This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/y7rxPQXdQykP2HWundiTAhRuuNE.roa File: y7rxPQXdQykP2HWundiTAhRuuNE.roa (raw, json) Hash identifier: kwq12jPHanXZhrxqm5HaXAm17ns+Kl4rOD8Lx3F1wV8= Subject key identifier: CB:BA:F1:3D:05:DD:43:29:0F:D8:75:AE:9D:D8:93:02:14:6E:B8:D1 Certificate issuer: /CN=5fc90518df70b13d706bfe237aa5a76926a576d1 Certificate serial: 019B7EA6D9B3F3E9CE1016BC57246C29DFE6 Authority key identifier: 5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/y7rxPQXdQykP2HWundiTAhRuuNE.roa Signing time: Fri 02 Jan 2026 12:20:22 +0000 ROA not before: Fri 02 Jan 2026 12:20:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55201 IP address blocks: 2001:3782::/32 maxlen: 40 2a12:4042::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:d9:b3:f3:e9:ce:10:16:bc:57:24:6c:29:df:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fc90518df70b13d706bfe237aa5a76926a576d1 Validity Not Before: Jan 2 12:20:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cbbaf13d05dd43290fd875ae9dd89302146eb8d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:58:14:e9:b2:a0:ad:73:12:59:2c:4d:e3:a9: 7c:27:59:7f:7f:74:ea:e1:0f:02:9c:7f:e8:54:d4: 31:d8:c6:fb:7a:d2:b0:a4:09:23:da:95:69:eb:73: 74:65:3c:d3:23:a5:99:4b:3f:5c:cd:5c:d8:83:29: d5:86:b9:5c:93:51:e2:f6:fb:03:de:51:2b:dd:79: 54:25:4e:2f:b0:9b:1b:e3:1c:6c:be:e8:ed:04:4a: 02:10:4c:45:ed:31:c5:76:38:3c:ea:b8:47:6e:78: 5a:49:04:ff:6c:4b:94:83:0d:9d:b8:c4:d0:c5:61: 99:38:1a:8e:b3:78:b4:fa:72:fb:cc:12:99:46:fa: 93:e0:a2:e1:da:a9:f3:e5:13:54:dc:22:f3:b2:59: 24:b0:7c:94:d0:8c:b4:7d:78:a1:ad:3f:dd:e9:fc: e7:9b:37:52:cc:b1:15:4a:5c:e1:04:8e:6c:76:eb: 87:fe:fa:aa:6b:14:68:42:bd:8e:59:28:eb:00:2f: e3:17:04:31:ad:6d:fb:43:93:c4:5f:6e:3b:b5:93: 94:1a:0e:2c:1c:1c:b7:3a:ef:a6:6e:3d:bf:36:0e: 4f:8f:75:04:6b:14:88:1c:8b:d0:21:03:b4:07:31: 90:36:72:cf:06:f4:59:cd:ef:4e:1e:c8:c5:d9:73: 61:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:BA:F1:3D:05:DD:43:29:0F:D8:75:AE:9D:D8:93:02:14:6E:B8:D1 X509v3 Authority Key Identifier: keyid:5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/y7rxPQXdQykP2HWundiTAhRuuNE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:3782::/32 2a12:4042::/32 Signature Algorithm: sha256WithRSAEncryption 37:d7:58:48:42:5e:57:38:18:d6:5b:0b:12:dc:1e:df:db:02: 21:a8:64:49:82:7a:3a:33:99:3c:72:f1:d4:2a:06:12:12:a0: be:f1:3c:0c:2d:f3:c0:8a:5a:3f:d3:96:2d:13:bc:84:95:ad: 7a:68:eb:42:84:f8:29:e1:02:e8:cc:5b:48:02:41:70:05:05: 7c:40:bc:b6:29:d1:aa:d8:84:a5:a9:c2:e2:1c:d6:46:89:8b: d3:c2:11:96:dd:f9:ae:46:d2:09:8f:fb:61:89:48:3e:0f:9c: b3:12:ad:0d:fb:50:1a:de:ad:79:12:86:bc:2d:98:6e:c2:23: 74:48:8c:e9:50:9d:16:b6:80:25:ba:33:1b:bb:80:81:ff:09: 87:92:f3:79:39:f9:ea:5b:4f:74:d2:71:3a:25:b1:ac:fa:55: 7c:10:cb:2b:e8:8f:8c:b2:f6:32:1d:ed:16:34:b4:eb:e0:d2: 07:98:3b:d6:90:41:94:f7:2c:10:17:3f:84:6a:d3:64:45:b0: 67:9d:91:d7:b5:36:b1:e6:3f:1f:7b:e3:e1:19:ee:81:f7:20: 85:e3:07:ab:04:25:ac:dc:b8:2c:a1:ec:9d:c4:7e:a2:d2:de: 2a:3c:46:2c:8c:98:0f:46:07:ef:dc:82:17:47:fb:6a:47:0a: 0c:5c:62:de -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt+ptmz8+nOEBa8VyRsKd/mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYzkwNTE4ZGY3MGIxM2Q3MDZiZmUyMzdhYTVhNzY5MjZh NTc2ZDEwHhcNMjYwMTAyMTIyMDIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYmJhZjEzZDA1ZGQ0MzI5MGZkODc1YWU5ZGQ4OTMwMjE0NmViOGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFgU6bKgrXMSWSxN46l8J1l/f3Tq 4Q8CnH/oVNQx2Mb7etKwpAkj2pVp63N0ZTzTI6WZSz9czVzYgynVhrlck1Hi9vsD 3lEr3XlUJU4vsJsb4xxsvujtBEoCEExF7THFdjg86rhHbnhaSQT/bEuUgw2duMTQ xWGZOBqOs3i0+nL7zBKZRvqT4KLh2qnz5RNU3CLzslkksHyU0Iy0fXihrT/d6fzn mzdSzLEVSlzhBI5sduuH/vqqaxRoQr2OWSjrAC/jFwQxrW37Q5PEX247tZOUGg4s HBy3Ou+mbj2/Ng5Pj3UEaxSIHIvQIQO0BzGQNnLPBvRZze9OHsjF2XNhaQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFMu68T0F3UMpD9h1rp3YkwIUbrjRMB8GA1UdIwQY MBaAFF/JBRjfcLE9cGv+I3qlp2kmpXbRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDhrRkdOOXdzVDF3YV80amVxV25hU2FsZHRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82NWNjMjAtMGRmYi00MTgwLTlhYzEt YzgzMDJlODJlYTIyLzEveTdyeFBRWGRReWtQMkhXdW5kaVRBaFJ1dU5FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS82NWNjMjAtMGRmYi00MTgwLTlhYzEtYzgzMDJlODJlYTIy LzEvWDhrRkdOOXdzVDF3YV80amVxV25hU2FsZHRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUAIAE3ggMF ACoSQEIwDQYJKoZIhvcNAQELBQADggEBADfXWEhCXlc4GNZbCxLcHt/bAiGoZEmC ejozmTxy8dQqBhISoL7xPAwt88CKWj/Tli0TvISVrXpo60KE+CnhAujMW0gCQXAF BXxAvLYp0arYhKWpwuIc1kaJi9PCEZbd+a5G0gmP+2GJSD4PnLMSrQ37UBrerXkS hrwtmG7CI3RIjOlQnRa2gCW6Mxu7gIH/CYeS83k5+epbT3TScTolsaz6VXwQyyvo j4yy9jId7RY0tOvg0geYO9aQQZT3LBAXP4Rq02RFsGedkde1NrHmPx974+EZ7oH3 IIXjB6sEJazcuCyh7J3EfqLS3io8RiyMmA9GB+/cghdH+2pHCgxcYt4= -----END CERTIFICATE-----Generated at Wed Jan 21 11:14:23 2026 by rpki-client