This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/yFX62ci1qBUDucLwJ8wtZh6slII.roa
File: yFX62ci1qBUDucLwJ8wtZh6slII.roa (raw, json)
Hash identifier: jSh0LUqy7JqqicLthv+W+VrwTZt3JtqwoMS9ylaeVMQ=
Subject key identifier: C8:55:FA:D9:C8:B5:A8:15:03:B9:C2:F0:27:CC:2D:66:1E:AC:94:82
Certificate issuer: /CN=bdd768249d73658071f9345603939ab9d620c35b
Certificate serial: 019B775964B116F54B33C9BF158A310D527B
Authority key identifier: BD:D7:68:24:9D:73:65:80:71:F9:34:56:03:93:9A:B9:D6:20:C3:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vddoJJ1zZYBx-TRWA5OaudYgw1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/yFX62ci1qBUDucLwJ8wtZh6slII.roa
Signing time: Thu 01 Jan 2026 02:18:25 +0000
ROA not before: Thu 01 Jan 2026 02:18:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212913
IP address blocks: 2001:67c:af4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/vddoJJ1zZYBx-TRWA5OaudYgw1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:59:64:b1:16:f5:4b:33:c9:bf:15:8a:31:0d:52:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd768249d73658071f9345603939ab9d620c35b
Validity
Not Before: Jan 1 02:18:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c855fad9c8b5a81503b9c2f027cc2d661eac9482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:29:39:77:e1:59:32:f5:82:c2:d6:59:a2:4f:
db:fb:90:b2:7a:fa:ce:3c:e7:c3:06:21:0b:28:06:
26:bc:71:ed:6f:c9:d1:fc:fa:12:f7:bd:21:cf:e3:
6b:5e:78:22:1c:57:77:b7:80:50:68:61:d6:6e:0c:
71:a9:94:a3:1f:7f:0b:99:f9:11:66:25:ad:9a:e9:
08:de:c7:67:a6:79:06:d3:87:c6:9c:08:cf:e7:7c:
24:71:86:ed:9a:f4:40:7f:c9:2c:14:77:96:c1:05:
c6:35:90:71:17:40:4e:75:f5:66:7f:8d:25:6c:39:
12:df:e4:0f:95:e4:a5:8f:1c:df:5d:1d:96:01:c2:
f0:fd:13:7d:ff:b4:15:47:0d:aa:b3:9c:e0:f3:0a:
ab:e4:e6:4d:fd:9b:f6:bc:66:de:e6:8c:eb:58:4f:
dc:71:d1:6d:d8:8d:e2:4e:8a:19:91:11:cf:65:42:
98:33:e9:a4:19:a5:f2:dc:a1:e3:8a:57:1d:bf:a2:
fc:22:71:b2:52:76:f8:c8:6c:00:a5:cd:46:e4:89:
76:6e:71:50:96:dd:82:1d:67:79:19:61:5b:99:ff:
53:27:54:13:10:1e:9d:9f:82:11:8b:ca:4c:be:e8:
e3:42:5d:66:53:53:80:45:97:e5:ee:a7:47:b3:08:
74:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:55:FA:D9:C8:B5:A8:15:03:B9:C2:F0:27:CC:2D:66:1E:AC:94:82
X509v3 Authority Key Identifier:
keyid:BD:D7:68:24:9D:73:65:80:71:F9:34:56:03:93:9A:B9:D6:20:C3:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vddoJJ1zZYBx-TRWA5OaudYgw1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/yFX62ci1qBUDucLwJ8wtZh6slII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:af4::/48
Signature Algorithm: sha256WithRSAEncryption
64:2f:5a:14:3a:53:fb:38:7a:f6:fe:f2:54:f1:09:56:3e:9c:
d0:0f:4a:6d:f1:81:88:4e:41:d7:71:a6:b4:99:75:1c:fb:4b:
74:08:8e:11:da:07:89:c5:7c:46:81:66:c9:68:6a:7e:7e:7d:
b3:bd:92:02:a1:81:b2:00:7c:26:0d:bd:13:a2:db:16:94:15:
32:97:af:d0:77:db:4e:0a:10:c6:f1:79:f0:95:17:df:4a:98:
77:65:30:fd:b9:88:20:b2:60:59:02:f8:8f:2d:82:76:d7:29:
3e:c5:91:b5:56:ac:00:e2:aa:f2:1b:80:3e:29:2d:56:41:f6:
56:22:1d:0c:ed:ca:08:ea:d9:e2:db:13:ef:17:7a:e0:d1:28:
0d:94:58:4d:96:bb:7e:eb:83:21:22:00:ce:8a:c9:47:44:ec:
e7:89:58:73:2c:af:0f:a2:1b:50:a3:10:89:bd:e2:2a:d1:32:
cf:6d:2f:39:f5:11:63:a2:05:60:a3:73:6a:89:86:b8:45:43:
2f:ac:af:40:86:3b:97:29:45:6b:6d:09:96:ae:9f:cb:4f:6e:
e7:fb:b1:f7:b9:bf:5c:cb:f1:00:4b:00:98:b6:ab:91:09:90:
08:fb:87:25:6d:32:6c:90:f9:4b:6c:c6:50:bb:37:79:f8:0d:
06:d9:3c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:12:40 2026 by rpki-client