This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/yY2vlrWyIY4apa6paDeTCxfPgaU.roa File: yY2vlrWyIY4apa6paDeTCxfPgaU.roa (raw, json) Hash identifier: 6y+VApPzYyS4SGDKt87iuWrwk2coenfHGpex1d3nrQQ= Subject key identifier: C9:8D:AF:96:B5:B2:21:8E:1A:A5:AE:A9:68:37:93:0B:17:CF:81:A5 Certificate issuer: /CN=359c7243bef2dc775ae67692889d5d26c1b2d148 Certificate serial: 019B7CEE4CB6888B9ACBAFCDB301047CBDCB Authority key identifier: 35:9C:72:43:BE:F2:DC:77:5A:E6:76:92:88:9D:5D:26:C1:B2:D1:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/yY2vlrWyIY4apa6paDeTCxfPgaU.roa Signing time: Fri 02 Jan 2026 04:19:10 +0000 ROA not before: Fri 02 Jan 2026 04:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2643 IP address blocks: 2001:678:7d8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:4c:b6:88:8b:9a:cb:af:cd:b3:01:04:7c:bd:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=359c7243bef2dc775ae67692889d5d26c1b2d148 Validity Not Before: Jan 2 04:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c98daf96b5b2218e1aa5aea96837930b17cf81a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:53:6d:1a:42:30:66:27:7c:3d:e2:ba:53:d0: 2e:4f:20:0c:0b:1e:ae:5e:5d:85:89:b2:7c:9b:91: e7:b0:fc:15:1c:22:7e:6a:97:0b:04:6a:20:23:66: f8:a9:90:c5:24:47:84:cc:d3:b4:0b:8c:2b:22:13: 5d:59:fb:60:bc:8b:a7:51:7e:60:cc:6f:a3:e2:48: da:3f:a5:02:8b:da:20:30:df:7f:62:97:84:a1:f7: 97:ac:93:1d:0c:16:a6:86:b8:89:13:af:e0:69:2f: a3:d2:f0:cf:fa:7c:72:2b:fb:9e:29:f3:b4:ba:2f: 9c:dc:a1:2d:c9:30:75:df:80:57:99:3f:ab:30:95: 97:84:7a:fa:5d:80:a4:f3:0b:66:2a:a8:dd:8c:ba: 9a:5c:15:6f:0e:3d:d1:85:9e:3c:ec:1a:23:90:ed: f4:a9:3b:9e:75:98:0f:85:70:91:2e:1c:8f:3a:ae: d6:57:fe:f8:a9:45:5e:1f:7f:5a:dc:d8:02:dc:df: 27:82:bc:76:0c:1e:64:95:2f:ee:01:50:6d:d9:82: 9a:3e:a4:1b:9a:fd:ed:bb:8d:4f:4b:28:1b:e4:f5: e1:92:92:47:e5:22:15:69:86:fa:6f:05:59:40:9b: 82:f2:61:fc:27:01:17:1b:d6:e7:3e:65:9f:34:32: 5a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:8D:AF:96:B5:B2:21:8E:1A:A5:AE:A9:68:37:93:0B:17:CF:81:A5 X509v3 Authority Key Identifier: keyid:35:9C:72:43:BE:F2:DC:77:5A:E6:76:92:88:9D:5D:26:C1:B2:D1:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/yY2vlrWyIY4apa6paDeTCxfPgaU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:7d8::/48 Signature Algorithm: sha256WithRSAEncryption 94:62:fb:76:e2:51:49:cd:46:95:9e:af:ec:38:d4:22:bd:a8: a0:78:5c:49:e4:dd:bb:85:95:39:e0:8b:32:61:98:46:42:10: 18:20:23:a2:f2:9a:77:47:3c:58:32:29:42:81:00:94:6a:05: b0:25:2b:12:db:1a:2e:96:ae:bc:3e:a7:84:81:70:1b:7a:12: aa:4c:f1:2b:af:57:5f:36:2a:89:fe:d2:68:80:fa:8e:c9:87: 95:a5:d8:e2:68:04:20:02:a5:fa:15:65:61:69:bf:8f:f8:eb: 81:57:58:33:81:5d:4f:87:d3:17:88:fb:ac:8a:4c:43:af:0b: 21:d4:f7:49:09:0f:3b:63:23:8d:d3:ee:61:f2:8c:c8:0b:34: 4a:d6:9c:65:24:8c:bd:ae:01:d7:f5:c6:7a:9a:ae:3a:51:ad: df:03:fd:1e:42:c6:fd:07:61:a1:20:f5:32:d5:09:24:6e:f8: 67:5c:ed:e9:4d:5b:09:61:16:9a:00:7f:35:89:ad:37:18:c4: 21:d8:61:ba:8b:9e:47:49:b6:e4:c6:c6:d7:6f:32:72:05:80: ad:4d:df:23:a2:73:d8:26:f3:47:2f:d0:1f:9a:20:ed:c9:78: e1:6c:92:52:1e:43:8d:8a:0c:1a:6e:2b:13:98:b6:11:57:20: 14:07:f2:15 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt87ky2iIuay6/NswEEfL3LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1OWM3MjQzYmVmMmRjNzc1YWU2NzY5Mjg4OWQ1ZDI2YzFi MmQxNDgwHhcNMjYwMTAyMDQxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOThkYWY5NmI1YjIyMThlMWFhNWFlYTk2ODM3OTMwYjE3Y2Y4MWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FNtGkIwZid8PeK6U9AuTyAMCx6u Xl2FibJ8m5HnsPwVHCJ+apcLBGogI2b4qZDFJEeEzNO0C4wrIhNdWftgvIunUX5g zG+j4kjaP6UCi9ogMN9/YpeEofeXrJMdDBamhriJE6/gaS+j0vDP+nxyK/ueKfO0 ui+c3KEtyTB134BXmT+rMJWXhHr6XYCk8wtmKqjdjLqaXBVvDj3RhZ487BojkO30 qTuedZgPhXCRLhyPOq7WV/74qUVeH39a3NgC3N8ngrx2DB5klS/uAVBt2YKaPqQb mv3tu41PSygb5PXhkpJH5SIVaYb6bwVZQJuC8mH8JwEXG9bnPmWfNDJaeQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMmNr5a1siGOGqWuqWg3kwsXz4GlMB8GA1UdIwQY MBaAFDWcckO+8tx3WuZ2koidXSbBstFIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlp4eVE3N3kzSGRhNW5hU2lKMWRKc0d5MFVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi81NTViYzktNGUxOS00ODI4LThlYmEt NjFmZmI2NTA2NjQ0LzEveVkydmxyV3lJWTRhcGE2cGFEZVRDeGZQZ2FVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi81NTViYzktNGUxOS00ODI4LThlYmEtNjFmZmI2NTA2NjQ0 LzEvTlp4eVE3N3kzSGRhNW5hU2lKMWRKc0d5MFVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAfY MA0GCSqGSIb3DQEBCwUAA4IBAQCUYvt24lFJzUaVnq/sONQivaigeFxJ5N27hZU5 4IsyYZhGQhAYICOi8pp3RzxYMilCgQCUagWwJSsS2xoulq68PqeEgXAbehKqTPEr r1dfNiqJ/tJogPqOyYeVpdjiaAQgAqX6FWVhab+P+OuBV1gzgV1Ph9MXiPusikxD rwsh1PdJCQ87YyON0+5h8ozICzRK1pxlJIy9rgHX9cZ6mq46Ua3fA/0eQsb9B2Gh IPUy1QkkbvhnXO3pTVsJYRaaAH81ia03GMQh2GG6i55HSbbkxsbXbzJyBYCtTd8j onPYJvNHL9AfmiDtyXjhbJJSHkONigwabisTmLYRVyAUB/IV -----END CERTIFICATE-----Generated at Mon Jan 26 02:23:27 2026 by rpki-client