This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/yFQMrmkIeVte8wYzH-IkC5x7aUc.roa File: yFQMrmkIeVte8wYzH-IkC5x7aUc.roa (raw, json) Hash identifier: pXQ4i9KXqTJ+j0TOAAMeJveDI3UPmqEwzHnm1ISng7I= Subject key identifier: C8:54:0C:AE:69:08:79:5B:5E:F3:06:33:1F:E2:24:0B:9C:7B:69:47 Certificate issuer: /CN=67b62dbaecd359a4a2a8912cf2e6693b2f48c9ef Certificate serial: 019B7A5B865E869734539E29AC635C946A3C Authority key identifier: 67:B6:2D:BA:EC:D3:59:A4:A2:A8:91:2C:F2:E6:69:3B:2F:48:C9:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/yFQMrmkIeVte8wYzH-IkC5x7aUc.roa Signing time: Thu 01 Jan 2026 16:19:36 +0000 ROA not before: Thu 01 Jan 2026 16:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199926 IP address blocks: 2a03:dc40:ffef::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft rsync://rpki.ripe.net/repository/DEFAULT/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:86:5e:86:97:34:53:9e:29:ac:63:5c:94:6a:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67b62dbaecd359a4a2a8912cf2e6693b2f48c9ef Validity Not Before: Jan 1 16:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8540cae6908795b5ef306331fe2240b9c7b6947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:71:3f:2b:d6:22:21:5f:55:70:0b:88:99:b3: af:f4:bc:0b:e7:1c:00:54:60:20:22:1e:04:d0:ed: a6:40:02:06:73:0d:ca:e7:f9:42:7f:15:39:76:90: 18:3f:19:94:03:77:2d:0a:a6:d8:40:88:1e:22:0f: 45:99:22:b8:0a:f4:6f:e9:3e:ba:4c:5f:ce:50:09: de:80:f7:b7:34:86:ad:06:79:33:01:4c:0c:d9:d8: b4:ed:6f:c4:21:6f:b9:49:13:a5:06:ff:28:c8:6b: f4:24:fa:a0:4d:78:25:89:e9:4a:e1:45:c7:bc:04: 7f:57:c3:c6:01:9e:da:98:91:bb:b5:96:fa:81:11: e5:f7:a6:5b:81:6a:e6:6c:85:f5:9f:a5:67:0b:5b: bb:1e:cb:90:96:b6:62:c3:80:ab:26:fb:10:b9:b5: ae:60:10:b8:46:8f:48:3c:58:b0:67:c6:04:18:d2: 53:19:3d:2d:57:cf:fb:61:35:81:86:ef:ab:76:cc: bf:69:34:37:fd:37:07:94:3b:37:11:1a:81:fe:b0: ca:45:f4:0e:d4:a9:55:32:53:51:c7:bf:09:3e:fe: c9:73:95:cc:97:b9:08:aa:2a:4e:cf:5d:3f:e3:d4: 10:f9:b9:6f:43:ae:f5:c8:25:01:dc:92:b1:cc:be: 61:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:54:0C:AE:69:08:79:5B:5E:F3:06:33:1F:E2:24:0B:9C:7B:69:47 X509v3 Authority Key Identifier: keyid:67:B6:2D:BA:EC:D3:59:A4:A2:A8:91:2C:F2:E6:69:3B:2F:48:C9:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/yFQMrmkIeVte8wYzH-IkC5x7aUc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:dc40:ffef::/48 Signature Algorithm: sha256WithRSAEncryption 4e:9b:ae:04:0f:97:3f:64:80:5f:eb:4b:09:c0:40:67:6f:36: 9d:8c:50:bd:af:b9:48:d1:ca:93:97:da:4b:44:f5:06:68:e3: 89:ca:5a:7f:be:71:5e:44:1b:ee:0a:d5:1e:7a:31:36:22:97: a1:a1:4d:69:c7:85:3f:2a:b1:0e:e5:b1:d9:86:c6:01:ce:f9: 8b:05:04:b4:5f:33:28:c3:d8:10:92:c0:89:4d:d7:31:5c:57: 92:d5:3b:95:02:f7:5e:64:d0:fb:74:19:3d:1d:ba:c2:2b:04: 23:58:11:a0:eb:de:67:b4:f0:4a:63:bf:4a:06:e2:f2:ce:98: e7:6e:77:a4:e4:65:52:77:fd:7f:74:ef:9a:1d:34:ec:c2:bb: 6b:4a:b0:57:cb:2f:66:19:33:a5:97:61:bc:d6:f2:ed:1e:0f: 2a:0f:61:22:27:c0:35:bf:2f:0c:8c:58:b4:21:da:b7:67:fc: 71:30:56:b6:41:ea:a3:04:1b:b3:f8:8f:ec:87:44:81:37:07: 3b:28:9c:66:80:d6:6b:88:9e:12:8b:4b:f9:a7:07:0e:42:f2: 8a:f3:2d:8c:4a:63:69:c5:e7:d7:d5:e6:f5:01:b6:10:9f:1f: 47:da:7b:50:05:7f:65:c7:c1:d3:73:09:29:cc:36:f4:54:58: 4a:2e:a7:78 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6W4Zehpc0U54prGNclGo8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3YjYyZGJhZWNkMzU5YTRhMmE4OTEyY2YyZTY2OTNiMmY0 OGM5ZWYwHhcNMjYwMTAxMTYxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODU0MGNhZTY5MDg3OTViNWVmMzA2MzMxZmUyMjQwYjljN2I2OTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXE/K9YiIV9VcAuImbOv9LwL5xwA VGAgIh4E0O2mQAIGcw3K5/lCfxU5dpAYPxmUA3ctCqbYQIgeIg9FmSK4CvRv6T66 TF/OUAnegPe3NIatBnkzAUwM2di07W/EIW+5SROlBv8oyGv0JPqgTXglielK4UXH vAR/V8PGAZ7amJG7tZb6gRHl96ZbgWrmbIX1n6VnC1u7HsuQlrZiw4CrJvsQubWu YBC4Ro9IPFiwZ8YEGNJTGT0tV8/7YTWBhu+rdsy/aTQ3/TcHlDs3ERqB/rDKRfQO 1KlVMlNRx78JPv7Jc5XMl7kIqipOz10/49QQ+blvQ671yCUB3JKxzL5hWQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMhUDK5pCHlbXvMGMx/iJAuce2lHMB8GA1UdIwQY MBaAFGe2Lbrs01mkoqiRLPLmaTsvSMnvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjdZdHV1elRXYVNpcUpFczh1WnBPeTlJeWU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy85MGI5ZDYtYTZhZC00NGE2LTkxYTIt MjgxZWVlMzFiNzQ3LzEveUZRTXJta0llVnRlOHdZekgtSWtDNXg3YVVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy85MGI5ZDYtYTZhZC00NGE2LTkxYTItMjgxZWVlMzFiNzQ3 LzEvWjdZdHV1elRXYVNpcUpFczh1WnBPeTlJeWU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgPcQP/v MA0GCSqGSIb3DQEBCwUAA4IBAQBOm64ED5c/ZIBf60sJwEBnbzadjFC9r7lI0cqT l9pLRPUGaOOJylp/vnFeRBvuCtUeejE2IpehoU1px4U/KrEO5bHZhsYBzvmLBQS0 XzMow9gQksCJTdcxXFeS1TuVAvdeZND7dBk9HbrCKwQjWBGg695ntPBKY79KBuLy zpjnbnek5GVSd/1/dO+aHTTswrtrSrBXyy9mGTOll2G81vLtHg8qD2EiJ8A1vy8M jFi0Idq3Z/xxMFa2QeqjBBuz+I/sh0SBNwc7KJxmgNZriJ4Si0v5pwcOQvKK8y2M SmNpxefX1eb1AbYQnx9H2ntQBX9lx8HTcwkpzDb0VFhKLqd4 -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:35 2026 by rpki-client