This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/yt4BN92GX8pVxiRasQBh6UT6Fgo.roa File: yt4BN92GX8pVxiRasQBh6UT6Fgo.roa (raw, json) Hash identifier: Wcpo0GbWVsTRdwofgeeM5HW4/V0qj9aWMihuv+hgA94= Subject key identifier: CA:DE:01:37:DD:86:5F:CA:55:C6:24:5A:B1:00:61:E9:44:FA:16:0A Certificate issuer: /CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81 Certificate serial: 019B7EA6C91C611460AFC7728175B759926E Authority key identifier: 69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/yt4BN92GX8pVxiRasQBh6UT6Fgo.roa Signing time: Fri 02 Jan 2026 12:20:18 +0000 ROA not before: Fri 02 Jan 2026 12:20:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21738 IP address blocks: 2a01:e286::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:c9:1c:61:14:60:af:c7:72:81:75:b7:59:92:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81 Validity Not Before: Jan 2 12:20:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cade0137dd865fca55c6245ab10061e944fa160a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:46:a4:18:54:e4:e7:b0:a1:cb:21:c5:42:f9: c3:d8:84:b8:c5:72:7c:1a:24:29:fa:3c:89:10:e3: 23:df:27:12:2a:7b:3d:c5:0d:1a:40:7d:3b:85:38: 39:4c:c1:63:08:fc:92:bf:30:8e:1a:14:8c:c6:1a: 2d:e2:8d:1a:2e:19:32:6d:31:3b:05:10:5c:e0:72: 63:68:a8:18:18:48:26:ad:f5:94:d7:23:e7:e5:b6: 5b:16:15:d0:15:82:dd:51:30:43:1e:d9:ff:86:53: fb:00:d1:bd:f7:85:fa:5d:10:79:4c:cc:1a:85:bd: 11:ce:11:fe:c8:c4:bd:2e:fe:72:da:cd:46:22:88: 5b:8c:a8:a1:c7:6c:91:17:84:18:78:43:f2:54:39: 14:bd:ac:11:a9:29:25:31:01:4a:9a:25:f6:ff:f4: 3e:45:51:ec:1a:31:ae:49:68:25:50:39:8c:26:bf: 41:ae:15:aa:4e:09:44:a6:dd:dd:40:96:e4:52:1c: 28:f9:60:91:52:f3:02:87:02:49:b0:5a:71:6c:b2: ad:55:25:50:d5:2e:3c:c7:8b:a5:f3:57:01:d4:7e: a5:5f:e3:6d:69:8a:50:b9:48:24:c1:32:ed:dd:90: 43:85:46:2f:5b:75:24:12:60:1a:ee:25:de:e2:00: c7:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:DE:01:37:DD:86:5F:CA:55:C6:24:5A:B1:00:61:E9:44:FA:16:0A X509v3 Authority Key Identifier: keyid:69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/yt4BN92GX8pVxiRasQBh6UT6Fgo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:e286::/32 Signature Algorithm: sha256WithRSAEncryption 25:1e:bc:61:24:a5:95:60:2a:0c:4e:c7:58:86:0b:ad:d8:11: 41:76:e0:04:2f:5c:76:b6:d5:34:c4:40:1a:bb:82:29:d4:33: 5d:e9:61:3b:41:e6:af:94:56:53:98:fb:5f:ee:d9:61:d4:e4: 98:7b:dd:c3:f7:35:89:8f:a3:0e:70:a5:d7:38:3f:08:19:24: e1:af:fd:29:27:e4:1f:b7:e8:5b:05:24:5a:8f:6f:b6:e8:f9: 34:67:2b:4f:51:b9:a2:0c:42:54:f4:2a:f8:f1:d8:b4:80:3e: 6e:72:a2:02:be:10:85:01:b7:0e:4a:b3:b0:33:85:14:76:d8: 61:ce:c4:a8:01:a1:ca:fe:43:fa:75:39:0f:8f:a4:10:a3:73: 7d:df:e8:e7:86:68:64:6b:2a:3f:a5:f8:fc:15:b0:32:d1:c5: 56:5e:dc:32:18:2c:fa:cc:00:09:5d:b7:fc:6b:46:a4:98:cb: 83:ca:12:40:97:05:0a:92:09:f3:63:bf:7e:48:39:77:a4:ba: 46:8b:78:29:03:cf:a1:04:39:7d:73:77:e7:81:c1:cd:2b:52: 43:e0:91:75:bc:f6:f0:31:c4:b2:f8:01:29:2e:4a:e5:cd:7a: a9:76:67:98:a5:de:0b:4b:29:35:3f:51:9c:f7:ce:28:fa:dc: e9:97:04:45 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+pskcYRRgr8dygXW3WZJuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZGJlMWU3ZDllODdkNjg3MDFhNDAzNWE3NmM1MWJmZWNk ODhkODEwHhcNMjYwMTAyMTIyMDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYWRlMDEzN2RkODY1ZmNhNTVjNjI0NWFiMTAwNjFlOTQ0ZmExNjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkakGFTk57ChyyHFQvnD2IS4xXJ8 GiQp+jyJEOMj3ycSKns9xQ0aQH07hTg5TMFjCPySvzCOGhSMxhot4o0aLhkybTE7 BRBc4HJjaKgYGEgmrfWU1yPn5bZbFhXQFYLdUTBDHtn/hlP7ANG994X6XRB5TMwa hb0RzhH+yMS9Lv5y2s1GIohbjKihx2yRF4QYeEPyVDkUvawRqSklMQFKmiX2//Q+ RVHsGjGuSWglUDmMJr9BrhWqTglEpt3dQJbkUhwo+WCRUvMChwJJsFpxbLKtVSVQ 1S48x4ul81cB1H6lX+NtaYpQuUgkwTLt3ZBDhUYvW3UkEmAa7iXe4gDHyQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFMreATfdhl/KVcYkWrEAYelE+hYKMB8GA1UdIwQY MBaAFGnb4efZ6H1ocBpANadsUb/s2I2BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWR2aDU5bm9mV2h3R2tBMXAyeFJ2LXpZallFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83MjcwMTUtZTE0ZS00ZDQxLWIwNWIt OGQ5NDU1M2I3NWUxLzEveXQ0Qk45MkdYOHBWeGlSYXNRQmg2VVQ2RmdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC83MjcwMTUtZTE0ZS00ZDQxLWIwNWItOGQ5NDU1M2I3NWUx LzEvYWR2aDU5bm9mV2h3R2tBMXAyeFJ2LXpZallFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgHihjAN BgkqhkiG9w0BAQsFAAOCAQEAJR68YSSllWAqDE7HWIYLrdgRQXbgBC9cdrbVNMRA GruCKdQzXelhO0Hmr5RWU5j7X+7ZYdTkmHvdw/c1iY+jDnCl1zg/CBkk4a/9KSfk H7foWwUkWo9vtuj5NGcrT1G5ogxCVPQq+PHYtIA+bnKiAr4QhQG3DkqzsDOFFHbY Yc7EqAGhyv5D+nU5D4+kEKNzfd/o54ZoZGsqP6X4/BWwMtHFVl7cMhgs+swACV23 /GtGpJjLg8oSQJcFCpIJ82O/fkg5d6S6Rot4KQPPoQQ5fXN354HBzStSQ+CRdbz2 8DHEsvgBKS5K5c16qXZnmKXeC0spNT9RnPfOKPrc6ZcERQ== -----END CERTIFICATE-----Generated at Sun Jan 25 15:28:54 2026 by rpki-client