This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/ySuM-WxG5dbfi2CFirvx8xCRfuA.roa File: ySuM-WxG5dbfi2CFirvx8xCRfuA.roa (raw, json) Hash identifier: 1e/p6LGwMmHWJEevpgoA3E6bMz9Y+YCCH+tqNadZtdI= Subject key identifier: C9:2B:8C:F9:6C:46:E5:D6:DF:8B:60:85:8A:BB:F1:F3:10:91:7E:E0 Certificate issuer: /CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec Certificate serial: 019B7DC9E66FD8FBF42CCFEC1006948F3CE3 Authority key identifier: 25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/ySuM-WxG5dbfi2CFirvx8xCRfuA.roa Signing time: Fri 02 Jan 2026 08:19:02 +0000 ROA not before: Fri 02 Jan 2026 08:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62610 IP address blocks: 2a0b:21c1:600c::/46 maxlen: 46 2a0b:21c1:6013::/48 maxlen: 48 2a0b:21c1:6014::/48 maxlen: 48 2a0b:21c1:6015::/48 maxlen: 48 2a0b:21c1:6016::/48 maxlen: 48 2a0b:21c1:6017::/48 maxlen: 48 2a0b:21c1:6018::/48 maxlen: 48 2a0b:21c1:6019::/48 maxlen: 48 2a0b:21c1:601a::/48 maxlen: 48 2a0b:21c1:601d::/48 maxlen: 48 2a0b:21c1:601e::/48 maxlen: 48 2a0b:21c1:601f::/48 maxlen: 48 2a0b:21c1:6020::/48 maxlen: 48 2a0b:21c1:6021::/48 maxlen: 48 2a0b:21c1:6022::/48 maxlen: 48 2a0b:21c1:6024::/48 maxlen: 48 2a0b:21c1:6025::/48 maxlen: 48 2a0b:21c1:6026::/48 maxlen: 48 2a0b:21c1:6027::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 08:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:e6:6f:d8:fb:f4:2c:cf:ec:10:06:94:8f:3c:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec Validity Not Before: Jan 2 08:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c92b8cf96c46e5d6df8b60858abbf1f310917ee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b8:7b:a6:6f:b5:63:94:02:9c:b1:27:c7:a6: 48:fc:c8:e0:38:ad:ba:3f:26:5f:ba:c7:fb:99:21: ca:f7:11:d4:e8:f2:bf:69:79:b6:4d:c9:f0:fa:5c: 5c:a4:bc:15:35:a8:3c:c8:d4:b3:fe:95:f9:46:6b: 75:e8:2e:6d:22:bd:c2:3f:24:36:ac:af:fe:2f:0d: 98:78:34:d6:d1:98:73:1d:05:5e:09:b0:74:4d:6c: 54:b0:19:6c:d9:1d:cb:f9:4b:94:a2:56:8e:c3:a0: 9e:e0:fd:f0:28:99:42:13:0b:dd:70:59:90:6a:ad: b6:ec:8a:91:be:da:e4:29:66:0b:f2:62:66:6e:49: 7d:7a:e2:dd:44:9a:70:5a:ff:34:71:16:98:53:a8: ce:ce:7d:3e:05:b2:72:0b:d9:fd:a7:a2:b5:9a:89: 53:3c:0f:5d:25:f9:bd:be:c5:3a:10:1a:8f:9a:0b: cb:c6:17:ee:72:8a:37:2d:1b:04:d3:5f:26:69:29: 12:ff:9a:a9:33:72:aa:42:9c:d7:61:22:29:bd:c3: ce:39:73:15:90:45:7d:92:20:d5:a3:2e:b8:e7:67: e2:68:d7:74:7e:2c:a3:a0:bf:c3:db:5b:8a:a3:51: 22:d6:d6:d3:a4:e6:fd:83:29:e8:46:01:1a:ef:cd: 53:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:2B:8C:F9:6C:46:E5:D6:DF:8B:60:85:8A:BB:F1:F3:10:91:7E:E0 X509v3 Authority Key Identifier: keyid:25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/ySuM-WxG5dbfi2CFirvx8xCRfuA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:21c1:600c::/46 2a0b:21c1:6013::-2a0b:21c1:601a:ffff:ffff:ffff:ffff:ffff 2a0b:21c1:601d::-2a0b:21c1:6022:ffff:ffff:ffff:ffff:ffff 2a0b:21c1:6024::/46 Signature Algorithm: sha256WithRSAEncryption 99:0d:6d:17:8d:0d:9b:5d:ce:2c:ff:3e:47:74:c3:8b:8e:41: 39:6e:d2:ed:9f:00:cc:87:38:8b:31:bd:1f:ce:8e:fd:0f:3f: 96:10:b4:7a:2b:49:91:6a:16:de:94:6f:a5:08:09:ee:06:e8: af:fb:32:75:29:c8:b7:5f:83:f6:a7:85:4a:8f:71:14:4c:5d: bf:83:95:de:90:54:07:b1:7d:3a:54:c4:90:7f:28:50:d2:28: 5e:51:e0:79:16:a5:4c:5d:b7:00:6a:55:67:ae:d5:dc:8d:cd: 68:e6:91:03:f8:e7:65:c3:9c:25:ab:09:f0:30:a7:f5:e1:e1: 59:e7:6f:d0:da:94:81:67:37:a4:5c:58:0d:0a:ff:22:e6:bb: 73:6d:c2:15:fc:41:10:8e:2a:5a:17:28:2d:22:8d:4e:43:52: cf:83:a8:75:f8:be:98:e0:09:7f:2e:e7:94:af:45:9f:19:27: 64:e0:db:95:6c:4c:30:51:4e:2b:5f:3c:34:c3:f5:64:0c:50: e6:b6:df:63:86:68:79:7d:da:18:d3:29:7e:26:c6:2f:4a:8f: 78:31:94:49:71:6a:8e:68:f9:8b:ac:98:72:18:83:fa:66:26: 85:f6:cf:73:a7:0f:cd:32:82:89:94:66:15:47:35:2d:75:32: a0:f5:71:25 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgISAZt9yeZv2Pv0LM/sEAaUjzzjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1Nzc2Yzc3ZjhlYmU3MDk0Y2EwMDdhY2UxYTljMGJmZGMy YjNhZWMwHhcNMjYwMTAyMDgxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTJiOGNmOTZjNDZlNWQ2ZGY4YjYwODU4YWJiZjFmMzEwOTE3ZWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLh7pm+1Y5QCnLEnx6ZI/MjgOK26 PyZfusf7mSHK9xHU6PK/aXm2Tcnw+lxcpLwVNag8yNSz/pX5Rmt16C5tIr3CPyQ2 rK/+Lw2YeDTW0ZhzHQVeCbB0TWxUsBls2R3L+UuUolaOw6Ce4P3wKJlCEwvdcFmQ aq227IqRvtrkKWYL8mJmbkl9euLdRJpwWv80cRaYU6jOzn0+BbJyC9n9p6K1molT PA9dJfm9vsU6EBqPmgvLxhfucoo3LRsE018maSkS/5qpM3KqQpzXYSIpvcPOOXMV kEV9kiDVoy6452fiaNd0fiyjoL/D21uKo1Ei1tbTpOb9gynoRgEa781TzwIDAQAB o4ICPTCCAjkwHQYDVR0OBBYEFMkrjPlsRuXW34tghYq78fMQkX7gMB8GA1UdIwQY MBaAFCV3bHf46+cJTKAHrOGpwL/cKzrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQt ZTdkYWVjMTk0YTY5LzEveVN1TS1XeEc1ZGJmaTJDRmlydng4eENSZnVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQtZTdkYWVjMTk0YTY5 LzEvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFMGCCsGAQUFBwEHAQH/BEQwQjBABAIAAjA6AwcCKgshwWAM MBIDBwAqCyHBYBMDBwAqCyHBYBowEgMHACoLIcFgHQMHACoLIcFgIgMHAioLIcFg JDANBgkqhkiG9w0BAQsFAAOCAQEAmQ1tF40Nm13OLP8+R3TDi45BOW7S7Z8AzIc4 izG9H86O/Q8/lhC0eitJkWoW3pRvpQgJ7gbor/sydSnIt1+D9qeFSo9xFExdv4OV 3pBUB7F9OlTEkH8oUNIoXlHgeRalTF23AGpVZ67V3I3NaOaRA/jnZcOcJasJ8DCn 9eHhWedv0NqUgWc3pFxYDQr/Iua7c23CFfxBEI4qWhcoLSKNTkNSz4Oodfi+mOAJ fy7nlK9FnxknZODblWxMMFFOK188NMP1ZAxQ5rbfY4ZoeX3aGNMpfibGL0qPeDGU SXFqjmj5i6yYchiD+mYmhfbPc6cPzTKCiZRmFUc1LXUyoPVxJQ== -----END CERTIFICATE-----Generated at Tue Jan 20 18:01:37 2026 by rpki-client