This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/yat_VFBsRL2vXjBQHXCl5CuZLXk.roa File: yat_VFBsRL2vXjBQHXCl5CuZLXk.roa (raw, json) Hash identifier: AeN/Vtg1z//ZrqzG5NqKqgHUFWw8uKLPlQFadvjnPx0= Subject key identifier: C9:AB:7F:54:50:6C:44:BD:AF:5E:30:50:1D:70:A5:E4:2B:99:2D:79 Certificate issuer: /CN=f786c277f6ca808afdca05673f4b6c2573974e3e Certificate serial: 019B76EB6584E6F1698468F1339C23ED8B3D Authority key identifier: F7:86:C2:77:F6:CA:80:8A:FD:CA:05:67:3F:4B:6C:25:73:97:4E:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/yat_VFBsRL2vXjBQHXCl5CuZLXk.roa Signing time: Thu 01 Jan 2026 00:18:17 +0000 ROA not before: Thu 01 Jan 2026 00:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34087 IP address blocks: 2001:678:464::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:65:84:e6:f1:69:84:68:f1:33:9c:23:ed:8b:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f786c277f6ca808afdca05673f4b6c2573974e3e Validity Not Before: Jan 1 00:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9ab7f54506c44bdaf5e30501d70a5e42b992d79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fe:19:14:b3:7c:49:cd:d1:a0:8a:e8:80:07: aa:1d:4c:0f:73:96:d1:57:cb:8f:2e:4a:39:f0:09: fc:ff:e1:36:26:18:9e:05:b0:83:50:32:f5:b8:54: 81:33:ce:59:61:b8:88:cb:f8:88:66:c9:15:d9:5c: 62:5b:6c:bd:38:21:10:46:ce:83:5e:e6:64:87:0b: 95:b2:92:a9:fe:26:69:fa:21:12:20:87:26:9f:8f: 06:b9:9e:40:5e:b9:4b:bd:0e:fe:36:e9:4a:a9:35: 61:74:03:06:29:9c:65:ef:c1:3c:9d:f1:6e:b6:f4: 56:69:6f:f2:39:ea:74:75:fc:93:10:20:7a:ec:71: e8:f0:54:67:6c:98:25:27:73:4a:f3:47:d3:57:1e: ac:27:b5:8b:67:8b:3f:ff:54:1c:3a:47:7e:ea:43: e7:e0:74:45:c7:05:4b:1a:6b:f7:fe:d2:52:cc:b5: 5a:0a:b1:b4:43:dd:db:90:a5:95:06:57:6e:ab:05: d8:9d:5d:c2:09:2f:25:18:96:4e:a5:32:8d:e7:eb: 14:00:d9:ae:bc:13:98:60:76:1a:88:76:7b:ef:cc: 6b:40:d6:59:84:22:30:fb:3e:e1:3b:dd:ab:d4:9a: 66:98:04:5d:e1:64:14:14:ac:0c:de:be:a5:a7:1b: 30:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:AB:7F:54:50:6C:44:BD:AF:5E:30:50:1D:70:A5:E4:2B:99:2D:79 X509v3 Authority Key Identifier: keyid:F7:86:C2:77:F6:CA:80:8A:FD:CA:05:67:3F:4B:6C:25:73:97:4E:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/yat_VFBsRL2vXjBQHXCl5CuZLXk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:464::/48 Signature Algorithm: sha256WithRSAEncryption 84:34:0a:c9:69:38:09:60:6d:1a:04:58:5e:64:fd:83:5d:1c: c1:b8:21:29:53:40:7b:2b:9f:24:27:77:8d:c2:71:5b:28:54: c4:20:2b:dc:52:c9:00:8b:74:3b:54:0c:8e:52:5b:95:fc:66: 12:28:27:04:df:61:eb:76:17:04:00:b8:32:8b:c5:65:46:9b: 83:f2:66:ed:55:5e:86:05:f1:ee:52:83:47:bc:5a:03:3b:76: b1:50:88:59:27:e2:a7:fb:3e:a8:ea:8e:bc:24:6e:bd:c5:e2: 77:3b:8b:6c:29:f1:76:18:10:a7:17:a2:21:c1:c9:7a:19:e3: e7:51:43:4a:80:7c:4e:48:ac:1d:7b:a0:e7:c4:00:6a:99:40: 46:63:f8:c9:1a:0a:5c:05:79:10:84:19:fb:48:cb:65:cf:0e: ba:1f:65:ef:19:7e:52:3c:61:93:e9:cd:19:05:a6:a7:b0:45: 91:64:83:bf:8e:7a:ca:40:f5:64:af:5e:1e:83:69:48:e6:f2: e7:ed:f4:8f:b0:1e:55:55:fe:ae:18:e6:d4:5e:c3:4b:2b:60: a4:ba:36:1b:7d:b5:7d:03:b9:29:c7:fd:51:81:ea:27:0e:15: 4c:c1:7e:eb:36:3d:6f:69:22:9b:bb:9a:2c:79:52:96:bc:bb: 07:ac:76:92 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt262WE5vFphGjxM5wj7Ys9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3ODZjMjc3ZjZjYTgwOGFmZGNhMDU2NzNmNGI2YzI1NzM5 NzRlM2UwHhcNMjYwMTAxMDAxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOWFiN2Y1NDUwNmM0NGJkYWY1ZTMwNTAxZDcwYTVlNDJiOTkyZDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxv4ZFLN8Sc3RoIrogAeqHUwPc5bR V8uPLko58An8/+E2JhieBbCDUDL1uFSBM85ZYbiIy/iIZskV2VxiW2y9OCEQRs6D XuZkhwuVspKp/iZp+iESIIcmn48GuZ5AXrlLvQ7+NulKqTVhdAMGKZxl78E8nfFu tvRWaW/yOep0dfyTECB67HHo8FRnbJglJ3NK80fTVx6sJ7WLZ4s//1QcOkd+6kPn 4HRFxwVLGmv3/tJSzLVaCrG0Q93bkKWVBlduqwXYnV3CCS8lGJZOpTKN5+sUANmu vBOYYHYaiHZ778xrQNZZhCIw+z7hO92r1JpmmARd4WQUFKwM3r6lpxswkwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMmrf1RQbES9r14wUB1wpeQrmS15MB8GA1UdIwQY MBaAFPeGwnf2yoCK/coFZz9LbCVzl04+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTRiQ2RfYktnSXI5eWdWblAwdHNKWE9YVGo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy82MjdkNGEtMWUwNy00ZTBjLTg5ZmQt ZmNhMjQ1MzQzNGM5LzEveWF0X1ZGQnNSTDJ2WGpCUUhYQ2w1Q3VaTFhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy82MjdkNGEtMWUwNy00ZTBjLTg5ZmQtZmNhMjQ1MzQzNGM5 LzEvOTRiQ2RfYktnSXI5eWdWblAwdHNKWE9YVGo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeARk MA0GCSqGSIb3DQEBCwUAA4IBAQCENArJaTgJYG0aBFheZP2DXRzBuCEpU0B7K58k J3eNwnFbKFTEICvcUskAi3Q7VAyOUluV/GYSKCcE32HrdhcEALgyi8VlRpuD8mbt VV6GBfHuUoNHvFoDO3axUIhZJ+Kn+z6o6o68JG69xeJ3O4tsKfF2GBCnF6Ihwcl6 GePnUUNKgHxOSKwde6DnxABqmUBGY/jJGgpcBXkQhBn7SMtlzw66H2XvGX5SPGGT 6c0ZBaansEWRZIO/jnrKQPVkr14eg2lI5vLn7fSPsB5VVf6uGObUXsNLK2CkujYb fbV9A7kpx/1RgeonDhVMwX7rNj1vaSKbu5oseVKWvLsHrHaS -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:34 2026 by rpki-client