This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/Y4Ju69pl9WjiYV9lWp9audfApt8.roa File: Y4Ju69pl9WjiYV9lWp9audfApt8.roa (raw, json) Hash identifier: Gl1GkwHB6Z8deSvqoRDw7UqcxI8zxJVnp+wWJEZz2jc= Subject key identifier: 63:82:6E:EB:DA:65:F5:68:E2:61:5F:65:5A:9F:5A:B9:D7:C0:A6:DF Certificate issuer: /CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e Certificate serial: 019B79ECFAB1B59D43C206253DBCC6A89C05 Authority key identifier: FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/Y4Ju69pl9WjiYV9lWp9audfApt8.roa Signing time: Thu 01 Jan 2026 14:18:52 +0000 ROA not before: Thu 01 Jan 2026 14:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213106 IP address blocks: 2001:bf7:1320::/44 maxlen: 48 2001:bf7:1321::/48 maxlen: 48 2001:bf7:1350::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:fa:b1:b5:9d:43:c2:06:25:3d:bc:c6:a8:9c:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e Validity Not Before: Jan 1 14:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63826eebda65f568e2615f655a9f5ab9d7c0a6df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4e:cb:49:cd:37:67:53:02:fb:90:e0:d5:7a: d6:ed:31:f7:35:22:27:10:29:2d:e6:a3:86:4d:c9: 17:fc:76:4f:f4:d1:3f:2c:63:91:9b:48:a4:b2:fd: 1f:49:03:58:d4:88:2b:b3:d7:be:5f:e8:2f:41:94: d6:28:3d:87:f3:12:e7:71:c4:52:b6:dc:58:66:1a: d3:a9:ce:79:9a:58:08:9e:91:52:6a:a0:90:65:9a: fa:04:12:86:6d:34:81:4c:f9:6a:44:29:cb:59:14: 87:1d:b2:7a:af:7b:92:56:2a:b9:30:90:b9:3b:2b: 21:e3:ab:4b:7e:46:48:7a:83:45:7b:1a:c4:1b:dd: 55:98:7c:71:a9:90:82:51:73:0d:f9:fa:5d:e4:76: e1:97:95:1d:bc:c4:25:02:64:2b:ab:43:d6:a6:63: 08:16:f4:3c:55:36:5f:4a:f5:9b:54:8c:53:4a:a3: d5:ea:43:a3:ea:b1:8b:94:a7:fc:39:96:43:d6:69: 70:14:7f:ff:f6:8d:8a:0c:b2:76:54:b5:5e:c8:32: 26:26:5d:f8:3d:9f:aa:e6:34:e2:e8:56:6e:e1:4b: df:e3:73:59:a3:7d:4a:d0:f6:a1:09:59:c7:6c:e5: b3:5e:96:72:2f:77:40:cf:33:6e:45:0a:15:8f:fc: 94:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:82:6E:EB:DA:65:F5:68:E2:61:5F:65:5A:9F:5A:B9:D7:C0:A6:DF X509v3 Authority Key Identifier: keyid:FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/Y4Ju69pl9WjiYV9lWp9audfApt8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:bf7:1320::/44 2001:bf7:1350::/44 Signature Algorithm: sha256WithRSAEncryption 70:18:d5:10:38:cb:61:1d:f9:be:fa:40:69:9c:9e:9d:5a:a6: 56:58:c5:a0:77:67:6c:81:fd:fe:fd:ca:9e:ce:d8:1e:01:e4: b1:96:6d:a1:59:1c:6d:13:d6:df:ac:49:c9:6c:02:28:cd:0f: 4e:5f:6b:c9:2d:99:4d:4a:19:ea:b7:20:df:8b:6b:af:d4:58: 69:71:b2:79:11:4f:a0:68:8f:94:d7:30:b9:2b:09:34:a8:c3: 44:7f:91:7c:3f:1f:fe:3a:7e:5f:0a:b6:0a:cb:99:c7:d9:57: 30:12:5a:c1:93:1c:e4:9b:e6:1b:fe:ce:f7:21:74:3f:6d:b1: e8:ba:c9:50:66:e5:5e:6f:57:5e:a5:45:6c:b4:ed:1f:26:28: 17:ac:56:93:70:08:1b:59:72:2b:46:66:19:bd:81:8e:72:3c: 66:cc:c2:82:af:73:10:d6:fa:d9:db:51:db:a8:d0:29:63:d9: 0e:73:7f:80:53:30:37:83:4c:87:fe:c9:6c:e0:6e:a7:92:1f: d2:bf:e1:72:85:72:aa:09:6d:9e:33:08:27:66:5f:a5:1a:d6: eb:75:97:a1:59:71:5a:dc:a5:81:a5:9d:f2:d0:64:ee:66:fc: 2c:39:34:bf:0e:8d:80:3e:39:e4:35:c8:db:fb:4b:08:cc:c8: 64:c3:9d:a4 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt57PqxtZ1DwgYlPbzGqJwFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMzE0OTI0NzNhNzhjNmZlOWY1MzlmOWZhN2QyMjUyNTYw YTJiN2UwHhcNMjYwMTAxMTQxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzgyNmVlYmRhNjVmNTY4ZTI2MTVmNjU1YTlmNWFiOWQ3YzBhNmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsU7LSc03Z1MC+5Dg1XrW7TH3NSIn ECkt5qOGTckX/HZP9NE/LGORm0iksv0fSQNY1Igrs9e+X+gvQZTWKD2H8xLnccRS ttxYZhrTqc55mlgInpFSaqCQZZr6BBKGbTSBTPlqRCnLWRSHHbJ6r3uSViq5MJC5 Oysh46tLfkZIeoNFexrEG91VmHxxqZCCUXMN+fpd5Hbhl5UdvMQlAmQrq0PWpmMI FvQ8VTZfSvWbVIxTSqPV6kOj6rGLlKf8OZZD1mlwFH//9o2KDLJ2VLVeyDImJl34 PZ+q5jTi6FZu4Uvf43NZo31K0PahCVnHbOWzXpZyL3dAzzNuRQoVj/yUOwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFGOCbuvaZfVo4mFfZVqfWrnXwKbfMB8GA1UdIwQY MBaAFP8xSSRzp4xv6fU5+fp9IlJWCit+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDct NzNmZDNiYzE5YWE3LzEvWTRKdTY5cGw5V2ppWVY5bFdwOWF1ZGZBcHQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDctNzNmZDNiYzE5YWE3 LzEvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEIAEL9xMg AwcEIAEL9xNQMA0GCSqGSIb3DQEBCwUAA4IBAQBwGNUQOMthHfm++kBpnJ6dWqZW WMWgd2dsgf3+/cqeztgeAeSxlm2hWRxtE9bfrEnJbAIozQ9OX2vJLZlNShnqtyDf i2uv1FhpcbJ5EU+gaI+U1zC5Kwk0qMNEf5F8Px/+On5fCrYKy5nH2VcwElrBkxzk m+Yb/s73IXQ/bbHouslQZuVeb1depUVstO0fJigXrFaTcAgbWXIrRmYZvYGOcjxm zMKCr3MQ1vrZ21HbqNApY9kOc3+AUzA3g0yH/sls4G6nkh/Sv+FyhXKqCW2eMwgn Zl+lGtbrdZehWXFa3KWBpZ3y0GTuZvwsOTS/Do2APjnkNcjb+0sIzMhkw52k -----END CERTIFICATE-----Generated at Mon Jan 26 08:38:43 2026 by rpki-client