This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/yL6M7fiRcsCEJ9f3V81bkWsxt2k.roa File: yL6M7fiRcsCEJ9f3V81bkWsxt2k.roa (raw, json) Hash identifier: hMXJaJNre81zhT3gUCMgF7Syv2XmMikjjKFj903XrQI= Subject key identifier: C8:BE:8C:ED:F8:91:72:C0:84:27:D7:F7:57:CD:5B:91:6B:31:B7:69 Certificate issuer: /CN=edb04a943332768017266f4e5f56c006d98ebbb4 Certificate serial: 019B7D5CF3B419A9497439C0D7879A1875C6 Authority key identifier: ED:B0:4A:94:33:32:76:80:17:26:6F:4E:5F:56:C0:06:D9:8E:BB:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/yL6M7fiRcsCEJ9f3V81bkWsxt2k.roa Signing time: Fri 02 Jan 2026 06:20:02 +0000 ROA not before: Fri 02 Jan 2026 06:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396253 IP address blocks: 2a03:b8c0:15::/48 maxlen: 48 2a03:b8c0:19::/48 maxlen: 48 2a03:b8c0:1a::/48 maxlen: 48 2a03:b8c0:1b::/48 maxlen: 48 2a03:b8c0:1c::/48 maxlen: 48 2a03:b8c0:1d::/48 maxlen: 48 2a03:b8c0:1e::/48 maxlen: 48 2a03:b8c0:20::/48 maxlen: 48 2a03:b8c0:21::/48 maxlen: 48 2a03:b8c0:22::/48 maxlen: 48 2a03:b8c0:23::/48 maxlen: 48 2a03:b8c0:24::/48 maxlen: 48 2a03:b8c0:25::/48 maxlen: 48 2a03:b8c0:28::/48 maxlen: 48 2a03:b8c0:29::/48 maxlen: 48 2a03:b8c0:2a::/48 maxlen: 48 2a03:b8c0:2b::/48 maxlen: 48 2a03:b8c0:2c::/48 maxlen: 48 2a03:b8c0:2d::/48 maxlen: 48 2a03:b8c0:2e::/48 maxlen: 48 2a03:b8c0:2f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:f3:b4:19:a9:49:74:39:c0:d7:87:9a:18:75:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edb04a943332768017266f4e5f56c006d98ebbb4 Validity Not Before: Jan 2 06:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8be8cedf89172c08427d7f757cd5b916b31b769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:50:ea:9d:ac:9a:7a:94:e1:c1:92:fb:12:83: da:b9:1d:a1:c6:ff:f5:9b:b8:2e:28:65:68:c4:05: 95:74:49:3d:0f:d4:90:52:ce:36:6a:10:fe:b2:ac: b1:13:f1:bf:09:b0:15:ce:82:ce:c4:3d:c4:3b:7c: 9f:77:16:b2:f8:22:d4:82:2b:cc:ca:62:53:f8:3a: 6a:af:0d:68:43:7d:47:6d:b6:f5:53:70:99:15:0e: fb:2a:8d:50:67:12:33:5d:13:f7:c3:e5:16:73:66: ae:e7:2a:d8:54:6e:bc:e4:ac:b1:8d:cb:84:7a:cb: 00:68:d3:d5:3c:a9:a6:1c:f9:95:e3:01:35:cd:73: 2a:5c:72:59:63:f0:90:b3:0d:49:9a:4f:fc:4f:bb: 4c:44:d3:44:34:85:e1:96:f7:ea:4d:56:9f:52:91: e5:c1:60:1f:fc:47:5e:98:f1:ec:2e:6f:02:f8:ab: 9e:ed:41:5e:35:e6:8b:ee:18:45:bb:6e:c7:73:bc: fb:56:8b:88:af:a6:a7:fc:60:39:b0:64:a0:a5:dd: 9a:24:6f:3f:af:23:36:fa:fc:89:88:c7:27:cb:7e: 28:5f:b1:6a:a4:4f:c6:26:06:7f:3b:2a:b7:a2:18: 0e:98:86:69:5f:9f:92:b9:f6:0c:c2:f3:1d:b6:48: 35:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:BE:8C:ED:F8:91:72:C0:84:27:D7:F7:57:CD:5B:91:6B:31:B7:69 X509v3 Authority Key Identifier: keyid:ED:B0:4A:94:33:32:76:80:17:26:6F:4E:5F:56:C0:06:D9:8E:BB:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/yL6M7fiRcsCEJ9f3V81bkWsxt2k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:b8c0:15::/48 2a03:b8c0:19::-2a03:b8c0:1e:ffff:ffff:ffff:ffff:ffff 2a03:b8c0:20::-2a03:b8c0:25:ffff:ffff:ffff:ffff:ffff 2a03:b8c0:28::/45 Signature Algorithm: sha256WithRSAEncryption 24:17:0a:0c:81:27:8c:ce:54:53:dd:ec:02:14:21:36:c4:f8: 71:57:b7:fb:d5:4e:b8:66:48:ca:15:b1:2f:fb:ab:61:b8:94: 91:86:0b:db:a0:06:06:af:f3:9f:55:02:e5:93:8e:5c:fe:63: de:a4:8b:8c:96:c7:ab:35:e5:ba:b1:2b:cd:08:d3:ce:2a:42: 78:dc:a1:20:79:df:23:bb:bc:1e:03:89:61:b0:2e:ce:aa:b2: 78:2c:0d:5d:a5:45:8c:74:9d:cb:fa:8d:46:3a:75:7f:5d:b8: 42:44:cf:d3:7f:a3:16:16:49:47:f6:ae:44:18:78:4f:82:53: 47:0f:22:56:b9:9a:4e:77:78:c2:70:f4:73:0e:32:fb:16:4f: 7c:fe:32:0d:8a:b0:9f:16:8d:8f:fd:1b:e4:40:e6:ce:87:2f: 0f:32:e2:6c:b1:78:f3:6a:28:eb:32:a0:39:1a:e2:50:7e:8d: 07:6e:69:cd:f8:a9:da:5f:e8:74:f6:13:b6:b7:af:95:b8:d4: 37:a9:e1:c8:a9:80:c6:9a:45:07:2b:2d:cb:75:88:95:e9:11: 05:13:0f:1d:76:7e:49:6d:43:96:19:72:83:d6:f7:ab:5e:23: 05:4b:c5:c9:81:53:8b:2d:66:83:c3:1a:59:ae:29:9b:bb:1b: db:33:00:91 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgISAZt9XPO0GalJdDnA14eaGHXGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkYjA0YTk0MzMzMjc2ODAxNzI2NmY0ZTVmNTZjMDA2ZDk4 ZWJiYjQwHhcNMjYwMTAyMDYyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOGJlOGNlZGY4OTE3MmMwODQyN2Q3Zjc1N2NkNWI5MTZiMzFiNzY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1DqnayaepThwZL7EoPauR2hxv/1 m7guKGVoxAWVdEk9D9SQUs42ahD+sqyxE/G/CbAVzoLOxD3EO3yfdxay+CLUgivM ymJT+Dpqrw1oQ31Hbbb1U3CZFQ77Ko1QZxIzXRP3w+UWc2au5yrYVG685KyxjcuE essAaNPVPKmmHPmV4wE1zXMqXHJZY/CQsw1Jmk/8T7tMRNNENIXhlvfqTVafUpHl wWAf/EdemPHsLm8C+Kue7UFeNeaL7hhFu27Hc7z7VouIr6an/GA5sGSgpd2aJG8/ ryM2+vyJiMcny34oX7FqpE/GJgZ/Oyq3ohgOmIZpX5+SufYMwvMdtkg1YQIDAQAB o4ICPTCCAjkwHQYDVR0OBBYEFMi+jO34kXLAhCfX91fNW5FrMbdpMB8GA1UdIwQY MBaAFO2wSpQzMnaAFyZvTl9WwAbZjru0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2JCS2xETXlkb0FYSm05T1gxYkFCdG1PdTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81MGE0YzQtOTFkMS00MzExLWI2N2It ZTQ1ZmE2NGQ0ZDJkLzEveUw2TTdmaVJjc0NFSjlmM1Y4MWJrV3N4dDJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC81MGE0YzQtOTFkMS00MzExLWI2N2ItZTQ1ZmE2NGQ0ZDJk LzEvN2JCS2xETXlkb0FYSm05T1gxYkFCdG1PdTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFMGCCsGAQUFBwEHAQH/BEQwQjBABAIAAjA6AwcAKgO4wAAV MBIDBwAqA7jAABkDBwAqA7jAAB4wEgMHBSoDuMAAIAMHASoDuMAAJAMHAyoDuMAA KDANBgkqhkiG9w0BAQsFAAOCAQEAJBcKDIEnjM5UU93sAhQhNsT4cVe3+9VOuGZI yhWxL/urYbiUkYYL26AGBq/zn1UC5ZOOXP5j3qSLjJbHqzXlurErzQjTzipCeNyh IHnfI7u8HgOJYbAuzqqyeCwNXaVFjHSdy/qNRjp1f124QkTP03+jFhZJR/auRBh4 T4JTRw8iVrmaTnd4wnD0cw4y+xZPfP4yDYqwnxaNj/0b5EDmzocvDzLibLF482oo 6zKgORriUH6NB25pzfip2l/odPYTtrevlbjUN6nhyKmAxppFBysty3WIlekRBRMP HXZ+SW1Dlhlyg9b3q14jBUvFyYFTiy1mg8MaWa4pm7sb2zMAkQ== -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:42 2026 by rpki-client