This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/yXL2c-lh8z3Pu6QXVoEmuyvEfX4.roa File: yXL2c-lh8z3Pu6QXVoEmuyvEfX4.roa (raw, json) Hash identifier: yk0yZqIR3aCNm4M9eEBAKHg+9JBzxKPA8wbCVYP14nQ= Subject key identifier: C9:72:F6:73:E9:61:F3:3D:CF:BB:A4:17:56:81:26:BB:2B:C4:7D:7E Certificate issuer: /CN=ffb4f40f3211561c29f1bbc320bd87cfa2ddd029 Certificate serial: 019B79ECC75622EEFC03E884033A605C28CD Authority key identifier: FF:B4:F4:0F:32:11:56:1C:29:F1:BB:C3:20:BD:87:CF:A2:DD:D0:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/yXL2c-lh8z3Pu6QXVoEmuyvEfX4.roa Signing time: Thu 01 Jan 2026 14:18:39 +0000 ROA not before: Thu 01 Jan 2026 14:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34762 IP address blocks: 2.59.64.0/24 maxlen: 24 2a09:e940::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:c7:56:22:ee:fc:03:e8:84:03:3a:60:5c:28:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffb4f40f3211561c29f1bbc320bd87cfa2ddd029 Validity Not Before: Jan 1 14:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c972f673e961f33dcfbba417568126bb2bc47d7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:d6:32:a5:ed:48:dc:3f:81:ad:68:01:77:5b: ae:85:8e:bb:76:18:4b:8c:c1:44:3d:27:cc:2d:8f: 69:dc:dc:36:e9:fb:71:52:34:c7:93:22:7d:12:0a: 4f:aa:5c:fa:e6:d8:03:ba:b1:2b:75:99:d4:0d:46: 82:50:cc:d0:2b:8e:be:b2:82:84:f6:bb:86:31:df: 91:a2:d6:a2:51:15:c0:0b:ef:aa:ff:7c:3e:bd:6c: 46:84:4c:dc:f4:34:af:9f:45:6f:43:b3:f0:bf:29: 75:91:94:b7:1f:fd:fa:bc:57:fd:6a:2a:0d:37:f9: 75:a0:e8:da:5f:f0:66:01:25:8f:28:b1:b5:ee:00: b8:d3:04:54:5e:13:9e:3d:4a:29:1e:f8:0b:c8:04: 42:90:a9:e8:f0:a1:3a:06:bb:1c:08:f9:00:a5:0a: b8:92:5d:fe:be:af:bd:f3:5d:1e:d6:4e:da:48:89: 47:9f:41:67:6d:38:16:1d:6d:ea:6d:09:96:b4:3a: 56:bb:6a:67:1b:3c:aa:c6:dc:bb:d2:ad:d6:31:09: 84:bf:f7:84:6e:39:75:af:d8:37:01:33:2c:e9:1d: 93:7b:fb:d3:df:03:5d:33:99:17:44:0d:39:32:b5: 68:06:1a:5b:83:1f:32:a9:cc:ca:62:81:f9:30:e6: 62:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:72:F6:73:E9:61:F3:3D:CF:BB:A4:17:56:81:26:BB:2B:C4:7D:7E X509v3 Authority Key Identifier: keyid:FF:B4:F4:0F:32:11:56:1C:29:F1:BB:C3:20:BD:87:CF:A2:DD:D0:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/yXL2c-lh8z3Pu6QXVoEmuyvEfX4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.64.0/24 IPv6: 2a09:e940::/32 Signature Algorithm: sha256WithRSAEncryption 9c:a6:c5:c4:df:02:38:83:c6:cb:86:8c:eb:16:1d:ab:fb:eb: 98:7b:f0:a1:ca:6b:b5:87:d4:84:e5:ca:bb:a4:fb:1b:97:68: dc:aa:4b:d8:33:fe:ad:b0:91:c6:cd:82:7c:b1:30:a1:1b:c2: 31:64:82:07:a6:d6:cc:9c:90:75:52:c9:63:1f:60:55:0e:5f: 9d:aa:16:e0:e0:c2:c6:85:2e:e4:fc:3a:c3:67:93:f9:77:3b: 43:74:e4:1f:c5:4f:ab:a9:2b:6d:c9:4c:4a:a3:4f:1d:71:06: 44:d0:7f:ca:96:f0:bb:59:aa:50:c4:d9:ac:4b:f0:5a:3f:d4: 1c:ea:0b:5f:a8:ac:43:9a:0f:c2:07:8b:77:05:0a:2b:11:22: ce:13:de:47:f7:c3:a6:5f:af:4b:e4:53:79:50:56:dc:b1:6d: 10:a1:85:a2:1d:ba:bb:70:19:10:86:54:1b:c6:a3:74:37:63: b5:1d:27:10:c5:df:3d:2c:f0:94:65:1d:1a:ce:0b:52:f5:eb: c9:fb:e6:41:10:96:2d:e9:a8:f7:08:b0:0c:f0:1e:c8:fa:8a: fe:d3:3a:30:91:a5:30:b8:fa:aa:e9:21:18:8a:2e:aa:aa:ea: 35:3a:53:50:58:6a:b8:fb:4d:aa:02:b4:a2:7e:19:40:be:a7: 7a:04:6c:b3 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt57MdWIu78A+iEAzpgXCjNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYjRmNDBmMzIxMTU2MWMyOWYxYmJjMzIwYmQ4N2NmYTJk ZGQwMjkwHhcNMjYwMTAxMTQxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTcyZjY3M2U5NjFmMzNkY2ZiYmE0MTc1NjgxMjZiYjJiYzQ3ZDdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8tYype1I3D+BrWgBd1uuhY67dhhL jMFEPSfMLY9p3Nw26ftxUjTHkyJ9EgpPqlz65tgDurErdZnUDUaCUMzQK46+soKE 9ruGMd+RotaiURXAC++q/3w+vWxGhEzc9DSvn0VvQ7Pwvyl1kZS3H/36vFf9aioN N/l1oOjaX/BmASWPKLG17gC40wRUXhOePUopHvgLyARCkKno8KE6BrscCPkApQq4 kl3+vq+9810e1k7aSIlHn0FnbTgWHW3qbQmWtDpWu2pnGzyqxty70q3WMQmEv/eE bjl1r9g3ATMs6R2Te/vT3wNdM5kXRA05MrVoBhpbgx8yqczKYoH5MOZiQwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMly9nPpYfM9z7ukF1aBJrsrxH1+MB8GA1UdIwQY MBaAFP+09A8yEVYcKfG7wyC9h8+i3dApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzdUMER6SVJWaHdwOGJ2RElMMkh6NkxkMENrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8xNDhkODgtNjEzNi00Mzc0LTk5NGIt ZDUzZjk0ZTIwN2E5LzEveVhMMmMtbGg4ejNQdTZRWFZvRW11eXZFZlg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi8xNDhkODgtNjEzNi00Mzc0LTk5NGItZDUzZjk0ZTIwN2E5 LzEvXzdUMER6SVJWaHdwOGJ2RElMMkh6NkxkMENrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAAjtAMA0E AgACMAcDBQAqCelAMA0GCSqGSIb3DQEBCwUAA4IBAQCcpsXE3wI4g8bLhozrFh2r ++uYe/Chymu1h9SE5cq7pPsbl2jcqkvYM/6tsJHGzYJ8sTChG8IxZIIHptbMnJB1 UsljH2BVDl+dqhbg4MLGhS7k/DrDZ5P5dztDdOQfxU+rqSttyUxKo08dcQZE0H/K lvC7WapQxNmsS/BaP9Qc6gtfqKxDmg/CB4t3BQorESLOE95H98OmX69L5FN5UFbc sW0QoYWiHbq7cBkQhlQbxqN0N2O1HScQxd89LPCUZR0azgtS9evJ++ZBEJYt6aj3 CLAM8B7I+or+0zowkaUwuPqq6SEYii6qquo1OlNQWGq4+02qArSifhlAvqd6BGyz -----END CERTIFICATE-----Generated at Mon Jan 26 06:20:54 2026 by rpki-client