This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/yfQb9AlKC_r1qbW7JgUEAWbb2SE.roa File: yfQb9AlKC_r1qbW7JgUEAWbb2SE.roa (raw, json) Hash identifier: V6bi9bW+gyxZUdO/fUkn/b7FLfhAgD7Kio8Z4leJS74= Subject key identifier: C9:F4:1B:F4:09:4A:0B:FA:F5:A9:B5:BB:26:05:04:01:66:DB:D9:21 Certificate issuer: /CN=abc1918c1f45e6ec17daca67a7ad193caf04b7b2 Certificate serial: 019B7BA38E88471A3AD9698E6B8312517072 Authority key identifier: AB:C1:91:8C:1F:45:E6:EC:17:DA:CA:67:A7:AD:19:3C:AF:04:B7:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/yfQb9AlKC_r1qbW7JgUEAWbb2SE.roa Signing time: Thu 01 Jan 2026 22:17:55 +0000 ROA not before: Thu 01 Jan 2026 22:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214857 IP address blocks: 2a14:52c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:8e:88:47:1a:3a:d9:69:8e:6b:83:12:51:70:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abc1918c1f45e6ec17daca67a7ad193caf04b7b2 Validity Not Before: Jan 1 22:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9f41bf4094a0bfaf5a9b5bb2605040166dbd921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e7:fa:72:0c:57:68:43:ce:ad:a9:c2:d4:ea: 96:9d:30:b0:fb:aa:c3:6d:97:76:9f:76:46:b5:0e: 98:c6:3b:cc:c9:6f:27:cd:54:5b:af:f1:bc:3d:9a: 26:a2:e9:60:57:fd:86:17:34:12:f3:ac:ab:92:4a: dd:f2:18:2c:fb:39:8c:50:a6:ca:13:a3:72:37:7f: 33:62:b6:51:b3:a3:3f:72:b3:c1:db:10:d2:13:c8: f3:c5:da:5e:0a:eb:78:6c:b1:35:6a:8a:24:db:c9: 57:00:13:01:bf:2b:05:fa:e1:33:c6:30:e7:f3:ca: 1b:31:48:c7:f2:91:31:07:8a:14:80:c2:69:f4:83: ad:f6:25:cc:56:91:b3:7e:c4:38:f6:91:4b:0e:03: c6:4f:ce:ed:fd:07:f4:ce:4c:95:86:1f:b1:74:2f: b5:9a:6b:cd:71:c4:80:1e:fc:12:39:00:68:12:17: 32:0e:12:7e:e3:cb:30:78:7f:f0:fd:fe:af:7a:66: 19:8c:52:25:17:64:c8:d2:eb:d6:aa:b9:f1:b1:61: 20:40:26:6f:6f:f3:42:3e:85:9c:55:96:84:74:01: 4f:86:29:28:6e:b8:00:bd:38:3a:c1:06:a5:36:c2: 39:23:e4:b9:78:15:1b:68:c8:2a:eb:f4:5a:e6:35: 2d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:F4:1B:F4:09:4A:0B:FA:F5:A9:B5:BB:26:05:04:01:66:DB:D9:21 X509v3 Authority Key Identifier: keyid:AB:C1:91:8C:1F:45:E6:EC:17:DA:CA:67:A7:AD:19:3C:AF:04:B7:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/yfQb9AlKC_r1qbW7JgUEAWbb2SE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:52c0::/48 Signature Algorithm: sha256WithRSAEncryption 6a:bc:7f:9c:1c:80:73:e6:d0:a1:17:4c:6a:2d:0e:8d:3f:1a: 10:83:97:8e:23:79:31:3d:7a:d3:72:f6:b8:00:a7:35:00:e0: c1:be:03:89:22:dd:6f:33:54:48:eb:47:57:ea:f0:b2:ff:2d: 9f:00:f9:2f:1a:db:a0:81:d0:cd:2a:e0:33:6d:2a:60:64:07: 68:47:7d:b8:c8:af:b2:9f:88:00:1a:df:23:4f:e9:21:52:22: 7c:85:c0:35:1f:54:b5:51:cb:48:80:83:44:de:a7:cb:2c:51: b6:1d:8c:f7:c2:21:e9:52:a8:6e:59:40:fa:e7:7a:c6:69:70: 44:7e:86:79:7d:15:02:0a:1d:61:60:0f:66:ba:0c:f3:de:cc: 83:de:7b:08:8d:52:27:3c:ad:d0:76:db:4b:85:5b:8c:90:9f: f3:3e:44:6d:d3:3c:4b:e0:1b:72:ba:76:18:44:cb:f5:94:6d: a4:08:7f:24:c6:fd:b2:bf:2b:e8:21:f3:33:6f:ab:df:66:da: 10:da:96:1d:54:4a:31:d2:fb:ae:4e:17:3c:1a:cb:9a:9d:b2: e1:99:ec:85:7d:34:f0:66:27:b5:7a:a6:bc:d4:08:75:20:44: f5:23:df:41:5a:1a:80:c5:57:82:e3:58:aa:d8:a9:df:50:7f: 37:8c:c3:c6 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7o46IRxo62WmOa4MSUXByMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiYzE5MThjMWY0NWU2ZWMxN2RhY2E2N2E3YWQxOTNjYWYw NGI3YjIwHhcNMjYwMTAxMjIxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOWY0MWJmNDA5NGEwYmZhZjVhOWI1YmIyNjA1MDQwMTY2ZGJkOTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+f6cgxXaEPOranC1OqWnTCw+6rD bZd2n3ZGtQ6YxjvMyW8nzVRbr/G8PZomoulgV/2GFzQS86yrkkrd8hgs+zmMUKbK E6NyN38zYrZRs6M/crPB2xDSE8jzxdpeCut4bLE1aook28lXABMBvysF+uEzxjDn 88obMUjH8pExB4oUgMJp9IOt9iXMVpGzfsQ49pFLDgPGT87t/Qf0zkyVhh+xdC+1 mmvNccSAHvwSOQBoEhcyDhJ+48sweH/w/f6vemYZjFIlF2TI0uvWqrnxsWEgQCZv b/NCPoWcVZaEdAFPhikobrgAvTg6wQalNsI5I+S5eBUbaMgq6/Ra5jUtRQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMn0G/QJSgv69am1uyYFBAFm29khMB8GA1UdIwQY MBaAFKvBkYwfRebsF9rKZ6etGTyvBLeyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcThHUmpCOUY1dXdYMnNwbnA2MFpQSzhFdDdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84Zjg4ZGUtZGFlZC00OGQyLWI3MDEt NmJiNWZlNjY1NzUwLzEveWZRYjlBbEtDX3IxcWJXN0pnVUVBV2JiMlNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi84Zjg4ZGUtZGFlZC00OGQyLWI3MDEtNmJiNWZlNjY1NzUw LzEvcThHUmpCOUY1dXdYMnNwbnA2MFpQSzhFdDdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhRSwAAA MA0GCSqGSIb3DQEBCwUAA4IBAQBqvH+cHIBz5tChF0xqLQ6NPxoQg5eOI3kxPXrT cva4AKc1AODBvgOJIt1vM1RI60dX6vCy/y2fAPkvGtuggdDNKuAzbSpgZAdoR324 yK+yn4gAGt8jT+khUiJ8hcA1H1S1UctIgINE3qfLLFG2HYz3wiHpUqhuWUD653rG aXBEfoZ5fRUCCh1hYA9mugzz3syD3nsIjVInPK3QdttLhVuMkJ/zPkRt0zxL4Bty unYYRMv1lG2kCH8kxv2yvyvoIfMzb6vfZtoQ2pYdVEox0vuuThc8GsuanbLhmeyF fTTwZie1eqa81Ah1IET1I99BWhqAxVeC41iq2KnfUH83jMPG -----END CERTIFICATE-----Generated at Mon Jan 26 05:48:56 2026 by rpki-client