This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/yq5Siwl4i3jmM8YcRC0pxHMIUlk.roa File: yq5Siwl4i3jmM8YcRC0pxHMIUlk.roa (raw, json) Hash identifier: nGkz7j5CjWTfBWr6c+S9Cs2//HPjWw5q8jEucRFb/jA= Subject key identifier: CA:AE:52:8B:09:78:8B:78:E6:33:C6:1C:44:2D:29:C4:73:08:52:59 Certificate issuer: /CN=d0a1db466cf808206293d07e65f2121feb49a33e Certificate serial: 019B7C802C02DAEB84E5B30915A2B9A527B9 Authority key identifier: D0:A1:DB:46:6C:F8:08:20:62:93:D0:7E:65:F2:12:1F:EB:49:A3:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/yq5Siwl4i3jmM8YcRC0pxHMIUlk.roa Signing time: Fri 02 Jan 2026 02:18:53 +0000 ROA not before: Fri 02 Jan 2026 02:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212783 IP address blocks: 2001:678:e0c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.crl rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:2c:02:da:eb:84:e5:b3:09:15:a2:b9:a5:27:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0a1db466cf808206293d07e65f2121feb49a33e Validity Not Before: Jan 2 02:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=caae528b09788b78e633c61c442d29c473085259 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a2:98:d0:01:d6:db:56:23:50:f7:c0:db:36: 64:d5:f2:d4:75:d5:7f:89:dd:bb:af:bd:2c:d9:95: 0a:2e:92:cb:ed:a0:d3:64:4d:53:ec:75:93:f6:62: 3d:24:32:17:43:91:04:b9:bb:ba:7f:3c:35:85:b4: 3f:cb:e9:24:8e:cc:c3:90:d0:97:f1:e3:d0:d4:14: 28:e3:43:70:02:33:88:05:bb:8c:1a:a5:c7:f1:8d: 23:97:97:49:81:42:d9:b9:4c:08:bb:ce:90:ad:28: 62:e4:10:df:31:08:5d:6d:a7:54:56:fa:8a:f9:85: f3:be:e5:ba:68:78:e8:b5:ae:fd:7c:08:0c:44:94: 82:4e:de:29:92:a7:88:22:64:bd:87:9b:a4:57:4b: a3:31:6f:58:d1:a0:40:2d:b8:c1:7c:ee:5a:be:c2: 7a:fa:49:ee:39:e2:98:a1:2f:ff:d9:2b:4b:75:73: 42:4a:fa:66:e3:6f:09:cd:24:78:29:e4:4c:52:4a: 28:76:c9:e7:66:7e:f4:6c:25:39:fd:5b:7c:18:0f: 2e:89:b6:c8:da:c6:5d:be:3e:52:00:22:db:2e:e2: 17:f2:15:0f:34:84:45:ce:45:3c:3f:5e:72:e7:68: cc:31:0b:97:1d:06:39:cd:06:cd:40:c3:c7:fc:05: 64:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:AE:52:8B:09:78:8B:78:E6:33:C6:1C:44:2D:29:C4:73:08:52:59 X509v3 Authority Key Identifier: keyid:D0:A1:DB:46:6C:F8:08:20:62:93:D0:7E:65:F2:12:1F:EB:49:A3:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/yq5Siwl4i3jmM8YcRC0pxHMIUlk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:e0c::/48 Signature Algorithm: sha256WithRSAEncryption 8e:a1:4c:d8:8e:e3:87:24:ca:ed:bd:db:dc:e3:56:a8:9b:7e: 53:4c:c7:fa:e6:1a:85:8a:17:b7:09:83:1e:b7:06:7b:fa:61: 3a:d8:d6:20:57:ef:ed:19:14:86:81:37:29:7d:39:d5:b5:f4: 38:ec:33:be:d6:3f:e2:68:49:4b:2b:b4:83:b5:ca:15:61:87: b6:72:bf:f0:b8:15:83:fe:97:14:7b:7d:91:05:5c:47:c1:cf: 85:46:5c:b5:1f:ab:31:f2:c9:67:ae:f8:d3:a4:e1:e4:94:f9: 94:85:86:2f:19:0e:b3:04:b3:bb:84:da:a5:aa:95:aa:6a:87: 73:e9:ea:d9:f6:e5:c4:20:e2:6e:f7:7d:61:98:b9:d1:fe:85: 81:5b:c7:a4:20:49:30:9f:3d:46:87:f2:60:4d:01:01:79:f8: 35:54:5f:29:ff:32:1e:6d:df:47:62:98:17:4d:58:3d:fb:c0: a5:37:c1:d4:3a:07:ed:b9:12:69:db:fb:7e:60:13:c5:27:73: e9:4d:82:a3:e5:31:8c:18:bd:3a:df:9e:6b:05:b1:ea:a4:8b: 43:ba:93:36:b5:8a:35:dd:46:98:28:8a:ec:b0:88:c7:b1:b2: 70:d4:69:7d:bf:20:90:87:a5:24:f1:06:4b:8f:13:14:d9:69: c9:c8:73:9f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8gCwC2uuE5bMJFaK5pSe5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwYTFkYjQ2NmNmODA4MjA2MjkzZDA3ZTY1ZjIxMjFmZWI0 OWEzM2UwHhcNMjYwMTAyMDIxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYWFlNTI4YjA5Nzg4Yjc4ZTYzM2M2MWM0NDJkMjljNDczMDg1MjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6KY0AHW21YjUPfA2zZk1fLUddV/ id27r70s2ZUKLpLL7aDTZE1T7HWT9mI9JDIXQ5EEubu6fzw1hbQ/y+kkjszDkNCX 8ePQ1BQo40NwAjOIBbuMGqXH8Y0jl5dJgULZuUwIu86QrShi5BDfMQhdbadUVvqK +YXzvuW6aHjota79fAgMRJSCTt4pkqeIImS9h5ukV0ujMW9Y0aBALbjBfO5avsJ6 +knuOeKYoS//2StLdXNCSvpm428JzSR4KeRMUkoodsnnZn70bCU5/Vt8GA8uibbI 2sZdvj5SACLbLuIX8hUPNIRFzkU8P15y52jMMQuXHQY5zQbNQMPH/AVk4wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMquUosJeIt45jPGHEQtKcRzCFJZMB8GA1UdIwQY MBaAFNCh20Zs+AggYpPQfmXyEh/rSaM+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEtIYlJtejRDQ0JpazlCLVpmSVNILXRKb3o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8xMWNkYWMtNjQxMS00NTRkLWI5NzMt NDc2MmIwMTBlZjFlLzEveXE1U2l3bDRpM2ptTThZY1JDMHB4SE1JVWxrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8xMWNkYWMtNjQxMS00NTRkLWI5NzMtNDc2MmIwMTBlZjFl LzEvMEtIYlJtejRDQ0JpazlCLVpmSVNILXRKb3o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA4M MA0GCSqGSIb3DQEBCwUAA4IBAQCOoUzYjuOHJMrtvdvc41aom35TTMf65hqFihe3 CYMetwZ7+mE62NYgV+/tGRSGgTcpfTnVtfQ47DO+1j/iaElLK7SDtcoVYYe2cr/w uBWD/pcUe32RBVxHwc+FRly1H6sx8slnrvjTpOHklPmUhYYvGQ6zBLO7hNqlqpWq aodz6erZ9uXEIOJu931hmLnR/oWBW8ekIEkwnz1Gh/JgTQEBefg1VF8p/zIebd9H YpgXTVg9+8ClN8HUOgftuRJp2/t+YBPFJ3PpTYKj5TGMGL06355rBbHqpItDupM2 tYo13UaYKIrssIjHsbJw1Gl9vyCQh6Uk8QZLjxMU2WnJyHOf -----END CERTIFICATE-----Generated at Sun Jan 25 17:47:16 2026 by rpki-client