This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/YJnjBLRibJpGEr3L3D7lu7_na5U.roa File: YJnjBLRibJpGEr3L3D7lu7_na5U.roa (raw, json) Hash identifier: 4Y4IIM0Wr7uYpAxUzyf/6meTs661wba+kg1GDECVYRk= Subject key identifier: 60:99:E3:04:B4:62:6C:9A:46:12:BD:CB:DC:3E:E5:BB:BF:E7:6B:95 Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5 Certificate serial: 019B7C80286E06B2217547C3A05872046C0F Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/YJnjBLRibJpGEr3L3D7lu7_na5U.roa Signing time: Fri 02 Jan 2026 02:18:52 +0000 ROA not before: Fri 02 Jan 2026 02:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214026 IP address blocks: 2a0f:7803:f4e0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:28:6e:06:b2:21:75:47:c3:a0:58:72:04:6c:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcead390625edba1408108df57cea47160d70e5 Validity Not Before: Jan 2 02:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6099e304b4626c9a4612bdcbdc3ee5bbbfe76b95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e4:7a:04:c9:42:be:7b:77:17:18:05:db:3b: 3b:b8:8b:6f:e1:f8:68:59:68:b9:13:a1:3f:3c:2a: 1d:7b:93:e2:8f:78:ee:f4:12:28:87:13:1f:cb:b4: 71:af:1b:45:90:da:8a:f8:32:6f:70:47:91:51:18: 19:67:91:4c:8f:a4:7a:a9:dd:03:9a:70:8d:46:f6: be:ee:4f:03:e2:3e:44:16:53:9e:b5:32:33:d0:e0: 23:d2:e2:9f:24:a1:11:ca:1e:33:ed:82:7d:66:f7: 0c:4c:b9:1e:ec:ac:40:56:cf:4a:5f:4c:0c:5b:77: f7:e0:1b:2a:66:8a:86:ae:c6:85:bb:fc:96:5a:06: e9:a0:22:0e:32:1d:c9:4d:79:86:7c:32:7f:95:d7: 20:17:12:cf:9b:30:76:c1:c0:d3:e6:76:6a:da:da: 13:c9:3d:a3:89:87:aa:53:49:4b:34:0c:18:ac:9d: b9:01:d3:94:48:ab:f2:b8:94:de:6d:fb:17:a5:93: bf:23:09:9d:3d:71:d8:ca:67:a4:fe:a1:9f:c1:84: 3f:25:69:76:9c:f8:bc:e4:61:30:c8:f0:ca:97:3e: 20:22:ba:c4:83:95:35:c8:15:0f:2b:5d:50:bb:b6: 2e:94:81:93:a8:8c:20:d0:02:5d:03:0a:12:36:c6: 98:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:99:E3:04:B4:62:6C:9A:46:12:BD:CB:DC:3E:E5:BB:BF:E7:6B:95 X509v3 Authority Key Identifier: keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/YJnjBLRibJpGEr3L3D7lu7_na5U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:7803:f4e0::/44 Signature Algorithm: sha256WithRSAEncryption 07:24:9e:13:d8:22:d2:fc:f5:e2:38:12:1b:87:25:34:7c:b7: 00:79:e9:ea:82:c7:4a:d8:12:3e:36:d9:10:38:59:2b:d6:43: f0:76:cf:a9:ca:3e:c4:32:fd:9a:36:f4:2b:10:b9:b8:bc:60: cf:1c:5a:61:a8:22:90:01:65:19:a5:63:15:79:f8:9c:1a:45: b6:51:41:e5:a2:8f:b9:0b:5e:94:11:68:cd:98:34:38:9e:f7: b7:03:8d:e2:88:13:7f:10:56:92:f8:22:49:e6:13:c9:44:98: a7:5d:b0:d6:71:55:b5:be:b1:00:a4:3f:36:35:62:c4:bd:6c: a8:49:30:b3:2d:63:1b:c6:1e:3e:e0:ad:8d:99:fb:c3:bd:6a: 0e:8f:64:8d:43:b5:16:b2:59:30:7a:5b:ec:eb:31:71:da:f6: 3b:1d:54:2a:ca:a6:27:bd:c1:c9:a0:20:70:95:df:fa:99:0a: c7:5b:54:26:26:ef:eb:4c:d4:5e:39:da:e6:5b:1e:d8:59:ee: c7:df:95:1d:13:c4:a2:38:70:fa:86:02:a5:94:6a:b9:fa:79: aa:f1:41:7f:a9:b6:a2:f8:96:12:cc:11:47:be:4c:c8:c1:13: d7:9e:07:dc:d1:ae:a4:02:44:e0:ec:1b:ef:3b:58:9b:7c:06: 2d:d9:ae:a7 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8gChuBrIhdUfDoFhyBGwPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw ZDcwZTUwHhcNMjYwMTAyMDIxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDk5ZTMwNGI0NjI2YzlhNDYxMmJkY2JkYzNlZTViYmJmZTc2Yjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuR6BMlCvnt3FxgF2zs7uItv4fho WWi5E6E/PCode5Pij3ju9BIohxMfy7RxrxtFkNqK+DJvcEeRURgZZ5FMj6R6qd0D mnCNRva+7k8D4j5EFlOetTIz0OAj0uKfJKERyh4z7YJ9ZvcMTLke7KxAVs9KX0wM W3f34BsqZoqGrsaFu/yWWgbpoCIOMh3JTXmGfDJ/ldcgFxLPmzB2wcDT5nZq2toT yT2jiYeqU0lLNAwYrJ25AdOUSKvyuJTebfsXpZO/IwmdPXHYymek/qGfwYQ/JWl2 nPi85GEwyPDKlz4gIrrEg5U1yBUPK11Qu7YulIGTqIwg0AJdAwoSNsaYNwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGCZ4wS0YmyaRhK9y9w+5bu/52uVMB8GA1UdIwQY MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt ZjViNmE3MThmNGI1LzEvWUpuakJMUmliSnBHRXIzTDNEN2x1N19uYTVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1 LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg94A/Tg MA0GCSqGSIb3DQEBCwUAA4IBAQAHJJ4T2CLS/PXiOBIbhyU0fLcAeenqgsdK2BI+ NtkQOFkr1kPwds+pyj7EMv2aNvQrELm4vGDPHFphqCKQAWUZpWMVeficGkW2UUHl oo+5C16UEWjNmDQ4nve3A43iiBN/EFaS+CJJ5hPJRJinXbDWcVW1vrEApD82NWLE vWyoSTCzLWMbxh4+4K2NmfvDvWoOj2SNQ7UWslkwelvs6zFx2vY7HVQqyqYnvcHJ oCBwld/6mQrHW1QmJu/rTNReOdrmWx7YWe7H35UdE8SiOHD6hgKllGq5+nmq8UF/ qbai+JYSzBFHvkzIwRPXngfc0a6kAkTg7BvvO1ibfAYt2a6n -----END CERTIFICATE-----Generated at Wed Jan 21 17:00:29 2026 by rpki-client