This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/yoZ6NGT9e7qnUaC5ifprdp_42x0.roa File: yoZ6NGT9e7qnUaC5ifprdp_42x0.roa (raw, json) Hash identifier: EkGwrc2v7ejShX7O9YHwTjPsx73s/dJ/7azwhq1uXec= Subject key identifier: CA:86:7A:34:64:FD:7B:BA:A7:51:A0:B9:89:FA:6B:76:9F:F8:DB:1D Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Certificate serial: 019B7758FB9ECAAA3F934D2AB811EB58682E Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/yoZ6NGT9e7qnUaC5ifprdp_42x0.roa Signing time: Thu 01 Jan 2026 02:17:58 +0000 ROA not before: Thu 01 Jan 2026 02:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215389 IP address blocks: 2a09:e1c1:efd0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 14:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:fb:9e:ca:aa:3f:93:4d:2a:b8:11:eb:58:68:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Validity Not Before: Jan 1 02:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca867a3464fd7bbaa751a0b989fa6b769ff8db1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:66:d8:e3:99:c8:59:5b:8a:be:6a:a1:61:d7: 62:46:94:bc:af:6f:21:88:1d:30:16:f3:96:65:06: e1:d4:4a:2c:c5:ba:f9:67:4d:88:b8:48:84:f8:2c: 55:0f:d7:4c:f6:60:42:df:54:6f:94:68:52:77:16: fe:a8:2d:8e:32:99:02:f0:51:96:16:58:62:d0:cb: 73:76:69:ae:38:1b:e3:7b:0e:60:2d:41:18:16:9b: 99:a9:3f:77:df:bd:d5:68:8a:19:5f:72:a5:6f:23: df:69:7a:1e:b2:7c:52:62:58:b7:e7:3f:06:6e:8e: 45:eb:5f:64:5f:5d:c9:09:01:f8:7c:5d:2a:7f:2d: 71:23:ce:c4:de:a9:c6:21:97:76:bc:47:d8:3b:54: 96:5c:97:3c:36:54:d7:24:11:6f:3f:39:36:5f:50: db:e0:cd:db:46:cc:51:47:78:c3:5c:a8:cb:24:33: 62:e4:47:0f:46:7e:66:b6:20:2b:92:1c:a8:08:a5: 41:bf:fb:8a:8a:a8:f5:d3:f8:8d:07:08:3a:71:84: 2a:a3:c8:42:5b:8f:10:2d:14:20:c0:1c:14:91:25: c8:3f:a8:28:9f:6c:1c:8e:ce:34:a4:95:82:0f:b0: ab:18:c7:a5:1e:8d:22:c7:8e:c2:c2:be:cb:2b:bb: 40:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:86:7A:34:64:FD:7B:BA:A7:51:A0:B9:89:FA:6B:76:9F:F8:DB:1D X509v3 Authority Key Identifier: keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/yoZ6NGT9e7qnUaC5ifprdp_42x0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:e1c1:efd0::/44 Signature Algorithm: sha256WithRSAEncryption 88:58:6c:82:1d:42:de:7f:01:76:7f:f7:1f:66:b8:0e:90:47: ae:5a:c7:d2:06:b1:33:b4:52:96:7e:3a:1b:9e:e1:e2:57:a2: f5:09:e2:f9:3e:21:22:43:6e:5b:5e:6b:c0:b5:7e:cd:55:57: f9:0d:d9:24:51:2c:ae:6b:44:2a:6a:54:d3:9b:06:69:62:b7: 81:64:91:d2:bd:31:3f:c6:80:3d:0f:40:a2:f8:36:82:ed:e7: e8:e4:18:53:38:c7:2d:ad:d2:31:b1:4c:67:8e:c9:f3:95:11: 04:3f:8c:2b:45:1a:65:a0:56:49:90:98:5c:48:17:d3:90:8d: 8f:98:79:51:b4:0b:47:6e:73:e8:a0:4e:96:18:36:c0:f8:2d: 24:09:9f:04:ec:0f:9b:c3:bd:25:26:d5:7b:af:43:e7:e9:16: cd:0a:52:8a:9d:39:61:c4:5f:fc:0a:81:23:a3:a2:da:d6:35: 1b:98:a5:60:eb:cb:84:dc:86:0d:6a:09:68:29:7a:1e:0b:a3: 3b:d3:17:0b:52:23:61:3a:34:f8:63:b3:f2:db:63:3c:13:22: 93:86:c2:89:be:8a:5a:1f:a6:52:4c:1f:da:ed:6a:86:9e:c5: 86:c8:54:c1:28:e4:08:56:7e:db:f5:b0:45:84:41:e9:e8:2f: 77:ab:bb:8b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WPueyqo/k00quBHrWGguMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MjUzYzRmMjMzY2U5ODQ3Njk5YWU2OGVjYmY1ZDc1MTRi MGZhZGIwHhcNMjYwMTAxMDIxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTg2N2EzNDY0ZmQ3YmJhYTc1MWEwYjk4OWZhNmI3NjlmZjhkYjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2bY45nIWVuKvmqhYddiRpS8r28h iB0wFvOWZQbh1Eosxbr5Z02IuEiE+CxVD9dM9mBC31RvlGhSdxb+qC2OMpkC8FGW Flhi0MtzdmmuOBvjew5gLUEYFpuZqT93373VaIoZX3KlbyPfaXoesnxSYli35z8G bo5F619kX13JCQH4fF0qfy1xI87E3qnGIZd2vEfYO1SWXJc8NlTXJBFvPzk2X1Db 4M3bRsxRR3jDXKjLJDNi5EcPRn5mtiArkhyoCKVBv/uKiqj10/iNBwg6cYQqo8hC W48QLRQgwBwUkSXIP6gon2wcjs40pJWCD7CrGMelHo0ix47Cwr7LK7tAdwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMqGejRk/Xu6p1GguYn6a3af+NsdMB8GA1UdIwQY MBaAFLQlPE8jPOmEdpmuaOy/XXUUsPrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMt NThiMzhmNWFjODBiLzEveW9aNk5HVDllN3FuVWFDNWlmcHJkcF80MngwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMtNThiMzhmNWFjODBi LzEvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgnhwe/Q MA0GCSqGSIb3DQEBCwUAA4IBAQCIWGyCHULefwF2f/cfZrgOkEeuWsfSBrEztFKW fjobnuHiV6L1CeL5PiEiQ25bXmvAtX7NVVf5DdkkUSyua0QqalTTmwZpYreBZJHS vTE/xoA9D0Ci+DaC7efo5BhTOMctrdIxsUxnjsnzlREEP4wrRRploFZJkJhcSBfT kI2PmHlRtAtHbnPooE6WGDbA+C0kCZ8E7A+bw70lJtV7r0Pn6RbNClKKnTlhxF/8 CoEjo6La1jUbmKVg68uE3IYNagloKXoeC6M70xcLUiNhOjT4Y7Py22M8EyKThsKJ vopaH6ZSTB/a7WqGnsWGyFTBKOQIVn7b9bBFhEHp6C93q7uL -----END CERTIFICATE-----Generated at Wed Jan 21 00:03:43 2026 by rpki-client