This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Y3gcU8t1P9nvXXzgma12JEBqkNc.roa File: Y3gcU8t1P9nvXXzgma12JEBqkNc.roa (raw, json) Hash identifier: 3ll638VRV+JqvYkqqXrm9wx9W0ZsruIH9/tXGZXSRm8= Subject key identifier: 63:78:1C:53:CB:75:3F:D9:EF:5D:7C:E0:99:AD:76:24:40:6A:90:D7 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B7FF1BBF6D0B159DA74AAABBF28316D4F Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Y3gcU8t1P9nvXXzgma12JEBqkNc.roa Signing time: Fri 02 Jan 2026 18:21:47 +0000 ROA not before: Fri 02 Jan 2026 18:21:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 152697 IP address blocks: 2a0e:9b00::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:bb:f6:d0:b1:59:da:74:aa:ab:bf:28:31:6d:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Jan 2 18:21:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63781c53cb753fd9ef5d7ce099ad7624406a90d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:17:cb:83:a8:28:46:11:b6:91:6a:36:b1:9b: 2d:1b:18:92:0a:ef:13:36:84:4d:49:03:85:0a:be: d2:f7:f2:44:b8:73:de:ab:42:30:a3:e9:c9:e4:ea: 88:91:af:b3:96:b2:0e:95:35:0d:e4:06:3f:de:a9: e1:a9:26:89:a3:4d:95:83:86:59:e8:e5:32:bb:22: 86:e3:69:a9:f5:6e:ee:3c:65:e4:33:fc:9a:eb:51: 6f:22:68:6f:2b:5e:5b:aa:50:a5:ef:27:5a:65:83: 57:34:67:43:70:93:5e:47:76:2a:31:2b:7b:49:f9: f7:b4:3a:dc:bc:96:b6:40:22:15:bb:70:32:90:96: a3:40:8d:c8:72:d4:c4:1d:7d:42:e7:d9:84:1f:14: 80:a1:ec:03:cc:73:92:9f:d9:c3:3e:d9:14:fb:14: 4c:56:93:66:54:f7:6f:24:7d:ff:75:7d:00:cf:00: ae:bf:07:3a:d1:74:57:cd:cd:b7:56:80:a5:5b:24: 49:aa:92:d2:45:73:be:53:fe:ba:5a:8f:64:7e:f4: 39:ce:59:25:ab:51:4e:45:82:b5:ab:62:c1:eb:a0: 75:49:f7:aa:b8:38:03:56:95:19:3f:a9:b9:84:27: a4:75:d1:84:aa:33:d9:da:ed:7f:3e:69:12:01:08: ab:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:78:1C:53:CB:75:3F:D9:EF:5D:7C:E0:99:AD:76:24:40:6A:90:D7 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Y3gcU8t1P9nvXXzgma12JEBqkNc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:9b00::/29 Signature Algorithm: sha256WithRSAEncryption 38:cf:42:19:28:a4:c8:af:ce:c0:5a:68:cd:c7:b5:db:44:0f: 0f:68:74:80:4c:e2:4d:6d:6e:aa:b8:83:ff:0b:eb:a3:cb:f2: 26:bf:48:5f:33:69:cf:e8:1f:e4:3e:43:81:39:f1:ff:3b:a3: cb:9f:c0:d0:10:94:b3:5c:1a:43:84:ec:61:c0:3e:d1:a2:d7: d7:03:06:91:69:4f:4a:ed:69:4d:85:0f:2b:c0:c9:8d:be:42: 3f:82:cb:26:68:cc:d4:51:26:9e:b0:f1:bc:d0:81:e3:54:a6: ce:c0:6a:aa:6d:82:ff:88:7d:3c:85:6d:d5:b5:3d:78:3e:dd: a7:57:55:4d:14:90:e9:7b:e2:44:3c:af:e8:d3:8b:47:33:30: 78:ae:4d:57:db:3d:66:25:5c:91:53:ab:62:c2:4b:17:b1:99: 81:50:5c:88:8b:5b:46:d2:e6:f9:d1:10:af:72:33:a5:70:0c: 57:b2:e5:52:cc:c1:88:06:fc:66:85:26:80:72:59:30:ff:50: 4a:1e:71:58:06:0d:1d:75:fe:82:90:dc:0c:15:a2:4b:ea:cc: 6b:9c:ca:9e:fc:8b:a3:e5:91:3c:23:b3:aa:ae:c2:85:4e:ca: 71:dd:d6:0f:09:19:19:5d:9b:a4:30:a1:3c:b8:f0:2d:03:1a: 1e:3b:bc:af -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/8bv20LFZ2nSqq78oMW1PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjYwMTAyMTgyMTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Mzc4MWM1M2NiNzUzZmQ5ZWY1ZDdjZTA5OWFkNzYyNDQwNmE5MGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxfLg6goRhG2kWo2sZstGxiSCu8T NoRNSQOFCr7S9/JEuHPeq0Iwo+nJ5OqIka+zlrIOlTUN5AY/3qnhqSaJo02Vg4ZZ 6OUyuyKG42mp9W7uPGXkM/ya61FvImhvK15bqlCl7ydaZYNXNGdDcJNeR3YqMSt7 Sfn3tDrcvJa2QCIVu3AykJajQI3IctTEHX1C59mEHxSAoewDzHOSn9nDPtkU+xRM VpNmVPdvJH3/dX0AzwCuvwc60XRXzc23VoClWyRJqpLSRXO+U/66Wo9kfvQ5zlkl q1FORYK1q2LB66B1SfequDgDVpUZP6m5hCekddGEqjPZ2u1/PmkSAQirrQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFGN4HFPLdT/Z71184JmtdiRAapDXMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvWTNnY1U4dDFQOW52WFh6Z21hMTJKRUJxa05jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg6bADAN BgkqhkiG9w0BAQsFAAOCAQEAOM9CGSikyK/OwFpozce120QPD2h0gEziTW1uqriD /wvro8vyJr9IXzNpz+gf5D5DgTnx/zujy5/A0BCUs1waQ4TsYcA+0aLX1wMGkWlP Su1pTYUPK8DJjb5CP4LLJmjM1FEmnrDxvNCB41SmzsBqqm2C/4h9PIVt1bU9eD7d p1dVTRSQ6XviRDyv6NOLRzMweK5NV9s9ZiVckVOrYsJLF7GZgVBciItbRtLm+dEQ r3IzpXAMV7LlUszBiAb8ZoUmgHJZMP9QSh5xWAYNHXX+gpDcDBWiS+rMa5zKnvyL o+WRPCOzqq7ChU7Kcd3WDwkZGV2bpDChPLjwLQMaHju8rw== -----END CERTIFICATE-----Generated at Tue Jan 20 09:07:46 2026 by rpki-client