This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/Yvzp8k7tse_tqbxpodE5jMc5Rds.roa File: Yvzp8k7tse_tqbxpodE5jMc5Rds.roa (raw, json) Hash identifier: XO+F/9KhQMsBIWzLbEjgPyX2zSSbeZO2QWXWRdGBXsc= Subject key identifier: 62:FC:E9:F2:4E:ED:B1:EF:ED:A9:BC:69:A1:D1:39:8C:C7:39:45:DB Certificate issuer: /CN=e3463594c377cd5887de9078b4b2e8cdc4d3ae5b Certificate serial: 019B77C7479B4670A09E8A3AF4B5A0BFC1CE Authority key identifier: E3:46:35:94:C3:77:CD:58:87:DE:90:78:B4:B2:E8:CD:C4:D3:AE:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/40Y1lMN3zViH3pB4tLLozcTTrls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/Yvzp8k7tse_tqbxpodE5jMc5Rds.roa Signing time: Thu 01 Jan 2026 04:18:27 +0000 ROA not before: Thu 01 Jan 2026 04:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201647 IP address blocks: 2a14:5700::/29 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.mft rsync://rpki.ripe.net/repository/DEFAULT/40Y1lMN3zViH3pB4tLLozcTTrls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:47:9b:46:70:a0:9e:8a:3a:f4:b5:a0:bf:c1:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3463594c377cd5887de9078b4b2e8cdc4d3ae5b Validity Not Before: Jan 1 04:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=62fce9f24eedb1efeda9bc69a1d1398cc73945db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:10:54:d3:f3:d7:d5:94:0f:47:ad:94:0c:86: 10:22:a2:37:03:0f:f8:8c:d0:b1:39:6c:bc:50:df: 6a:2a:5b:96:42:b1:1e:86:3b:a5:fe:78:bd:2b:a0: 35:5b:99:82:fd:c3:45:a8:29:f1:c6:4d:dd:4d:c1: a1:1b:ca:93:fc:51:10:f2:44:60:3b:25:c7:7e:e9: 2d:91:6f:1c:b6:35:d7:c8:09:56:7d:59:fe:b4:c1: 5e:27:8e:24:35:bc:5a:79:f9:a4:de:7f:0e:84:23: f0:44:e6:6f:21:24:d1:7d:70:b6:a6:23:8b:26:d3: b4:2b:49:bd:2d:98:a0:d2:8c:d6:6d:a5:b1:f5:d2: 05:36:70:cc:b7:24:18:2b:18:b6:ae:bc:b1:f7:cf: 7d:58:3b:43:05:de:f8:aa:ed:5f:0d:c5:ed:6c:9f: 2c:91:f9:01:9c:cb:0e:3a:95:63:5a:c2:bf:5c:cc: 1c:96:0f:04:53:29:6b:04:5b:1c:5b:90:7a:54:6a: 5f:75:95:7b:ef:7d:b2:44:2b:01:2e:2c:9b:c0:a0: 5a:a5:88:6b:52:9d:c2:ec:8e:b2:d3:f0:03:4f:13: 2e:b7:98:69:f6:3e:8c:2c:c5:44:c8:69:58:c8:18: 7d:e0:c4:4e:76:e7:ec:b4:8c:f2:c7:10:da:42:63: d3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:FC:E9:F2:4E:ED:B1:EF:ED:A9:BC:69:A1:D1:39:8C:C7:39:45:DB X509v3 Authority Key Identifier: keyid:E3:46:35:94:C3:77:CD:58:87:DE:90:78:B4:B2:E8:CD:C4:D3:AE:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40Y1lMN3zViH3pB4tLLozcTTrls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/Yvzp8k7tse_tqbxpodE5jMc5Rds.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:5700::/29 Signature Algorithm: sha256WithRSAEncryption 48:24:bb:37:4f:08:a8:26:31:b9:82:dc:9e:a9:71:c8:b3:b5: 9d:5a:69:dd:25:bb:1b:e2:75:55:2e:03:92:2e:49:4c:09:a5: c4:11:f1:34:50:fe:c5:b7:17:3f:6a:b7:50:f8:a3:fd:ce:13: 63:7d:0e:5b:3c:4f:a1:87:54:34:dc:91:b1:c7:e0:e8:a9:44: 92:e1:89:22:5a:4d:70:e0:6c:39:b4:ea:95:40:ea:1d:fd:05: b3:a1:41:15:4b:1b:47:3f:d0:c5:8d:c6:3a:e6:b5:d0:c6:aa: 47:9e:3c:42:a3:6b:df:51:92:dc:e2:17:08:ca:97:6a:68:95: ca:7d:57:15:6e:f9:d9:7a:f7:37:b3:81:75:a5:a6:af:98:15: 24:1f:e5:7e:b2:aa:fe:c3:91:24:95:16:40:d4:3f:59:d8:6b: ff:3b:8d:4e:bd:7c:c5:0a:a7:34:40:6d:5b:60:89:65:25:ea: a8:6b:e3:f3:65:e3:6d:16:25:52:6b:5d:70:05:51:e4:e2:1a: fa:f7:b6:56:db:26:d0:54:61:e3:cd:33:c3:5a:ba:d9:d0:c1: 22:c0:a6:c7:2f:42:83:7e:c3:95:ec:9a:26:4b:f4:41:bd:cd: cd:04:67:44:25:40:c8:fd:46:23:3e:ee:59:c3:e9:47:37:11: 0b:0c:e8:e4 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt3x0ebRnCgnoo69LWgv8HOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzNDYzNTk0YzM3N2NkNTg4N2RlOTA3OGI0YjJlOGNkYzRk M2FlNWIwHhcNMjYwMTAxMDQxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MmZjZTlmMjRlZWRiMWVmZWRhOWJjNjlhMWQxMzk4Y2M3Mzk0NWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRBU0/PX1ZQPR62UDIYQIqI3Aw/4 jNCxOWy8UN9qKluWQrEehjul/ni9K6A1W5mC/cNFqCnxxk3dTcGhG8qT/FEQ8kRg OyXHfuktkW8ctjXXyAlWfVn+tMFeJ44kNbxaefmk3n8OhCPwROZvISTRfXC2piOL JtO0K0m9LZig0ozWbaWx9dIFNnDMtyQYKxi2rryx9899WDtDBd74qu1fDcXtbJ8s kfkBnMsOOpVjWsK/XMwclg8EUylrBFscW5B6VGpfdZV7732yRCsBLiybwKBapYhr Up3C7I6y0/ADTxMut5hp9j6MLMVEyGlYyBh94MROdufstIzyxxDaQmPTMwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFGL86fJO7bHv7am8aaHROYzHOUXbMB8GA1UdIwQY MBaAFONGNZTDd81Yh96QeLSy6M3E065bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDBZMWxNTjN6VmlIM3BCNHRMTG96Y1RUcmxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9jNTcxY2UtZWYzYS00YTI4LWI1Yjgt ZmVhMjM2ZjU0MDM0LzEvWXZ6cDhrN3RzZV90cWJ4cG9kRTVqTWM1UmRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9jNTcxY2UtZWYzYS00YTI4LWI1YjgtZmVhMjM2ZjU0MDM0 LzEvNDBZMWxNTjN6VmlIM3BCNHRMTG96Y1RUcmxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhRXADAN BgkqhkiG9w0BAQsFAAOCAQEASCS7N08IqCYxuYLcnqlxyLO1nVpp3SW7G+J1VS4D ki5JTAmlxBHxNFD+xbcXP2q3UPij/c4TY30OWzxPoYdUNNyRscfg6KlEkuGJIlpN cOBsObTqlUDqHf0Fs6FBFUsbRz/QxY3GOua10MaqR548QqNr31GS3OIXCMqXamiV yn1XFW752Xr3N7OBdaWmr5gVJB/lfrKq/sORJJUWQNQ/Wdhr/zuNTr18xQqnNEBt W2CJZSXqqGvj82XjbRYlUmtdcAVR5OIa+ve2Vtsm0FRh480zw1q62dDBIsCmxy9C g37DleyaJkv0Qb3NzQRnRCVAyP1GIz7uWcPpRzcRCwzo5A== -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:30 2026 by rpki-client