This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/YPTBhCi-2wZ5UQb5ApiuqyrwwNM.roa File: YPTBhCi-2wZ5UQb5ApiuqyrwwNM.roa (raw, json) Hash identifier: XFRYmJaoPXSuRaNORpMPCGlJK9aNC4fFNx6j6pcG01w= Subject key identifier: 60:F4:C1:84:28:BE:DB:06:79:51:06:F9:02:98:AE:AB:2A:F0:C0:D3 Certificate issuer: /CN=fa630c3d23c6046c2f1a7e0c8fccbd83e20ed4c7 Certificate serial: 019B797DF0700146FC96AC555E731704239F Authority key identifier: FA:63:0C:3D:23:C6:04:6C:2F:1A:7E:0C:8F:CC:BD:83:E2:0E:D4:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/YPTBhCi-2wZ5UQb5ApiuqyrwwNM.roa Signing time: Thu 01 Jan 2026 12:17:35 +0000 ROA not before: Thu 01 Jan 2026 12:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3399 IP address blocks: 2001:678:5d8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft rsync://rpki.ripe.net/repository/DEFAULT/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:f0:70:01:46:fc:96:ac:55:5e:73:17:04:23:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa630c3d23c6046c2f1a7e0c8fccbd83e20ed4c7 Validity Not Before: Jan 1 12:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=60f4c18428bedb06795106f90298aeab2af0c0d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:91:74:cb:e2:74:f2:be:1b:e2:79:76:04:19: e2:48:29:4d:3a:1e:fd:63:65:2a:ad:7e:dc:53:01: a1:b2:18:db:a8:20:fd:a2:a3:9d:2a:33:ad:90:db: ee:13:80:06:bb:2c:ac:f8:20:a2:07:66:c4:b9:15: 83:a9:fa:fe:c5:7b:28:0d:a0:49:72:d8:15:50:c4: e6:fc:01:ad:2f:e0:c8:c2:d0:82:94:df:30:51:ac: ed:1b:0a:c8:a1:6d:b5:a5:dc:46:c3:02:68:71:2d: f1:27:c7:ab:a1:84:59:07:f3:52:ee:e4:fe:95:b0: 90:e6:d2:8d:42:bd:3f:48:88:87:5c:fb:d4:06:48: c7:6d:bc:28:85:cc:41:df:ed:d8:1f:f6:3c:25:2f: 3b:b0:9e:b8:d4:a5:75:77:91:62:44:6d:5b:2e:99: db:b8:d4:61:66:98:49:11:a7:ed:49:b5:2c:a4:79: 44:8f:bd:cf:2b:01:97:4f:ff:d5:80:17:ba:29:42: c2:ac:2c:72:99:82:9c:4d:f0:24:5e:b9:a1:3f:66: a2:96:36:c5:be:7b:10:0b:f9:e1:49:a3:86:43:45: 72:fb:00:33:2b:ec:01:c3:f2:9b:74:82:02:3a:9e: 7a:0f:90:28:33:1d:51:22:4b:4c:fc:dc:79:90:81: 47:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:F4:C1:84:28:BE:DB:06:79:51:06:F9:02:98:AE:AB:2A:F0:C0:D3 X509v3 Authority Key Identifier: keyid:FA:63:0C:3D:23:C6:04:6C:2F:1A:7E:0C:8F:CC:BD:83:E2:0E:D4:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/YPTBhCi-2wZ5UQb5ApiuqyrwwNM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:5d8::/48 Signature Algorithm: sha256WithRSAEncryption 21:00:38:6d:aa:35:80:f2:ef:ea:fd:3b:9a:26:1f:85:33:31: fe:c5:02:52:b0:d7:75:3c:2e:f3:a8:b7:a8:a3:6b:86:62:b6: 85:04:0a:a0:96:4b:fa:d7:f0:cf:c2:dc:fe:95:84:cd:a2:e5: 54:e8:de:c2:5d:00:70:c3:15:35:db:e0:9b:f5:3a:f4:ef:87: 81:77:13:90:8b:95:ee:53:cc:bd:f4:79:65:6b:40:e3:7f:37: 74:0f:aa:83:b1:c5:5d:5a:74:1e:ff:0c:6c:df:40:59:29:80: cf:ac:26:a9:6f:ab:dc:a1:44:77:02:a8:48:90:f2:05:93:d2: f6:5d:03:c6:71:f5:f3:23:20:da:63:03:95:74:b5:d8:6e:f6: 76:90:d7:86:c2:7a:90:5d:7d:ed:f0:fb:58:70:6f:a2:90:98: 2c:cb:fa:fa:c3:81:8f:70:14:28:71:80:7c:8f:ac:7a:82:5d: cb:61:38:ed:67:87:94:cd:1a:eb:f1:a0:d9:e5:c7:1b:f0:4a: af:b0:ec:7e:cf:f0:6c:2c:79:6d:6a:3a:cb:4a:ae:e5:4f:8e: 72:93:1d:c1:55:d9:52:59:ee:ba:fa:4b:3d:06:23:af:84:59: c6:50:f0:0b:0c:95:0a:b7:a8:46:fb:a1:bd:8a:d2:d8:9d:7c: 98:c1:c5:f1 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgISAZt5ffBwAUb8lqxVXnMXBCOfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhNjMwYzNkMjNjNjA0NmMyZjFhN2UwYzhmY2NiZDgzZTIw ZWQ0YzcwHhcNMjYwMTAxMTIxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MGY0YzE4NDI4YmVkYjA2Nzk1MTA2ZjkwMjk4YWVhYjJhZjBjMGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZF0y+J08r4b4nl2BBniSClNOh79 Y2UqrX7cUwGhshjbqCD9oqOdKjOtkNvuE4AGuyys+CCiB2bEuRWDqfr+xXsoDaBJ ctgVUMTm/AGtL+DIwtCClN8wUaztGwrIoW21pdxGwwJocS3xJ8eroYRZB/NS7uT+ lbCQ5tKNQr0/SIiHXPvUBkjHbbwohcxB3+3YH/Y8JS87sJ641KV1d5FiRG1bLpnb uNRhZphJEaftSbUspHlEj73PKwGXT//VgBe6KULCrCxymYKcTfAkXrmhP2ailjbF vnsQC/nhSaOGQ0Vy+wAzK+wBw/KbdIICOp56D5AoMx1RIktM/Nx5kIFHsQIDAQAB o4ICDjCCAgowHQYDVR0OBBYEFGD0wYQovtsGeVEG+QKYrqsq8MDTMB8GA1UdIwQY MBaAFPpjDD0jxgRsLxp+DI/MvYPiDtTHMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1tTU1QU1BHQkd3dkduNE1qOHk5Zy1JTzFNYy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMvNDlhZDk3LTIxZjEtNGNjOS1iNzc2 LThjYmVlNWEwMjdjMy8xL1lQVEJoQ2ktMndaNVVRYjVBcGl1cXlyd3dOTS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYmMvNDlhZDk3LTIxZjEtNGNjOS1iNzc2LThjYmVlNWEwMjdj My8xLzEtbU1NUFNQR0JHd3ZHbjRNajh5OWctSU8xTWMuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAQZ4 BdgwDQYJKoZIhvcNAQELBQADggEBACEAOG2qNYDy7+r9O5omH4UzMf7FAlKw13U8 LvOot6ija4ZitoUECqCWS/rX8M/C3P6VhM2i5VTo3sJdAHDDFTXb4Jv1OvTvh4F3 E5CLle5TzL30eWVrQON/N3QPqoOxxV1adB7/DGzfQFkpgM+sJqlvq9yhRHcCqEiQ 8gWT0vZdA8Zx9fMjINpjA5V0tdhu9naQ14bCepBdfe3w+1hwb6KQmCzL+vrDgY9w FChxgHyPrHqCXcthOO1nh5TNGuvxoNnlxxvwSq+w7H7P8GwseW1qOstKruVPjnKT HcFV2VJZ7rr6Sz0GI6+EWcZQ8AsMlQq3qEb7ob2K0tidfJjBxfE= -----END CERTIFICATE-----Generated at Sun Jan 25 21:04:39 2026 by rpki-client