This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/yYo92JwdAK0Yb36h4od0SkR-8PQ.roa File: yYo92JwdAK0Yb36h4od0SkR-8PQ.roa (raw, json) Hash identifier: UkVRpXuv1yNCqqHU2bi8PbnwrwXCTcNm+/wk+zbOQNA= Subject key identifier: C9:8A:3D:D8:9C:1D:00:AD:18:6F:7E:A1:E2:87:74:4A:44:7E:F0:F4 Certificate issuer: /CN=b27261d715348bfd73ce9dbb72488656993ba2f1 Certificate serial: 019B7B3551E163912811E732391C611E3D87 Authority key identifier: B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/yYo92JwdAK0Yb36h4od0SkR-8PQ.roa Signing time: Thu 01 Jan 2026 20:17:30 +0000 ROA not before: Thu 01 Jan 2026 20:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58036 IP address blocks: 2a0e:e6c7:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:51:e1:63:91:28:11:e7:32:39:1c:61:1e:3d:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b27261d715348bfd73ce9dbb72488656993ba2f1 Validity Not Before: Jan 1 20:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c98a3dd89c1d00ad186f7ea1e287744a447ef0f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:42:00:79:ff:62:2b:95:88:49:67:90:de:08: c6:26:f9:c2:a9:f7:d4:79:6b:df:e0:da:63:6f:aa: be:42:60:0e:8c:0d:47:27:d7:0f:05:80:65:a4:22: 22:16:55:ba:20:5e:3e:b7:b5:db:d4:e0:3a:a1:c9: 68:8d:ab:c2:39:4d:d5:1d:89:38:15:1e:5d:63:fd: d9:40:41:1c:20:c4:59:86:7f:51:69:0d:d8:d8:98: aa:b6:59:41:9e:39:1b:65:75:dd:bc:25:92:8d:aa: 2e:69:ef:76:53:65:9d:b9:46:9d:8c:e4:55:26:fe: 09:d9:1e:8e:a9:0f:cd:6c:70:33:d0:e4:07:ca:b4: 66:68:c7:6e:5a:17:87:9a:93:48:2a:90:22:b8:b1: 93:5b:ea:67:d1:62:fe:3e:33:16:11:ce:49:04:bb: 58:a5:e5:ed:9f:79:0c:4b:1d:49:85:32:8a:ce:22: 34:82:3f:3d:39:0c:ad:a3:41:18:96:1b:35:0c:0d: ba:82:9c:72:c5:09:53:89:d8:8c:21:4c:e9:54:ec: fc:77:10:e8:74:06:d2:c6:ff:f9:cc:4a:cb:50:91: da:7b:8c:cd:e8:a7:02:ca:c2:a5:c5:fa:3e:72:e2: f1:e2:70:19:a5:76:0c:31:d9:db:ef:75:fd:0d:33: d0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:8A:3D:D8:9C:1D:00:AD:18:6F:7E:A1:E2:87:74:4A:44:7E:F0:F4 X509v3 Authority Key Identifier: keyid:B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/yYo92JwdAK0Yb36h4od0SkR-8PQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:e6c7:f000::/36 Signature Algorithm: sha256WithRSAEncryption 72:0d:a5:c2:97:25:51:02:7b:33:53:b3:b5:06:1a:81:82:7b: de:1a:ea:b3:16:4b:5d:52:3a:87:38:a3:dc:07:d5:af:85:6b: 3b:2c:81:a9:1f:b8:fa:f6:7e:5b:32:b1:d9:a0:74:29:54:52: d4:04:45:f1:76:0a:4d:a5:5c:56:34:3c:29:53:44:6e:32:ab: c1:e4:45:94:53:ce:a9:ed:28:ba:6f:92:26:c4:1f:fc:44:f8: ba:da:37:1d:16:00:ef:da:8c:bf:dc:0a:38:8a:a4:a0:e1:92: 1b:26:3a:25:3c:53:96:b2:3f:10:4c:f4:89:0d:a0:dc:74:10: 93:89:02:ec:64:e1:72:b2:7e:80:64:5f:71:a6:d4:06:b7:64: af:3a:bb:c1:56:c2:7c:d2:d8:e4:a9:ba:7f:ba:b6:91:c4:90: d6:b1:56:d8:97:c8:18:59:c1:b3:bf:28:14:da:51:34:53:a0: e9:91:90:51:19:56:7a:2a:dc:d5:41:74:ff:6b:0b:0a:d6:40: 9d:08:71:1a:9a:ca:7e:6f:18:b0:5f:6e:8c:f8:13:a9:1a:45: ac:06:09:57:57:b2:6b:df:7f:30:13:18:51:3a:14:de:f8:19: 79:3c:e1:29:a3:0c:5c:67:41:a2:bc:e4:9c:f4:47:7c:56:bb: 97:62:89:1a -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt7NVHhY5EoEecyORxhHj2HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyNzI2MWQ3MTUzNDhiZmQ3M2NlOWRiYjcyNDg4NjU2OTkz YmEyZjEwHhcNMjYwMTAxMjAxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOThhM2RkODljMWQwMGFkMTg2ZjdlYTFlMjg3NzQ0YTQ0N2VmMGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEIAef9iK5WISWeQ3gjGJvnCqffU eWvf4Npjb6q+QmAOjA1HJ9cPBYBlpCIiFlW6IF4+t7Xb1OA6oclojavCOU3VHYk4 FR5dY/3ZQEEcIMRZhn9RaQ3Y2JiqtllBnjkbZXXdvCWSjaouae92U2WduUadjORV Jv4J2R6OqQ/NbHAz0OQHyrRmaMduWheHmpNIKpAiuLGTW+pn0WL+PjMWEc5JBLtY peXtn3kMSx1JhTKKziI0gj89OQyto0EYlhs1DA26gpxyxQlTidiMIUzpVOz8dxDo dAbSxv/5zErLUJHae4zN6KcCysKlxfo+cuLx4nAZpXYMMdnb73X9DTPQRwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFMmKPdicHQCtGG9+oeKHdEpEfvD0MB8GA1UdIwQY MBaAFLJyYdcVNIv9c86du3JIhlaZO6LxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hYmE1MDItZDE5MS00ZmQ3LWE3Y2Yt NTA0ZjI3NjY3NjBmLzEveVlvOTJKd2RBSzBZYjM2aDRvZDBTa1ItOFBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9hYmE1MDItZDE5MS00ZmQ3LWE3Y2YtNTA0ZjI3NjY3NjBm LzEvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKg7mx/Aw DQYJKoZIhvcNAQELBQADggEBAHINpcKXJVECezNTs7UGGoGCe94a6rMWS11SOoc4 o9wH1a+FazssgakfuPr2flsysdmgdClUUtQERfF2Ck2lXFY0PClTRG4yq8HkRZRT zqntKLpvkibEH/xE+LraNx0WAO/ajL/cCjiKpKDhkhsmOiU8U5ayPxBM9IkNoNx0 EJOJAuxk4XKyfoBkX3Gm1Aa3ZK86u8FWwnzS2OSpun+6tpHEkNaxVtiXyBhZwbO/ KBTaUTRToOmRkFEZVnoq3NVBdP9rCwrWQJ0IcRqayn5vGLBfboz4E6kaRawGCVdX smvffzATGFE6FN74GXk84SmjDFxnQaK85Jz0R3xWu5diiRo= -----END CERTIFICATE-----Generated at Sun Jan 25 17:41:44 2026 by rpki-client