This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/d-YZ5YMu6Gnv8_xefmeMRmvOLWM.roa File: d-YZ5YMu6Gnv8_xefmeMRmvOLWM.roa (raw, json) Hash identifier: UJIzF9X7wYmHRhMhy99cqcN/dZPFPGX82ihlzf56Hno= Subject key identifier: 77:E6:19:E5:83:2E:E8:69:EF:F3:FC:5E:7E:67:8C:46:6B:CE:2D:63 Certificate issuer: /CN=59fa7027661ac8c4a77ff2abd59686af99f15928 Certificate serial: 019B7EA6AE0C8C10A83B6496EA1877918EFF Authority key identifier: 59:FA:70:27:66:1A:C8:C4:A7:7F:F2:AB:D5:96:86:AF:99:F1:59:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/d-YZ5YMu6Gnv8_xefmeMRmvOLWM.roa Signing time: Fri 02 Jan 2026 12:20:11 +0000 ROA not before: Fri 02 Jan 2026 12:20:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214486 IP address blocks: 2001:67c:1804::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft rsync://rpki.ripe.net/repository/DEFAULT/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:ae:0c:8c:10:a8:3b:64:96:ea:18:77:91:8e:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59fa7027661ac8c4a77ff2abd59686af99f15928 Validity Not Before: Jan 2 12:20:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=77e619e5832ee869eff3fc5e7e678c466bce2d63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b0:94:c5:32:e2:59:f9:3a:e8:75:fe:0b:4d: 57:3d:8f:dd:dd:0f:02:bb:21:ae:9d:c2:8c:26:ed: 92:13:3c:c2:6c:ba:5f:fd:7b:cf:4b:83:7e:df:0e: 2f:d7:1d:84:84:39:52:5e:93:cb:44:28:d2:27:f3: 42:65:ac:b6:a8:90:db:5e:bd:c8:6c:5d:6d:77:dd: 18:d5:d9:d0:80:08:07:f7:b2:c4:b4:8c:b3:09:ce: 63:e7:58:1f:c8:d5:36:4c:32:e8:ef:4f:a4:52:6e: b3:17:99:73:03:b8:1a:38:b1:97:9f:ef:4f:8f:08: 50:64:d6:1f:34:f6:15:73:76:90:96:bd:59:bd:61: 0a:b6:0d:ec:07:e2:24:27:7e:dd:97:d6:19:a5:95: 6d:d0:c7:bb:53:dd:14:5b:c1:b0:58:aa:8c:58:21: d8:7c:72:e8:c6:4f:92:e2:68:a6:b9:68:1a:bd:f6: 28:c4:4d:ba:bc:e6:c5:66:c1:dc:4a:72:19:88:7f: a9:36:bd:fe:cd:0b:4f:bd:04:7c:53:21:2d:16:24: 81:a6:3c:13:d2:cb:67:44:b0:59:75:0f:af:21:aa: fd:41:25:5d:7b:cb:8a:30:95:c0:65:ae:70:26:e0: 68:b8:08:9c:90:19:5b:84:2c:63:ee:52:3e:61:d8: d2:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:E6:19:E5:83:2E:E8:69:EF:F3:FC:5E:7E:67:8C:46:6B:CE:2D:63 X509v3 Authority Key Identifier: keyid:59:FA:70:27:66:1A:C8:C4:A7:7F:F2:AB:D5:96:86:AF:99:F1:59:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/d-YZ5YMu6Gnv8_xefmeMRmvOLWM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:1804::/48 Signature Algorithm: sha256WithRSAEncryption 2d:c8:62:38:9f:b1:53:a0:8a:d3:5d:fe:44:0a:60:3c:85:37: 98:b8:34:c2:82:72:f8:1d:d6:a3:e9:fd:75:8b:9e:5a:0e:15: ad:cb:ea:3c:df:ab:cf:df:c3:4d:28:e6:0c:da:36:2a:d4:23: 24:2b:77:a7:23:51:6d:79:65:f2:0d:d3:15:6e:d3:9f:57:b7: 46:18:c7:5a:cb:f6:84:79:53:f9:4a:34:99:b0:10:6b:b2:58: c2:56:17:9c:af:8c:72:74:65:a9:54:95:62:a8:cf:db:43:2c: 57:cc:d0:e7:6b:92:66:eb:35:5c:49:48:90:7c:43:2d:1e:ba: 7f:33:70:86:5d:ae:3a:08:59:6e:34:c1:88:da:f8:38:91:ca: cc:48:c2:63:a5:2e:ed:25:e3:90:34:e4:ea:b9:12:8b:60:cb: 95:1b:c5:04:7d:3e:bf:a8:3b:13:59:c6:cb:a1:a4:db:eb:ec: 71:f7:52:ac:a7:81:ee:0b:16:c9:2d:bc:58:ff:20:d4:43:b8: 6e:9a:79:69:b9:ab:f0:ca:11:05:a5:de:c4:83:69:b3:f3:e5: a8:91:01:03:6c:14:72:f3:b1:85:cb:40:4d:7b:d7:36:a9:31: 69:9d:12:8d:9d:cc:86:72:34:73:18:b7:57:75:83:01:3a:a0: c0:84:97:00 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pq4MjBCoO2SW6hh3kY7/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ZmE3MDI3NjYxYWM4YzRhNzdmZjJhYmQ1OTY4NmFmOTlm MTU5MjgwHhcNMjYwMTAyMTIyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3N2U2MTllNTgzMmVlODY5ZWZmM2ZjNWU3ZTY3OGM0NjZiY2UyZDYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rCUxTLiWfk66HX+C01XPY/d3Q8C uyGuncKMJu2SEzzCbLpf/XvPS4N+3w4v1x2EhDlSXpPLRCjSJ/NCZay2qJDbXr3I bF1td90Y1dnQgAgH97LEtIyzCc5j51gfyNU2TDLo70+kUm6zF5lzA7gaOLGXn+9P jwhQZNYfNPYVc3aQlr1ZvWEKtg3sB+IkJ37dl9YZpZVt0Me7U90UW8GwWKqMWCHY fHLoxk+S4mimuWgavfYoxE26vObFZsHcSnIZiH+pNr3+zQtPvQR8UyEtFiSBpjwT 0stnRLBZdQ+vIar9QSVde8uKMJXAZa5wJuBouAickBlbhCxj7lI+YdjSOwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHfmGeWDLuhp7/P8Xn5njEZrzi1jMB8GA1UdIwQY MBaAFFn6cCdmGsjEp3/yq9WWhq+Z8VkoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2Zwd0oyWWF5TVNuZl9LcjFaYUdyNW54V1NnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9jYmQ5ZDEtODRhNC00NTFkLTkyMTQt MDkwNmRhMWIyM2E2LzEvZC1ZWjVZTXU2R252OF94ZWZtZU1SbXZPTFdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9jYmQ5ZDEtODRhNC00NTFkLTkyMTQtMDkwNmRhMWIyM2E2 LzEvV2Zwd0oyWWF5TVNuZl9LcjFaYUdyNW54V1NnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBgE MA0GCSqGSIb3DQEBCwUAA4IBAQAtyGI4n7FToIrTXf5ECmA8hTeYuDTCgnL4Hdaj 6f11i55aDhWty+o836vP38NNKOYM2jYq1CMkK3enI1FteWXyDdMVbtOfV7dGGMda y/aEeVP5SjSZsBBrsljCVhecr4xydGWpVJViqM/bQyxXzNDna5Jm6zVcSUiQfEMt Hrp/M3CGXa46CFluNMGI2vg4kcrMSMJjpS7tJeOQNOTquRKLYMuVG8UEfT6/qDsT WcbLoaTb6+xx91Ksp4HuCxbJLbxY/yDUQ7humnlpuavwyhEFpd7Eg2mz8+WokQED bBRy87GFy0BNe9c2qTFpnRKNncyGcjRzGLdXdYMBOqDAhJcA -----END CERTIFICATE-----Generated at Sun Jan 25 19:59:34 2026 by rpki-client