This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/yWDf5NXYf3V5C4RXp6kM7vpCi5U.roa File: yWDf5NXYf3V5C4RXp6kM7vpCi5U.roa (raw, json) Hash identifier: 6+Q3eraszgocMXtLwLNNOidcC+Bf57i8X6gv7LDo3os= Subject key identifier: C9:60:DF:E4:D5:D8:7F:75:79:0B:84:57:A7:A9:0C:EE:FA:42:8B:95 Certificate issuer: /CN=6c1a761795f0f66bff2478b468cde0d851ed1887 Certificate serial: 019B7CEE3B217D29E548A8E74AFA5C50166F Authority key identifier: 6C:1A:76:17:95:F0:F6:6B:FF:24:78:B4:68:CD:E0:D8:51:ED:18:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/yWDf5NXYf3V5C4RXp6kM7vpCi5U.roa Signing time: Fri 02 Jan 2026 04:19:06 +0000 ROA not before: Fri 02 Jan 2026 04:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51704 IP address blocks: 46.60.128.0/17 maxlen: 24 185.224.12.0/22 maxlen: 24 2a03:c500::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:3b:21:7d:29:e5:48:a8:e7:4a:fa:5c:50:16:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c1a761795f0f66bff2478b468cde0d851ed1887 Validity Not Before: Jan 2 04:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c960dfe4d5d87f75790b8457a7a90ceefa428b95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:84:80:52:fb:05:81:2f:1b:c5:cb:35:d2:a9: 2c:0e:26:42:8d:72:d2:68:07:2b:62:2f:c3:c4:47: 33:2f:6c:60:bc:45:99:df:de:28:36:5f:b8:f0:ad: 45:d9:a7:04:b7:c1:a9:aa:62:8b:25:f3:33:f2:9e: 05:b8:0f:52:6c:d7:2b:31:99:63:9b:e8:38:53:10: 71:58:e1:33:b6:0c:0a:15:7a:23:57:35:ae:13:34: 2a:4c:86:a8:59:64:14:65:5a:88:09:11:e5:b1:c2: 22:5d:d9:6e:93:97:0a:48:7c:2b:95:33:e2:fb:be: 0b:ac:e8:dd:48:df:0e:cf:62:c0:f5:8b:d8:79:f5: 7a:c2:fc:8e:20:76:c8:54:b5:2c:23:d4:84:05:f2: 72:9e:08:a6:12:c1:82:c1:76:6b:c4:b9:4c:c2:55: 2c:a1:78:f7:d1:ee:82:9a:dd:ff:28:d4:3a:19:40: 4e:93:3b:fd:0a:7e:c1:3d:1b:52:65:0d:1a:a1:c8: 83:c5:da:9b:ca:f5:a7:bd:35:92:f4:db:c2:79:32: 55:04:5f:39:4a:05:95:1d:ce:43:da:4a:76:d3:f6: 35:11:af:7f:c3:48:6a:41:a5:8d:f4:63:b7:40:41: f0:1e:00:4c:69:1e:0f:fd:c1:f4:d6:a2:f8:b5:3f: 10:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:60:DF:E4:D5:D8:7F:75:79:0B:84:57:A7:A9:0C:EE:FA:42:8B:95 X509v3 Authority Key Identifier: keyid:6C:1A:76:17:95:F0:F6:6B:FF:24:78:B4:68:CD:E0:D8:51:ED:18:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/yWDf5NXYf3V5C4RXp6kM7vpCi5U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.60.128.0/17 185.224.12.0/22 IPv6: 2a03:c500::/32 Signature Algorithm: sha256WithRSAEncryption 47:ba:56:cb:29:94:65:eb:3c:cd:d6:75:08:c8:37:68:35:29: 0e:e1:b6:4d:b6:c2:9a:d0:c5:d1:69:6d:a0:d5:78:f2:f6:9c: 73:f3:c9:95:27:69:a9:48:48:0e:ba:95:44:e0:0e:d8:e4:f3: 70:80:35:c7:60:d2:0d:1b:ed:98:6c:d8:91:99:75:3e:91:62: 4b:52:45:45:d5:ed:8f:37:13:80:65:10:67:5f:fe:92:6e:13: a9:39:39:c4:3b:97:d0:b1:00:26:f5:65:54:93:e6:91:98:2b: 16:9c:c5:33:a3:f4:f1:25:7e:c3:a1:97:35:63:68:4d:82:5e: 91:cc:db:17:ad:e9:f7:21:60:b1:b2:a6:fc:e8:67:86:16:44: 24:98:6d:b1:43:2f:15:99:9d:0c:76:9d:1f:d5:24:ab:2c:21: e2:35:cf:92:ff:0f:71:9d:2e:8a:27:19:d9:48:53:86:6a:70: 90:f0:88:f7:0d:8c:59:7b:3f:2e:eb:58:97:c9:b7:c2:49:7c: 41:a5:53:7b:cf:6d:d8:c3:92:4f:b7:19:4a:37:d5:d3:9d:80: a5:98:1d:8c:fe:2a:46:ce:c2:7e:f7:64:6a:b8:97:08:85:ed: 59:60:b1:a4:b6:eb:d9:65:b4:38:a6:ef:58:84:5a:58:98:1d: 3b:52:e5:81 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt87jshfSnlSKjnSvpcUBZvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMWE3NjE3OTVmMGY2NmJmZjI0NzhiNDY4Y2RlMGQ4NTFl ZDE4ODcwHhcNMjYwMTAyMDQxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTYwZGZlNGQ1ZDg3Zjc1NzkwYjg0NTdhN2E5MGNlZWZhNDI4Yjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4SAUvsFgS8bxcs10qksDiZCjXLS aAcrYi/DxEczL2xgvEWZ394oNl+48K1F2acEt8GpqmKLJfMz8p4FuA9SbNcrMZlj m+g4UxBxWOEztgwKFXojVzWuEzQqTIaoWWQUZVqICRHlscIiXdluk5cKSHwrlTPi +74LrOjdSN8Oz2LA9YvYefV6wvyOIHbIVLUsI9SEBfJyngimEsGCwXZrxLlMwlUs oXj30e6Cmt3/KNQ6GUBOkzv9Cn7BPRtSZQ0aociDxdqbyvWnvTWS9NvCeTJVBF85 SgWVHc5D2kp20/Y1Ea9/w0hqQaWN9GO3QEHwHgBMaR4P/cH01qL4tT8QmQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFMlg3+TV2H91eQuEV6epDO76QouVMB8GA1UdIwQY MBaAFGwadheV8PZr/yR4tGjN4NhR7RiHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkJwMkY1WHc5bXZfSkhpMGFNM2cyRkh0R0ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hMmMzODYtZDVlOS00YWQ5LTkzOGEt MGQxZDE3NGM0MzUxLzEveVdEZjVOWFlmM1Y1QzRSWHA2a003dnBDaTVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hMmMzODYtZDVlOS00YWQ5LTkzOGEtMGQxZDE3NGM0MzUx LzEvYkJwMkY1WHc5bXZfSkhpMGFNM2cyRkh0R0ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQHLjyAAwQC ueAMMA0EAgACMAcDBQAqA8UAMA0GCSqGSIb3DQEBCwUAA4IBAQBHulbLKZRl6zzN 1nUIyDdoNSkO4bZNtsKa0MXRaW2g1Xjy9pxz88mVJ2mpSEgOupVE4A7Y5PNwgDXH YNING+2YbNiRmXU+kWJLUkVF1e2PNxOAZRBnX/6SbhOpOTnEO5fQsQAm9WVUk+aR mCsWnMUzo/TxJX7DoZc1Y2hNgl6RzNsXren3IWCxsqb86GeGFkQkmG2xQy8VmZ0M dp0f1SSrLCHiNc+S/w9xnS6KJxnZSFOGanCQ8Ij3DYxZez8u61iXybfCSXxBpVN7 z23Yw5JPtxlKN9XTnYClmB2M/ipGzsJ+92RquJcIhe1ZYLGktuvZZbQ4pu9YhFpY mB07UuWB -----END CERTIFICATE-----Generated at Mon Jan 26 00:25:56 2026 by rpki-client