This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/yxM7J-fncjH39qOsj_6YqBGJVWU.roa File: yxM7J-fncjH39qOsj_6YqBGJVWU.roa (raw, json) Hash identifier: AjHV8rOTeMWNj3biUMbUNtv+kWtvN/aGZ8u6KDIN/SM= Subject key identifier: CB:13:3B:27:E7:E7:72:31:F7:F6:A3:AC:8F:FE:98:A8:11:89:55:65 Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303 Certificate serial: 019B7BA541581F88D5FC22DEB98C3D78CFB7 Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/yxM7J-fncjH39qOsj_6YqBGJVWU.roa Signing time: Thu 01 Jan 2026 22:19:46 +0000 ROA not before: Thu 01 Jan 2026 22:19:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42337 IP address blocks: 2a00:15c8::/29 maxlen: 29 2a00:15c8:1083::/48 maxlen: 48 2a00:15c9::/32 maxlen: 32 2a00:15c9::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:41:58:1f:88:d5:fc:22:de:b9:8c:3d:78:cf:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303 Validity Not Before: Jan 1 22:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cb133b27e7e77231f7f6a3ac8ffe98a811895565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:12:cb:95:b9:25:89:c7:44:79:d3:da:24:66: 45:d7:19:ea:05:59:61:24:d3:28:c8:6b:9f:34:90: c5:e5:b1:63:97:c6:a2:c3:e2:4c:25:cd:d8:a1:71: fc:f6:1f:ec:0c:6e:4f:eb:d3:35:df:8f:cc:2e:f4: 6e:66:ec:85:3d:fb:9f:74:fa:89:35:8e:f4:5c:6b: 6f:3e:b9:41:b1:26:71:bc:a8:42:38:a1:0c:af:8f: 78:f5:25:5b:12:53:b6:21:94:53:bd:75:b8:9e:99: b3:e3:ce:71:66:0a:02:66:66:88:3f:b5:15:25:73: fe:7b:02:b1:8f:e7:4a:92:b6:40:60:bb:c7:16:21: 17:14:57:4e:02:94:e6:e2:f6:bc:e3:98:cc:ac:b6: 18:40:23:1b:8e:f8:80:26:9f:36:7c:c7:6f:82:92: e7:7f:25:06:53:84:f4:0b:2c:4a:d9:07:76:09:5e: df:d4:58:eb:5c:f0:b9:ff:1f:f5:7c:93:3f:45:9b: 52:51:59:1e:68:1d:9c:24:8b:3d:46:30:4b:42:a8: e9:e9:84:51:2e:48:98:54:e6:ae:93:df:be:0d:87: 95:c3:38:25:f0:8c:18:af:dc:1a:f9:93:97:30:cc: 32:51:8d:7d:44:e2:40:d6:5a:e0:eb:be:2c:00:54: e5:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:13:3B:27:E7:E7:72:31:F7:F6:A3:AC:8F:FE:98:A8:11:89:55:65 X509v3 Authority Key Identifier: keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/yxM7J-fncjH39qOsj_6YqBGJVWU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:15c8::/29 Signature Algorithm: sha256WithRSAEncryption 6a:58:e8:10:b8:bd:ca:17:f3:70:58:be:92:da:a8:52:c1:50: 1f:40:9c:2e:d7:db:6e:78:49:5e:8e:99:ca:4d:6c:2f:8b:b0: 70:17:05:58:8f:32:a5:cc:c1:e7:fd:f2:cc:71:0a:24:0b:c6: 5a:81:2c:19:9b:73:b9:e6:85:24:a3:f2:20:0e:13:4c:55:c0: dc:c5:ba:53:8b:ad:9f:41:9a:65:7b:64:dd:27:72:f0:d6:a8: 9d:d7:bb:63:93:00:33:de:2d:83:f1:fc:28:92:6f:ff:6e:0c: cd:02:8c:e7:78:e4:e8:c7:d8:48:11:54:fb:86:a0:48:14:e5: 7a:41:ce:66:da:f9:76:78:64:a4:1a:dc:cc:f4:41:aa:fd:31: 05:2b:c2:d0:fd:6e:e8:02:cb:df:ce:0b:ab:a5:9e:73:62:69: f7:30:72:48:40:c1:66:c3:cf:41:ab:85:f3:52:30:bb:de:96: 85:e5:ab:ae:89:59:26:54:eb:8f:e6:10:2d:91:a0:16:9b:e3: 45:b0:1c:02:af:5e:a4:f2:b5:22:1d:0d:3c:f5:52:70:9c:5f: d2:da:f9:92:83:8f:3f:6c:aa:34:df:8d:f3:84:67:91:c5:26: 3f:30:79:03:1a:25:af:ba:7f:ec:24:3f:e4:79:6d:24:89:d7: 29:1c:ab:30 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt7pUFYH4jV/CLeuYw9eM+3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxY2NhOWYxNWUxOTIxOTUzYTYyOGM4YWQyYWM0YmU5Nzdi NmMzMDMwHhcNMjYwMTAxMjIxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjEzM2IyN2U3ZTc3MjMxZjdmNmEzYWM4ZmZlOThhODExODk1NTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBLLlbklicdEedPaJGZF1xnqBVlh JNMoyGufNJDF5bFjl8aiw+JMJc3YoXH89h/sDG5P69M134/MLvRuZuyFPfufdPqJ NY70XGtvPrlBsSZxvKhCOKEMr4949SVbElO2IZRTvXW4npmz485xZgoCZmaIP7UV JXP+ewKxj+dKkrZAYLvHFiEXFFdOApTm4va845jMrLYYQCMbjviAJp82fMdvgpLn fyUGU4T0CyxK2Qd2CV7f1FjrXPC5/x/1fJM/RZtSUVkeaB2cJIs9RjBLQqjp6YRR LkiYVOauk9++DYeVwzgl8IwYr9wa+ZOXMMwyUY19ROJA1lrg674sAFTl2wIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFMsTOyfn53Ix9/ajrI/+mKgRiVVlMB8GA1UdIwQY MBaAFIHMqfFeGSGVOmKMitKsS+l3tsMDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2N5cDhWNFpJWlU2WW95SzBxeEw2WGUyd3dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xZWEyYjAtNmI5YS00NGQ3LWEyZTUt MjIwNmNjMmU2OTFjLzEveXhNN0otZm5jakgzOXFPc2pfNllxQkdKVldVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8xZWEyYjAtNmI5YS00NGQ3LWEyZTUtMjIwNmNjMmU2OTFj LzEvZ2N5cDhWNFpJWlU2WW95SzBxeEw2WGUyd3dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgAVyDAN BgkqhkiG9w0BAQsFAAOCAQEAaljoELi9yhfzcFi+ktqoUsFQH0CcLtfbbnhJXo6Z yk1sL4uwcBcFWI8ypczB5/3yzHEKJAvGWoEsGZtzueaFJKPyIA4TTFXA3MW6U4ut n0GaZXtk3Sdy8Naonde7Y5MAM94tg/H8KJJv/24MzQKM53jk6MfYSBFU+4agSBTl ekHOZtr5dnhkpBrczPRBqv0xBSvC0P1u6ALL384Lq6Wec2Jp9zBySEDBZsPPQauF 81Iwu96WheWrrolZJlTrj+YQLZGgFpvjRbAcAq9epPK1Ih0NPPVScJxf0tr5koOP P2yqNN+N84RnkcUmPzB5Axolr7p/7CQ/5HltJInXKRyrMA== -----END CERTIFICATE-----Generated at Sun Jan 25 20:49:04 2026 by rpki-client