This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/yGLz5TkDJf3Xr2vtnaGA7HDzgh0.roa File: yGLz5TkDJf3Xr2vtnaGA7HDzgh0.roa (raw, json) Hash identifier: 7wUr2ZVDnCXfwXAIxU64syCGtnc6NteFOmAZ6qFFDt4= Subject key identifier: C8:62:F3:E5:39:03:25:FD:D7:AF:6B:ED:9D:A1:80:EC:70:F3:82:1D Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Certificate serial: 019B7758F07DB4DF823D5E859A5EC9CCE5DA Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/yGLz5TkDJf3Xr2vtnaGA7HDzgh0.roa Signing time: Thu 01 Jan 2026 02:17:56 +0000 ROA not before: Thu 01 Jan 2026 02:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203189 IP address blocks: 2a01:367:babe::/48 maxlen: 48 2a01:367:dead::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 14:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:f0:7d:b4:df:82:3d:5e:85:9a:5e:c9:cc:e5:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Validity Not Before: Jan 1 02:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c862f3e5390325fdd7af6bed9da180ec70f3821d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c0:a0:25:ce:13:af:00:64:7e:5a:82:b8:86: 54:b0:05:1a:e9:31:8a:a8:3e:92:f5:01:b5:45:8f: ad:25:61:f1:8c:8a:a5:2d:d5:dd:53:f6:f7:07:b7: 19:35:fc:d8:1a:8c:53:2c:e8:ba:be:e6:fd:0e:bb: 71:e1:ad:de:6e:80:55:23:bb:7b:f0:0f:4e:7f:ac: 3c:e9:5e:f2:9d:9e:a0:e5:c8:e4:d4:29:af:d3:68: 27:1d:6c:a2:10:fe:08:aa:ed:c1:27:b5:0e:bf:d6: 7e:b4:e4:01:6d:11:33:25:1f:da:25:04:42:2f:81: 06:a2:a1:9a:66:6b:88:a8:9a:72:24:7c:74:83:72: 33:d2:8f:15:92:5a:f2:46:c7:d9:73:eb:43:f8:63: ef:20:dc:1a:68:23:c7:5a:84:ce:56:75:a9:60:ad: 3a:95:b2:e0:b6:0f:4c:b4:22:44:1e:be:c3:8e:da: d9:e5:42:3a:ba:92:72:16:7d:13:51:cb:9d:ba:3c: f5:58:49:79:e4:44:5a:b9:17:10:c8:17:c3:35:9a: 22:76:f0:c9:29:64:13:b4:15:aa:d8:42:58:3a:9c: df:ee:de:d4:4f:eb:da:f4:bc:40:48:c6:01:0b:c6: 40:df:07:e8:2c:36:3f:d9:ad:93:a6:84:ad:9a:e1: 18:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:62:F3:E5:39:03:25:FD:D7:AF:6B:ED:9D:A1:80:EC:70:F3:82:1D X509v3 Authority Key Identifier: keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/yGLz5TkDJf3Xr2vtnaGA7HDzgh0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:367:babe::/48 2a01:367:dead::/48 Signature Algorithm: sha256WithRSAEncryption 9f:45:ed:00:84:f1:3c:c5:cb:d0:57:49:cd:ba:1a:a4:ca:fc: fd:eb:98:97:6e:b2:af:3c:a8:3e:83:7b:bf:0e:31:c4:df:2f: a5:70:d0:10:8f:6f:3d:21:e3:18:2d:49:15:29:e3:53:be:84: fa:db:af:d0:25:2e:15:7f:d0:c6:57:c8:5c:9a:df:dd:e3:10: 24:c7:d1:92:49:5c:14:7f:73:d7:e5:ee:5b:46:9e:46:cd:21: ac:1d:a1:51:09:bf:c6:bd:c8:16:b7:3f:80:03:e4:bb:82:07: 25:bb:4d:c7:f7:b4:3b:67:39:73:08:42:40:de:1c:78:5c:8d: 54:33:45:00:9d:9a:91:e0:13:7c:2e:f7:e8:70:4f:86:56:39: b9:e4:75:9b:55:36:58:2e:0d:f3:82:62:eb:2d:c0:20:6a:41: 99:3a:72:e7:3b:62:72:1e:af:c0:01:e7:ab:3e:2a:4c:da:60: e1:6e:d8:84:95:a6:23:f7:fb:af:cc:20:b1:ad:41:f4:22:bf: 0e:4a:a7:5a:4e:b1:0c:02:5d:7d:3e:0d:c3:7c:76:8b:eb:59: 8a:b3:bb:00:37:e8:8b:e9:2c:75:10:bf:ee:8e:50:86:7d:ec: 55:20:4d:e9:80:31:2f:2c:bb:a0:e2:e1:99:0b:7a:d7:b4:f6: 69:20:72:a4 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3WPB9tN+CPV6Fml7JzOXaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MjUzYzRmMjMzY2U5ODQ3Njk5YWU2OGVjYmY1ZDc1MTRi MGZhZGIwHhcNMjYwMTAxMDIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODYyZjNlNTM5MDMyNWZkZDdhZjZiZWQ5ZGExODBlYzcwZjM4MjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucCgJc4TrwBkflqCuIZUsAUa6TGK qD6S9QG1RY+tJWHxjIqlLdXdU/b3B7cZNfzYGoxTLOi6vub9Drtx4a3eboBVI7t7 8A9Of6w86V7ynZ6g5cjk1Cmv02gnHWyiEP4Iqu3BJ7UOv9Z+tOQBbREzJR/aJQRC L4EGoqGaZmuIqJpyJHx0g3Iz0o8VklryRsfZc+tD+GPvINwaaCPHWoTOVnWpYK06 lbLgtg9MtCJEHr7DjtrZ5UI6upJyFn0TUcudujz1WEl55ERauRcQyBfDNZoidvDJ KWQTtBWq2EJYOpzf7t7UT+va9LxASMYBC8ZA3wfoLDY/2a2TpoStmuEYDQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMhi8+U5AyX9169r7Z2hgOxw84IdMB8GA1UdIwQY MBaAFLQlPE8jPOmEdpmuaOy/XXUUsPrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMt NThiMzhmNWFjODBiLzEveUdMejVUa0RKZjNYcjJ2dG5hR0E3SER6Z2gwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMtNThiMzhmNWFjODBi LzEvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgEDZ7q+ AwcAKgEDZ96tMA0GCSqGSIb3DQEBCwUAA4IBAQCfRe0AhPE8xcvQV0nNuhqkyvz9 65iXbrKvPKg+g3u/DjHE3y+lcNAQj289IeMYLUkVKeNTvoT626/QJS4Vf9DGV8hc mt/d4xAkx9GSSVwUf3PX5e5bRp5GzSGsHaFRCb/GvcgWtz+AA+S7ggclu03H97Q7 ZzlzCEJA3hx4XI1UM0UAnZqR4BN8LvfocE+GVjm55HWbVTZYLg3zgmLrLcAgakGZ OnLnO2JyHq/AAeerPipM2mDhbtiElaYj9/uvzCCxrUH0Ir8OSqdaTrEMAl19Pg3D fHaL61mKs7sAN+iL6Sx1EL/ujlCGfexVIE3pgDEvLLug4uGZC3rXtPZpIHKk -----END CERTIFICATE-----Generated at Wed Jan 21 00:03:45 2026 by rpki-client