This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/ytSYW9uePGMbZ79Lq_rgcm-M5Zw.roa File: ytSYW9uePGMbZ79Lq_rgcm-M5Zw.roa (raw, json) Hash identifier: Y13kOAlNy0Wbk1bHbXfUJdX2fwgc6gfKxcan1EEpTzo= Subject key identifier: CA:D4:98:5B:DB:9E:3C:63:1B:67:BF:4B:AB:FA:E0:72:6F:8C:E5:9C Certificate issuer: /CN=4d946f4df2237491a68dfa407be41fae84bbda66 Certificate serial: 019B7D5BEC2E6BB3243C658BB77E9D371752 Authority key identifier: 4D:94:6F:4D:F2:23:74:91:A6:8D:FA:40:7B:E4:1F:AE:84:BB:DA:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZRvTfIjdJGmjfpAe-QfroS72mY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/ytSYW9uePGMbZ79Lq_rgcm-M5Zw.roa Signing time: Fri 02 Jan 2026 06:18:54 +0000 ROA not before: Fri 02 Jan 2026 06:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210729 IP address blocks: 2001:67c:1bc8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.mft rsync://rpki.ripe.net/repository/DEFAULT/TZRvTfIjdJGmjfpAe-QfroS72mY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:ec:2e:6b:b3:24:3c:65:8b:b7:7e:9d:37:17:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d946f4df2237491a68dfa407be41fae84bbda66 Validity Not Before: Jan 2 06:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cad4985bdb9e3c631b67bf4babfae0726f8ce59c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f3:cc:55:74:c0:e6:db:72:53:d3:2d:d4:ab: a0:e7:89:1e:0a:65:fc:28:2a:02:87:17:f5:26:03: e1:64:54:97:91:8e:67:cb:23:9e:d8:93:8a:d8:ef: 34:04:86:32:8d:13:05:11:24:0f:11:6d:da:41:ab: 71:83:54:52:bc:1c:bb:c4:32:ae:2c:a2:fd:be:33: 82:e6:de:aa:20:79:62:a9:e3:d2:b6:58:cf:c6:19: d5:25:f2:74:56:e4:fe:10:37:8c:c9:62:e4:1f:00: 92:ea:ce:90:a2:e1:28:16:75:86:05:0b:29:69:d1: 84:bd:e1:52:f8:48:19:7f:36:72:9e:c9:e4:05:a0: 1d:a3:ce:33:d3:35:16:31:ce:3f:d1:12:1b:a8:f1: 0a:8c:d9:9b:f7:4d:69:c9:4c:39:08:df:10:93:8c: 7d:59:1f:21:96:1a:ae:d1:b8:3a:e3:21:10:94:25: 31:d7:74:2f:ab:fe:f7:87:e6:9f:d6:39:e2:a0:2f: 40:7c:82:1b:56:a8:90:72:f2:41:8a:ee:b9:22:73: d5:1f:5b:2f:b8:4a:10:a6:0c:4c:9c:5d:c5:bc:79: 22:c3:02:18:87:7b:1b:8a:e8:6d:62:f9:ce:e0:55: ac:34:72:7f:dd:1a:7f:5e:1a:b1:42:2a:7b:58:ad: 17:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:D4:98:5B:DB:9E:3C:63:1B:67:BF:4B:AB:FA:E0:72:6F:8C:E5:9C X509v3 Authority Key Identifier: keyid:4D:94:6F:4D:F2:23:74:91:A6:8D:FA:40:7B:E4:1F:AE:84:BB:DA:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZRvTfIjdJGmjfpAe-QfroS72mY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/ytSYW9uePGMbZ79Lq_rgcm-M5Zw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:1bc8::/48 Signature Algorithm: sha256WithRSAEncryption 19:34:07:c0:aa:68:dc:b9:a4:4b:18:80:20:b7:dd:ab:68:14: 65:45:63:ee:00:77:53:2d:80:f2:b4:04:dd:e5:4d:80:cb:d0: 5e:3b:e7:45:ca:91:38:d7:31:ab:9d:9e:1b:ab:64:7b:e7:2e: 9f:e8:4b:ee:15:b7:2b:79:55:f2:2c:bd:fd:f5:ee:e2:77:ea: 52:0a:12:3b:3f:e3:2f:bd:7a:f0:b4:a4:65:43:b8:a6:4c:34: 99:78:f9:b6:35:60:64:93:9f:4d:0d:89:4b:5c:3c:d9:ba:a1: 4a:4b:ac:9d:e3:a3:0b:24:db:93:7a:15:ee:dc:04:61:48:f5: 7d:b9:b7:e6:88:0e:02:a8:08:47:9a:68:72:83:35:b9:a2:a3: 87:06:a2:71:d6:e9:28:1c:c3:73:70:73:90:f3:61:77:47:1d: a1:89:f2:3a:f7:ac:80:7d:be:d8:37:9e:f6:d7:14:43:fd:a9: e2:be:17:a4:2a:49:71:9a:7f:1b:a5:17:40:80:1c:e1:2b:c5: 4f:eb:00:55:0c:ba:88:69:e6:1f:32:c6:5f:8a:2a:2e:27:a6: 44:1e:3d:9a:1c:bf:c4:fb:64:4d:1d:87:ef:d6:2f:8e:e0:ba: 45:92:5c:80:b7:79:f6:59:c3:ed:8e:90:d1:c9:0e:65:77:55: 99:59:6f:a4 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9W+wua7MkPGWLt36dNxdSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkOTQ2ZjRkZjIyMzc0OTFhNjhkZmE0MDdiZTQxZmFlODRi YmRhNjYwHhcNMjYwMTAyMDYxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYWQ0OTg1YmRiOWUzYzYzMWI2N2JmNGJhYmZhZTA3MjZmOGNlNTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfPMVXTA5ttyU9Mt1Kug54keCmX8 KCoChxf1JgPhZFSXkY5nyyOe2JOK2O80BIYyjRMFESQPEW3aQatxg1RSvBy7xDKu LKL9vjOC5t6qIHliqePStljPxhnVJfJ0VuT+EDeMyWLkHwCS6s6QouEoFnWGBQsp adGEveFS+EgZfzZynsnkBaAdo84z0zUWMc4/0RIbqPEKjNmb901pyUw5CN8Qk4x9 WR8hlhqu0bg64yEQlCUx13Qvq/73h+af1jnioC9AfIIbVqiQcvJBiu65InPVH1sv uEoQpgxMnF3FvHkiwwIYh3sbiuhtYvnO4FWsNHJ/3Rp/XhqxQip7WK0X5wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMrUmFvbnjxjG2e/S6v64HJvjOWcMB8GA1UdIwQY MBaAFE2Ub03yI3SRpo36QHvkH66Eu9pmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFpSdlRmSWpkSkdtamZwQWUtUWZyb1M3Mm1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9jYmZkMWUtMTIwMi00MGMxLWJkZjAt YzI0ZWUwNDk0NTQxLzEveXRTWVc5dWVQR01iWjc5THFfcmdjbS1NNVp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9jYmZkMWUtMTIwMi00MGMxLWJkZjAtYzI0ZWUwNDk0NTQx LzEvVFpSdlRmSWpkSkdtamZwQWUtUWZyb1M3Mm1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBvI MA0GCSqGSIb3DQEBCwUAA4IBAQAZNAfAqmjcuaRLGIAgt92raBRlRWPuAHdTLYDy tATd5U2Ay9BeO+dFypE41zGrnZ4bq2R75y6f6EvuFbcreVXyLL399e7id+pSChI7 P+MvvXrwtKRlQ7imTDSZePm2NWBkk59NDYlLXDzZuqFKS6yd46MLJNuTehXu3ARh SPV9ubfmiA4CqAhHmmhygzW5oqOHBqJx1ukoHMNzcHOQ82F3Rx2hifI696yAfb7Y N5721xRD/anivhekKklxmn8bpRdAgBzhK8VP6wBVDLqIaeYfMsZfiiouJ6ZEHj2a HL/E+2RNHYfv1i+O4LpFklyAt3n2WcPtjpDRyQ5ld1WZWW+k -----END CERTIFICATE-----Generated at Mon Feb 9 20:46:21 2026 by rpki-client