This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/ywBiy-o4XsBIPI_fWrb7hhnAVLE.roa
File: ywBiy-o4XsBIPI_fWrb7hhnAVLE.roa (raw, json)
Hash identifier: kmkUiCIL5Vn2DsWe4fEj+7WvXbP95E8Y7UJwXAFQhao=
Subject key identifier: CB:00:62:CB:EA:38:5E:C0:48:3C:8F:DF:5A:B6:FB:86:19:C0:54:B1
Certificate issuer: /CN=9ea73fb87c87b6ff8462016147764e7e4f0ead29
Certificate serial: 019B7D5CDF603782E4BFB13E44AE0666E41A
Authority key identifier: 9E:A7:3F:B8:7C:87:B6:FF:84:62:01:61:47:76:4E:7E:4F:0E:AD:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/ywBiy-o4XsBIPI_fWrb7hhnAVLE.roa
Signing time: Fri 02 Jan 2026 06:19:57 +0000
ROA not before: Fri 02 Jan 2026 06:19:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198453
IP address blocks: 2001:67c:13e0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5c:df:60:37:82:e4:bf:b1:3e:44:ae:06:66:e4:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ea73fb87c87b6ff8462016147764e7e4f0ead29
Validity
Not Before: Jan 2 06:19:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cb0062cbea385ec0483c8fdf5ab6fb8619c054b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4e:8c:96:df:05:23:6e:86:74:6b:7c:d2:56:
d0:83:66:ad:8c:42:5c:42:07:1a:a5:b4:a9:34:9c:
1d:a0:83:fa:dd:8a:9f:ef:fe:37:f3:a9:fb:d4:02:
bf:85:82:4b:b4:88:83:9c:bc:90:9a:ed:d7:aa:fd:
07:77:50:c5:9f:a3:e7:b4:ae:fc:c3:27:a8:82:e5:
ac:84:39:9e:fa:34:5e:e6:12:60:c0:80:bd:8c:27:
34:9b:63:49:71:bc:c8:38:2f:1f:a7:08:59:e9:35:
c7:8c:b3:5d:dc:44:15:97:7a:a2:eb:f5:95:9b:f2:
45:59:d8:06:b4:a1:73:90:06:59:25:a2:e3:60:dd:
a7:d1:fd:58:8d:48:9f:3f:6c:15:39:20:c3:6d:fb:
c3:c2:0a:13:f4:bc:f1:32:c4:47:44:83:c8:4a:65:
e6:3a:92:a9:53:57:d7:28:37:65:29:60:d0:49:c9:
5e:f9:d7:58:98:bb:53:a2:29:fa:ca:a8:d0:9e:87:
97:3a:51:da:8d:2f:60:49:bd:01:49:82:b3:4e:e8:
1e:4c:4c:d3:c7:0b:5b:f6:96:4c:65:a5:aa:9d:4b:
ff:c5:6d:40:50:41:9a:24:a3:fe:2b:4c:3c:a1:22:
5f:c5:97:8f:f2:1c:30:4c:3c:b6:a1:c9:6c:95:1a:
c3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:00:62:CB:EA:38:5E:C0:48:3C:8F:DF:5A:B6:FB:86:19:C0:54:B1
X509v3 Authority Key Identifier:
keyid:9E:A7:3F:B8:7C:87:B6:FF:84:62:01:61:47:76:4E:7E:4F:0E:AD:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/ywBiy-o4XsBIPI_fWrb7hhnAVLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:13e0::/48
Signature Algorithm: sha256WithRSAEncryption
20:d8:f0:ac:3e:44:d2:0a:3b:86:31:68:90:81:23:3a:8a:e3:
9d:12:2b:bc:52:c6:74:76:bb:7a:3d:de:be:af:13:4b:0b:fc:
5e:f5:5b:c6:5c:2b:45:ec:e6:5d:36:b7:65:4b:a0:5a:31:71:
fb:0d:04:1a:e5:9f:61:81:81:d9:89:5d:c6:dc:f4:17:93:81:
4c:25:42:36:de:05:49:b8:89:bf:a5:ce:c6:05:98:be:fd:c6:
24:0f:01:1d:4b:30:0b:03:3d:17:02:e1:3f:ec:b8:42:19:28:
7a:41:b6:e2:c2:3d:35:ac:06:d0:07:6f:4c:0e:da:af:4f:9b:
0e:48:2b:14:46:6d:e4:48:ba:c5:0b:d5:23:15:c2:1c:78:5e:
5d:a2:8b:ff:24:c8:5f:88:12:b9:57:7e:da:bb:45:21:2d:51:
4d:d8:5a:fa:4e:99:26:eb:35:7d:27:7b:1a:66:f3:b0:6a:20:
9a:9d:89:75:49:61:08:fa:42:e7:95:66:e2:3d:01:f4:06:49:
0b:fc:d8:eb:46:d4:d0:e7:91:08:74:5a:0f:b9:2d:e8:e8:b2:
3a:9f:34:74:ed:c6:ef:82:00:ae:8e:43:3a:f6:34:46:14:1c:
58:18:ce:e4:dd:78:02:db:ba:6b:a4:76:e7:a6:89:bc:fe:74:
f1:57:53:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:40:13 2026 by rpki-client