This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/YUks2Od0XGVs_0qy4zM64qK2ilc.roa File: YUks2Od0XGVs_0qy4zM64qK2ilc.roa (raw, json) Hash identifier: fOJKj898k6XkbbvQ0FoOeL9v44eRzqi39qmYuSLOEko= Subject key identifier: 61:49:2C:D8:E7:74:5C:65:6C:FF:4A:B2:E3:33:3A:E2:A2:B6:8A:57 Certificate issuer: /CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2 Certificate serial: 019B7BA36BB9DF23C56C8D54321759CC90F3 Authority key identifier: 29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/YUks2Od0XGVs_0qy4zM64qK2ilc.roa Signing time: Thu 01 Jan 2026 22:17:46 +0000 ROA not before: Thu 01 Jan 2026 22:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208749 IP address blocks: 2a01:e901:108::/48 maxlen: 48 2a01:e901:118::/48 maxlen: 48 2a01:e901:128::/48 maxlen: 48 2a01:e901:138::/48 maxlen: 48 2a01:e901:148::/48 maxlen: 48 2a01:e901:158::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:6b:b9:df:23:c5:6c:8d:54:32:17:59:cc:90:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2 Validity Not Before: Jan 1 22:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=61492cd8e7745c656cff4ab2e3333ae2a2b68a57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:51:8e:e1:16:e7:d4:60:e6:8c:39:be:c0:a7: 4d:bc:5b:fc:1e:cb:42:91:3a:cd:a1:05:33:ab:f8: 1b:16:14:55:b1:9f:c1:70:75:5f:57:ec:b4:a9:50: e1:e5:27:75:d4:c9:91:d8:65:9e:3c:fb:84:8c:47: f4:3a:cb:0e:4f:1f:95:c0:25:29:fa:ee:90:ca:5d: da:84:34:41:07:af:bc:81:3c:ab:03:cb:55:bd:df: aa:77:0b:19:cf:d6:57:af:a3:aa:ae:ff:3b:06:12: eb:da:47:d3:8c:3a:51:c5:e6:a7:b1:a4:41:6e:ba: 35:46:16:61:a4:34:ed:f0:63:0d:1e:b2:db:0c:09: 9d:14:db:a6:f1:d8:aa:5f:68:aa:fe:51:e3:9a:c5: 10:a1:07:e3:99:cb:48:31:77:b4:3f:8b:de:69:a3: 67:42:8f:6a:ac:28:19:a9:67:1d:59:cc:eb:13:9d: 1e:2b:2e:f1:1b:f7:4b:5f:f5:c8:c8:9b:a8:a2:ff: 27:59:5b:b7:d5:22:bd:c1:60:78:12:a5:79:1d:85: fb:d9:91:ee:b2:4e:42:69:1e:a6:e1:aa:ec:a1:a5: d7:2d:94:aa:df:d8:96:a9:9e:2a:92:ef:a1:3e:53: 35:59:82:75:36:fd:02:7e:98:f6:f7:90:50:95:ac: 56:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:49:2C:D8:E7:74:5C:65:6C:FF:4A:B2:E3:33:3A:E2:A2:B6:8A:57 X509v3 Authority Key Identifier: keyid:29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/YUks2Od0XGVs_0qy4zM64qK2ilc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:e901:108::/48 2a01:e901:118::/48 2a01:e901:128::/48 2a01:e901:138::/48 2a01:e901:148::/48 2a01:e901:158::/48 Signature Algorithm: sha256WithRSAEncryption 0a:7a:f4:6e:13:c3:1d:eb:9c:ce:aa:cb:2b:1e:45:50:5d:9e: c4:cc:1f:f7:49:bc:6a:9f:d1:ec:26:e1:6a:6e:10:e8:11:a5: 03:13:ca:cb:b9:fd:4f:64:d1:5c:a1:65:88:78:c3:05:f6:6b: 1d:75:7d:c5:c0:92:f6:24:59:ad:1b:e9:4f:f1:6a:8d:fe:89: d5:51:79:53:5a:14:3b:ee:28:ea:09:2f:d0:7f:b1:ae:2a:f0: 50:76:85:71:95:0d:c8:4d:30:43:45:22:78:7c:c5:da:0e:c2: f1:24:a8:a0:da:72:12:74:f4:f9:0f:2a:0a:f2:ca:f4:82:5b: 03:20:b7:ae:be:88:8a:95:fb:11:f4:75:6e:19:d4:f8:79:24: 45:30:ff:b9:6d:dc:e0:99:0a:f4:ef:35:55:d9:77:69:b5:72: e4:c5:c0:bd:d1:77:d0:42:41:a3:0c:8e:51:77:f4:c9:e2:6a: a3:92:c5:64:8c:0b:d3:a0:6a:b8:1f:03:29:51:bf:1a:c0:ee: f4:c4:c5:41:22:72:f1:58:b1:5a:e8:fe:8f:ed:13:a5:d8:6d: 3d:7d:1c:e8:a4:80:bf:d0:ae:2b:5a:f0:0b:be:c1:9f:bf:54: c7:ad:06:9e:5d:2f:a0:0a:b9:b1:cb:d0:96:92:8f:aa:27:d7: 50:58:22:54 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt7o2u53yPFbI1UMhdZzJDzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NjhiNGUwZWY4MTA2ZjBlMTJhYjhlNTAxZDJhYTRlMzZi NzgzYzIwHhcNMjYwMTAxMjIxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTQ5MmNkOGU3NzQ1YzY1NmNmZjRhYjJlMzMzM2FlMmEyYjY4YTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlGO4Rbn1GDmjDm+wKdNvFv8HstC kTrNoQUzq/gbFhRVsZ/BcHVfV+y0qVDh5Sd11MmR2GWePPuEjEf0OssOTx+VwCUp +u6Qyl3ahDRBB6+8gTyrA8tVvd+qdwsZz9ZXr6Oqrv87BhLr2kfTjDpRxeansaRB bro1RhZhpDTt8GMNHrLbDAmdFNum8diqX2iq/lHjmsUQoQfjmctIMXe0P4veaaNn Qo9qrCgZqWcdWczrE50eKy7xG/dLX/XIyJuoov8nWVu31SK9wWB4EqV5HYX72ZHu sk5CaR6m4arsoaXXLZSq39iWqZ4qku+hPlM1WYJ1Nv0Cfpj295BQlaxWRwIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFGFJLNjndFxlbP9KsuMzOuKitopXMB8GA1UdIwQY MBaAFClotODvgQbw4Sq45QHSqk42t4PCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1dpMDRPLUJCdkRoS3JqbEFkS3FUamEzZzhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80ODE2MzctNmMxYy00NWU4LThmYmQt NDRmOGVkNWQ2MWQ3LzEvWVVrczJPZDBYR1ZzXzBxeTR6TTY0cUsyaWxjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy80ODE2MzctNmMxYy00NWU4LThmYmQtNDRmOGVkNWQ2MWQ3 LzEvS1dpMDRPLUJCdkRoS3JqbEFkS3FUamEzZzhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAAjA2AwcAKgHpAQEI AwcAKgHpAQEYAwcAKgHpAQEoAwcAKgHpAQE4AwcAKgHpAQFIAwcAKgHpAQFYMA0G CSqGSIb3DQEBCwUAA4IBAQAKevRuE8Md65zOqssrHkVQXZ7EzB/3Sbxqn9HsJuFq bhDoEaUDE8rLuf1PZNFcoWWIeMMF9msddX3FwJL2JFmtG+lP8WqN/onVUXlTWhQ7 7ijqCS/Qf7GuKvBQdoVxlQ3ITTBDRSJ4fMXaDsLxJKig2nISdPT5DyoK8sr0glsD ILeuvoiKlfsR9HVuGdT4eSRFMP+5bdzgmQr07zVV2XdptXLkxcC90XfQQkGjDI5R d/TJ4mqjksVkjAvToGq4HwMpUb8awO70xMVBInLxWLFa6P6P7ROl2G09fRzopIC/ 0K4rWvALvsGfv1THrQaeXS+gCrmxy9CWko+qJ9dQWCJU -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:36 2026 by rpki-client