This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/58dc53-8188-4e5a-8a6e-a766829706d5/1/jyKuE2XBeuJrzXa_q0tmSaVEGSw.roa File: jyKuE2XBeuJrzXa_q0tmSaVEGSw.roa (raw, json) Hash identifier: /T26sfmgIuFdLLHz0t8HyV2eonc//D9WC+03dI2ySjQ= Subject key identifier: 8F:22:AE:13:65:C1:7A:E2:6B:CD:76:BF:AB:4B:66:49:A5:44:19:2C Certificate issuer: /CN=6290e6b0cdd7f4986be518d890a8493153504eda Certificate serial: 019BC78680B332108B7BAC2609F972CF420D Authority key identifier: 62:90:E6:B0:CD:D7:F4:98:6B:E5:18:D8:90:A8:49:31:53:50:4E:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YpDmsM3X9Jhr5RjYkKhJMVNQTto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/58dc53-8188-4e5a-8a6e-a766829706d5/1/jyKuE2XBeuJrzXa_q0tmSaVEGSw.roa Signing time: Fri 16 Jan 2026 15:57:19 +0000 ROA not before: Fri 16 Jan 2026 15:57:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202141 IP address blocks: 2001:678:11a8::/48 maxlen: 48 2001:678:11ac::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/58dc53-8188-4e5a-8a6e-a766829706d5/1/YpDmsM3X9Jhr5RjYkKhJMVNQTto.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/58dc53-8188-4e5a-8a6e-a766829706d5/1/YpDmsM3X9Jhr5RjYkKhJMVNQTto.mft rsync://rpki.ripe.net/repository/DEFAULT/YpDmsM3X9Jhr5RjYkKhJMVNQTto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c7:86:80:b3:32:10:8b:7b:ac:26:09:f9:72:cf:42:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6290e6b0cdd7f4986be518d890a8493153504eda Validity Not Before: Jan 16 15:57:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8f22ae1365c17ae26bcd76bfab4b6649a544192c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:da:3c:a4:65:f8:3d:96:6b:d9:f9:5b:75:58: 7f:17:7a:b9:cf:ae:82:a3:21:42:87:ff:f5:94:2b: 24:89:5b:4b:af:3a:a7:74:7b:22:53:00:15:46:d1: 04:d3:91:fe:b1:27:5e:5e:52:27:6d:eb:b6:7e:45: ec:87:97:13:f7:c6:6c:f9:a8:0e:32:70:9e:2f:09: ae:ec:4a:e0:a3:57:36:71:bc:83:d6:3a:7a:79:40: dc:63:21:4c:85:50:d1:ea:6f:c9:a3:61:9c:3d:7d: 27:e7:4f:10:e6:64:97:6c:f5:8c:b7:49:5b:a9:57: 1c:9e:b6:88:be:e2:27:61:8d:cb:27:c8:fe:0c:47: 39:86:04:43:3b:2f:fe:d9:03:bf:c6:b5:f3:c8:40: f1:f5:a3:12:ec:a0:24:a7:a8:c0:b3:11:e2:f3:b8: 42:2a:7d:3d:09:78:b7:a8:32:36:61:a3:49:1a:a0: f2:a2:9c:f2:38:2b:bf:ad:7a:9c:0f:7b:a5:b6:6b: 8c:15:e2:8e:58:e0:c3:66:1f:61:a8:d7:4c:2f:57: 12:a1:56:69:94:54:31:f8:d1:52:89:4a:ac:fe:f4: 13:01:4f:f7:e2:04:d3:77:78:09:05:c1:58:84:33: 31:12:dc:9a:7b:8b:38:49:2b:86:ce:51:87:9d:88: 68:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:22:AE:13:65:C1:7A:E2:6B:CD:76:BF:AB:4B:66:49:A5:44:19:2C X509v3 Authority Key Identifier: keyid:62:90:E6:B0:CD:D7:F4:98:6B:E5:18:D8:90:A8:49:31:53:50:4E:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YpDmsM3X9Jhr5RjYkKhJMVNQTto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/58dc53-8188-4e5a-8a6e-a766829706d5/1/jyKuE2XBeuJrzXa_q0tmSaVEGSw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/58dc53-8188-4e5a-8a6e-a766829706d5/1/YpDmsM3X9Jhr5RjYkKhJMVNQTto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:11a8::/48 2001:678:11ac::/48 Signature Algorithm: sha256WithRSAEncryption c0:2e:a3:e8:6a:33:7e:4a:96:2c:2e:9d:d8:ac:c8:04:8a:3a: 0f:e2:23:a4:9d:94:ff:a1:a9:ff:fa:91:57:39:85:0f:f0:1e: a8:e7:ad:c6:89:7f:79:ff:9f:ea:39:98:49:df:86:a2:79:19: b1:05:16:0a:f9:79:c2:d9:9e:47:3d:6d:0b:ec:47:c7:93:16: cc:c9:45:a9:7e:2c:04:cf:0c:f9:0b:75:17:a1:d4:b6:c4:5d: ec:b6:4a:4a:9e:50:5d:67:2c:95:9e:32:5c:6e:e0:43:43:63: e3:1c:ee:c2:61:f9:2b:64:a6:3a:f4:fb:43:58:9c:bd:97:33: 2f:2d:c1:43:b0:32:ec:4d:ee:78:2e:95:e8:3f:90:5f:f4:2b: d4:be:4e:3a:f3:27:70:58:12:38:ef:c7:1c:91:23:a9:4f:eb: bc:46:4e:99:8e:fa:d5:83:5d:d8:31:b1:ec:cd:f8:ea:b7:ba: 7e:d9:bb:7b:9d:ff:1b:c1:4c:ec:6c:cf:02:57:6e:75:2a:8e: 77:e3:43:09:d0:80:f5:26:0a:5e:03:3c:a9:81:18:84:e9:95: ba:8c:0a:55:28:68:bd:a7:b5:3a:92:c0:23:a3:1c:90:67:78: 83:b9:5c:c8:a0:b3:e1:ea:84:ef:58:ff:e2:47:37:33:8d:b8: 28:e1:d7:86 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZvHhoCzMhCLe6wmCflyz0INMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyOTBlNmIwY2RkN2Y0OTg2YmU1MThkODkwYTg0OTMxNTM1 MDRlZGEwHhcNMjYwMTE2MTU1NzE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZjIyYWUxMzY1YzE3YWUyNmJjZDc2YmZhYjRiNjY0OWE1NDQxOTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNo8pGX4PZZr2flbdVh/F3q5z66C oyFCh//1lCskiVtLrzqndHsiUwAVRtEE05H+sSdeXlInbeu2fkXsh5cT98Zs+agO MnCeLwmu7Ergo1c2cbyD1jp6eUDcYyFMhVDR6m/Jo2GcPX0n508Q5mSXbPWMt0lb qVccnraIvuInYY3LJ8j+DEc5hgRDOy/+2QO/xrXzyEDx9aMS7KAkp6jAsxHi87hC Kn09CXi3qDI2YaNJGqDyopzyOCu/rXqcD3ultmuMFeKOWODDZh9hqNdML1cSoVZp lFQx+NFSiUqs/vQTAU/34gTTd3gJBcFYhDMxEtyae4s4SSuGzlGHnYhoBQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFI8irhNlwXria812v6tLZkmlRBksMB8GA1UdIwQY MBaAFGKQ5rDN1/SYa+UY2JCoSTFTUE7aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXBEbXNNM1g5SmhyNVJqWWtLaEpNVk5RVHRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi81OGRjNTMtODE4OC00ZTVhLThhNmUt YTc2NjgyOTcwNmQ1LzEvanlLdUUyWEJldUpyelhhX3EwdG1TYVZFR1N3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi81OGRjNTMtODE4OC00ZTVhLThhNmUtYTc2NjgyOTcwNmQ1 LzEvWXBEbXNNM1g5SmhyNVJqWWtLaEpNVk5RVHRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAIAEGeBGo AwcAIAEGeBGsMA0GCSqGSIb3DQEBCwUAA4IBAQDALqPoajN+SpYsLp3YrMgEijoP 4iOknZT/oan/+pFXOYUP8B6o563GiX95/5/qOZhJ34aieRmxBRYK+XnC2Z5HPW0L 7EfHkxbMyUWpfiwEzwz5C3UXodS2xF3stkpKnlBdZyyVnjJcbuBDQ2PjHO7CYfkr ZKY69PtDWJy9lzMvLcFDsDLsTe54LpXoP5Bf9CvUvk468ydwWBI478cckSOpT+u8 Rk6ZjvrVg13YMbHszfjqt7p+2bt7nf8bwUzsbM8CV251Ko5340MJ0ID1JgpeAzyp gRiE6ZW6jApVKGi9p7U6ksAjoxyQZ3iDuVzIoLPh6oTvWP/iRzczjbgo4deG -----END CERTIFICATE-----Generated at Mon Jan 26 02:01:32 2026 by rpki-client