This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/YxQb53gzYd0iTmUe7A41D-2rnY8.roa File: YxQb53gzYd0iTmUe7A41D-2rnY8.roa (raw, json) Hash identifier: q+Z1iMu62RV5K/wK7fU9JbtFm1jSO7NLnuxYy0Ettbk= Subject key identifier: 63:14:1B:E7:78:33:61:DD:22:4E:65:1E:EC:0E:35:0F:ED:AB:9D:8F Certificate issuer: /CN=a124ccdd70f3ec762cbd65e04dd6f76be236a8a7 Certificate serial: 019B7758A6499BF96129E93D91FAFAFCC605 Authority key identifier: A1:24:CC:DD:70:F3:EC:76:2C:BD:65:E0:4D:D6:F7:6B:E2:36:A8:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/YxQb53gzYd0iTmUe7A41D-2rnY8.roa Signing time: Thu 01 Jan 2026 02:17:36 +0000 ROA not before: Thu 01 Jan 2026 02:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44908 IP address blocks: 2a13:aac4:1000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.crl rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:a6:49:9b:f9:61:29:e9:3d:91:fa:fa:fc:c6:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a124ccdd70f3ec762cbd65e04dd6f76be236a8a7 Validity Not Before: Jan 1 02:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63141be7783361dd224e651eec0e350fedab9d8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:14:6a:74:27:b4:d3:ff:1e:ae:9a:0d:ca:b6: 65:7b:86:54:d6:ae:8d:c5:65:c1:97:27:cf:f0:96: e5:aa:b0:ed:0e:cb:b5:1f:52:93:bd:e6:f3:84:03: 11:f4:70:8d:4a:9b:66:1c:55:9c:41:24:f0:0f:5d: 5c:19:4d:72:cb:b4:3d:1a:0d:ce:da:29:1c:d9:9a: 06:41:f5:ea:57:de:b7:03:49:7a:77:02:81:59:27: cb:ab:ff:a0:f7:4e:c6:12:f0:68:21:21:f7:1d:b8: b3:1a:c9:83:ad:58:1a:53:aa:9b:16:c4:a9:39:77: d8:b7:8c:cc:d5:b4:ed:7e:73:06:ec:d5:06:d0:25: ba:19:2b:2a:6d:c9:a4:eb:03:03:1b:46:00:b9:b8: 38:d6:11:b5:fb:e3:1c:a4:ee:23:e3:47:92:4e:53: e5:7f:39:6d:c1:57:37:ea:b7:94:1e:89:2b:f7:17: dd:d6:ea:f7:56:33:2a:6a:df:7b:51:af:35:ce:69: 15:b2:56:3c:8d:96:35:82:e2:ed:f9:22:94:31:65: 0f:80:72:db:24:1b:1e:02:6a:09:a9:5c:4e:49:70: cc:b1:f4:ef:e1:56:24:60:af:60:5e:92:00:cf:a1: 4b:c3:07:27:30:0a:12:93:66:92:aa:95:0f:c7:a8: 7b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:14:1B:E7:78:33:61:DD:22:4E:65:1E:EC:0E:35:0F:ED:AB:9D:8F X509v3 Authority Key Identifier: keyid:A1:24:CC:DD:70:F3:EC:76:2C:BD:65:E0:4D:D6:F7:6B:E2:36:A8:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/YxQb53gzYd0iTmUe7A41D-2rnY8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:aac4:1000::/36 Signature Algorithm: sha256WithRSAEncryption 03:9c:c0:ef:6b:fb:d6:7a:7c:ea:29:7e:8c:85:69:c7:3f:c8: 56:b7:41:d4:4d:46:a5:80:b9:1e:ee:97:5c:da:57:80:be:10: 6d:cf:cd:7e:c4:56:ab:2b:8a:6c:65:18:8d:02:dc:f9:c5:ea: 6d:29:a1:15:cc:d4:fb:84:94:0c:00:2d:9f:d9:b0:0f:6e:e8: 68:04:b9:5c:53:52:45:78:b2:b8:b0:00:a6:68:c6:9a:14:b2: 6e:93:ee:46:29:38:11:76:c3:ca:40:f6:8b:28:b1:a7:65:8c: 8b:52:0c:72:9f:da:39:6e:7e:11:82:c8:c2:79:1d:6b:df:27: 1d:4a:c0:9e:4f:85:0c:dc:03:72:81:38:21:5e:58:4b:70:77: 9b:89:df:c5:0e:a4:9d:0d:f4:2d:e9:18:b5:c8:ef:17:10:0a: 58:09:37:9c:c6:f7:07:bc:84:2c:5f:7f:03:0d:90:4d:c6:14: aa:37:64:54:85:9a:7f:32:1f:cd:b9:57:0b:a2:12:55:e7:0a: b7:2b:7c:fb:27:7c:86:9e:64:eb:37:d8:63:da:58:26:82:f6: aa:2e:5d:2e:e1:dc:75:6d:b5:dd:be:f7:99:e0:03:f7:1d:f3: 7e:be:39:41:50:d9:70:7c:c2:68:d2:0e:9e:23:b1:0c:f5:e2: 6b:d9:dd:3b -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3WKZJm/lhKek9kfr6/MYFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExMjRjY2RkNzBmM2VjNzYyY2JkNjVlMDRkZDZmNzZiZTIz NmE4YTcwHhcNMjYwMTAxMDIxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzE0MWJlNzc4MzM2MWRkMjI0ZTY1MWVlYzBlMzUwZmVkYWI5ZDhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBRqdCe00/8erpoNyrZle4ZU1q6N xWXBlyfP8JblqrDtDsu1H1KTvebzhAMR9HCNSptmHFWcQSTwD11cGU1yy7Q9Gg3O 2ikc2ZoGQfXqV963A0l6dwKBWSfLq/+g907GEvBoISH3HbizGsmDrVgaU6qbFsSp OXfYt4zM1bTtfnMG7NUG0CW6GSsqbcmk6wMDG0YAubg41hG1++McpO4j40eSTlPl fzltwVc36reUHokr9xfd1ur3VjMqat97Ua81zmkVslY8jZY1guLt+SKUMWUPgHLb JBseAmoJqVxOSXDMsfTv4VYkYK9gXpIAz6FLwwcnMAoSk2aSqpUPx6h79QIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFGMUG+d4M2HdIk5lHuwONQ/tq52PMB8GA1UdIwQY MBaAFKEkzN1w8+x2LL1l4E3W92viNqinMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1NUTTNYRHo3SFlzdldYZ1RkYjNhLUkycUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9iNjk0YjgtODIxMS00YzA2LTljODEt N2IzNTM5N2FmMmY3LzEvWXhRYjUzZ3pZZDBpVG1VZTdBNDFELTJyblk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9iNjk0YjgtODIxMS00YzA2LTljODEtN2IzNTM5N2FmMmY3 LzEvb1NUTTNYRHo3SFlzdldYZ1RkYjNhLUkycUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKhOqxBAw DQYJKoZIhvcNAQELBQADggEBAAOcwO9r+9Z6fOopfoyFacc/yFa3QdRNRqWAuR7u l1zaV4C+EG3PzX7EVqsrimxlGI0C3PnF6m0poRXM1PuElAwALZ/ZsA9u6GgEuVxT UkV4sriwAKZoxpoUsm6T7kYpOBF2w8pA9ososadljItSDHKf2jlufhGCyMJ5HWvf Jx1KwJ5PhQzcA3KBOCFeWEtwd5uJ38UOpJ0N9C3pGLXI7xcQClgJN5zG9we8hCxf fwMNkE3GFKo3ZFSFmn8yH825VwuiElXnCrcrfPsnfIaeZOs32GPaWCaC9qouXS7h 3HVttd2+95ngA/cd836+OUFQ2XB8wmjSDp4jsQz14mvZ3Ts= -----END CERTIFICATE-----Generated at Sun Jan 25 22:51:07 2026 by rpki-client