This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/yBrC20joWzPYJC2p3ASrdCZ0wzk.roa File: yBrC20joWzPYJC2p3ASrdCZ0wzk.roa (raw, json) Hash identifier: xZei5bNpfbVHrnCyo7DX6ea+rnn9Va9LPl3q+efKuDg= Subject key identifier: C8:1A:C2:DB:48:E8:5B:33:D8:24:2D:A9:DC:04:AB:74:26:74:C3:39 Certificate issuer: /CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44 Certificate serial: 019B797F1898A8358D1537714C512C16CD13 Authority key identifier: 29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/yBrC20joWzPYJC2p3ASrdCZ0wzk.roa Signing time: Thu 01 Jan 2026 12:18:51 +0000 ROA not before: Thu 01 Jan 2026 12:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205659 IP address blocks: 2a14:c881:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:18:98:a8:35:8d:15:37:71:4c:51:2c:16:cd:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44 Validity Not Before: Jan 1 12:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c81ac2db48e85b33d8242da9dc04ab742674c339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ba:1c:ea:8a:72:98:94:37:40:ec:c4:a6:5b: 72:3e:0f:67:ce:f3:d7:90:02:bc:18:f9:6f:6e:ea: 1d:b9:d6:f1:d4:5b:f4:80:d6:f7:0e:5f:11:39:c8: 82:65:99:f9:50:6f:00:4f:c9:d5:3b:b9:52:22:4a: 24:36:f1:77:1c:8e:41:ea:4e:24:d2:07:dc:8e:51: 8d:ea:7e:21:ce:3a:91:65:8f:34:60:d1:26:0c:c2: f6:6b:fd:ec:7f:81:07:47:07:22:be:06:e2:f3:a0: a2:6e:0a:63:16:2b:1d:1d:87:d4:7b:81:98:a9:92: c6:20:66:99:ae:c0:c7:98:05:c8:c4:bc:fe:73:d7: f9:51:d5:ce:a0:ff:5f:11:bc:e7:90:79:d3:6a:fa: 62:0a:ee:81:26:02:68:f9:60:4c:7e:c9:59:51:a6: aa:55:56:87:1e:d1:86:3a:31:d0:56:7e:14:db:06: d7:e0:ed:f7:db:f8:d0:48:11:73:41:13:71:9f:95: 5a:2d:14:e4:eb:57:53:4b:16:b2:81:93:2f:6d:7b: b6:41:62:67:58:f7:c1:6f:89:36:f5:53:d1:47:71: ea:e7:d9:9d:0f:da:1f:05:da:4b:63:f9:90:32:c2: 01:fe:79:21:52:ba:83:b5:cb:5d:21:f2:55:46:f4: 22:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:1A:C2:DB:48:E8:5B:33:D8:24:2D:A9:DC:04:AB:74:26:74:C3:39 X509v3 Authority Key Identifier: keyid:29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/yBrC20joWzPYJC2p3ASrdCZ0wzk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:c881:8000::/33 Signature Algorithm: sha256WithRSAEncryption 0c:bd:3b:78:79:08:4c:74:57:20:6e:f6:6a:8d:34:79:70:47: 3e:82:7d:f0:2a:51:8b:7d:eb:a5:de:e8:96:7c:aa:80:b1:2d: e4:0d:c5:af:60:0d:b8:61:6c:d2:86:59:e7:8c:a3:08:80:18: 37:ea:5c:42:9b:00:05:90:f4:8f:d5:85:51:45:9e:b2:f5:14: 2f:d5:fc:7c:dd:1a:36:a4:ba:23:ba:7d:e8:14:cc:f4:b6:4c: 69:12:3c:96:29:8d:00:cc:1e:11:ef:a2:62:79:80:e7:9c:49: 51:d0:ad:66:32:d7:79:11:80:cf:d5:e8:69:4a:0f:ab:f6:d9: d7:66:63:31:46:86:ee:d2:af:2d:df:32:ab:e6:75:b5:b6:bb: 2d:52:32:a0:99:f4:44:9d:44:50:a9:ca:51:7e:3a:45:c0:c2: 16:01:1a:ef:4d:50:06:ea:76:fb:ac:45:15:da:ae:05:b6:7c: 88:fe:9c:b4:bb:0c:8d:db:ba:22:72:55:e8:78:b9:34:64:17: f4:bf:ae:cd:f8:49:b9:7a:b4:26:21:e2:05:84:53:a3:8a:08: a4:97:8f:0e:81:f5:78:26:b8:81:af:9c:a0:40:20:d4:c2:8b: fe:6a:4a:dc:33:2e:3d:17:b3:62:e7:c3:20:8b:95:4c:87:c5: 6f:3e:de:55 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt5fxiYqDWNFTdxTFEsFs0TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZmE3ZGQ2M2YyZTJkODdiNWY3ODUwMDkzYzc0M2JiZmJl MTRlNDQwHhcNMjYwMTAxMTIxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODFhYzJkYjQ4ZTg1YjMzZDgyNDJkYTlkYzA0YWI3NDI2NzRjMzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLoc6opymJQ3QOzEpltyPg9nzvPX kAK8GPlvbuodudbx1Fv0gNb3Dl8ROciCZZn5UG8AT8nVO7lSIkokNvF3HI5B6k4k 0gfcjlGN6n4hzjqRZY80YNEmDML2a/3sf4EHRwcivgbi86CibgpjFisdHYfUe4GY qZLGIGaZrsDHmAXIxLz+c9f5UdXOoP9fEbznkHnTavpiCu6BJgJo+WBMfslZUaaq VVaHHtGGOjHQVn4U2wbX4O332/jQSBFzQRNxn5VaLRTk61dTSxaygZMvbXu2QWJn WPfBb4k29VPRR3Hq59mdD9ofBdpLY/mQMsIB/nkhUrqDtctdIfJVRvQiUQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFMgawttI6Fsz2CQtqdwEq3QmdMM5MB8GA1UdIwQY MBaAFCn6fdY/Li2HtfeFAJPHQ7v74U5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8yYzBjYmYtMTFmNy00YjZkLWI4OGUt NzlmN2I2ZWE3YzE0LzEveUJyQzIwam9XelBZSkMycDNBU3JkQ1owd3prLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8yYzBjYmYtMTFmNy00YjZkLWI4OGUtNzlmN2I2ZWE3YzE0 LzEvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYHKhTIgYAw DQYJKoZIhvcNAQELBQADggEBAAy9O3h5CEx0VyBu9mqNNHlwRz6CffAqUYt966Xe 6JZ8qoCxLeQNxa9gDbhhbNKGWeeMowiAGDfqXEKbAAWQ9I/VhVFFnrL1FC/V/Hzd GjakuiO6fegUzPS2TGkSPJYpjQDMHhHvomJ5gOecSVHQrWYy13kRgM/V6GlKD6v2 2ddmYzFGhu7Sry3fMqvmdbW2uy1SMqCZ9ESdRFCpylF+OkXAwhYBGu9NUAbqdvus RRXargW2fIj+nLS7DI3buiJyVeh4uTRkF/S/rs34Sbl6tCYh4gWEU6OKCKSXjw6B 9XgmuIGvnKBAINTCi/5qStwzLj0Xs2LnwyCLlUyHxW8+3lU= -----END CERTIFICATE-----Generated at Sun Jan 25 17:33:40 2026 by rpki-client