This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/dY7A4EadxR4Leo0RbN6ul5bgqMo.roa File: dY7A4EadxR4Leo0RbN6ul5bgqMo.roa (raw, json) Hash identifier: GFcXlnvExOtDmX5nvATDpdkuw0bc/vixgXHk7cM+5Yw= Subject key identifier: 75:8E:C0:E0:46:9D:C5:1E:0B:7A:8D:11:6C:DE:AE:97:96:E0:A8:CA Certificate issuer: /CN=91c2c2912e10581587052a5ca770910b26174f14 Certificate serial: 019B7834B09707976BD75BAB9325723D0658 Authority key identifier: 91:C2:C2:91:2E:10:58:15:87:05:2A:5C:A7:70:91:0B:26:17:4F:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/dY7A4EadxR4Leo0RbN6ul5bgqMo.roa Signing time: Thu 01 Jan 2026 06:17:57 +0000 ROA not before: Thu 01 Jan 2026 06:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44901 IP address blocks: 2a05:1700:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:b0:97:07:97:6b:d7:5b:ab:93:25:72:3d:06:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91c2c2912e10581587052a5ca770910b26174f14 Validity Not Before: Jan 1 06:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=758ec0e0469dc51e0b7a8d116cdeae9796e0a8ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:54:ea:39:7f:64:1d:15:b9:3c:be:13:16:a0: e1:ac:c0:6a:d4:dd:4e:7f:f1:f8:2c:d2:02:80:e8: a5:86:bf:d4:e9:a1:50:ff:1c:b6:92:66:7c:2f:6e: 50:c1:03:63:42:db:70:e6:c3:7c:09:a2:f5:7d:93: 50:01:9f:c5:16:d4:7c:6a:c5:6b:12:64:bc:6e:73: 8d:01:73:ab:3d:0c:2d:5c:55:e6:1a:e6:94:83:ae: 0b:49:15:59:d6:21:1b:0b:a5:b6:01:bb:71:df:34: 83:63:3a:22:98:64:a9:10:c0:97:15:5a:8c:21:2b: 29:99:cd:c3:8d:26:0a:b3:4f:3f:88:af:c1:79:d1: 53:d4:c1:b4:de:8d:77:03:ea:ae:a8:4c:60:aa:96: 3e:31:05:e7:b2:15:38:84:fc:d2:7e:74:95:53:8a: e5:eb:00:b0:d0:9e:63:16:e1:f8:b1:62:cf:d8:79: 5e:d6:89:c1:10:cc:f7:0d:39:b0:ce:f2:8a:71:5b: 59:31:ed:60:24:23:a2:9e:f4:8d:62:99:4c:ce:7e: 76:7a:72:72:63:db:f4:44:e2:ad:ff:30:85:7c:f1: 05:70:a3:1f:4b:23:bd:c1:37:c7:8d:af:6e:bd:6f: c1:24:d1:e6:0a:bc:0d:b9:6a:94:f8:78:01:25:98: 81:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:8E:C0:E0:46:9D:C5:1E:0B:7A:8D:11:6C:DE:AE:97:96:E0:A8:CA X509v3 Authority Key Identifier: keyid:91:C2:C2:91:2E:10:58:15:87:05:2A:5C:A7:70:91:0B:26:17:4F:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/dY7A4EadxR4Leo0RbN6ul5bgqMo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:1700:2::/48 Signature Algorithm: sha256WithRSAEncryption b9:f2:dd:aa:c9:87:d3:57:aa:70:a5:91:03:3d:a2:d5:ce:89: a2:a1:38:24:5e:8f:cf:58:c0:48:b9:18:3f:c8:ce:2e:9e:41: 4f:78:07:42:fb:f6:28:84:92:5a:43:74:ce:66:03:0e:57:86: 2e:36:3e:c4:b4:16:41:7b:c6:2c:00:56:ae:d0:11:77:c9:57: 1d:a0:3e:c5:e2:54:9a:73:3c:7f:0e:15:23:ab:1d:0e:cc:f0: 25:04:f2:7e:4a:f5:90:50:77:52:7a:5c:38:fd:34:14:ed:a4: fd:b5:4a:55:69:c4:cf:15:e2:ef:66:ec:50:31:c1:04:82:92: 2c:d7:e7:9f:25:3e:ed:4f:3f:0a:a8:f0:b1:e6:09:65:e7:1e: a4:36:a2:88:cf:ab:f2:de:8b:72:12:62:02:a1:67:59:a9:94: ae:a2:a2:68:0c:9f:76:2f:a4:ee:17:92:cd:e3:6c:c6:8b:49: da:c3:67:ce:84:61:fa:72:c4:75:de:83:a6:3e:9f:8c:d8:c2: 82:2e:0d:93:ce:48:a2:aa:95:46:d9:a3:71:73:43:39:8e:ca: f6:16:2d:1e:bc:27:fb:4a:e3:5e:f9:27:5b:ad:f7:0c:bf:3e: b9:a7:17:a1:29:12:a8:6a:a6:0c:7c:07:68:ce:06:ef:d0:4e: e3:95:73:db -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt4NLCXB5dr11urkyVyPQZYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxYzJjMjkxMmUxMDU4MTU4NzA1MmE1Y2E3NzA5MTBiMjYx NzRmMTQwHhcNMjYwMTAxMDYxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NThlYzBlMDQ2OWRjNTFlMGI3YThkMTE2Y2RlYWU5Nzk2ZTBhOGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1TqOX9kHRW5PL4TFqDhrMBq1N1O f/H4LNICgOilhr/U6aFQ/xy2kmZ8L25QwQNjQttw5sN8CaL1fZNQAZ/FFtR8asVr EmS8bnONAXOrPQwtXFXmGuaUg64LSRVZ1iEbC6W2Abtx3zSDYzoimGSpEMCXFVqM ISspmc3DjSYKs08/iK/BedFT1MG03o13A+quqExgqpY+MQXnshU4hPzSfnSVU4rl 6wCw0J5jFuH4sWLP2Hle1onBEMz3DTmwzvKKcVtZMe1gJCOinvSNYplMzn52enJy Y9v0ROKt/zCFfPEFcKMfSyO9wTfHja9uvW/BJNHmCrwNuWqU+HgBJZiBzQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHWOwOBGncUeC3qNEWzerpeW4KjKMB8GA1UdIwQY MBaAFJHCwpEuEFgVhwUqXKdwkQsmF08UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2NMQ2tTNFFXQldIQlNwY3AzQ1JDeVlYVHhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9iMzBiNTctZTdlOS00YjJmLTk5YjYt OTBmOTdmNzQ2Njc2LzEvZFk3QTRFYWR4UjRMZW8wUmJONnVsNWJncU1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9iMzBiNTctZTdlOS00YjJmLTk5YjYtOTBmOTdmNzQ2Njc2 LzEva2NMQ2tTNFFXQldIQlNwY3AzQ1JDeVlYVHhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgUXAAAC MA0GCSqGSIb3DQEBCwUAA4IBAQC58t2qyYfTV6pwpZEDPaLVzomioTgkXo/PWMBI uRg/yM4unkFPeAdC+/YohJJaQ3TOZgMOV4YuNj7EtBZBe8YsAFau0BF3yVcdoD7F 4lSaczx/DhUjqx0OzPAlBPJ+SvWQUHdSelw4/TQU7aT9tUpVacTPFeLvZuxQMcEE gpIs1+efJT7tTz8KqPCx5gll5x6kNqKIz6vy3otyEmICoWdZqZSuoqJoDJ92L6Tu F5LN42zGi0naw2fOhGH6csR13oOmPp+M2MKCLg2TzkiiqpVG2aNxc0M5jsr2Fi0e vCf7SuNe+SdbrfcMvz65pxehKRKoaqYMfAdozgbv0E7jlXPb -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:39 2026 by rpki-client