This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/yORjc6g5_P74iVLlxKlbrUIAnbM.roa File: yORjc6g5_P74iVLlxKlbrUIAnbM.roa (raw, json) Hash identifier: pumjnge9qZ/SonFEAFuEIk8CBDJMVwBQHqpzy07YUrg= Subject key identifier: C8:E4:63:73:A8:39:FC:FE:F8:89:52:E5:C4:A9:5B:AD:42:00:9D:B3 Certificate issuer: /CN=0b8d1bb72791c878550d1b9d8fef564ac3919368 Certificate serial: 019B7E386B376CC5FB441AAFFFFD4A182CDE Authority key identifier: 0B:8D:1B:B7:27:91:C8:78:55:0D:1B:9D:8F:EF:56:4A:C3:91:93:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/yORjc6g5_P74iVLlxKlbrUIAnbM.roa Signing time: Fri 02 Jan 2026 10:19:45 +0000 ROA not before: Fri 02 Jan 2026 10:19:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211904 IP address blocks: 2a07:4286::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.crl rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:6b:37:6c:c5:fb:44:1a:af:ff:fd:4a:18:2c:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b8d1bb72791c878550d1b9d8fef564ac3919368 Validity Not Before: Jan 2 10:19:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8e46373a839fcfef88952e5c4a95bad42009db3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:65:69:ba:71:33:99:23:db:1a:a9:c6:64:86: b3:e2:11:fc:16:25:83:cb:a8:9d:b1:57:11:59:d1: d5:38:64:d4:a3:4f:28:7f:72:d8:67:5f:95:d4:45: 9b:2d:7c:43:07:67:49:f0:5f:df:a4:f4:f1:ba:e5: e5:d1:e9:b5:17:f0:0d:d5:5f:f4:36:42:5d:00:32: 81:25:5c:80:4b:04:7b:b3:55:6e:bf:a7:c7:ab:4d: 24:33:c8:13:1c:d6:e4:19:72:3e:8a:d6:03:63:19: 65:ef:54:69:06:36:6e:fb:06:6f:4b:18:53:08:5d: 4c:2f:f6:89:18:a4:2c:76:d3:2c:5b:2b:1b:7a:5a: 26:29:9b:b1:cf:ef:f3:29:86:78:5f:ec:c1:e2:0f: 5c:47:b8:a2:4d:fb:d0:33:c4:ea:a0:f5:94:6d:3e: 44:84:c8:29:64:10:53:4d:6c:ae:2d:dd:87:5d:df: bc:de:f0:5f:1e:03:6b:15:15:9c:24:e7:d7:f2:47: 46:1c:f5:e2:ed:ad:dc:9c:f8:59:ca:c7:2f:ee:36: f5:c6:6c:5d:40:17:1b:bc:29:36:93:ec:3c:70:fc: 13:de:ab:f3:60:7b:25:d4:31:9e:41:40:fa:50:af: 85:ba:75:bb:70:b0:3a:f4:94:58:9a:8a:78:aa:23: a3:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:E4:63:73:A8:39:FC:FE:F8:89:52:E5:C4:A9:5B:AD:42:00:9D:B3 X509v3 Authority Key Identifier: keyid:0B:8D:1B:B7:27:91:C8:78:55:0D:1B:9D:8F:EF:56:4A:C3:91:93:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/yORjc6g5_P74iVLlxKlbrUIAnbM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:4286::/32 Signature Algorithm: sha256WithRSAEncryption 41:88:c2:24:26:8f:ec:f9:ca:0a:8a:77:eb:c3:16:23:61:d8: 00:0f:af:1a:2a:6d:40:8d:fd:b1:b3:d7:9b:fe:9a:83:c6:ca: c3:be:3b:38:fb:34:b4:ab:f2:1d:8f:0a:60:bb:b7:4e:e7:0a: 78:dc:00:a9:87:15:fc:90:77:a2:7b:bb:8c:d9:e6:41:1f:b9: 7c:48:cd:cf:66:8c:f9:68:c3:f6:71:15:93:cb:fb:71:79:e6: 52:65:4b:41:db:a1:4c:c4:73:ef:7e:21:8c:ae:2b:12:29:4a: 36:45:30:c5:68:b6:38:53:e8:51:c8:6f:67:e7:70:c4:51:60: 63:08:55:1d:31:6f:78:50:ef:50:bf:16:35:b9:3a:4a:8a:97: cf:62:ae:40:be:a4:65:73:6f:5e:e9:43:b5:a6:9f:cc:c7:a6: 2e:5b:9d:0a:12:04:5d:ec:24:f2:a6:a4:3f:8a:5d:da:8f:3a: 00:a5:3d:c3:71:a5:ca:58:dc:51:c8:cd:41:bb:5a:02:84:50: 84:18:32:dc:f7:c8:0a:33:58:b5:b8:44:fe:20:5e:f4:55:0a: bd:4d:4c:27:ee:70:af:6f:2f:79:ed:7c:7d:27:bd:50:53:ce: 4d:63:7b:30:2d:df:80:fe:8e:e9:3e:b7:67:f2:9c:c4:b8:b0: ee:b8:5c:e6 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+OGs3bMX7RBqv//1KGCzeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiOGQxYmI3Mjc5MWM4Nzg1NTBkMWI5ZDhmZWY1NjRhYzM5 MTkzNjgwHhcNMjYwMTAyMTAxOTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOGU0NjM3M2E4MzlmY2ZlZjg4OTUyZTVjNGE5NWJhZDQyMDA5ZGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12VpunEzmSPbGqnGZIaz4hH8FiWD y6idsVcRWdHVOGTUo08of3LYZ1+V1EWbLXxDB2dJ8F/fpPTxuuXl0em1F/AN1V/0 NkJdADKBJVyASwR7s1Vuv6fHq00kM8gTHNbkGXI+itYDYxll71RpBjZu+wZvSxhT CF1ML/aJGKQsdtMsWysbelomKZuxz+/zKYZ4X+zB4g9cR7iiTfvQM8TqoPWUbT5E hMgpZBBTTWyuLd2HXd+83vBfHgNrFRWcJOfX8kdGHPXi7a3cnPhZyscv7jb1xmxd QBcbvCk2k+w8cPwT3qvzYHsl1DGeQUD6UK+FunW7cLA69JRYmop4qiOj6wIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFMjkY3OoOfz++IlS5cSpW61CAJ2zMB8GA1UdIwQY MBaAFAuNG7cnkch4VQ0bnY/vVkrDkZNoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzQwYnR5ZVJ5SGhWRFJ1ZGotOVdTc09SazJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8wMzY3ZDAtZmE4NS00NTQ2LWI4NGMt MDI3OGM1ZGMxNDkxLzEveU9SamM2ZzVfUDc0aVZMbHhLbGJyVUlBbmJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8wMzY3ZDAtZmE4NS00NTQ2LWI4NGMtMDI3OGM1ZGMxNDkx LzEvQzQwYnR5ZVJ5SGhWRFJ1ZGotOVdTc09SazJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgdChjAN BgkqhkiG9w0BAQsFAAOCAQEAQYjCJCaP7PnKCop368MWI2HYAA+vGiptQI39sbPX m/6ag8bKw747OPs0tKvyHY8KYLu3TucKeNwAqYcV/JB3onu7jNnmQR+5fEjNz2aM +WjD9nEVk8v7cXnmUmVLQduhTMRz734hjK4rEilKNkUwxWi2OFPoUchvZ+dwxFFg YwhVHTFveFDvUL8WNbk6SoqXz2KuQL6kZXNvXulDtaafzMemLludChIEXewk8qak P4pd2o86AKU9w3GlyljcUcjNQbtaAoRQhBgy3PfICjNYtbhE/iBe9FUKvU1MJ+5w r28vee18fSe9UFPOTWN7MC3fgP6O6T63Z/KcxLiw7rhc5g== -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:13 2026 by rpki-client