This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/y_OQIDAMHlaoBXlRn0zGw_Gh1QI.roa File: y_OQIDAMHlaoBXlRn0zGw_Gh1QI.roa (raw, json) Hash identifier: lYKfm5Dp+lf/dj7OuCbcWwuPJCfkOvV2il96b5sLugY= Subject key identifier: CB:F3:90:20:30:0C:1E:56:A8:05:79:51:9F:4C:C6:C3:F1:A1:D5:02 Certificate issuer: /CN=e5f6ced27fc60f900fac1b751db1ee4bf785aab3 Certificate serial: 019B76EB035B7AA967B4D5A299ED5C8C3317 Authority key identifier: E5:F6:CE:D2:7F:C6:0F:90:0F:AC:1B:75:1D:B1:EE:4B:F7:85:AA:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5fbO0n_GD5APrBt1HbHuS_eFqrM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/y_OQIDAMHlaoBXlRn0zGw_Gh1QI.roa Signing time: Thu 01 Jan 2026 00:17:51 +0000 ROA not before: Thu 01 Jan 2026 00:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35131 IP address blocks: 2a00:e280::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.crl rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.mft rsync://rpki.ripe.net/repository/DEFAULT/5fbO0n_GD5APrBt1HbHuS_eFqrM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:03:5b:7a:a9:67:b4:d5:a2:99:ed:5c:8c:33:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5f6ced27fc60f900fac1b751db1ee4bf785aab3 Validity Not Before: Jan 1 00:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cbf39020300c1e56a80579519f4cc6c3f1a1d502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:19:15:de:dd:71:6f:45:3f:04:0f:fe:b7:dd: 04:0e:ec:cf:58:74:8c:50:70:03:c3:1f:14:af:f6: ee:bd:b3:14:31:b2:03:6c:f2:2f:7f:1c:d3:f4:8c: 37:4e:3a:56:74:9b:18:0e:72:85:05:10:b9:58:28: 88:5e:9f:a3:36:8b:80:81:88:46:58:df:16:8a:de: 4a:94:98:fd:b7:5b:39:34:d8:64:b4:77:d2:63:d3: d2:c4:51:10:33:97:df:c2:60:8f:91:fb:d4:33:bc: a7:d5:14:eb:99:6b:34:01:8a:03:df:67:62:3e:d8: 42:d7:cd:e9:a9:c9:a8:0c:c2:f3:4e:45:ca:dc:89: 3f:3b:c9:df:58:2a:3b:c0:26:02:17:58:7f:38:11: 92:46:c8:60:2b:12:0f:81:21:92:86:f7:3b:c4:e9: dc:28:cf:96:b8:d5:ec:a5:47:7f:98:5a:bc:3e:04: 24:11:e7:fa:e7:76:21:be:77:a8:87:e7:53:30:8f: 38:45:37:9f:ed:aa:e5:91:2f:d9:68:3b:3f:41:b5: 1b:cf:75:21:eb:38:15:a6:5e:a6:0b:cb:e2:32:40: 36:f5:77:dd:56:f8:a7:7e:ec:fd:65:fd:46:8b:cd: 5f:c5:d0:79:4f:5a:86:37:27:39:58:56:0a:82:c7: a6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:F3:90:20:30:0C:1E:56:A8:05:79:51:9F:4C:C6:C3:F1:A1:D5:02 X509v3 Authority Key Identifier: keyid:E5:F6:CE:D2:7F:C6:0F:90:0F:AC:1B:75:1D:B1:EE:4B:F7:85:AA:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fbO0n_GD5APrBt1HbHuS_eFqrM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/y_OQIDAMHlaoBXlRn0zGw_Gh1QI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:e280::/32 Signature Algorithm: sha256WithRSAEncryption 76:a4:99:4f:8d:f9:67:a7:4d:18:53:39:9f:19:15:91:95:65: b1:11:a6:c6:26:f9:40:d5:68:1b:a3:bc:4a:c1:bc:24:ce:ec: 55:e5:b9:76:4c:fa:79:7c:65:a6:36:0c:12:b3:ae:8d:13:c0: 33:fc:1f:bb:a4:82:3c:ac:e4:ed:3f:54:cc:e8:20:f1:79:00: 92:bb:71:fd:9c:a1:e2:7a:50:af:ac:a5:13:c9:e8:aa:29:b6: 21:7a:27:13:5a:bf:50:77:02:c9:cb:24:e0:61:73:1d:32:96: 44:57:99:6a:19:96:7b:7f:fd:cf:c8:b7:3d:e6:09:41:76:e2: 80:58:8b:f2:08:e1:16:62:6d:ee:b0:65:89:51:52:c7:d7:23: ba:50:ee:9f:69:41:e7:50:aa:73:b9:b9:68:a1:08:81:d0:8d: 16:45:a4:c6:b9:d8:1f:f0:6a:30:3b:d8:01:ee:c2:ce:d1:67: 7e:af:85:37:a0:54:40:56:ca:fd:ef:0d:3e:17:81:9c:01:b0: fb:1a:ab:be:e3:9f:d3:f3:a9:a5:8f:d8:be:a5:76:8b:d7:1e: a8:9b:71:9b:7b:55:4a:4a:73:ba:07:fd:ac:00:26:cf:41:cd: 59:e3:11:91:f7:75:15:49:32:89:2c:7b:6e:ae:77:ad:7b:ae: e1:4a:05:52 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt26wNbeqlntNWime1cjDMXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ZjZjZWQyN2ZjNjBmOTAwZmFjMWI3NTFkYjFlZTRiZjc4 NWFhYjMwHhcNMjYwMTAxMDAxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYmYzOTAyMDMwMGMxZTU2YTgwNTc5NTE5ZjRjYzZjM2YxYTFkNTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRkV3t1xb0U/BA/+t90EDuzPWHSM UHADwx8Ur/buvbMUMbIDbPIvfxzT9Iw3TjpWdJsYDnKFBRC5WCiIXp+jNouAgYhG WN8Wit5KlJj9t1s5NNhktHfSY9PSxFEQM5ffwmCPkfvUM7yn1RTrmWs0AYoD32di PthC183pqcmoDMLzTkXK3Ik/O8nfWCo7wCYCF1h/OBGSRshgKxIPgSGShvc7xOnc KM+WuNXspUd/mFq8PgQkEef653Yhvneoh+dTMI84RTef7arlkS/ZaDs/QbUbz3Uh 6zgVpl6mC8viMkA29XfdVvinfuz9Zf1Gi81fxdB5T1qGNyc5WFYKgsemWQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFMvzkCAwDB5WqAV5UZ9MxsPxodUCMB8GA1UdIwQY MBaAFOX2ztJ/xg+QD6wbdR2x7kv3haqzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWZiTzBuX0dENUFQckJ0MUhiSHVTX2VGcXJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9mMzlhMTctODM4Ny00ZmJhLTllZDAt M2VhZDc3OTIwNzNjLzEveV9PUUlEQU1IbGFvQlhsUm4wekd3X0doMVFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9mMzlhMTctODM4Ny00ZmJhLTllZDAtM2VhZDc3OTIwNzNj LzEvNWZiTzBuX0dENUFQckJ0MUhiSHVTX2VGcXJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgDigDAN BgkqhkiG9w0BAQsFAAOCAQEAdqSZT435Z6dNGFM5nxkVkZVlsRGmxib5QNVoG6O8 SsG8JM7sVeW5dkz6eXxlpjYMErOujRPAM/wfu6SCPKzk7T9UzOgg8XkAkrtx/Zyh 4npQr6ylE8noqim2IXonE1q/UHcCycsk4GFzHTKWRFeZahmWe3/9z8i3PeYJQXbi gFiL8gjhFmJt7rBliVFSx9cjulDun2lB51Cqc7m5aKEIgdCNFkWkxrnYH/BqMDvY Ae7CztFnfq+FN6BUQFbK/e8NPheBnAGw+xqrvuOf0/OppY/YvqV2i9ceqJtxm3tV Skpzugf9rAAmz0HNWeMRkfd1FUkyiSx7bq53rXuu4UoFUg== -----END CERTIFICATE-----Generated at Mon Jan 26 15:01:56 2026 by rpki-client