This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/yLMV5lCxmugxTcjR0kvs8qTvDQs.roa File: yLMV5lCxmugxTcjR0kvs8qTvDQs.roa (raw, json) Hash identifier: VAFUfjT6/8ZbId3UHCjjJDfpK2X5rUeLGtPsXPOBDAA= Subject key identifier: C8:B3:15:E6:50:B1:9A:E8:31:4D:C8:D1:D2:4B:EC:F2:A4:EF:0D:0B Certificate issuer: /CN=4dd1b2587490ad061cb207176bdeec81a531588c Certificate serial: 019B7AC94C6CCF3FBD9F1771713E0317477C Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/yLMV5lCxmugxTcjR0kvs8qTvDQs.roa Signing time: Thu 01 Jan 2026 18:19:31 +0000 ROA not before: Thu 01 Jan 2026 18:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28716 IP address blocks: 2a01:3e0:2003::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:4c:6c:cf:3f:bd:9f:17:71:71:3e:03:17:47:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c Validity Not Before: Jan 1 18:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8b315e650b19ae8314dc8d1d24becf2a4ef0d0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7a:61:78:84:ed:cc:9f:97:51:7f:1d:0d:b3: 67:9d:4a:b5:f1:c9:b3:23:81:bb:3d:2c:03:a3:d1: a2:b8:f0:d6:1d:fb:bb:61:ae:19:b5:20:a3:8f:01: 81:14:35:fb:19:e2:2c:b8:72:67:4c:5b:e3:79:7e: 57:a7:90:00:f1:22:a9:b2:a3:eb:f4:47:7d:01:40: 18:51:0c:1a:c9:51:1d:1f:d5:65:e2:86:86:85:f5: b9:79:a7:5a:f5:72:12:ad:db:7f:fc:45:ed:25:85: 85:9c:c0:b8:d4:e0:bb:3b:b6:ee:df:d2:72:27:bd: 36:90:24:42:de:47:68:97:7b:e7:1d:69:1f:92:a3: 76:23:56:53:a9:82:c7:aa:ef:0e:e8:b0:8a:7e:f6: 4d:50:fb:25:30:06:e0:2e:a0:3c:91:d5:3d:85:2a: 7d:55:d9:5e:c5:f7:f7:ea:b2:4c:f0:68:d6:e4:bc: 33:2a:5b:ad:8c:0a:16:ab:19:4b:de:ab:a9:7f:67: c0:21:fe:e3:0e:36:ce:58:09:27:bc:eb:38:75:f1: da:0a:52:22:8d:df:dc:95:c0:a3:54:f6:18:14:50: 28:9c:a7:ca:e6:b0:6c:dd:d5:6f:33:95:fa:61:42: c2:ce:38:c7:8e:23:64:19:da:24:e0:d6:69:23:a6: 2a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:B3:15:E6:50:B1:9A:E8:31:4D:C8:D1:D2:4B:EC:F2:A4:EF:0D:0B X509v3 Authority Key Identifier: keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/yLMV5lCxmugxTcjR0kvs8qTvDQs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:3e0:2003::/48 Signature Algorithm: sha256WithRSAEncryption 24:b1:26:c9:b5:39:06:08:0d:d4:cb:64:5c:f6:f8:7c:50:c9: de:ad:2e:15:94:4d:1d:3d:ac:24:59:b0:0c:30:15:2d:7c:00: 6c:78:00:c7:62:28:7b:27:c5:e2:20:d5:79:f6:53:4d:39:36: 68:89:db:c8:59:ab:60:b1:ef:34:04:f5:a5:00:72:c8:06:82: 9d:9e:c6:5a:83:cf:2f:e0:9d:a6:04:ae:ca:f8:21:96:f9:e9: f2:c7:76:56:e0:5a:ee:ff:d7:6d:50:01:4a:e8:7a:fe:0c:ea: b8:5e:c2:7a:0b:62:18:e3:f1:4e:63:eb:a4:37:71:4f:f4:34: 37:5e:59:6a:c1:3f:20:08:99:80:c4:bd:d5:48:ac:75:ea:cd: 73:fe:3b:c7:0f:81:62:4a:6c:5f:0d:04:bd:1e:03:13:35:fa: 4e:d3:b3:e0:ef:ec:8b:cc:5f:d0:6a:de:37:9e:8d:94:6d:fe: cb:2e:fd:21:4a:6f:24:6f:fa:fe:ed:30:fb:6f:dd:dd:0d:e5: 67:df:ab:1d:d5:d2:b7:69:b1:63:36:7c:7e:8d:94:5a:73:eb: 07:ac:21:23:fb:7f:07:9f:7a:3b:b5:4a:c6:53:d5:fb:e1:e1: ad:c1:b3:ca:00:cb:6e:72:18:06:be:46:45:42:0b:e8:6a:ad: a3:a9:ca:64 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6yUxszz+9nxdxcT4DF0d8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDFiMjU4NzQ5MGFkMDYxY2IyMDcxNzZiZGVlYzgxYTUz MTU4OGMwHhcNMjYwMTAxMTgxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOGIzMTVlNjUwYjE5YWU4MzE0ZGM4ZDFkMjRiZWNmMmE0ZWYwZDBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXpheITtzJ+XUX8dDbNnnUq18cmz I4G7PSwDo9GiuPDWHfu7Ya4ZtSCjjwGBFDX7GeIsuHJnTFvjeX5Xp5AA8SKpsqPr 9Ed9AUAYUQwayVEdH9Vl4oaGhfW5eada9XISrdt//EXtJYWFnMC41OC7O7bu39Jy J702kCRC3kdol3vnHWkfkqN2I1ZTqYLHqu8O6LCKfvZNUPslMAbgLqA8kdU9hSp9 Vdlexff36rJM8GjW5LwzKlutjAoWqxlL3qupf2fAIf7jDjbOWAknvOs4dfHaClIi jd/clcCjVPYYFFAonKfK5rBs3dVvM5X6YULCzjjHjiNkGdok4NZpI6YqFQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMizFeZQsZroMU3I0dJL7PKk7w0LMB8GA1UdIwQY MBaAFE3Rslh0kK0GHLIHF2ve7IGlMViMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRHeVdIU1FyUVljc2djWGE5N3NnYVV4V0l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wMWQyYWYtMWYyMS00YjgwLWI2NjUt ZGI0NjNjNWZiMGI0LzEveUxNVjVsQ3htdWd4VGNqUjBrdnM4cVR2RFFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8wMWQyYWYtMWYyMS00YjgwLWI2NjUtZGI0NjNjNWZiMGI0 LzEvVGRHeVdIU1FyUVljc2djWGE5N3NnYVV4V0l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgED4CAD MA0GCSqGSIb3DQEBCwUAA4IBAQAksSbJtTkGCA3Uy2Rc9vh8UMnerS4VlE0dPawk WbAMMBUtfABseADHYih7J8XiINV59lNNOTZoidvIWatgse80BPWlAHLIBoKdnsZa g88v4J2mBK7K+CGW+enyx3ZW4Fru/9dtUAFK6Hr+DOq4XsJ6C2IY4/FOY+ukN3FP 9DQ3XllqwT8gCJmAxL3VSKx16s1z/jvHD4FiSmxfDQS9HgMTNfpO07Pg7+yLzF/Q at43no2Ubf7LLv0hSm8kb/r+7TD7b93dDeVn36sd1dK3abFjNnx+jZRac+sHrCEj +38Hn3o7tUrGU9X74eGtwbPKAMtuchgGvkZFQgvoaq2jqcpk -----END CERTIFICATE-----Generated at Sun Jan 25 16:53:49 2026 by rpki-client