This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/yd640iyO5e1rxw39pTARVi4BhTo.roa File: yd640iyO5e1rxw39pTARVi4BhTo.roa (raw, json) Hash identifier: amnrnRntcrBttX4vOm5cGFFnnGSWzHrsdN8eo5YqUec= Subject key identifier: C9:DE:B8:D2:2C:8E:E5:ED:6B:C7:0D:FD:A5:30:11:56:2E:01:85:3A Certificate issuer: /CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606 Certificate serial: 019B7C8013AB4C5EC3A1A86E08D7769DC970 Authority key identifier: EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/yd640iyO5e1rxw39pTARVi4BhTo.roa Signing time: Fri 02 Jan 2026 02:18:47 +0000 ROA not before: Fri 02 Jan 2026 02:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213199 IP address blocks: 2a13:2200:c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:13:ab:4c:5e:c3:a1:a8:6e:08:d7:76:9d:c9:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606 Validity Not Before: Jan 2 02:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9deb8d22c8ee5ed6bc70dfda53011562e01853a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:19:5b:0b:79:7e:f5:fb:4a:d9:bc:1b:c1:15: a1:ed:fc:a9:d5:66:92:3e:b2:fd:1a:e1:75:e4:ba: 57:47:e6:67:31:8f:09:a8:55:57:f0:29:a4:04:ac: c4:d1:0f:63:a6:57:2f:21:59:8c:20:2f:c4:27:d7: e6:83:92:97:c1:91:7d:38:bd:45:f5:53:76:fc:cc: 58:6b:c4:55:e7:e3:92:d3:86:fd:c0:67:d0:60:e8: 15:8d:5e:e8:7a:2a:73:2b:ba:4b:f4:55:34:95:36: 8f:ee:7c:09:af:3b:0a:f2:cf:01:f8:3e:b7:81:e1: 36:59:cd:1c:ae:88:d4:05:79:e3:54:ee:51:68:c7: 1c:e4:58:ed:8b:9b:6f:4b:eb:ee:be:1c:ad:21:89: 2e:f0:f7:22:b7:7c:16:e8:d4:ca:2a:f2:3f:74:fb: e6:a4:f0:c9:07:d4:0a:ab:0a:88:fc:21:77:20:11: 59:c3:71:37:e8:9d:66:ef:34:15:7a:c2:ed:a5:c4: ed:50:78:8d:6b:22:e0:d3:bf:7d:3a:47:aa:1f:dc: d3:50:f2:4c:b3:0d:c2:d3:c8:a9:80:b3:f3:87:e7: c4:4b:f1:c7:2a:bf:2f:29:38:11:d8:b3:ce:c5:18: 24:2b:bd:3b:93:c1:a4:3a:71:2a:ba:d3:91:6d:75: 48:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:DE:B8:D2:2C:8E:E5:ED:6B:C7:0D:FD:A5:30:11:56:2E:01:85:3A X509v3 Authority Key Identifier: keyid:EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/yd640iyO5e1rxw39pTARVi4BhTo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:2200:c::/48 Signature Algorithm: sha256WithRSAEncryption 6c:66:e8:21:1d:dc:47:39:e4:da:09:89:eb:20:7b:2c:f7:ba: 12:85:c5:47:55:f0:05:e8:ab:b8:87:56:9f:f0:f4:9d:10:3a: ff:46:f8:84:f6:ce:bb:7a:ce:7a:5d:8a:23:ba:fd:39:87:7a: b0:4e:96:51:d6:1f:fb:e7:db:48:b4:0b:78:45:6e:ea:29:6b: c6:ae:92:5d:8b:b4:49:f7:2b:4b:9a:ac:fc:6b:35:49:e7:71: 63:8a:78:1e:7a:31:7f:0e:01:c3:e6:6b:fa:d5:1e:17:e0:9f: 14:49:18:7f:c0:ed:16:1b:2e:bc:3a:cb:38:55:0b:51:b9:d2: 1b:f2:74:9c:9e:0c:98:2d:7c:44:72:3e:13:fa:90:90:79:34: 84:7b:71:b3:b3:27:cf:65:9d:78:40:42:52:8e:80:ad:e0:c7: 15:5a:51:5c:5f:7e:75:ad:42:25:df:25:9f:9a:29:5c:3d:72: 01:ba:43:f5:fd:3a:7d:9d:2e:4d:e7:cb:79:57:c7:e9:f0:1b: 76:6f:8c:e3:a2:f1:03:43:77:c7:f3:1e:c6:7c:f7:a6:07:00: 5b:34:01:de:7f:59:bf:31:a1:4d:c4:5a:2c:6a:34:db:37:3c: 8a:db:f8:2d:b8:78:18:af:7d:0b:d0:c9:c1:2f:01:e5:a4:5d: aa:7f:f4:0b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8gBOrTF7DoahuCNd2nclwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhMmQxMDJiNjExMmIwZDlhOGI4ZWViYWM0Yjk3YzgxOWY5 N2M2MDYwHhcNMjYwMTAyMDIxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOWRlYjhkMjJjOGVlNWVkNmJjNzBkZmRhNTMwMTE1NjJlMDE4NTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRlbC3l+9ftK2bwbwRWh7fyp1WaS PrL9GuF15LpXR+ZnMY8JqFVX8CmkBKzE0Q9jplcvIVmMIC/EJ9fmg5KXwZF9OL1F 9VN2/MxYa8RV5+OS04b9wGfQYOgVjV7oeipzK7pL9FU0lTaP7nwJrzsK8s8B+D63 geE2Wc0crojUBXnjVO5RaMcc5Fjti5tvS+vuvhytIYku8Pcit3wW6NTKKvI/dPvm pPDJB9QKqwqI/CF3IBFZw3E36J1m7zQVesLtpcTtUHiNayLg0799OkeqH9zTUPJM sw3C08ipgLPzh+fES/HHKr8vKTgR2LPOxRgkK707k8GkOnEqutORbXVIGwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMneuNIsjuXta8cN/aUwEVYuAYU6MB8GA1UdIwQY MBaAFOotECthErDZqLjuusS5fIGfl8YGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80Y2RlZmEtNWVlMi00NzE5LWE3ZTEt YjgyOWNjNDAxMDMxLzEveWQ2NDBpeU81ZTFyeHczOXBUQVJWaTRCaFRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80Y2RlZmEtNWVlMi00NzE5LWE3ZTEtYjgyOWNjNDAxMDMx LzEvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhMiAAAM MA0GCSqGSIb3DQEBCwUAA4IBAQBsZughHdxHOeTaCYnrIHss97oShcVHVfAF6Ku4 h1af8PSdEDr/RviE9s67es56XYojuv05h3qwTpZR1h/759tItAt4RW7qKWvGrpJd i7RJ9ytLmqz8azVJ53FjingeejF/DgHD5mv61R4X4J8USRh/wO0WGy68Oss4VQtR udIb8nScngyYLXxEcj4T+pCQeTSEe3GzsyfPZZ14QEJSjoCt4McVWlFcX351rUIl 3yWfmilcPXIBukP1/Tp9nS5N58t5V8fp8Bt2b4zjovEDQ3fH8x7GfPemBwBbNAHe f1m/MaFNxFosajTbNzyK2/gtuHgYr30L0MnBLwHlpF2qf/QL -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:45 2026 by rpki-client