This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/YMqk5erxqcBl_rQ1UMg8ywZDz0M.roa File: YMqk5erxqcBl_rQ1UMg8ywZDz0M.roa (raw, json) Hash identifier: n9uoqKCqG6Ob4UlpegclYiabrSTMSzoqIVhaQf1T96Q= Subject key identifier: 60:CA:A4:E5:EA:F1:A9:C0:65:FE:B4:35:50:C8:3C:CB:06:43:CF:43 Certificate issuer: /CN=24147c8b3f37850e9f9074993845c4e069f8efe2 Certificate serial: 019B7C7F0E675F073D19FA88DFC857F80A3D Authority key identifier: 24:14:7C:8B:3F:37:85:0E:9F:90:74:99:38:45:C4:E0:69:F8:EF:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/YMqk5erxqcBl_rQ1UMg8ywZDz0M.roa Signing time: Fri 02 Jan 2026 02:17:40 +0000 ROA not before: Fri 02 Jan 2026 02:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41860 IP address blocks: 2a03:8880::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:0e:67:5f:07:3d:19:fa:88:df:c8:57:f8:0a:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24147c8b3f37850e9f9074993845c4e069f8efe2 Validity Not Before: Jan 2 02:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=60caa4e5eaf1a9c065feb43550c83ccb0643cf43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:91:40:65:6e:dc:16:4e:73:44:68:96:f6:2c: 75:a3:45:6e:4d:71:87:d6:e5:77:a9:b3:7d:e3:78: 19:51:51:3a:cf:3b:11:4d:f4:6e:05:90:17:fe:8e: 90:57:e6:54:b9:18:3f:9f:b3:4f:90:ce:cc:88:e4: 0f:e6:4f:1c:67:0d:c6:c4:f7:3f:a2:a0:55:7a:f8: 4f:e5:a6:52:44:2f:1f:e3:a5:50:cd:b3:2c:58:8a: af:7b:97:5b:47:58:c9:73:8d:75:87:ae:d7:e3:17: 21:00:a1:b3:20:cd:7e:7f:26:fb:d2:51:ea:c9:a1: 3b:ee:5c:45:e7:61:0e:fd:e7:fa:87:be:7e:7d:24: 8e:a2:e2:af:30:80:bd:8b:86:3a:f6:75:0f:ee:91: b6:26:87:2c:cb:35:ed:e1:b0:df:33:8d:fd:ad:d3: db:59:b5:1a:55:bc:1f:58:9b:86:cf:c4:91:45:a8: b6:22:56:f1:9f:a8:e6:54:99:6c:95:ce:56:e1:8d: a7:66:05:8f:40:e1:9e:92:88:4e:36:d9:9c:17:08: e7:df:37:36:f3:05:86:f3:80:37:5a:13:51:50:56: cb:10:db:69:e0:54:67:91:31:d2:6b:5b:72:59:1e: 3b:dc:04:d2:e6:84:f4:2a:67:10:58:ce:5d:10:e3: 55:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:CA:A4:E5:EA:F1:A9:C0:65:FE:B4:35:50:C8:3C:CB:06:43:CF:43 X509v3 Authority Key Identifier: keyid:24:14:7C:8B:3F:37:85:0E:9F:90:74:99:38:45:C4:E0:69:F8:EF:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/YMqk5erxqcBl_rQ1UMg8ywZDz0M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:8880::/32 Signature Algorithm: sha256WithRSAEncryption 55:28:09:0d:68:6d:b3:b2:56:9c:ba:2e:95:65:78:3d:73:64: e1:77:75:3c:5d:27:0e:fe:22:94:60:56:d6:74:4c:53:14:7a: f1:a3:8b:b9:a1:8d:6f:fd:8d:fc:63:03:c9:aa:4a:44:1b:e0: ee:25:0b:81:c1:33:a2:c5:ab:0c:d3:b1:3f:d6:98:49:e9:11: 30:5f:3b:38:ac:08:03:03:15:3f:c3:51:9c:1e:4e:9c:bd:df: c7:26:85:d7:52:20:31:f1:aa:f6:45:48:34:56:7d:42:22:9b: 2d:5f:7a:e2:a4:3c:9c:16:1b:59:ef:99:93:82:36:93:8b:81: 98:79:f0:29:3d:78:8d:37:01:67:88:c6:e7:05:ca:c9:f8:d7: 9c:73:aa:e2:7f:64:77:37:44:e5:f8:66:01:83:c3:c8:63:9f: 7b:2a:74:3c:72:3f:da:f5:58:fa:e9:1d:6b:d1:a5:72:c8:36: 1d:3d:b2:2d:ee:27:0d:d1:ff:15:61:76:a7:89:6c:cd:11:6f: 6c:b0:fd:77:9d:cb:b4:08:37:24:c8:49:cf:06:66:4d:81:41: 75:e0:38:82:8c:4f:2d:82:8b:36:0c:31:4a:1c:db:b6:e9:61: 78:2f:6e:9b:27:6b:77:b8:9a:23:81:b4:1c:b5:36:3e:e4:45: 1c:bc:0c:9a -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt8fw5nXwc9GfqI38hX+Ao9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0MTQ3YzhiM2YzNzg1MGU5ZjkwNzQ5OTM4NDVjNGUwNjlm OGVmZTIwHhcNMjYwMTAyMDIxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MGNhYTRlNWVhZjFhOWMwNjVmZWI0MzU1MGM4M2NjYjA2NDNjZjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZFAZW7cFk5zRGiW9ix1o0VuTXGH 1uV3qbN943gZUVE6zzsRTfRuBZAX/o6QV+ZUuRg/n7NPkM7MiOQP5k8cZw3GxPc/ oqBVevhP5aZSRC8f46VQzbMsWIqve5dbR1jJc411h67X4xchAKGzIM1+fyb70lHq yaE77lxF52EO/ef6h75+fSSOouKvMIC9i4Y69nUP7pG2JocsyzXt4bDfM439rdPb WbUaVbwfWJuGz8SRRai2Ilbxn6jmVJlslc5W4Y2nZgWPQOGekohONtmcFwjn3zc2 8wWG84A3WhNRUFbLENtp4FRnkTHSa1tyWR473ATS5oT0KmcQWM5dEONVjQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFGDKpOXq8anAZf60NVDIPMsGQ89DMB8GA1UdIwQY MBaAFCQUfIs/N4UOn5B0mThFxOBp+O/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkJSOGl6ODNoUTZma0hTWk9FWEU0R240Ny1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS84ZGE1ZmUtZjQwNS00Y2UwLWIyZDEt YjM1MzViNGNhNTBmLzEvWU1xazVlcnhxY0JsX3JRMVVNZzh5d1pEejBNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS84ZGE1ZmUtZjQwNS00Y2UwLWIyZDEtYjM1MzViNGNhNTBm LzEvSkJSOGl6ODNoUTZma0hTWk9FWEU0R240Ny1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgOIgDAN BgkqhkiG9w0BAQsFAAOCAQEAVSgJDWhts7JWnLoulWV4PXNk4Xd1PF0nDv4ilGBW 1nRMUxR68aOLuaGNb/2N/GMDyapKRBvg7iULgcEzosWrDNOxP9aYSekRMF87OKwI AwMVP8NRnB5OnL3fxyaF11IgMfGq9kVINFZ9QiKbLV964qQ8nBYbWe+Zk4I2k4uB mHnwKT14jTcBZ4jG5wXKyfjXnHOq4n9kdzdE5fhmAYPDyGOfeyp0PHI/2vVY+ukd a9Glcsg2HT2yLe4nDdH/FWF2p4lszRFvbLD9d53LtAg3JMhJzwZmTYFBdeA4goxP LYKLNgwxShzbtulheC9umydrd7iaI4G0HLU2PuRFHLwMmg== -----END CERTIFICATE-----Generated at Sun Jan 25 19:39:37 2026 by rpki-client