This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/yHbHdVra8JQS6bdIo32Jx7OYffk.roa File: yHbHdVra8JQS6bdIo32Jx7OYffk.roa (raw, json) Hash identifier: ScC+mBQJVOrQxUSi9bIaW+yLlmfLXJYJdtutIzPb38o= Subject key identifier: C8:76:C7:75:5A:DA:F0:94:12:E9:B7:48:A3:7D:89:C7:B3:98:7D:F9 Certificate issuer: /CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f Certificate serial: 019B7FF1E5A5F958EE1F076482F6A23C68BD Authority key identifier: 71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/yHbHdVra8JQS6bdIo32Jx7OYffk.roa Signing time: Fri 02 Jan 2026 18:21:57 +0000 ROA not before: Fri 02 Jan 2026 18:21:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213378 IP address blocks: 2a07:5680:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:e5:a5:f9:58:ee:1f:07:64:82:f6:a2:3c:68:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f Validity Not Before: Jan 2 18:21:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c876c7755adaf09412e9b748a37d89c7b3987df9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5c:a9:b5:8d:a3:51:68:2f:5c:24:7d:59:43: e4:3d:88:93:01:79:84:2b:49:7a:fb:95:92:04:6c: bf:36:8b:75:a6:8d:1b:c2:38:19:13:82:19:0b:a1: 65:01:07:21:9f:96:c2:76:a2:af:a5:37:95:f8:ba: 34:c2:7f:a6:6c:47:a5:ec:2d:a5:48:ac:1a:22:9e: d7:48:9f:34:77:a2:96:7d:f4:c5:ed:6f:a2:30:0a: cf:5d:09:91:6a:17:f4:53:e8:a7:65:38:c0:59:18: fd:e5:92:42:b2:23:2c:10:68:07:de:a9:ef:aa:a4: 37:37:69:1a:08:0d:8e:35:99:78:b5:14:da:63:06: d1:0c:8f:0c:0b:c0:25:71:e6:42:e3:37:20:68:cc: 30:14:d5:05:01:10:01:07:d3:7a:c0:e1:c6:03:8d: 4b:84:54:46:f2:25:0a:0c:7b:7f:ac:77:9c:a9:40: f3:66:6a:ca:e5:cc:ef:32:c9:a8:49:26:e3:d3:5a: 2c:a4:88:7d:91:60:a8:c2:1d:a3:26:e2:d4:a0:ca: 49:12:4a:77:7d:e1:18:90:33:db:96:38:fb:5c:50: 5d:19:52:e5:03:53:b5:fa:7b:de:e8:be:90:fd:12: 52:3b:04:0d:36:4f:95:70:10:72:1e:f3:ca:7a:0a: 81:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:76:C7:75:5A:DA:F0:94:12:E9:B7:48:A3:7D:89:C7:B3:98:7D:F9 X509v3 Authority Key Identifier: keyid:71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/yHbHdVra8JQS6bdIo32Jx7OYffk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:5680:2::/48 Signature Algorithm: sha256WithRSAEncryption 38:c4:26:01:e0:d0:f2:ec:80:6f:ed:3a:af:69:eb:b5:7f:df: 6e:33:71:19:11:a9:e9:73:88:4c:af:5a:65:2d:9c:df:70:83: 9e:b4:8f:3d:0a:dd:f1:ae:c9:08:30:cc:96:4b:d6:db:5c:f4: 3a:1a:c1:2a:3d:ae:78:ed:1b:15:87:c8:ac:3f:d9:1f:1c:e6: 04:f7:37:76:88:86:af:59:96:24:38:e4:35:27:6f:3c:43:04: 20:b8:59:4d:d1:97:ae:ec:67:31:f3:fe:cc:fb:3c:d5:af:98: 34:01:15:c8:d1:02:23:d2:a7:d7:32:81:ce:f4:82:c2:a8:47: 70:19:16:42:60:d5:a8:ab:fd:24:2f:ef:c6:2c:91:c5:6a:f6: ee:38:ee:90:9a:80:7a:85:01:b6:0d:66:0f:d6:2c:39:a3:cf: 16:1d:de:f6:29:fc:78:6a:a9:34:61:e9:bb:ae:1a:df:f6:77: 9b:d8:0f:9a:c8:95:92:72:d3:fd:bc:f7:27:26:2b:27:11:ae: bb:d2:70:94:2b:b1:ba:42:ec:16:65:73:34:65:7e:b1:17:de: 05:78:93:f7:38:48:80:35:7c:72:b0:08:d6:b0:47:42:18:95: 3b:e0:11:78:89:c0:e3:fc:90:ad:c8:d6:dd:85:a9:1a:fe:9b: 8b:c5:13:06 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/8eWl+VjuHwdkgvaiPGi9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMmYyMjY5ZDE1NjMzYmRiYzcxZDhjZDNmNDU4Y2JkMDNm ZTAzMWYwHhcNMjYwMTAyMTgyMTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODc2Yzc3NTVhZGFmMDk0MTJlOWI3NDhhMzdkODljN2IzOTg3ZGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FyptY2jUWgvXCR9WUPkPYiTAXmE K0l6+5WSBGy/Not1po0bwjgZE4IZC6FlAQchn5bCdqKvpTeV+Lo0wn+mbEel7C2l SKwaIp7XSJ80d6KWffTF7W+iMArPXQmRahf0U+inZTjAWRj95ZJCsiMsEGgH3qnv qqQ3N2kaCA2ONZl4tRTaYwbRDI8MC8AlceZC4zcgaMwwFNUFARABB9N6wOHGA41L hFRG8iUKDHt/rHecqUDzZmrK5czvMsmoSSbj01ospIh9kWCowh2jJuLUoMpJEkp3 feEYkDPbljj7XFBdGVLlA1O1+nve6L6Q/RJSOwQNNk+VcBByHvPKegqB1QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMh2x3Va2vCUEum3SKN9icezmH35MB8GA1UdIwQY MBaAFHEvImnRVjO9vHHYzT9FjL0D/gMfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1M4aWFkRldNNzI4Y2RqTlAwV012UVAtQXg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9lNjM3M2MtNTNjZC00ZmQ1LWE0MzUt ZDE4YmFiOTUxNWJmLzEveUhiSGRWcmE4SlFTNmJkSW8zMkp4N09ZZmZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9lNjM3M2MtNTNjZC00ZmQ1LWE0MzUtZDE4YmFiOTUxNWJm LzEvY1M4aWFkRldNNzI4Y2RqTlAwV012UVAtQXg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdWgAAC MA0GCSqGSIb3DQEBCwUAA4IBAQA4xCYB4NDy7IBv7Tqvaeu1f99uM3EZEanpc4hM r1plLZzfcIOetI89Ct3xrskIMMyWS9bbXPQ6GsEqPa547RsVh8isP9kfHOYE9zd2 iIavWZYkOOQ1J288QwQguFlN0Zeu7Gcx8/7M+zzVr5g0ARXI0QIj0qfXMoHO9ILC qEdwGRZCYNWoq/0kL+/GLJHFavbuOO6QmoB6hQG2DWYP1iw5o88WHd72Kfx4aqk0 Yem7rhrf9neb2A+ayJWSctP9vPcnJisnEa670nCUK7G6QuwWZXM0ZX6xF94FeJP3 OEiANXxysAjWsEdCGJU74BF4icDj/JCtyNbdhaka/puLxRMG -----END CERTIFICATE-----Generated at Sun Jan 25 15:13:58 2026 by rpki-client