This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/ydBJrv1J8WXu09b0gE3RKMFJJZw.roa File: ydBJrv1J8WXu09b0gE3RKMFJJZw.roa (raw, json) Hash identifier: UtNlbFxymiQxdfO36y00lHkWca4MR7c4RSyUuZcyNnw= Subject key identifier: C9:D0:49:AE:FD:49:F1:65:EE:D3:D6:F4:80:4D:D1:28:C1:49:25:9C Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512 Certificate serial: 019BA3A936E9A89D7A959D9AFA2C69AF6863 Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/ydBJrv1J8WXu09b0gE3RKMFJJZw.roa Signing time: Fri 09 Jan 2026 16:48:54 +0000 ROA not before: Fri 09 Jan 2026 16:48:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200950 IP address blocks: 2a14:c380:360::/44 maxlen: 44 2a14:c380:700::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a3:a9:36:e9:a8:9d:7a:95:9d:9a:fa:2c:69:af:68:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512 Validity Not Before: Jan 9 16:48:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9d049aefd49f165eed3d6f4804dd128c149259c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:62:a5:13:11:09:ed:74:ae:bc:ab:e9:a6:2a: fb:ed:0c:e4:da:5e:8d:db:98:7f:7c:e2:03:9c:c6: b9:0e:ac:b7:1a:c1:0c:f2:ef:52:48:4b:8d:86:f8: 00:2b:cd:52:2b:07:d5:54:55:66:99:ca:9b:6a:f9: b7:bc:16:84:d2:b7:7b:a3:2f:2a:30:25:ad:ff:2c: 23:63:fd:f3:76:52:67:f7:00:b9:ff:8d:47:5e:5f: f8:d2:0e:38:1a:bc:2e:e7:6c:c8:40:e8:b0:d9:81: 6d:9d:b3:8a:55:8d:ea:c7:33:3d:42:a3:16:af:77: 8d:8e:d6:e4:ea:36:a4:f8:14:4a:40:7d:f5:f5:0c: eb:77:98:ec:01:15:45:d7:c2:74:6a:45:32:13:09: f8:2f:81:42:e6:af:49:01:51:5d:27:6a:b9:41:13: 9c:ed:f8:d8:63:65:96:76:03:1b:38:e3:1f:09:01: f5:7b:40:d7:f2:1b:5e:72:b4:8b:08:a1:3d:ad:12: d2:bf:63:8a:f8:5d:01:fa:b4:83:dc:32:e1:85:d9: 42:1d:4f:85:47:fb:58:58:67:51:40:e6:cc:79:d3: 8e:d9:8f:db:ee:90:55:58:cd:75:f4:8e:43:9a:05: ba:74:c2:17:45:64:c1:7c:66:2e:78:09:49:b9:57: cd:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:D0:49:AE:FD:49:F1:65:EE:D3:D6:F4:80:4D:D1:28:C1:49:25:9C X509v3 Authority Key Identifier: keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/ydBJrv1J8WXu09b0gE3RKMFJJZw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:c380:360::/44 2a14:c380:700::/40 Signature Algorithm: sha256WithRSAEncryption 31:36:f9:6d:55:70:06:f5:38:9d:8f:39:37:10:b4:31:fa:be: ab:52:e5:34:57:99:dc:96:1b:89:85:d8:b3:e7:5b:86:c9:61: 04:9b:b4:39:9a:9f:d3:26:aa:2e:f5:3a:68:3f:c0:f5:e2:34: 85:13:64:4f:73:50:ff:96:9e:a4:6f:e3:45:ad:53:e5:d1:2d: 87:4b:1e:4b:d5:87:da:67:f6:13:57:67:c8:2b:6f:79:59:69: e1:6f:a8:a8:99:d8:40:7b:49:ba:0c:94:d4:9c:e2:21:f4:98: c6:60:18:df:70:a8:4f:6c:75:b5:07:26:e7:48:bb:5b:c2:1e: 8a:ff:f1:d9:0f:fe:ae:7b:14:e4:eb:90:1e:8f:c2:ce:52:39: 1e:ae:2a:47:ed:bb:90:bc:44:eb:02:53:40:0c:3e:fa:44:45: 0e:af:cb:a7:5a:56:91:15:8a:1f:30:a1:89:2d:17:da:52:9b: 17:23:ec:34:07:d6:aa:dc:f9:fc:f7:e8:70:8c:e4:6b:95:34: d6:00:25:ee:cd:12:fe:49:09:9a:4c:b7:ff:24:a8:7d:79:e4: 25:d4:75:98:3f:ba:5e:52:03:e2:d0:0d:56:29:f2:f3:bc:b7: 48:d6:ba:83:f8:c5:b5:e0:8c:ab:ec:ea:c8:bb:47:dc:0d:e7: a3:f2:b8:4f -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgISAZujqTbpqJ16lZ2a+ixpr2hjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YjNkZTVmOWFkYjUwZmU0MWY2ZGM3OGZmZDBhMmM5MDg2 ZDI1MTIwHhcNMjYwMTA5MTY0ODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOWQwNDlhZWZkNDlmMTY1ZWVkM2Q2ZjQ4MDRkZDEyOGMxNDkyNTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2KlExEJ7XSuvKvppir77Qzk2l6N 25h/fOIDnMa5Dqy3GsEM8u9SSEuNhvgAK81SKwfVVFVmmcqbavm3vBaE0rd7oy8q MCWt/ywjY/3zdlJn9wC5/41HXl/40g44Grwu52zIQOiw2YFtnbOKVY3qxzM9QqMW r3eNjtbk6jak+BRKQH319Qzrd5jsARVF18J0akUyEwn4L4FC5q9JAVFdJ2q5QROc 7fjYY2WWdgMbOOMfCQH1e0DX8htecrSLCKE9rRLSv2OK+F0B+rSD3DLhhdlCHU+F R/tYWGdRQObMedOO2Y/b7pBVWM119I5DmgW6dMIXRWTBfGYueAlJuVfNbQIDAQAB o4ICFDCCAhAwHQYDVR0OBBYEFMnQSa79SfFl7tPW9IBN0SjBSSWcMB8GA1UdIwQY MBaAFFiz3l+a21D+QfbceP/QoskIbSUSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUt NTMyMWQ2OWQ5NzlkLzEveWRCSnJ2MUo4V1h1MDliMGdFM1JLTUZKSlp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUtNTMyMWQ2OWQ5Nzlk LzEvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwcEKhTDgANg AwYAKhTDgAcwDQYJKoZIhvcNAQELBQADggEBADE2+W1VcAb1OJ2POTcQtDH6vqtS 5TRXmdyWG4mF2LPnW4bJYQSbtDman9Mmqi71Omg/wPXiNIUTZE9zUP+WnqRv40Wt U+XRLYdLHkvVh9pn9hNXZ8grb3lZaeFvqKiZ2EB7SboMlNSc4iH0mMZgGN9wqE9s dbUHJudIu1vCHor/8dkP/q57FOTrkB6Pws5SOR6uKkftu5C8ROsCU0AMPvpERQ6v y6daVpEVih8woYktF9pSmxcj7DQH1qrc+fz36HCM5GuVNNYAJe7NEv5JCZpMt/8k qH155CXUdZg/ul5SA+LQDVYp8vO8t0jWuoP4xbXgjKvs6si7R9wN56PyuE8= -----END CERTIFICATE-----Generated at Sun Jan 25 14:35:31 2026 by rpki-client