This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/yXyl6rmr2OG4ysFVc6BBs7WvTX4.roa File: yXyl6rmr2OG4ysFVc6BBs7WvTX4.roa (raw, json) Hash identifier: 4toGGVNx2ljsjTVCORql5iR1nnetEL/SsCRf34jeAvM= Subject key identifier: C9:7C:A5:EA:B9:AB:D8:E1:B8:CA:C1:55:73:A0:41:B3:B5:AF:4D:7E Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce Certificate serial: 019B7CEDECBB7627BA09515E6F5E7ED69601 Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/yXyl6rmr2OG4ysFVc6BBs7WvTX4.roa Signing time: Fri 02 Jan 2026 04:18:45 +0000 ROA not before: Fri 02 Jan 2026 04:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 141237 IP address blocks: 2a0d:2580:2000::/35 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:ec:bb:76:27:ba:09:51:5e:6f:5e:7e:d6:96:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce Validity Not Before: Jan 2 04:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c97ca5eab9abd8e1b8cac15573a041b3b5af4d7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:56:c8:3a:d6:2b:04:d4:f6:19:14:cf:a5:e7: 77:e3:a8:a3:6e:e0:ef:be:37:a1:c0:33:20:16:46: fa:4e:c3:b6:9e:44:02:4f:ca:7c:78:ef:48:e1:58: 8c:6d:ad:66:10:f3:33:bb:18:5f:b8:01:40:5a:f3: 9d:80:26:9e:e8:47:6d:e5:59:ee:8d:28:a8:6f:2a: ec:81:36:b4:76:86:43:bb:e8:15:13:fa:fd:f8:7c: bc:b5:22:ea:86:12:4f:8a:17:d7:18:e4:d0:43:11: e9:b2:93:98:3f:89:b0:5e:18:20:bd:e6:40:21:7d: 80:f2:79:b0:6d:40:37:99:6e:56:b4:fe:1a:a5:28: a1:cf:22:5d:e9:c9:5d:35:d3:c0:35:ab:42:d9:4a: 68:39:7b:d3:d8:26:4b:53:ff:2f:d5:3d:90:7a:22: 04:36:88:5b:b8:7f:6a:37:c3:0a:5f:54:2e:b4:b8: 0e:d3:44:74:bc:46:14:95:35:6e:2a:83:ac:ac:65: 3f:81:9d:4c:3d:f6:60:01:fd:e3:d2:b9:69:b3:06: 89:6a:ab:14:4b:27:a5:b9:0a:53:24:a4:73:f5:1b: ce:64:08:79:09:c6:59:e6:d3:0d:25:9a:58:d6:bf: ac:fa:3b:a4:5f:76:ee:7b:d2:5a:22:12:fa:cd:14: 16:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:7C:A5:EA:B9:AB:D8:E1:B8:CA:C1:55:73:A0:41:B3:B5:AF:4D:7E X509v3 Authority Key Identifier: keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/yXyl6rmr2OG4ysFVc6BBs7WvTX4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:2580:2000::/35 Signature Algorithm: sha256WithRSAEncryption 7a:e3:3f:92:d8:32:02:b8:54:d8:a3:a7:b6:47:45:15:2a:ff: ed:40:b0:4e:34:65:a0:22:37:ac:9e:04:cf:b1:13:01:b0:18: 21:5f:6f:a1:57:db:b5:8b:44:20:18:0c:db:4b:1a:8b:0d:02: 05:fe:77:bc:24:e7:72:ba:0d:d0:e1:b2:f8:0f:8f:0a:14:99: 5b:45:9a:91:b4:7e:af:29:13:38:81:87:8f:a9:81:d3:b2:9f: 8e:a9:9c:fb:66:ef:77:0b:08:7d:c1:3d:ee:1a:13:1a:e3:1e: 55:9f:6c:3f:5a:a3:c5:6f:a7:e3:78:51:8a:83:d4:d0:f4:60: a5:4f:57:98:a2:4c:f5:57:d8:e0:65:0b:f9:42:3d:95:c2:29: e7:31:b6:c3:f1:bd:ca:9c:20:44:f4:33:e9:06:75:2f:62:4a: 75:f1:b4:d1:72:f1:64:f9:53:cf:f7:8d:63:e2:32:79:19:c2: 54:d8:c2:33:75:6e:f5:03:97:55:40:78:0d:f5:6a:57:7c:7f: b8:02:74:39:b8:09:49:f4:9f:9e:ee:02:64:a2:68:26:e7:84: 9b:c7:ff:90:73:1b:ed:62:6f:2b:1f:c0:f7:6e:bc:0a:7e:88: ea:ad:3c:e9:d6:e2:1b:49:75:d5:26:5d:40:2b:a8:7f:64:2f: 1d:44:0d:b0 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt87ey7die6CVFeb15+1pYBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczYzY5ZDA0NTgzNTAwYzVlZjgxMTM2ODMxMjM3NTkzZTBi Yjg2Y2UwHhcNMjYwMTAyMDQxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTdjYTVlYWI5YWJkOGUxYjhjYWMxNTU3M2EwNDFiM2I1YWY0ZDdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklbIOtYrBNT2GRTPped346ijbuDv vjehwDMgFkb6TsO2nkQCT8p8eO9I4ViMba1mEPMzuxhfuAFAWvOdgCae6Edt5Vnu jSiobyrsgTa0doZDu+gVE/r9+Hy8tSLqhhJPihfXGOTQQxHpspOYP4mwXhggveZA IX2A8nmwbUA3mW5WtP4apSihzyJd6cldNdPANatC2UpoOXvT2CZLU/8v1T2QeiIE NohbuH9qN8MKX1QutLgO00R0vEYUlTVuKoOsrGU/gZ1MPfZgAf3j0rlpswaJaqsU SyeluQpTJKRz9RvOZAh5CcZZ5tMNJZpY1r+s+jukX3bue9JaIhL6zRQWEQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFMl8peq5q9jhuMrBVXOgQbO1r01+MB8GA1UdIwQY MBaAFHPGnQRYNQDF74ETaDEjdZPgu4bOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzhhZEJGZzFBTVh2Z1JOb01TTjFrLUM3aHM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82ZjZjZTItZTZlZS00ZTJhLTkwNWQt ZjljYjBhN2IyMDZjLzEveVh5bDZybXIyT0c0eXNGVmM2QkJzN1d2VFg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC82ZjZjZTItZTZlZS00ZTJhLTkwNWQtZjljYjBhN2IyMDZj LzEvYzhhZEJGZzFBTVh2Z1JOb01TTjFrLUM3aHM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYFKg0lgCAw DQYJKoZIhvcNAQELBQADggEBAHrjP5LYMgK4VNijp7ZHRRUq/+1AsE40ZaAiN6ye BM+xEwGwGCFfb6FX27WLRCAYDNtLGosNAgX+d7wk53K6DdDhsvgPjwoUmVtFmpG0 fq8pEziBh4+pgdOyn46pnPtm73cLCH3BPe4aExrjHlWfbD9ao8Vvp+N4UYqD1ND0 YKVPV5iiTPVX2OBlC/lCPZXCKecxtsPxvcqcIET0M+kGdS9iSnXxtNFy8WT5U8/3 jWPiMnkZwlTYwjN1bvUDl1VAeA31ald8f7gCdDm4CUn0n57uAmSiaCbnhJvH/5Bz G+1ibysfwPduvAp+iOqtPOnW4htJddUmXUArqH9kLx1EDbA= -----END CERTIFICATE-----Generated at Sun Jan 25 11:40:31 2026 by rpki-client