This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/ymAj9efrc4iFY_0So-yc0MrAp7E.roa File: ymAj9efrc4iFY_0So-yc0MrAp7E.roa (raw, json) Hash identifier: 0RVzMDPDhXTkKrBe4COdDJUwa/RLXdTmgG4ILjY2Rgg= Subject key identifier: CA:60:23:F5:E7:EB:73:88:85:63:FD:12:A3:EC:9C:D0:CA:C0:A7:B1 Certificate issuer: /CN=bbe6fe14b8755d9ff7466fa97c4a55f735183249 Certificate serial: 019B797EDDD4C2A182A09F40BEDE09A535CE Authority key identifier: BB:E6:FE:14:B8:75:5D:9F:F7:46:6F:A9:7C:4A:55:F7:35:18:32:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/ymAj9efrc4iFY_0So-yc0MrAp7E.roa Signing time: Thu 01 Jan 2026 12:18:36 +0000 ROA not before: Thu 01 Jan 2026 12:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210400 IP address blocks: 2a0d:d742:40::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft rsync://rpki.ripe.net/repository/DEFAULT/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:dd:d4:c2:a1:82:a0:9f:40:be:de:09:a5:35:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbe6fe14b8755d9ff7466fa97c4a55f735183249 Validity Not Before: Jan 1 12:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca6023f5e7eb73888563fd12a3ec9cd0cac0a7b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:7e:7c:24:31:58:64:40:34:41:64:05:59:f9: 16:59:41:12:dd:33:49:6e:95:29:5f:ba:74:34:7a: fa:7c:b7:16:7e:bc:2c:a5:e4:4a:bd:b6:a9:fa:9c: 22:e0:fd:fe:62:e5:3e:f7:50:41:a1:31:f2:a7:92: f5:2d:5f:6c:59:29:7f:af:95:09:50:ee:65:df:a3: e6:4d:72:c1:7b:99:8c:b5:85:f9:a8:c8:04:ca:42: 73:38:fe:64:c5:d2:d2:d8:e9:25:b5:d6:68:b7:bf: 52:fc:b8:03:8a:c0:fc:dc:a7:9c:3c:b3:02:dd:8e: 76:3c:14:4d:a2:20:a3:b3:4d:03:a5:5b:0d:b2:8d: e2:46:ef:c8:61:02:f9:35:c0:4b:b5:9c:01:24:b3: 21:2c:05:d9:76:96:ab:34:d1:11:6d:54:b9:b7:fd: 6d:7e:4f:d3:b9:f6:2f:a6:4a:a4:b3:27:12:89:09: e8:66:b2:8b:fc:3e:7c:14:f0:70:b3:53:e0:32:62: 42:4b:c3:24:b1:6d:1d:15:97:35:b5:5e:72:f5:54: b8:a2:37:76:3e:b5:0e:eb:07:99:fc:11:ad:82:25: 8e:42:1d:7d:67:3f:3c:9b:25:5e:d4:44:bc:ef:d5: fe:d3:ae:b8:df:20:f7:04:2e:7f:f0:4b:df:30:d2: 6a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:60:23:F5:E7:EB:73:88:85:63:FD:12:A3:EC:9C:D0:CA:C0:A7:B1 X509v3 Authority Key Identifier: keyid:BB:E6:FE:14:B8:75:5D:9F:F7:46:6F:A9:7C:4A:55:F7:35:18:32:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/ymAj9efrc4iFY_0So-yc0MrAp7E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:d742:40::/44 Signature Algorithm: sha256WithRSAEncryption a1:a8:d9:e5:d2:ae:32:05:ed:6a:e2:a3:e5:1f:ef:e2:89:77: 08:df:47:68:de:dd:9b:7b:fd:da:bb:cb:bf:ba:88:21:e1:d5: e4:60:ab:50:53:8f:4e:9c:ce:73:00:1e:e5:c6:86:2c:33:2b: 01:f5:d5:64:c4:19:a1:45:d4:f8:09:86:48:0d:6b:5c:09:a9: f3:08:8c:45:10:64:55:0b:c1:60:d6:82:76:ee:f8:d4:05:bc: 40:8c:77:1c:be:bc:e3:38:c6:4e:60:f5:bd:c3:18:ea:6f:e2: d2:20:a0:a4:4d:8f:d1:ed:4d:ca:a5:3f:7e:e4:35:d5:6c:8d: 94:76:08:c7:a0:e9:0d:10:25:cb:b6:71:bb:3c:50:4c:22:f1: df:96:fa:71:75:9e:67:62:bc:01:21:25:9c:43:f1:fb:8e:04: 64:f8:a0:df:d3:4d:8d:30:45:a0:5f:9a:46:f4:18:9f:a1:58: 51:6e:b5:4d:69:3c:f1:51:7a:0c:11:7f:77:95:84:a1:84:22: 8a:56:9c:93:0c:62:38:ac:da:0c:f9:10:a8:d5:b7:ee:d3:c6: c2:be:da:61:7b:e0:50:2f:a7:c3:e6:b5:7f:3b:54:d9:2c:95: 6d:db:66:ff:d1:1c:73:c5:2b:3c:13:6a:75:cb:63:07:89:ba: f8:54:86:f4 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5ft3UwqGCoJ9Avt4JpTXOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZTZmZTE0Yjg3NTVkOWZmNzQ2NmZhOTdjNGE1NWY3MzUx ODMyNDkwHhcNMjYwMTAxMTIxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTYwMjNmNWU3ZWI3Mzg4ODU2M2ZkMTJhM2VjOWNkMGNhYzBhN2IxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2H58JDFYZEA0QWQFWfkWWUES3TNJ bpUpX7p0NHr6fLcWfrwspeRKvbap+pwi4P3+YuU+91BBoTHyp5L1LV9sWSl/r5UJ UO5l36PmTXLBe5mMtYX5qMgEykJzOP5kxdLS2OkltdZot79S/LgDisD83KecPLMC 3Y52PBRNoiCjs00DpVsNso3iRu/IYQL5NcBLtZwBJLMhLAXZdparNNERbVS5t/1t fk/TufYvpkqksycSiQnoZrKL/D58FPBws1PgMmJCS8MksW0dFZc1tV5y9VS4ojd2 PrUO6weZ/BGtgiWOQh19Zz88myVe1ES879X+06643yD3BC5/8EvfMNJqBQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMpgI/Xn63OIhWP9EqPsnNDKwKexMB8GA1UdIwQY MBaAFLvm/hS4dV2f90ZvqXxKVfc1GDJJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdS1iLUZMaDFYWl8zUm0tcGZFcFY5elVZTWtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC83NWQ0ZmQtOTBmNS00YmFhLWEzNWMt ODdhNjMzM2Q2ZTY0LzEveW1BajllZnJjNGlGWV8wU28teWMwTXJBcDdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC83NWQ0ZmQtOTBmNS00YmFhLWEzNWMtODdhNjMzM2Q2ZTY0 LzEvdS1iLUZMaDFYWl8zUm0tcGZFcFY5elVZTWtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg3XQgBA MA0GCSqGSIb3DQEBCwUAA4IBAQChqNnl0q4yBe1q4qPlH+/iiXcI30do3t2be/3a u8u/uogh4dXkYKtQU49OnM5zAB7lxoYsMysB9dVkxBmhRdT4CYZIDWtcCanzCIxF EGRVC8Fg1oJ27vjUBbxAjHccvrzjOMZOYPW9wxjqb+LSIKCkTY/R7U3KpT9+5DXV bI2UdgjHoOkNECXLtnG7PFBMIvHflvpxdZ5nYrwBISWcQ/H7jgRk+KDf002NMEWg X5pG9BifoVhRbrVNaTzxUXoMEX93lYShhCKKVpyTDGI4rNoM+RCo1bfu08bCvtph e+BQL6fD5rV/O1TZLJVt22b/0RxzxSs8E2p1y2MHibr4VIb0 -----END CERTIFICATE-----Generated at Mon Feb 9 19:38:38 2026 by rpki-client