This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/Y6ag-lBJsM_i8uu8_Q1wgqF6IWU.roa File: Y6ag-lBJsM_i8uu8_Q1wgqF6IWU.roa (raw, json) Hash identifier: +GrN3dSRT/4nbqd/XITwB0EvlJGkF2GpIgstYLUZEf0= Subject key identifier: 63:A6:A0:FA:50:49:B0:CF:E2:F2:EB:BC:FD:0D:70:82:A1:7A:21:65 Certificate issuer: /CN=78c71e65cf7a3d2e2fc2b8cc3d43d45d2b350df3 Certificate serial: 019B7EA730DD7590271A97F4ED9BBDA6F4E1 Authority key identifier: 78:C7:1E:65:CF:7A:3D:2E:2F:C2:B8:CC:3D:43:D4:5D:2B:35:0D:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eMceZc96PS4vwrjMPUPUXSs1DfM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/Y6ag-lBJsM_i8uu8_Q1wgqF6IWU.roa Signing time: Fri 02 Jan 2026 12:20:44 +0000 ROA not before: Fri 02 Jan 2026 12:20:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8592 IP address blocks: 212.16.0.0/19 maxlen: 19 212.16.0.0/20 maxlen: 20 212.16.16.0/21 maxlen: 21 212.16.24.0/22 maxlen: 22 2a02:24f0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/eMceZc96PS4vwrjMPUPUXSs1DfM.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/eMceZc96PS4vwrjMPUPUXSs1DfM.mft rsync://rpki.ripe.net/repository/DEFAULT/eMceZc96PS4vwrjMPUPUXSs1DfM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:30:dd:75:90:27:1a:97:f4:ed:9b:bd:a6:f4:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78c71e65cf7a3d2e2fc2b8cc3d43d45d2b350df3 Validity Not Before: Jan 2 12:20:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63a6a0fa5049b0cfe2f2ebbcfd0d7082a17a2165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:03:90:f9:9f:01:45:99:7f:21:ae:7d:a9:55: e8:6e:0b:fd:b3:53:b7:bc:6d:fd:8e:58:58:bf:e2: 6d:f6:4a:23:53:dd:85:bb:c0:ea:ab:f5:5c:15:cc: 06:8b:0c:58:ce:af:8b:d6:6c:aa:a9:98:fe:06:3e: d5:8b:58:eb:3d:92:76:3c:a6:7d:18:2f:79:f7:66: 33:bd:c2:a9:30:a8:f4:83:88:7c:a4:f8:13:a5:c1: 69:fb:f8:8e:1d:0d:83:9a:f2:2c:65:25:1a:bc:d9: 97:27:e2:ae:ff:4c:9f:c7:39:5c:57:4f:10:74:af: c3:04:2d:c0:ee:dc:00:67:46:3c:90:16:1e:a6:df: 4c:97:c4:84:40:e8:43:8c:76:ba:81:55:cd:ef:76: a7:4e:1f:1b:51:17:9f:23:7d:46:94:98:81:16:55: ad:7c:2a:84:05:ce:30:1f:90:ca:2b:c0:d4:c2:39: 8a:74:e0:8a:54:99:b3:1b:86:ba:40:b3:a8:81:24: c8:2e:e7:c4:b7:fd:a9:17:d6:60:99:fa:fb:cf:c7: 0c:b2:cc:8a:ec:37:c0:24:14:9f:81:77:78:1f:8d: 25:a7:67:b0:93:4c:e7:4e:53:b2:93:6a:89:d3:44: 55:e9:bb:81:4b:4c:4c:15:6c:7c:9e:20:9c:2c:71: 6a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:A6:A0:FA:50:49:B0:CF:E2:F2:EB:BC:FD:0D:70:82:A1:7A:21:65 X509v3 Authority Key Identifier: keyid:78:C7:1E:65:CF:7A:3D:2E:2F:C2:B8:CC:3D:43:D4:5D:2B:35:0D:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMceZc96PS4vwrjMPUPUXSs1DfM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/Y6ag-lBJsM_i8uu8_Q1wgqF6IWU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/eMceZc96PS4vwrjMPUPUXSs1DfM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.16.0.0/19 IPv6: 2a02:24f0::/32 Signature Algorithm: sha256WithRSAEncryption 85:3e:42:3a:8b:2b:e0:fe:dc:c1:99:16:00:e2:59:4a:0d:2d: 10:7f:5e:7c:ff:c1:4e:48:df:02:f4:5e:cb:f0:8f:58:c8:18: b4:5f:3c:3f:2f:98:6c:e3:92:db:bc:67:5d:8c:29:bc:ae:58: 5b:bd:43:52:08:d5:92:e8:07:a9:b0:62:f0:c6:fc:22:88:9f: c9:b8:b5:b3:4f:53:00:a0:e0:d7:83:a1:d1:07:de:c0:e1:42: 2b:f2:b0:b5:ee:9a:b2:c7:f0:57:41:75:b9:9f:f9:0e:a4:bc: 3f:bc:c6:a8:7b:40:44:5a:3e:b1:4b:9a:6b:98:2f:c2:a1:bb: a9:a4:e6:22:ec:81:7a:c4:89:b0:c9:77:74:83:9d:07:19:56: 6d:a1:14:6b:89:9c:cf:81:f2:ee:4d:c6:fe:6c:29:7d:85:20: e6:7d:13:46:cb:7d:f9:22:47:5a:85:c3:29:77:85:c2:b5:8e: af:47:ca:e8:a3:58:f9:48:82:54:b0:d2:02:27:6c:0e:d8:65: e0:17:75:3d:1e:21:da:c1:26:76:bc:01:b3:e5:33:c1:aa:09: 15:d2:74:68:b1:38:05:44:bc:60:75:9c:94:65:09:e5:b5:8f: 3c:78:65:1b:a6:f4:e6:27:6e:b2:d2:e9:c2:b9:fe:96:10:14: 8d:79:ac:3b -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+pzDddZAnGpf07Zu9pvThMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4YzcxZTY1Y2Y3YTNkMmUyZmMyYjhjYzNkNDNkNDVkMmIz NTBkZjMwHhcNMjYwMTAyMTIyMDQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2M2E2YTBmYTUwNDliMGNmZTJmMmViYmNmZDBkNzA4MmExN2EyMTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswOQ+Z8BRZl/Ia59qVXobgv9s1O3 vG39jlhYv+Jt9kojU92Fu8Dqq/VcFcwGiwxYzq+L1myqqZj+Bj7Vi1jrPZJ2PKZ9 GC9592YzvcKpMKj0g4h8pPgTpcFp+/iOHQ2DmvIsZSUavNmXJ+Ku/0yfxzlcV08Q dK/DBC3A7twAZ0Y8kBYept9Ml8SEQOhDjHa6gVXN73anTh8bURefI31GlJiBFlWt fCqEBc4wH5DKK8DUwjmKdOCKVJmzG4a6QLOogSTILufEt/2pF9Zgmfr7z8cMssyK 7DfAJBSfgXd4H40lp2ewk0znTlOyk2qJ00RV6buBS0xMFWx8niCcLHFqvwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFGOmoPpQSbDP4vLrvP0NcIKheiFlMB8GA1UdIwQY MBaAFHjHHmXPej0uL8K4zD1D1F0rNQ3zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZU1jZVpjOTZQUzR2d3JqTVBVUFVYU3MxRGZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9mYjAyODAtOWQ4Ni00YzExLTg5ZDEt ODc4ODExMjdmY2JmLzEvWTZhZy1sQkpzTV9pOHV1OF9RMXdncUY2SVdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9mYjAyODAtOWQ4Ni00YzExLTg5ZDEtODc4ODExMjdmY2Jm LzEvZU1jZVpjOTZQUzR2d3JqTVBVUFVYU3MxRGZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQF1BAAMA0E AgACMAcDBQAqAiTwMA0GCSqGSIb3DQEBCwUAA4IBAQCFPkI6iyvg/tzBmRYA4llK DS0Qf158/8FOSN8C9F7L8I9YyBi0Xzw/L5hs45LbvGddjCm8rlhbvUNSCNWS6Aep sGLwxvwiiJ/JuLWzT1MAoODXg6HRB97A4UIr8rC17pqyx/BXQXW5n/kOpLw/vMao e0BEWj6xS5prmC/CobuppOYi7IF6xImwyXd0g50HGVZtoRRriZzPgfLuTcb+bCl9 hSDmfRNGy335IkdahcMpd4XCtY6vR8roo1j5SIJUsNICJ2wO2GXgF3U9HiHawSZ2 vAGz5TPBqgkV0nRosTgFRLxgdZyUZQnltY88eGUbpvTmJ26y0unCuf6WEBSNeaw7 -----END CERTIFICATE-----Generated at Tue Feb 10 04:27:43 2026 by rpki-client