This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/yFDUf6JsuvyfXz0jEUOsaieGxCw.roa File: yFDUf6JsuvyfXz0jEUOsaieGxCw.roa (raw, json) Hash identifier: zP6gz/6pp44KQYvi0+M6T/CexJqf4xQ7LrlyWEsXUQw= Subject key identifier: C8:50:D4:7F:A2:6C:BA:FC:9F:5F:3D:23:11:43:AC:6A:27:86:C4:2C Certificate issuer: /CN=bbe2cc20d69b30dde18ec0d002ce2f9149bfb06d Certificate serial: 019B7E37703B672578F6E188D06137944BF1 Authority key identifier: BB:E2:CC:20:D6:9B:30:DD:E1:8E:C0:D0:02:CE:2F:91:49:BF:B0:6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/yFDUf6JsuvyfXz0jEUOsaieGxCw.roa Signing time: Fri 02 Jan 2026 10:18:40 +0000 ROA not before: Fri 02 Jan 2026 10:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215138 IP address blocks: 2001:678:450::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.crl rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:70:3b:67:25:78:f6:e1:88:d0:61:37:94:4b:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbe2cc20d69b30dde18ec0d002ce2f9149bfb06d Validity Not Before: Jan 2 10:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c850d47fa26cbafc9f5f3d231143ac6a2786c42c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:de:f0:59:e5:e6:e1:ec:23:f0:b8:65:c7:eb: 7f:d9:47:73:60:58:00:c9:24:03:e4:0f:87:84:dc: f2:c4:10:82:aa:31:64:db:8e:20:d5:bb:77:ca:45: be:c8:a6:c7:ee:85:b4:5c:3c:cb:d0:7c:a6:9f:6b: 56:3e:43:f7:3d:7d:55:4b:43:f5:bf:fe:12:1e:42: 64:1f:96:45:38:5f:92:ed:a4:08:c1:72:7b:cc:10: e0:33:ae:4f:ac:b5:a4:fb:6e:48:90:63:97:85:e2: 95:2e:18:4e:45:1e:10:ce:92:f2:a1:48:10:de:39: 9f:c9:6a:2f:b8:57:30:bb:36:0b:b4:ae:2f:28:65: 7c:b8:43:e7:6f:f2:0c:53:25:81:6b:d2:87:9d:f9: 18:b8:a2:59:e8:b8:2b:d5:37:5e:9f:84:b5:e9:0c: 46:a7:e4:9c:f9:ea:e8:08:af:3f:23:04:81:38:c0: 83:a8:72:5c:bb:56:8e:ea:f7:b6:cd:b1:ef:b2:1a: 27:9c:28:05:a3:06:94:93:76:84:61:0e:2e:96:da: de:d4:64:66:d7:d3:b0:4a:cd:b1:9c:c5:4d:28:a8: 8c:4b:55:6b:84:c9:ef:e7:ce:0b:c0:f1:75:a4:21: 0a:89:2d:43:70:4d:bf:21:70:de:72:44:69:d1:05: aa:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:50:D4:7F:A2:6C:BA:FC:9F:5F:3D:23:11:43:AC:6A:27:86:C4:2C X509v3 Authority Key Identifier: keyid:BB:E2:CC:20:D6:9B:30:DD:E1:8E:C0:D0:02:CE:2F:91:49:BF:B0:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/yFDUf6JsuvyfXz0jEUOsaieGxCw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:450::/48 Signature Algorithm: sha256WithRSAEncryption 2b:c1:b7:6f:93:6c:9e:28:53:a9:10:8b:f4:22:14:c4:46:13: d2:ed:67:50:33:4b:3f:16:56:89:8c:80:37:96:64:27:1d:1e: 44:0e:92:f4:58:0f:2c:54:c6:29:df:de:96:56:81:4a:bb:ba: da:7a:c4:52:47:85:6d:69:9c:ed:b4:ac:52:64:00:52:23:63: e7:22:8d:c4:93:c2:c0:be:48:14:fa:1a:69:9f:15:7a:7b:d2: fd:d0:fe:d7:bf:f2:a1:1d:3b:98:89:86:e7:65:97:88:cd:8c: 64:52:32:64:fd:25:26:56:c1:6b:94:d4:16:f7:82:0a:8e:57: 75:49:37:5d:8c:c6:b0:94:9e:46:a6:35:4a:68:4e:c4:74:3d: 35:31:b6:aa:ce:75:c3:a3:70:75:34:79:61:ea:32:5a:a4:08: 47:ec:c3:68:e1:f0:42:58:72:65:24:5b:99:e3:ef:94:05:e8: ab:23:bf:81:e1:67:cb:38:5f:2a:7d:39:04:f5:48:ba:d1:89: 1f:f1:5d:91:e2:e6:bb:8d:6c:db:a0:38:35:ef:83:65:59:5f: ca:5b:e5:a5:f7:c0:a0:81:9d:fe:94:38:03:15:1a:c2:20:48: 8e:7d:9e:a2:a0:05:23:9e:75:a8:10:8e:d3:95:9b:27:fe:ee: b8:a1:c1:eb -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+N3A7ZyV49uGI0GE3lEvxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZTJjYzIwZDY5YjMwZGRlMThlYzBkMDAyY2UyZjkxNDli ZmIwNmQwHhcNMjYwMTAyMTAxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODUwZDQ3ZmEyNmNiYWZjOWY1ZjNkMjMxMTQzYWM2YTI3ODZjNDJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3t7wWeXm4ewj8Lhlx+t/2UdzYFgA ySQD5A+HhNzyxBCCqjFk244g1bt3ykW+yKbH7oW0XDzL0Hymn2tWPkP3PX1VS0P1 v/4SHkJkH5ZFOF+S7aQIwXJ7zBDgM65PrLWk+25IkGOXheKVLhhORR4QzpLyoUgQ 3jmfyWovuFcwuzYLtK4vKGV8uEPnb/IMUyWBa9KHnfkYuKJZ6Lgr1Tden4S16QxG p+Sc+eroCK8/IwSBOMCDqHJcu1aO6ve2zbHvshonnCgFowaUk3aEYQ4ultre1GRm 19OwSs2xnMVNKKiMS1VrhMnv584LwPF1pCEKiS1DcE2/IXDeckRp0QWqkQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMhQ1H+ibLr8n189IxFDrGonhsQsMB8GA1UdIwQY MBaAFLvizCDWmzDd4Y7A0ALOL5FJv7BtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdS1MTUlOYWJNTjNoanNEUUFzNHZrVW1fc0cwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84YjRiMWEtZWE0Zi00MmUxLWI5NDIt YjExOWMyNThjZmFkLzEveUZEVWY2SnN1dnlmWHowakVVT3NhaWVHeEN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi84YjRiMWEtZWE0Zi00MmUxLWI5NDItYjExOWMyNThjZmFk LzEvdS1MTUlOYWJNTjNoanNEUUFzNHZrVW1fc0cwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeARQ MA0GCSqGSIb3DQEBCwUAA4IBAQArwbdvk2yeKFOpEIv0IhTERhPS7WdQM0s/FlaJ jIA3lmQnHR5EDpL0WA8sVMYp396WVoFKu7raesRSR4VtaZzttKxSZABSI2PnIo3E k8LAvkgU+hppnxV6e9L90P7Xv/KhHTuYiYbnZZeIzYxkUjJk/SUmVsFrlNQW94IK jld1STddjMawlJ5GpjVKaE7EdD01MbaqznXDo3B1NHlh6jJapAhH7MNo4fBCWHJl JFuZ4++UBeirI7+B4WfLOF8qfTkE9Ui60Ykf8V2R4ua7jWzboDg174NlWV/KW+Wl 98CggZ3+lDgDFRrCIEiOfZ6ioAUjnnWoEI7TlZsn/u64ocHr -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:05 2026 by rpki-client