This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/6830f6-f096-4c81-a1f5-8e8138efc41b/1/Yg-h7EYRvK_pApw2pd2xqkKaiVY.roa File: Yg-h7EYRvK_pApw2pd2xqkKaiVY.roa (raw, json) Hash identifier: WyYT1rW3NAfoNqzlN2CzJQbWLBSI3Y59Gh+h+WbBSgg= Subject key identifier: 62:0F:A1:EC:46:11:BC:AF:E9:02:9C:36:A5:DD:B1:AA:42:9A:89:56 Certificate issuer: /CN=2e762d3fd2fbfce10c58f9eb76be90fccbafb17d Certificate serial: 019B79ECA1AE3E3B1EE4F71A2B1C0AB244E8 Authority key identifier: 2E:76:2D:3F:D2:FB:FC:E1:0C:58:F9:EB:76:BE:90:FC:CB:AF:B1:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnYtP9L7_OEMWPnrdr6Q_MuvsX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/6830f6-f096-4c81-a1f5-8e8138efc41b/1/Yg-h7EYRvK_pApw2pd2xqkKaiVY.roa Signing time: Thu 01 Jan 2026 14:18:29 +0000 ROA not before: Thu 01 Jan 2026 14:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30788 IP address blocks: 2a11:be00::/32 maxlen: 32 2a11:be01::/32 maxlen: 32 2a11:be02::/32 maxlen: 32 2a11:be03::/32 maxlen: 32 2a11:be04::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/6830f6-f096-4c81-a1f5-8e8138efc41b/1/LnYtP9L7_OEMWPnrdr6Q_MuvsX0.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/6830f6-f096-4c81-a1f5-8e8138efc41b/1/LnYtP9L7_OEMWPnrdr6Q_MuvsX0.mft rsync://rpki.ripe.net/repository/DEFAULT/LnYtP9L7_OEMWPnrdr6Q_MuvsX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 08:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:a1:ae:3e:3b:1e:e4:f7:1a:2b:1c:0a:b2:44:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e762d3fd2fbfce10c58f9eb76be90fccbafb17d Validity Not Before: Jan 1 14:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=620fa1ec4611bcafe9029c36a5ddb1aa429a8956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:dd:71:42:06:cc:cd:0f:4c:78:ca:9d:4b:75: 94:c9:ca:97:e1:df:68:83:37:53:71:c1:16:42:56: e2:52:f6:ef:8c:34:c7:31:bf:e0:62:c9:80:0e:6b: c4:ea:9c:15:4a:47:dc:6d:86:e8:bd:dd:27:d6:0a: 8f:73:eb:4d:32:ab:59:c0:fb:ee:cc:12:61:89:2a: e8:3f:51:18:12:88:6b:c8:d1:5a:fb:e1:96:15:86: 4f:1b:22:aa:c0:17:37:07:b9:0a:46:75:47:f3:19: b7:2b:41:b2:e9:38:66:c6:cd:db:5f:dc:3b:e6:3a: d8:ca:24:1c:9c:bf:59:9b:a2:ae:82:12:f1:c4:73: 3d:0e:3b:62:6f:b7:03:16:2f:ef:e8:27:43:e6:10: 8a:62:27:34:c8:5f:d0:b3:e1:04:d1:af:38:2a:20: db:b8:2a:9c:b5:4d:1c:27:73:ae:95:bc:7f:98:f6: c1:93:11:b9:09:8b:4c:46:b3:df:07:0f:38:4d:81: a4:64:2f:30:f6:89:a9:1c:a7:c5:89:8c:ee:61:52: 05:8e:bf:86:4d:fa:f6:45:ef:05:dd:7f:2b:7a:41: 65:8b:f1:68:30:5d:0d:10:8b:52:f1:55:b2:3b:80: aa:e2:41:00:3f:f0:97:04:0f:66:0d:9e:7f:4b:df: 2b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:0F:A1:EC:46:11:BC:AF:E9:02:9C:36:A5:DD:B1:AA:42:9A:89:56 X509v3 Authority Key Identifier: keyid:2E:76:2D:3F:D2:FB:FC:E1:0C:58:F9:EB:76:BE:90:FC:CB:AF:B1:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnYtP9L7_OEMWPnrdr6Q_MuvsX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6830f6-f096-4c81-a1f5-8e8138efc41b/1/Yg-h7EYRvK_pApw2pd2xqkKaiVY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6830f6-f096-4c81-a1f5-8e8138efc41b/1/LnYtP9L7_OEMWPnrdr6Q_MuvsX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:be00::-2a11:be04:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 69:02:b4:e8:8e:63:b9:60:61:8c:16:89:0c:81:54:cf:49:01: c7:48:df:55:ff:87:7f:29:28:06:2e:66:9f:ed:cf:4f:00:6e: 03:96:f7:8c:4b:ee:75:3c:fa:ae:66:af:3f:9c:4d:cc:9a:93: 5a:d2:0a:a6:00:99:25:1a:68:5d:b5:18:47:1b:92:ea:28:9b: 73:a4:d3:2e:70:6b:c1:9e:fc:0c:06:b4:12:0a:7c:66:18:5e: 38:dc:d7:86:92:a1:8b:16:77:a3:b1:e6:c2:61:25:ad:80:d2: 8d:7e:24:d5:b6:43:e3:9f:e0:72:2f:ee:fd:a5:56:e2:26:fa: 8a:2c:b9:53:f4:61:4b:9b:b8:8c:ce:d2:86:91:14:1a:aa:3c: 62:f2:f1:0a:fc:85:7d:58:df:06:e7:5b:a6:38:27:91:c5:28: 64:74:95:27:63:10:68:da:01:3a:94:64:9f:ba:62:22:83:42: 39:d5:69:8f:0f:0e:6e:3c:2a:41:00:db:63:2f:d4:68:4a:a0: 69:01:14:07:64:bc:55:12:66:6e:cf:ca:5d:d7:26:a4:85:47: 2e:05:e7:1b:b1:27:53:22:77:13:86:48:3b:33:2a:19:3a:41: df:de:04:5b:ac:59:89:7c:86:ab:d3:06:91:59:31:5f:63:6e: 22:5e:12:86 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgISAZt57KGuPjse5PcaKxwKskToMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNzYyZDNmZDJmYmZjZTEwYzU4ZjllYjc2YmU5MGZjY2Jh ZmIxN2QwHhcNMjYwMTAxMTQxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjBmYTFlYzQ2MTFiY2FmZTkwMjljMzZhNWRkYjFhYTQyOWE4OTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvd1xQgbMzQ9MeMqdS3WUycqX4d9o gzdTccEWQlbiUvbvjDTHMb/gYsmADmvE6pwVSkfcbYbovd0n1gqPc+tNMqtZwPvu zBJhiSroP1EYEohryNFa++GWFYZPGyKqwBc3B7kKRnVH8xm3K0Gy6Thmxs3bX9w7 5jrYyiQcnL9Zm6KughLxxHM9Djtib7cDFi/v6CdD5hCKYic0yF/Qs+EE0a84KiDb uCqctU0cJ3Oulbx/mPbBkxG5CYtMRrPfBw84TYGkZC8w9ompHKfFiYzuYVIFjr+G Tfr2Re8F3X8rekFli/FoMF0NEItS8VWyO4Cq4kEAP/CXBA9mDZ5/S98rZwIDAQAB o4ICEjCCAg4wHQYDVR0OBBYEFGIPoexGEbyv6QKcNqXdsapCmolWMB8GA1UdIwQY MBaAFC52LT/S+/zhDFj563a+kPzLr7F9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG5ZdFA5TDdfT0VNV1BucmRyNlFfTXV2c1gwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC82ODMwZjYtZjA5Ni00YzgxLWExZjUt OGU4MTM4ZWZjNDFiLzEvWWctaDdFWVJ2S19wQXB3MnBkMnhxa0thaVZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC82ODMwZjYtZjA5Ni00YzgxLWExZjUtOGU4MTM4ZWZjNDFi LzEvTG5ZdFA5TDdfT0VNV1BucmRyNlFfTXV2c1gwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCgGCCsGAQUFBwEHAQH/BBkwFzAVBAIAAjAPMA0DBAEqEb4D BQAqEb4EMA0GCSqGSIb3DQEBCwUAA4IBAQBpArTojmO5YGGMFokMgVTPSQHHSN9V /4d/KSgGLmaf7c9PAG4DlveMS+51PPquZq8/nE3MmpNa0gqmAJklGmhdtRhHG5Lq KJtzpNMucGvBnvwMBrQSCnxmGF443NeGkqGLFnejsebCYSWtgNKNfiTVtkPjn+By L+79pVbiJvqKLLlT9GFLm7iMztKGkRQaqjxi8vEK/IV9WN8G51umOCeRxShkdJUn YxBo2gE6lGSfumIig0I51WmPDw5uPCpBANtjL9RoSqBpARQHZLxVEmZuz8pd1yak hUcuBecbsSdTIncThkg7MyoZOkHf3gRbrFmJfIar0waRWTFfY24iXhKG -----END CERTIFICATE-----Generated at Tue Feb 10 11:34:10 2026 by rpki-client