This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/_Y_601F6eAt7O-baCpdg3BQDJXc.roa
File: _Y_601F6eAt7O-baCpdg3BQDJXc.roa (raw, json)
Hash identifier: vyG9YG54wVQIAnIU/YKZPIrIY0HUdh61Oh6KNWA0bnw=
Subject key identifier: FD:8F:FA:D3:51:7A:78:0B:7B:3B:E6:DA:0A:97:60:DC:14:03:25:77
Certificate issuer: /CN=26b1524ec01dcf405f44171829ed67a2992aa42d
Certificate serial: 019B7BA53CD4679E3B400E391F5443477766
Authority key identifier: 26:B1:52:4E:C0:1D:CF:40:5F:44:17:18:29:ED:67:A2:99:2A:A4:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JrFSTsAdz0BfRBcYKe1nopkqpC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/_Y_601F6eAt7O-baCpdg3BQDJXc.roa
Signing time: Thu 01 Jan 2026 22:19:45 +0000
ROA not before: Thu 01 Jan 2026 22:19:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214147
IP address blocks: 2001:67c:f9c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JrFSTsAdz0BfRBcYKe1nopkqpC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 04:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a5:3c:d4:67:9e:3b:40:0e:39:1f:54:43:47:77:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26b1524ec01dcf405f44171829ed67a2992aa42d
Validity
Not Before: Jan 1 22:19:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fd8ffad3517a780b7b3be6da0a9760dc14032577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:24:96:0d:40:e1:ab:e2:3e:d7:de:77:d3:d3:
97:e5:2d:1e:bf:d2:9a:2b:d5:d0:cf:83:40:86:b5:
20:c2:5d:77:f5:01:cd:6c:bf:f7:30:2d:79:2e:9b:
ac:74:d2:e9:97:b6:70:b6:6a:07:14:da:09:2d:28:
a9:23:c3:b7:d2:3e:3f:dd:5f:8f:f8:e1:7e:bd:0f:
f7:06:01:77:0e:45:cc:5c:b5:83:f4:72:61:ff:a9:
36:be:6a:6d:43:31:31:c9:f7:ca:55:45:67:de:52:
f8:5e:93:91:ed:33:c7:f2:74:40:93:28:6d:83:6d:
86:55:57:72:25:fb:80:ce:fe:f3:bb:c9:69:3f:7d:
d8:57:85:92:8c:02:b8:d2:4c:9e:68:a1:88:ea:0c:
80:ad:5e:76:6e:52:57:8d:f9:7c:cc:dd:98:55:5a:
b0:b3:c2:a3:1c:11:11:10:20:da:9b:6c:1d:6a:6e:
2d:af:d0:82:cd:88:79:f5:0f:62:89:ef:04:05:30:
79:44:a3:c4:77:58:8d:30:6b:a9:9d:6b:48:5e:64:
44:c4:b3:2d:fe:0e:41:95:57:88:ce:64:6b:16:84:
d0:df:da:63:f5:91:4b:52:90:84:61:d0:62:e4:61:
41:0a:40:30:4c:78:0c:ed:88:1c:40:54:25:4d:92:
7d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:8F:FA:D3:51:7A:78:0B:7B:3B:E6:DA:0A:97:60:DC:14:03:25:77
X509v3 Authority Key Identifier:
keyid:26:B1:52:4E:C0:1D:CF:40:5F:44:17:18:29:ED:67:A2:99:2A:A4:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JrFSTsAdz0BfRBcYKe1nopkqpC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/_Y_601F6eAt7O-baCpdg3BQDJXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:f9c::/48
Signature Algorithm: sha256WithRSAEncryption
7a:87:86:f8:6b:6d:cc:47:1b:67:28:60:2a:ac:4a:ab:df:6f:
35:a9:15:6d:5d:84:98:d8:fe:30:54:d9:c0:28:a9:dc:27:89:
5f:09:3a:4b:23:89:c9:f4:e3:3a:c4:b8:0d:3f:c0:11:7e:1a:
cf:0c:53:39:8e:e1:d9:a0:6c:2f:78:67:23:3a:b6:10:c4:d9:
cf:f4:a1:f1:98:d7:3c:e1:04:13:cf:75:60:fd:24:fa:17:39:
50:88:aa:14:a0:07:47:4f:89:db:28:18:6b:75:1e:f1:d1:9d:
0f:55:aa:a7:81:9c:67:17:a6:f5:57:a9:de:f5:d4:30:fe:3f:
1b:74:a3:ea:dc:ff:5f:31:68:b5:03:0c:68:7e:af:57:5b:ff:
7b:ed:9f:fa:6c:48:86:23:f5:fa:64:c0:55:ed:c0:20:cd:c3:
71:4f:0f:26:a4:7d:cd:1d:9f:8d:6f:04:02:68:6d:52:29:df:
d2:8c:72:4e:6a:b7:8e:d7:2d:e0:25:34:81:0e:ef:ac:ce:22:
22:eb:98:20:6a:75:d7:a4:f6:d3:b7:84:fd:99:82:b2:ca:b3:
5e:2e:03:3a:24:17:19:32:52:9c:df:b5:70:8f:fc:28:ed:3d:
26:e2:3f:0d:f1:3b:32:60:0a:d8:0f:bc:bf:44:6c:bf:06:07:
0f:9e:d9:a6
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZt7pTzUZ547QA45H1RDR3dmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2YjE1MjRlYzAxZGNmNDA1ZjQ0MTcxODI5ZWQ2N2EyOTky
YWE0MmQwHhcNMjYwMTAxMjIxOTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDhmZmFkMzUxN2E3ODBiN2IzYmU2ZGEwYTk3NjBkYzE0MDMyNTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiSWDUDhq+I+195309OX5S0ev9Ka
K9XQz4NAhrUgwl139QHNbL/3MC15LpusdNLpl7ZwtmoHFNoJLSipI8O30j4/3V+P
+OF+vQ/3BgF3DkXMXLWD9HJh/6k2vmptQzExyffKVUVn3lL4XpOR7TPH8nRAkyht
g22GVVdyJfuAzv7zu8lpP33YV4WSjAK40kyeaKGI6gyArV52blJXjfl8zN2YVVqw
s8KjHBERECDam2wdam4tr9CCzYh59Q9iie8EBTB5RKPEd1iNMGupnWtIXmRExLMt
/g5BlVeIzmRrFoTQ39pj9ZFLUpCEYdBi5GFBCkAwTHgM7YgcQFQlTZJ97QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFP2P+tNRengLezvm2gqXYNwUAyV3MB8GA1UdIwQY
MBaAFCaxUk7AHc9AX0QXGCntZ6KZKqQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnJGU1RzQWR6MEJmUkJjWUtlMW5vcGtxcEMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8wNTY1NjMtZTYxYy00YjhhLThkNmUt
NzY2YzgyNzU4MDY1LzEvX1lfNjAxRjZlQXQ3Ty1iYUNwZGczQlFESlhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8wNTY1NjMtZTYxYy00YjhhLThkNmUtNzY2YzgyNzU4MDY1
LzEvSnJGU1RzQWR6MEJmUkJjWUtlMW5vcGtxcEMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA+c
MA0GCSqGSIb3DQEBCwUAA4IBAQB6h4b4a23MRxtnKGAqrEqr3281qRVtXYSY2P4w
VNnAKKncJ4lfCTpLI4nJ9OM6xLgNP8ARfhrPDFM5juHZoGwveGcjOrYQxNnP9KHx
mNc84QQTz3Vg/ST6FzlQiKoUoAdHT4nbKBhrdR7x0Z0PVaqngZxnF6b1V6ne9dQw
/j8bdKPq3P9fMWi1Awxofq9XW/977Z/6bEiGI/X6ZMBV7cAgzcNxTw8mpH3NHZ+N
bwQCaG1SKd/SjHJOareO1y3gJTSBDu+sziIi65gganXXpPbTt4T9mYKyyrNeLgM6
JBcZMlKc37Vwj/wo7T0m4j8N8TsyYArYD7y/RGy/BgcPntmm
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:33:19 2026 by rpki-client