This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/YNGfrZvagg4O4FGkVhnBiiruLx0.roa File: YNGfrZvagg4O4FGkVhnBiiruLx0.roa (raw, json) Hash identifier: /ltwcx7I+h2VdXqUCtGZD3WsmcEgqxtyYnfei2/3ZlQ= Subject key identifier: 60:D1:9F:AD:9B:DA:82:0E:0E:E0:51:A4:56:19:C1:8A:2A:EE:2F:1D Certificate issuer: /CN=9b86bd882e476e4698318f370712f71c2bf50dfc Certificate serial: 019B7A5B9AE9146328121CE2CA51AF315D66 Authority key identifier: 9B:86:BD:88:2E:47:6E:46:98:31:8F:37:07:12:F7:1C:2B:F5:0D:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4a9iC5HbkaYMY83BxL3HCv1Dfw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/YNGfrZvagg4O4FGkVhnBiiruLx0.roa Signing time: Thu 01 Jan 2026 16:19:42 +0000 ROA not before: Thu 01 Jan 2026 16:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201612 IP address blocks: 2001:67c:10e0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.crl rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft rsync://rpki.ripe.net/repository/DEFAULT/m4a9iC5HbkaYMY83BxL3HCv1Dfw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 19:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:9a:e9:14:63:28:12:1c:e2:ca:51:af:31:5d:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b86bd882e476e4698318f370712f71c2bf50dfc Validity Not Before: Jan 1 16:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=60d19fad9bda820e0ee051a45619c18a2aee2f1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:27:7d:7c:de:ff:c2:dc:94:9a:a9:6f:1b:6d: a2:15:c1:10:38:29:ba:c0:db:6f:94:98:ca:7b:b3: 13:b0:cd:c8:e8:db:08:7e:4a:b5:19:68:c0:e7:16: e0:b8:8d:20:34:bf:05:aa:07:b3:31:3a:8c:0e:d3: b8:f4:b9:dc:e9:ef:35:f6:cc:f1:37:3c:e3:16:6d: 3f:e8:40:eb:1d:91:94:29:b5:7a:41:e7:60:51:2e: 66:8e:0c:7a:e0:60:bd:0b:47:0a:48:c1:f8:94:63: 5b:e0:76:a6:44:80:e8:4d:5e:98:41:bf:b0:1d:30: cd:df:30:2a:db:84:a1:34:71:03:0f:71:7d:ac:6c: a5:13:d1:f8:2a:f6:aa:f1:e1:8c:7f:7a:6c:af:56: e9:f3:79:8e:d1:c9:d5:4b:fb:15:22:95:92:4d:57: 32:dc:09:f9:33:26:b4:89:a3:d6:74:ca:dc:e2:76: 03:5d:02:90:43:f9:38:98:dd:02:05:01:99:e8:43: 5f:7d:69:85:6a:1b:62:45:eb:11:fa:26:c5:ed:18: 9d:2f:49:25:ab:58:48:46:c5:a2:60:5f:74:38:48: 0e:1b:90:3e:81:3a:e4:6d:96:18:0d:0f:29:fe:45: f4:db:db:c5:fc:71:53:a4:fc:39:f1:9b:5e:80:01: 4e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:D1:9F:AD:9B:DA:82:0E:0E:E0:51:A4:56:19:C1:8A:2A:EE:2F:1D X509v3 Authority Key Identifier: keyid:9B:86:BD:88:2E:47:6E:46:98:31:8F:37:07:12:F7:1C:2B:F5:0D:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4a9iC5HbkaYMY83BxL3HCv1Dfw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/YNGfrZvagg4O4FGkVhnBiiruLx0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:10e0::/48 Signature Algorithm: sha256WithRSAEncryption 87:5b:20:15:df:20:89:c6:59:b7:b9:39:0c:62:2c:2e:d2:f2: 13:df:53:49:83:1e:cd:3b:d8:fb:ea:b0:f1:44:29:19:14:18: b5:05:1c:10:0a:76:df:83:8b:59:a1:c1:ad:0e:73:3e:12:41: 98:5d:fc:dc:68:de:89:3e:de:18:60:81:08:1a:69:dc:1b:54: 07:0b:d6:21:6b:14:f5:13:65:e1:d7:9e:be:38:89:78:b1:df: 12:27:49:14:79:0a:ae:f5:44:e0:5f:66:23:3c:48:d8:9b:ef: 67:33:3d:2e:b9:68:45:d2:d6:55:83:b4:48:f5:75:ab:ad:f6: 91:be:32:d9:81:b1:08:25:99:e1:7e:ef:c0:88:a4:53:95:9a: 8e:90:1b:da:78:67:4e:13:20:57:c1:cf:79:2d:5a:c0:95:74: 9e:60:6a:9c:57:a1:f2:11:e3:4f:1b:f7:a2:95:f2:48:46:8b: a4:0b:de:47:af:b1:c5:b7:fd:1e:b3:2d:64:fe:23:ae:28:49: f7:d3:bf:21:b1:f0:36:2e:78:ea:98:6d:a0:db:d2:8b:fd:44: f6:fa:61:59:d7:35:b8:ae:97:a1:94:d7:7e:f7:53:7c:c3:4a: d8:f6:4f:1c:33:a2:4e:01:fb:b0:6f:5e:a4:d7:67:f4:d2:27: cc:59:c7:cd -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6W5rpFGMoEhziylGvMV1mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliODZiZDg4MmU0NzZlNDY5ODMxOGYzNzA3MTJmNzFjMmJm NTBkZmMwHhcNMjYwMTAxMTYxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MGQxOWZhZDliZGE4MjBlMGVlMDUxYTQ1NjE5YzE4YTJhZWUyZjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yd9fN7/wtyUmqlvG22iFcEQOCm6 wNtvlJjKe7MTsM3I6NsIfkq1GWjA5xbguI0gNL8FqgezMTqMDtO49Lnc6e819szx NzzjFm0/6EDrHZGUKbV6QedgUS5mjgx64GC9C0cKSMH4lGNb4HamRIDoTV6YQb+w HTDN3zAq24ShNHEDD3F9rGylE9H4Kvaq8eGMf3psr1bp83mO0cnVS/sVIpWSTVcy 3An5Mya0iaPWdMrc4nYDXQKQQ/k4mN0CBQGZ6ENffWmFahtiResR+ibF7RidL0kl q1hIRsWiYF90OEgOG5A+gTrkbZYYDQ8p/kX029vF/HFTpPw58ZtegAFOKwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGDRn62b2oIODuBRpFYZwYoq7i8dMB8GA1UdIwQY MBaAFJuGvYguR25GmDGPNwcS9xwr9Q38MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTRhOWlDNUhia2FZTVk4M0J4TDNIQ3YxRGZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni83MjkwZDUtMWVkNS00Y2ExLTk2ZmQt YmZjNzNkZDBiYmI2LzEvWU5HZnJadmFnZzRPNEZHa1ZobkJpaXJ1THgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni83MjkwZDUtMWVkNS00Y2ExLTk2ZmQtYmZjNzNkZDBiYmI2 LzEvbTRhOWlDNUhia2FZTVk4M0J4TDNIQ3YxRGZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBDg MA0GCSqGSIb3DQEBCwUAA4IBAQCHWyAV3yCJxlm3uTkMYiwu0vIT31NJgx7NO9j7 6rDxRCkZFBi1BRwQCnbfg4tZocGtDnM+EkGYXfzcaN6JPt4YYIEIGmncG1QHC9Yh axT1E2Xh156+OIl4sd8SJ0kUeQqu9UTgX2YjPEjYm+9nMz0uuWhF0tZVg7RI9XWr rfaRvjLZgbEIJZnhfu/AiKRTlZqOkBvaeGdOEyBXwc95LVrAlXSeYGqcV6HyEeNP G/eilfJIRoukC95Hr7HFt/0esy1k/iOuKEn3078hsfA2LnjqmG2g29KL/UT2+mFZ 1zW4rpehlNd+91N8w0rY9k8cM6JOAfuwb16k12f00ifMWcfN -----END CERTIFICATE-----Generated at Tue Jan 27 05:37:36 2026 by rpki-client