This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/LY9rVais3wspNeNPAZIyiTXOtY0.roa File: LY9rVais3wspNeNPAZIyiTXOtY0.roa (raw, json) Hash identifier: 1eK7fe5ZYjA1lJm54q9dfuN8WVnq6PqDcTfPsNXQM2g= Subject key identifier: 2D:8F:6B:55:A8:AC:DF:0B:29:35:E3:4F:01:92:32:89:35:CE:B5:8D Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Certificate serial: 019B7758EF204B99863F4CD13E91A78F9569 Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/LY9rVais3wspNeNPAZIyiTXOtY0.roa Signing time: Thu 01 Jan 2026 02:17:55 +0000 ROA not before: Thu 01 Jan 2026 02:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201697 IP address blocks: 2a00:f826:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 14:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:ef:20:4b:99:86:3f:4c:d1:3e:91:a7:8f:95:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Validity Not Before: Jan 1 02:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d8f6b55a8acdf0b2935e34f0192328935ceb58d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bc:2d:47:74:ed:d1:31:93:70:5d:87:e7:ec: 42:13:11:64:e1:10:be:74:5b:55:1e:cb:ac:33:11: 81:21:e3:47:ad:0b:7f:36:d4:1d:97:72:d0:c0:e5: 71:ad:b0:a3:33:82:d6:4c:b2:3d:7b:f1:58:e0:18: fc:ac:51:23:95:4e:9a:85:1b:e4:60:bc:ce:73:7f: a2:58:81:6b:03:73:f5:c7:37:7e:c4:74:71:1e:de: 62:1f:a4:41:d4:4e:aa:e2:0e:f2:c6:73:24:b0:58: 4c:ad:c2:e5:d4:b1:59:6a:3b:bb:71:de:42:c3:53: 16:8e:01:23:2c:65:af:44:cb:a3:d0:95:b9:27:86: 9f:a4:df:55:cd:0b:3d:79:22:b2:6b:ec:29:8d:91: 9b:2a:39:01:35:39:72:ea:ca:18:a1:c0:48:39:57: cb:5a:b3:b1:8e:2c:1d:a0:f2:27:f1:05:de:64:ed: 14:17:23:a6:2e:f3:eb:15:61:02:0f:95:6c:23:fc: 12:ff:82:19:2d:ac:0f:f9:f0:a3:2b:60:de:69:a4: ac:d8:c5:c7:ff:bb:a1:fb:8e:98:17:06:e0:eb:55: 91:77:c8:45:fa:42:d2:d6:35:cd:b9:e5:e4:4d:e0: ae:1c:e9:44:f8:e8:08:00:2e:d1:36:ad:b8:99:bb: ee:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:8F:6B:55:A8:AC:DF:0B:29:35:E3:4F:01:92:32:89:35:CE:B5:8D X509v3 Authority Key Identifier: keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/LY9rVais3wspNeNPAZIyiTXOtY0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:f826:7::/48 Signature Algorithm: sha256WithRSAEncryption 4d:53:10:31:f8:12:c7:89:b5:44:f5:c7:2f:98:ef:b1:c8:ea: 29:31:22:9a:7f:b4:51:2e:6a:46:77:82:d7:5c:7a:f6:bf:59: 5f:f8:2d:cb:a3:35:5d:54:41:71:a6:10:2e:c1:d8:32:1b:a8: 48:d2:5d:d6:02:c2:e4:1f:a2:05:36:d3:ce:bd:31:e3:77:3d: 37:cf:c2:57:01:df:92:3d:f7:ef:d6:1c:b8:2b:f4:e8:0c:3e: cf:21:7f:2b:8d:34:d6:c3:84:c3:9e:cc:34:17:b5:d4:9a:d2: 6c:89:c3:2c:9d:06:c5:61:fb:fb:dd:a8:1f:7f:74:b0:11:3d: 78:2c:c0:fc:a0:10:4c:38:7f:62:2c:04:ba:f8:4a:1b:d5:37: a9:40:45:cd:8a:7e:87:a7:58:9b:3f:19:a7:2d:b7:cc:79:99: 96:ea:ff:97:c0:30:9e:72:e7:9e:57:93:ac:02:6f:a4:26:bb: 1e:d1:43:88:d9:55:ab:3e:54:40:8b:33:ff:15:fc:4d:c1:ff: 4e:6e:5c:12:44:d1:d5:e8:6b:a9:04:82:b7:f9:83:30:d3:21: 3c:66:25:8f:6b:35:f8:7e:ca:7b:5d:07:44:ad:ec:15:cd:64: b6:4c:8f:f2:a6:5b:78:90:56:9d:1e:99:9e:76:69:38:78:0e: 27:11:d6:02 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WO8gS5mGP0zRPpGnj5VpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MjUzYzRmMjMzY2U5ODQ3Njk5YWU2OGVjYmY1ZDc1MTRi MGZhZGIwHhcNMjYwMTAxMDIxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDhmNmI1NWE4YWNkZjBiMjkzNWUzNGYwMTkyMzI4OTM1Y2ViNThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLwtR3Tt0TGTcF2H5+xCExFk4RC+ dFtVHsusMxGBIeNHrQt/NtQdl3LQwOVxrbCjM4LWTLI9e/FY4Bj8rFEjlU6ahRvk YLzOc3+iWIFrA3P1xzd+xHRxHt5iH6RB1E6q4g7yxnMksFhMrcLl1LFZaju7cd5C w1MWjgEjLGWvRMuj0JW5J4afpN9VzQs9eSKya+wpjZGbKjkBNTly6soYocBIOVfL WrOxjiwdoPIn8QXeZO0UFyOmLvPrFWECD5VsI/wS/4IZLawP+fCjK2DeaaSs2MXH /7uh+46YFwbg61WRd8hF+kLS1jXNueXkTeCuHOlE+OgIAC7RNq24mbvuGQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFC2Pa1WorN8LKTXjTwGSMok1zrWNMB8GA1UdIwQY MBaAFLQlPE8jPOmEdpmuaOy/XXUUsPrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMt NThiMzhmNWFjODBiLzEvTFk5clZhaXMzd3NwTmVOUEFaSXlpVFhPdFkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMtNThiMzhmNWFjODBi LzEvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgD4JgAH MA0GCSqGSIb3DQEBCwUAA4IBAQBNUxAx+BLHibVE9ccvmO+xyOopMSKaf7RRLmpG d4LXXHr2v1lf+C3LozVdVEFxphAuwdgyG6hI0l3WAsLkH6IFNtPOvTHjdz03z8JX Ad+SPffv1hy4K/ToDD7PIX8rjTTWw4TDnsw0F7XUmtJsicMsnQbFYfv73agff3Sw ET14LMD8oBBMOH9iLAS6+Eob1TepQEXNin6Hp1ibPxmnLbfMeZmW6v+XwDCecuee V5OsAm+kJrse0UOI2VWrPlRAizP/FfxNwf9OblwSRNHV6GupBIK3+YMw0yE8ZiWP azX4fsp7XQdErewVzWS2TI/yplt4kFadHpmedmk4eA4nEdYC -----END CERTIFICATE-----Generated at Wed Jan 21 00:03:43 2026 by rpki-client