This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/pYGDQP7z4knn6-l2OGShS12r9vg.roa File: pYGDQP7z4knn6-l2OGShS12r9vg.roa (raw, json) Hash identifier: OTzBNhKlo1pe/s0so9dkt15EFzXNXt7pIqKb4IqGORk= Subject key identifier: A5:81:83:40:FE:F3:E2:49:E7:EB:E9:76:38:64:A1:4B:5D:AB:F6:F8 Certificate issuer: /CN=fd1196d98decd38eb03f5f06b48e556c74f231f4 Certificate serial: 019B7B35AF8B1B226C30CFB2893F0D809B82 Authority key identifier: FD:11:96:D9:8D:EC:D3:8E:B0:3F:5F:06:B4:8E:55:6C:74:F2:31:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_RGW2Y3s046wP18GtI5VbHTyMfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/pYGDQP7z4knn6-l2OGShS12r9vg.roa Signing time: Thu 01 Jan 2026 20:17:54 +0000 ROA not before: Thu 01 Jan 2026 20:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12874 IP address blocks: 2a04:a580::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/_RGW2Y3s046wP18GtI5VbHTyMfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:af:8b:1b:22:6c:30:cf:b2:89:3f:0d:80:9b:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd1196d98decd38eb03f5f06b48e556c74f231f4 Validity Not Before: Jan 1 20:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a5818340fef3e249e7ebe9763864a14b5dabf6f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:05:b0:91:7d:3c:df:2e:14:62:ce:44:e0:50: 1e:16:24:62:04:62:6a:37:3c:24:2d:2e:1a:96:df: f3:17:78:05:55:a5:87:ff:f2:e6:04:bf:3a:ae:78: a0:cc:2a:eb:88:8e:49:12:d0:55:3d:e7:e5:00:37: ee:f4:b0:60:e4:07:a1:85:ad:18:1a:b9:4e:42:d2: b2:8b:d6:43:9a:63:c0:b6:07:50:02:96:62:51:f7: b6:d4:23:26:a1:8b:18:cd:18:05:e7:18:18:59:3f: d1:23:5c:ad:b4:40:ee:50:9d:3c:0f:54:58:44:06: 36:2e:4a:b3:79:c2:c2:0f:16:8b:bd:ed:7d:c9:f6: 5a:bb:a8:ae:6e:ee:bf:65:fe:c4:75:14:a9:d0:d9: d6:85:2c:6a:85:f4:9b:3b:c8:73:76:e0:b1:cd:02: 19:39:81:60:68:aa:11:ca:83:00:49:1b:cf:19:c2: 6f:12:fc:08:b7:4b:47:05:e9:2e:90:d8:3d:69:37: 85:44:fd:64:32:51:86:c4:d6:34:0d:15:0d:cc:47: 10:8d:a1:c5:49:e1:18:cb:f5:0e:11:0c:44:21:41: 99:2d:ef:61:97:6c:79:d1:c9:c3:90:ae:f3:71:be: 80:c5:e2:35:e3:f9:b9:de:20:26:6f:cc:a5:43:86: b1:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:81:83:40:FE:F3:E2:49:E7:EB:E9:76:38:64:A1:4B:5D:AB:F6:F8 X509v3 Authority Key Identifier: keyid:FD:11:96:D9:8D:EC:D3:8E:B0:3F:5F:06:B4:8E:55:6C:74:F2:31:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RGW2Y3s046wP18GtI5VbHTyMfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/pYGDQP7z4knn6-l2OGShS12r9vg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a04:a580::/29 Signature Algorithm: sha256WithRSAEncryption 00:bc:4d:c5:17:4e:9a:d5:2f:c1:06:8f:66:05:c4:23:92:87: cd:4b:1b:87:a9:25:4f:0c:41:69:7b:60:e0:b3:f3:3b:be:a7: f6:35:9c:c2:08:a6:d6:77:97:81:13:10:1f:55:3d:43:89:c0: c9:55:9b:9b:7d:fa:23:be:b9:f3:50:7d:14:31:bd:69:ef:2a: 2a:c8:90:78:f6:6b:5f:14:61:78:03:bc:b8:c6:eb:3e:74:20: 3f:bb:28:fe:8d:1d:fb:fa:9f:58:81:1f:a4:ef:23:b0:a7:46: d2:cd:91:8d:a2:20:85:50:df:ec:8c:bc:b4:53:1c:dc:85:a3: 8b:be:8b:14:5c:1e:9c:66:dc:87:05:30:9e:46:2e:99:43:83: 7c:7c:18:37:f7:49:58:04:5e:4a:d3:50:df:6d:e9:d5:ae:4e: 14:27:d4:1c:50:fc:30:3d:56:ad:48:b0:76:da:34:11:dd:01: 4d:d3:54:d9:e0:83:28:b1:1c:9f:10:98:62:46:b4:7f:4a:88: f9:84:d3:68:18:f1:b6:6a:ba:c7:b5:7e:99:f8:73:88:e0:22: 10:94:7b:93:02:52:da:66:b0:27:15:41:9b:8f:ff:ef:78:34: 18:db:84:b7:5e:23:eb:fd:9a:6c:4e:39:97:04:8f:dd:c1:0e: 2d:97:4b:a0 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt7Na+LGyJsMM+yiT8NgJuCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMTE5NmQ5OGRlY2QzOGViMDNmNWYwNmI0OGU1NTZjNzRm MjMxZjQwHhcNMjYwMTAxMjAxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTgxODM0MGZlZjNlMjQ5ZTdlYmU5NzYzODY0YTE0YjVkYWJmNmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7gWwkX083y4UYs5E4FAeFiRiBGJq NzwkLS4alt/zF3gFVaWH//LmBL86rnigzCrriI5JEtBVPeflADfu9LBg5Aehha0Y GrlOQtKyi9ZDmmPAtgdQApZiUfe21CMmoYsYzRgF5xgYWT/RI1yttEDuUJ08D1RY RAY2LkqzecLCDxaLve19yfZau6iubu6/Zf7EdRSp0NnWhSxqhfSbO8hzduCxzQIZ OYFgaKoRyoMASRvPGcJvEvwIt0tHBekukNg9aTeFRP1kMlGGxNY0DRUNzEcQjaHF SeEYy/UOEQxEIUGZLe9hl2x50cnDkK7zcb6AxeI14/m53iAmb8ylQ4axdwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFKWBg0D+8+JJ5+vpdjhkoUtdq/b4MB8GA1UdIwQY MBaAFP0RltmN7NOOsD9fBrSOVWx08jH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1JHVzJZM3MwNDZ3UDE4R3RJNVZiSFR5TWZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS80ZDU2NjAtNTM2NC00NDU0LWE5YmUt NGY4OTAyYmZlMTcyLzEvcFlHRFFQN3o0a25uNi1sMk9HU2hTMTJyOXZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS80ZDU2NjAtNTM2NC00NDU0LWE5YmUtNGY4OTAyYmZlMTcy LzEvX1JHVzJZM3MwNDZ3UDE4R3RJNVZiSFR5TWZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgSlgDAN BgkqhkiG9w0BAQsFAAOCAQEAALxNxRdOmtUvwQaPZgXEI5KHzUsbh6klTwxBaXtg 4LPzO76n9jWcwgim1neXgRMQH1U9Q4nAyVWbm336I76581B9FDG9ae8qKsiQePZr XxRheAO8uMbrPnQgP7so/o0d+/qfWIEfpO8jsKdG0s2RjaIghVDf7Iy8tFMc3IWj i76LFFwenGbchwUwnkYumUODfHwYN/dJWAReStNQ323p1a5OFCfUHFD8MD1WrUiw dto0Ed0BTdNU2eCDKLEcnxCYYka0f0qI+YTTaBjxtmq6x7V+mfhziOAiEJR7kwJS 2mawJxVBm4//73g0GNuEt14j6/2abE45lwSP3cEOLZdLoA== -----END CERTIFICATE-----Generated at Mon Jan 26 02:22:43 2026 by rpki-client