This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/ycFTntx4cs4onGaGpj0o47JW98Y.roa File: ycFTntx4cs4onGaGpj0o47JW98Y.roa (raw, json) Hash identifier: Ttb49ZN4wbdVcFXW70bm/uwe/p5I14QSBI+L4GbrQys= Subject key identifier: C9:C1:53:9E:DC:78:72:CE:28:9C:66:86:A6:3D:28:E3:B2:56:F7:C6 Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Certificate serial: 019B7AC7CAC283A29181DDCAC92C4CDCE8AA Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/ycFTntx4cs4onGaGpj0o47JW98Y.roa Signing time: Thu 01 Jan 2026 18:17:52 +0000 ROA not before: Thu 01 Jan 2026 18:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60188 IP address blocks: 2a06:5040:8::/48 maxlen: 48 2a06:5040:9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:ca:c2:83:a2:91:81:dd:ca:c9:2c:4c:dc:e8:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Validity Not Before: Jan 1 18:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9c1539edc7872ce289c6686a63d28e3b256f7c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d8:90:9d:cd:fa:62:de:db:dc:f0:47:6a:fc: 22:24:b4:56:f4:fb:6d:e7:9a:ec:5d:54:9d:2b:ef: f5:51:b9:1e:46:28:a9:71:41:2d:48:32:d2:0b:5e: 6b:7f:23:79:67:01:4f:a5:11:91:df:ac:75:f4:46: d5:f1:46:f9:e3:02:34:a7:97:14:ae:c9:bf:fa:90: 74:75:bc:da:b4:eb:88:41:1a:68:cd:69:df:a9:2f: 81:3d:76:5c:bc:df:2a:05:f4:c0:93:b9:12:86:9c: 28:95:bd:d0:81:86:64:b8:d4:87:23:fe:b7:22:10: 9f:1e:4d:c5:71:41:3c:9c:e5:b0:85:7b:ce:82:89: 5b:d4:b5:d2:28:d4:a2:af:ee:50:b1:ac:a6:16:8b: 75:48:92:49:c4:3e:6b:55:20:93:2b:83:02:2f:ba: 09:c0:1a:46:3b:bb:3e:51:1c:ce:4d:e8:cf:0a:60: 41:fa:6f:f4:7d:e7:df:19:65:0b:14:14:18:8c:ce: 14:54:9f:30:0c:69:a4:ee:34:b6:a5:5c:0a:2c:78: 08:d3:22:f0:b4:4b:33:ee:90:b2:6e:c0:d4:59:32: bc:fe:6e:6f:af:88:5a:fa:02:b7:d5:7e:d8:ee:b1: 74:23:1a:c3:a2:b4:b5:1d:35:d5:b7:04:84:af:f0: 92:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:C1:53:9E:DC:78:72:CE:28:9C:66:86:A6:3D:28:E3:B2:56:F7:C6 X509v3 Authority Key Identifier: keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/ycFTntx4cs4onGaGpj0o47JW98Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:5040:8::/47 Signature Algorithm: sha256WithRSAEncryption 14:ae:5a:10:d3:b9:fb:0a:1f:47:23:94:48:de:1c:8a:08:2a: 89:69:90:14:29:b0:43:17:8d:82:46:40:c8:f7:16:e8:34:d5: ce:39:00:75:44:92:6c:34:3f:13:bf:cf:a4:77:21:f7:63:fc: 0d:29:92:4e:41:cc:6b:9e:96:cf:b6:ec:f7:4d:73:38:94:c9: d6:6c:71:c2:dd:8c:02:53:6c:9a:dd:4e:43:80:66:6d:27:eb: f8:8c:2b:c6:0b:96:62:97:25:34:18:c2:24:21:95:63:13:de: a7:a7:b8:95:c6:c2:f1:ca:af:9b:d1:ca:b6:61:7b:76:8f:41: 26:ed:c8:79:85:85:7b:16:76:a9:01:35:ea:74:11:b1:4f:48: 40:ee:2e:96:b1:fc:df:8c:00:0e:68:60:24:83:a7:35:b7:9d: 5e:af:eb:1a:d7:1e:91:2b:58:9c:ef:dc:55:b5:ba:ad:80:14: ce:02:10:18:01:7d:05:2b:c1:c3:09:38:04:9c:e8:71:51:7b: e4:0b:f5:de:b7:3c:97:66:78:10:1a:95:36:c3:0f:11:c2:de: 15:2e:d5:85:6f:80:fa:80:ed:9d:09:97:5f:1f:21:2e:c9:95: b0:55:0b:ac:d4:3a:df:1c:35:53:09:67:9e:57:f9:66:55:d6: c2:8d:ea:96 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6x8rCg6KRgd3KySxM3OiqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMzcxODMzNDFhMmFiNmRmM2M1OWVjODI3ZWQ3MTIwMGI1 YTYyNDQwHhcNMjYwMTAxMTgxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOWMxNTM5ZWRjNzg3MmNlMjg5YzY2ODZhNjNkMjhlM2IyNTZmN2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdiQnc36Yt7b3PBHavwiJLRW9Ptt 55rsXVSdK+/1UbkeRiipcUEtSDLSC15rfyN5ZwFPpRGR36x19EbV8Ub54wI0p5cU rsm/+pB0dbzatOuIQRpozWnfqS+BPXZcvN8qBfTAk7kShpwolb3QgYZkuNSHI/63 IhCfHk3FcUE8nOWwhXvOgolb1LXSKNSir+5QsaymFot1SJJJxD5rVSCTK4MCL7oJ wBpGO7s+URzOTejPCmBB+m/0feffGWULFBQYjM4UVJ8wDGmk7jS2pVwKLHgI0yLw tEsz7pCybsDUWTK8/m5vr4ha+gK31X7Y7rF0IxrDorS1HTXVtwSEr/CSvQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMnBU57ceHLOKJxmhqY9KOOyVvfGMB8GA1UdIwQY MBaAFIs3GDNBoqtt88WeyCftcSALWmJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUt MDg1MmNiMzUzMjkzLzEveWNGVG50eDRjczRvbkdhR3BqMG80N0pXOThZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUtMDg1MmNiMzUzMjkz LzEvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKgZQQAAI MA0GCSqGSIb3DQEBCwUAA4IBAQAUrloQ07n7Ch9HI5RI3hyKCCqJaZAUKbBDF42C RkDI9xboNNXOOQB1RJJsND8Tv8+kdyH3Y/wNKZJOQcxrnpbPtuz3TXM4lMnWbHHC 3YwCU2ya3U5DgGZtJ+v4jCvGC5ZilyU0GMIkIZVjE96np7iVxsLxyq+b0cq2YXt2 j0Em7ch5hYV7FnapATXqdBGxT0hA7i6WsfzfjAAOaGAkg6c1t51er+sa1x6RK1ic 79xVtbqtgBTOAhAYAX0FK8HDCTgEnOhxUXvkC/XetzyXZngQGpU2ww8Rwt4VLtWF b4D6gO2dCZdfHyEuyZWwVQus1DrfHDVTCWeeV/lmVdbCjeqW -----END CERTIFICATE-----Generated at Sun Jan 25 19:59:50 2026 by rpki-client