This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/y1QDMX1RAbu1Kwa57mrptTZjJpE.roa File: y1QDMX1RAbu1Kwa57mrptTZjJpE.roa (raw, json) Hash identifier: VJ2cPikLiBRQj2D0yK7yoI27euxpQX3kpa5NIbLsEkE= Subject key identifier: CB:54:03:31:7D:51:01:BB:B5:2B:06:B9:EE:6A:E9:B5:36:63:26:91 Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Certificate serial: 019B78A37BB1C46D91A35F6F36D5A3B0A4BA Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/y1QDMX1RAbu1Kwa57mrptTZjJpE.roa Signing time: Thu 01 Jan 2026 08:18:58 +0000 ROA not before: Thu 01 Jan 2026 08:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210171 IP address blocks: 2a0b:4144:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:7b:b1:c4:6d:91:a3:5f:6f:36:d5:a3:b0:a4:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Validity Not Before: Jan 1 08:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cb5403317d5101bbb52b06b9ee6ae9b536632691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b6:b9:e1:18:7a:eb:0c:45:99:79:16:f1:26: a7:52:09:cf:62:9e:06:9b:26:fe:be:98:37:3d:c8: a9:41:fd:28:96:d5:23:9b:d8:bc:ef:03:c5:eb:2d: 92:06:56:77:e2:bf:fb:9a:74:fb:45:8f:69:db:e2: ed:a8:fd:e3:38:c8:ba:48:c1:ff:7d:30:6d:82:e4: d5:56:3f:bf:12:04:63:22:a1:9b:e3:c8:a5:59:32: 69:1f:43:af:27:10:58:09:ac:74:f2:67:d6:6e:a0: bf:58:67:d8:9f:d7:11:a4:b4:a4:b2:6e:67:d3:14: 06:c1:8a:aa:b8:6e:0f:fc:bc:0a:d7:01:79:da:cf: 96:ed:05:3d:a6:d5:9f:ae:35:0b:78:2c:08:91:4a: d9:2c:1e:cf:d6:6a:97:c8:48:ef:89:67:f7:6b:e6: 81:0d:a7:53:52:1c:2b:5d:5c:fb:97:b5:9c:0e:f7: ed:91:f0:7d:c6:23:e1:fa:e9:fd:fc:0e:66:51:59: 02:8b:b6:ce:c2:c9:bb:0e:9b:2b:41:ee:88:08:0a: 26:ca:a7:ad:18:cb:c7:cc:d6:32:e8:52:dd:f7:14: 10:fe:41:d5:9b:9b:79:47:67:a2:56:cc:3c:d8:47: e1:97:9b:4e:25:0c:bd:15:60:80:7b:f0:7e:ff:cd: d8:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:54:03:31:7D:51:01:BB:B5:2B:06:B9:EE:6A:E9:B5:36:63:26:91 X509v3 Authority Key Identifier: keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/y1QDMX1RAbu1Kwa57mrptTZjJpE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4144:1::/48 Signature Algorithm: sha256WithRSAEncryption 4c:72:ee:98:c9:3d:50:15:b4:95:ec:71:f1:55:78:36:e6:a2: 77:2b:86:2c:ae:c0:85:a9:d7:f6:0a:4c:ba:27:dc:7d:45:c7: 1e:62:60:6e:4d:81:8a:a6:30:2b:be:de:35:1a:d4:82:3b:27: 29:12:79:ec:20:04:03:ff:c9:b3:7e:4e:a0:f9:a2:b6:75:c0: 26:77:fe:b6:97:81:26:94:d1:5f:8a:b8:cd:7a:e8:64:32:55: 15:6b:3b:85:a4:49:c8:aa:50:71:de:18:a5:3a:6c:d0:5f:23: 01:c3:83:e4:48:ea:06:e1:c5:90:b3:35:d0:4b:1a:21:ad:be: 78:97:43:ed:09:66:bc:99:91:ff:22:b9:e0:12:e8:0b:c0:1d: b4:53:d3:d5:f7:b8:fe:02:89:bd:ec:df:b9:de:73:bf:16:0d: ef:af:53:7b:b6:dd:8c:38:7d:c3:c1:91:52:04:47:4c:2b:2e: 92:ab:1a:60:34:c4:9d:1d:12:24:0b:6a:95:9f:97:12:81:6f: 91:d9:5b:65:db:c2:f0:12:eb:f3:11:32:7d:df:ea:b2:a2:db: 9c:48:fd:63:0b:59:21:dc:4d:d4:d2:7f:26:55:93:4c:af:99: e5:af:34:d3:45:89:fd:7f:a2:ef:c5:0f:66:54:14:ab:5a:64: 95:99:65:9d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt4o3uxxG2Ro19vNtWjsKS6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMGZmOGFhZjc0NTMxMTQxNDcwMjhkNTRhZTFjNjkzYThh MTQ3YmMwHhcNMjYwMTAxMDgxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjU0MDMzMTdkNTEwMWJiYjUyYjA2YjllZTZhZTliNTM2NjMyNjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7a54Rh66wxFmXkW8SanUgnPYp4G myb+vpg3PcipQf0oltUjm9i87wPF6y2SBlZ34r/7mnT7RY9p2+LtqP3jOMi6SMH/ fTBtguTVVj+/EgRjIqGb48ilWTJpH0OvJxBYCax08mfWbqC/WGfYn9cRpLSksm5n 0xQGwYqquG4P/LwK1wF52s+W7QU9ptWfrjULeCwIkUrZLB7P1mqXyEjviWf3a+aB DadTUhwrXVz7l7WcDvftkfB9xiPh+un9/A5mUVkCi7bOwsm7DpsrQe6ICAomyqet GMvHzNYy6FLd9xQQ/kHVm5t5R2eiVsw82Efhl5tOJQy9FWCAe/B+/83YgwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMtUAzF9UQG7tSsGue5q6bU2YyaRMB8GA1UdIwQY MBaAFF4P+Kr3RTEUFHAo1UrhxpOooUe8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEt ZDg3MjEzNzU2NDRhLzEveTFRRE1YMVJBYnUxS3dhNTdtcnB0VFpqSnBFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEtZDg3MjEzNzU2NDRh LzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgtBRAAB MA0GCSqGSIb3DQEBCwUAA4IBAQBMcu6YyT1QFbSV7HHxVXg25qJ3K4YsrsCFqdf2 Cky6J9x9RcceYmBuTYGKpjArvt41GtSCOycpEnnsIAQD/8mzfk6g+aK2dcAmd/62 l4EmlNFfirjNeuhkMlUVazuFpEnIqlBx3hilOmzQXyMBw4PkSOoG4cWQszXQSxoh rb54l0PtCWa8mZH/IrngEugLwB20U9PV97j+Aom97N+53nO/Fg3vr1N7tt2MOH3D wZFSBEdMKy6SqxpgNMSdHRIkC2qVn5cSgW+R2Vtl28LwEuvzETJ93+qyotucSP1j C1kh3E3U0n8mVZNMr5nlrzTTRYn9f6LvxQ9mVBSrWmSVmWWd -----END CERTIFICATE-----Generated at Sun Jan 25 16:28:17 2026 by rpki-client