roa Signing time: Thu 01 Jan 2026 02:17:56 +0000 ROA not before: Thu 01 Jan 2026 02:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215995 IP address blocks: 2a0f:5707:cf80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:f1:b9:18:5c:2b:32:65:e1:40:da:29:3b:09:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0 Validity Not Before: Jan 1 02:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63980a2d1c2950ca85c1312c702c60656536b106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f7:3c:9c:55:80:b4:33:c4:66:ca:9d:c1:52: e4:ec:bc:9f:fb:2a:65:7c:47:61:60:3e:5f:b7:9b: 95:64:94:4b:43:09:6e:4d:d9:53:51:42:ab:aa:d0: 95:ef:7e:7a:78:d8:23:11:48:c2:8c:fb:15:40:2a: 23:51:4e:a1:95:3d:13:3b:30:59:6a:f5:67:1d:81: b2:6b:99:16:95:f5:d5:f8:b0:66:29:9d:40:7c:1e: a3:bc:cc:31:04:4e:4b:6a:d5:6d:cd:ff:7b:ae:6c: 6d:b5:4b:4e:8e:e5:04:f4:e3:f2:94:a3:e7:57:20: 8a:15:9a:d9:82:de:06:74:9b:09:c9:02:08:cd:45: f8:36:6d:f2:27:e1:06:13:bc:75:0f:43:de:be:fc: 6b:3e:ad:93:8a:52:8b:ed:12:db:77:54:f3:47:d4: b9:bf:eb:ab:fc:28:72:55:c5:49:92:51:c3:44:37: 4e:ca:f2:78:c3:65:93:c7:d7:f6:51:97:d0:df:6f: 0e:37:61:81:ec:2b:c9:5f:4b:6f:96:18:9a:c3:60: b5:c7:cc:42:b3:0b:2a:65:8d:7e:e4:e9:e8:8e:38: 4f:a2:2a:de:47:a5:da:46:b6:92:c0:6a:0e:66:4a: e3:0c:65:51:0b:86:2a:e5:79:fd:7f:0b:e8:25:30: 54:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:98:0A:2D:1C:29:50:CA:85:C1:31:2C:70:2C:60:65:65:36:B1:06 X509v3 Authority Key Identifier: keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/Y5gKLRwpUMqFwTEscCxgZWU2sQY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:5707:cf80::/48 Signature Algorithm: sha256WithRSAEncryption 22:ee:66:ce:8a:2a:fb:a1:eb:73:fe:a8:bb:9f:b4:60:86:40: 8c:92:89:e4:3b:74:7d:1e:ec:5a:a8:80:2f:d4:72:81:8f:60: e8:63:ad:ab:5d:85:19:5b:83:97:9a:e3:35:fa:60:1e:f6:58: 01:7c:d3:27:88:a7:95:65:fb:c1:69:73:bc:b1:4f:6c:b8:1f: 40:e5:7c:05:96:e7:9f:35:c4:15:e4:e9:e1:dd:1f:f3:b8:3a: 40:01:d9:d4:83:b3:ae:81:70:ec:03:29:c6:c7:45:93:37:9b: 5d:19:fc:5b:1c:c4:8f:79:56:99:f1:6d:ba:15:d8:aa:72:58: 14:c0:5f:5c:8e:c8:20:99:4c:9c:1b:14:c4:5d:8b:59:fb:ba: 5c:3b:da:9b:f0:c1:02:ef:4c:01:a3:58:09:9e:9d:86:eb:bd: 0b:c7:63:51:a0:a6:8e:a7:b0:1d:d6:96:d1:5f:80:8d:d5:b3: be:fc:e2:c7:7a:33:d0:12:c0:d0:89:2c:6c:6f:17:01:bd:6b: d3:2e:4d:f1:14:32:1c:9d:09:20:89:ee:54:d3:94:f0:55:36: 78:f4:31:56:81:1f:e8:9d:8c:02:3d:6e:fc:09:f2:5b:be:a2: 66:6c:b8:b3:a2:54:fa:b7:b5:c1:b9:74:50:d1:09:01:5d:ab: 13:37:a7:2b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WPG5GFwrMmXhQNopOwndMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNjQ0YzExNTY4NTE4MDNmMzdhZGVlYzA4NzZjY2Y5ODlk NWFlZjAwHhcNMjYwMTAxMDIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Mzk4MGEyZDFjMjk1MGNhODVjMTMxMmM3MDJjNjA2NTY1MzZiMTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/c8nFWAtDPEZsqdwVLk7Lyf+ypl fEdhYD5ft5uVZJRLQwluTdlTUUKrqtCV7356eNgjEUjCjPsVQCojUU6hlT0TOzBZ avVnHYGya5kWlfXV+LBmKZ1AfB6jvMwxBE5LatVtzf97rmxttUtOjuUE9OPylKPn VyCKFZrZgt4GdJsJyQIIzUX4Nm3yJ+EGE7x1D0PevvxrPq2TilKL7RLbd1TzR9S5 v+ur/ChyVcVJklHDRDdOyvJ4w2WTx9f2UZfQ328ON2GB7CvJX0tvlhiaw2C1x8xC swsqZY1+5OnojjhPoireR6XaRraSwGoOZkrjDGVRC4Yq5Xn9fwvoJTBU3wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGOYCi0cKVDKhcExLHAsYGVlNrEGMB8GA1UdIwQY MBaAFEpkTBFWhRgD83re7Ah2zPmJ1a7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3Mzkt Y2MxYzliNWY2NjQwLzEvWTVnS0xSd3BVTXFGd1RFc2NDeGdaV1Uyc1FZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3MzktY2MxYzliNWY2NjQw LzEvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9XB8+A MA0GCSqGSIb3DQEBCwUAA4IBAQAi7mbOiir7oetz/qi7n7RghkCMkonkO3R9Huxa qIAv1HKBj2DoY62rXYUZW4OXmuM1+mAe9lgBfNMniKeVZfvBaXO8sU9suB9A5XwF luefNcQV5Onh3R/zuDpAAdnUg7OugXDsAynGx0WTN5tdGfxbHMSPeVaZ8W26Fdiq clgUwF9cjsggmUycGxTEXYtZ+7pcO9qb8MEC70wBo1gJnp2G670Lx2NRoKaOp7Ad 1pbRX4CN1bO+/OLHejPQEsDQiSxsbxcBvWvTLk3xFDIcnQkgie5U05TwVTZ49DFW gR/onYwCPW78CfJbvqJmbLizolT6t7XBuXRQ0QkBXasTN6cr -----END CERTIFICATE-----Generated at Mon Jan 26 12:31:40 2026 by rpki-client