This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/YUX5rzp00o400A0WbJALi9ABx8I.roa File: YUX5rzp00o400A0WbJALi9ABx8I.roa (raw, json) Hash identifier: x86fl/4qgkCI4hFoudrfc/jIoc01pQrYzS8Cq8H366U= Subject key identifier: 61:45:F9:AF:3A:74:D2:8E:34:D0:0D:16:6C:90:0B:8B:D0:01:C7:C2 Certificate issuer: /CN=d6a553612d94b091b3659b2120bc8efb260e7d30 Certificate serial: 019B79ECE6043D5DAAC04F530468C7D6BE21 Authority key identifier: D6:A5:53:61:2D:94:B0:91:B3:65:9B:21:20:BC:8E:FB:26:0E:7D:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qVTYS2UsJGzZZshILyO-yYOfTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/YUX5rzp00o400A0WbJALi9ABx8I.roa Signing time: Thu 01 Jan 2026 14:18:47 +0000 ROA not before: Thu 01 Jan 2026 14:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213708 IP address blocks: 2a14:8280::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.mft rsync://rpki.ripe.net/repository/DEFAULT/1qVTYS2UsJGzZZshILyO-yYOfTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:e6:04:3d:5d:aa:c0:4f:53:04:68:c7:d6:be:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6a553612d94b091b3659b2120bc8efb260e7d30 Validity Not Before: Jan 1 14:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6145f9af3a74d28e34d00d166c900b8bd001c7c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:3e:ff:5a:4d:8b:d6:57:38:ba:1d:49:66:82: 7c:23:ee:5f:3a:5c:37:7f:cf:75:3f:3a:e3:0d:61: 9f:6c:04:1a:47:69:f7:54:ba:86:da:0c:ca:aa:17: 5f:73:30:73:06:81:db:70:f3:b6:7e:16:30:96:47: e1:4f:c3:50:9f:4d:1b:f6:76:ee:9c:65:c3:82:f2: 79:34:8a:39:4b:7c:3d:b4:02:59:21:00:32:fe:73: 51:f8:ea:ee:eb:f1:4a:56:cc:a2:cf:10:4e:5a:a3: be:a2:64:29:c8:a2:bf:31:09:05:3e:8d:88:c3:a3: 33:85:26:b5:b9:bd:a4:2b:13:1f:26:09:5a:f1:98: fc:d6:a7:20:fb:fc:46:41:dc:d0:79:58:72:00:ac: b6:28:6b:2c:82:7e:ac:73:61:22:54:5b:63:63:5d: c8:6b:dc:cf:ee:8b:ea:fd:79:ff:24:de:44:54:4e: d5:a0:47:3b:75:2a:9e:a4:7d:49:43:17:23:be:03: 7d:b1:26:7a:b8:7b:3f:7c:a7:30:5c:cd:80:7e:8d: 52:04:25:ed:9d:02:53:fe:7f:ea:04:2b:78:d7:f0: 7e:1a:8a:e9:24:9f:c9:9d:1d:bd:77:34:65:85:48: bc:4b:20:d9:ca:ac:78:ea:02:3e:3a:af:b6:f2:4a: 6c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:45:F9:AF:3A:74:D2:8E:34:D0:0D:16:6C:90:0B:8B:D0:01:C7:C2 X509v3 Authority Key Identifier: keyid:D6:A5:53:61:2D:94:B0:91:B3:65:9B:21:20:BC:8E:FB:26:0E:7D:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qVTYS2UsJGzZZshILyO-yYOfTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/YUX5rzp00o400A0WbJALi9ABx8I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:8280::/29 Signature Algorithm: sha256WithRSAEncryption 44:fc:5c:da:6d:8e:f8:67:8e:b7:5f:90:df:ac:d2:80:56:60: b0:0a:04:71:97:80:0f:a4:0d:b7:ce:2f:df:46:dc:fb:8c:88: 05:ca:22:46:cb:5a:1e:19:2a:8a:9d:9a:e6:07:a5:d6:57:74: 0b:20:c9:04:a1:53:d0:c2:8e:17:b8:5a:db:88:75:d3:89:df: 45:63:90:da:90:fb:73:d1:b1:25:90:fc:4f:79:94:95:d1:cb: b1:a9:ff:cf:1c:aa:34:ee:0b:d3:40:6a:fa:44:16:19:c7:a3: ed:45:a0:3f:29:f5:c7:29:b6:e5:fb:0d:cc:78:8f:56:be:c7: 1b:22:33:36:7f:c7:b5:c7:c5:d2:d1:86:56:85:40:11:81:a3: 63:aa:60:9a:fd:10:83:f5:4f:21:ea:48:4e:f3:a4:5e:ce:64: 69:4a:25:6e:38:1a:1f:96:00:e3:a1:57:aa:60:d7:0b:16:e4: bb:2a:90:48:44:26:60:0e:2b:56:8a:aa:cc:52:de:80:5c:51: dd:17:6b:7b:33:a4:8c:4a:d0:d0:b2:1b:2f:58:e5:5c:66:4a: 08:28:f1:7d:36:09:4a:00:64:ff:5b:1e:1a:7b:cc:e9:07:da: 29:2f:e5:10:ba:a2:a6:79:d6:07:98:4d:6e:2b:b3:6d:19:cd: 15:ef:df:8e -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt57OYEPV2qwE9TBGjH1r4hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2YTU1MzYxMmQ5NGIwOTFiMzY1OWIyMTIwYmM4ZWZiMjYw ZTdkMzAwHhcNMjYwMTAxMTQxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTQ1ZjlhZjNhNzRkMjhlMzRkMDBkMTY2YzkwMGI4YmQwMDFjN2MyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9j7/Wk2L1lc4uh1JZoJ8I+5fOlw3 f891PzrjDWGfbAQaR2n3VLqG2gzKqhdfczBzBoHbcPO2fhYwlkfhT8NQn00b9nbu nGXDgvJ5NIo5S3w9tAJZIQAy/nNR+Oru6/FKVsyizxBOWqO+omQpyKK/MQkFPo2I w6MzhSa1ub2kKxMfJgla8Zj81qcg+/xGQdzQeVhyAKy2KGssgn6sc2EiVFtjY13I a9zP7ovq/Xn/JN5EVE7VoEc7dSqepH1JQxcjvgN9sSZ6uHs/fKcwXM2Afo1SBCXt nQJT/n/qBCt41/B+GorpJJ/JnR29dzRlhUi8SyDZyqx46gI+Oq+28kps+wIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFGFF+a86dNKONNANFmyQC4vQAcfCMB8GA1UdIwQY MBaAFNalU2EtlLCRs2WbISC8jvsmDn0wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXFWVFlTMlVzSkd6WlpzaElMeU8teVlPZlRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8xODhmY2QtZDY4OS00MzZkLWE2ODQt ZTA1OTA2Y2I2OTQ4LzEvWVVYNXJ6cDAwbzQwMEEwV2JKQUxpOUFCeDhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi8xODhmY2QtZDY4OS00MzZkLWE2ODQtZTA1OTA2Y2I2OTQ4 LzEvMXFWVFlTMlVzSkd6WlpzaElMeU8teVlPZlRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhSCgDAN BgkqhkiG9w0BAQsFAAOCAQEARPxc2m2O+GeOt1+Q36zSgFZgsAoEcZeAD6QNt84v 30bc+4yIBcoiRstaHhkqip2a5gel1ld0CyDJBKFT0MKOF7ha24h104nfRWOQ2pD7 c9GxJZD8T3mUldHLsan/zxyqNO4L00Bq+kQWGcej7UWgPyn1xym25fsNzHiPVr7H GyIzNn/HtcfF0tGGVoVAEYGjY6pgmv0Qg/VPIepITvOkXs5kaUolbjgaH5YA46FX qmDXCxbkuyqQSEQmYA4rVoqqzFLegFxR3RdrezOkjErQ0LIbL1jlXGZKCCjxfTYJ SgBk/1seGnvM6QfaKS/lELqipnnWB5hNbiuzbRnNFe/fjg== -----END CERTIFICATE-----Generated at Mon Jan 26 08:37:31 2026 by rpki-client