This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/YxAyMLVZBrOwdzf8vDa5AtXQfYM.roa File: YxAyMLVZBrOwdzf8vDa5AtXQfYM.roa (raw, json) Hash identifier: Qq6ogFgDN4EOjnq+f9NCyesKbJbW/svA1UdP0OEqezc= Subject key identifier: 63:10:32:30:B5:59:06:B3:B0:77:37:FC:BC:36:B9:02:D5:D0:7D:83 Certificate issuer: /CN=a7a4e23482268475c1b935637d0002c2fd2993b8 Certificate serial: 019BB2B4D577D876491F35A345970F2BAA40 Authority key identifier: A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/YxAyMLVZBrOwdzf8vDa5AtXQfYM.roa Signing time: Mon 12 Jan 2026 14:55:54 +0000 ROA not before: Mon 12 Jan 2026 14:55:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213703 IP address blocks: 2a14:ae00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b2:b4:d5:77:d8:76:49:1f:35:a3:45:97:0f:2b:aa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7a4e23482268475c1b935637d0002c2fd2993b8 Validity Not Before: Jan 12 14:55:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63103230b55906b3b07737fcbc36b902d5d07d83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:88:23:8c:e7:aa:1c:64:b1:c0:fd:4d:e5:4d: a6:03:3d:a4:b8:97:e9:67:ec:1b:07:86:4b:fb:75: 51:e0:dd:94:77:88:19:55:4c:1c:c4:64:7f:96:fd: d2:09:99:59:10:ea:40:19:d4:bc:1c:83:ec:40:3f: 50:c0:28:53:07:ed:83:6f:c7:3e:11:29:b5:a6:cd: 7f:93:39:c6:f5:2f:0e:02:c0:25:0c:00:17:8d:b0: 60:a1:36:ae:3c:8b:80:e3:99:59:1a:61:db:ab:d9: 73:90:59:26:ad:64:87:09:9e:18:a5:f5:6e:39:33: aa:61:b6:c2:ce:88:46:7b:02:22:f6:9c:3e:cb:4d: bb:0c:7e:92:ac:3e:95:18:81:bd:ed:58:fe:6f:0a: c3:71:6b:92:a6:3e:05:ca:56:85:89:15:67:87:5e: 72:4a:f0:f3:df:7d:b7:2c:38:18:71:59:10:5f:ff: ed:72:6e:33:dc:fb:d1:29:ea:11:c2:6f:b9:23:71: 85:79:5e:f8:2d:a3:dd:27:56:e6:b8:ea:53:b9:a7: 08:fc:82:4b:5b:b4:5b:f2:07:22:d8:17:81:94:bd: ec:d7:b9:df:45:8b:6c:05:67:f7:bc:05:cd:78:9e: 6e:fc:e6:bf:76:1b:81:85:8f:29:2e:54:73:8e:41: ef:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:10:32:30:B5:59:06:B3:B0:77:37:FC:BC:36:B9:02:D5:D0:7D:83 X509v3 Authority Key Identifier: keyid:A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/YxAyMLVZBrOwdzf8vDa5AtXQfYM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:ae00::/48 Signature Algorithm: sha256WithRSAEncryption 72:4a:90:29:90:d2:fc:26:6c:7f:39:53:0d:25:d7:10:1a:c7: bd:21:ab:1a:5a:48:d1:bd:54:1e:8b:00:52:c6:9e:e9:50:38: fa:f0:de:e3:b5:48:54:50:63:d0:97:61:47:cf:d1:e6:88:db: e8:36:ac:6b:af:a7:dc:2a:1f:84:58:b8:d2:ac:7f:9d:5b:25: 1b:ca:91:75:30:91:31:27:38:e5:e2:14:a2:44:b2:ab:39:b1: 30:d8:a9:bd:3a:80:9a:a7:fd:1d:fd:88:f3:3b:6e:92:cc:5f: 71:77:43:16:3d:85:a1:29:c0:83:1e:bf:65:bc:98:78:65:58: 93:c1:31:eb:41:73:dc:44:c8:0b:5d:94:76:70:53:ce:9c:df: 21:b5:32:81:3b:5f:7f:9c:25:77:0e:a8:46:51:5b:ca:0b:cb: 05:cb:8d:54:11:d0:5b:82:41:5d:82:00:4b:e3:9f:aa:60:15: d8:28:4a:6d:bf:0a:6c:15:11:16:cd:74:c3:18:be:a6:4f:85: de:7e:e4:97:2c:ff:75:ce:7c:16:17:d4:1c:2f:1b:48:38:11: 38:05:6f:a3:bb:16:f0:a8:ae:75:a1:4c:f1:d1:0c:9c:53:1e: 2f:99:8c:9b:2a:73:e8:73:0b:5f:4d:b9:98:b0:2c:11:33:d6: 3e:8f:8c:8a -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZuytNV32HZJHzWjRZcPK6pAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3YTRlMjM0ODIyNjg0NzVjMWI5MzU2MzdkMDAwMmMyZmQy OTkzYjgwHhcNMjYwMTEyMTQ1NTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzEwMzIzMGI1NTkwNmIzYjA3NzM3ZmNiYzM2YjkwMmQ1ZDA3ZDgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ogjjOeqHGSxwP1N5U2mAz2kuJfp Z+wbB4ZL+3VR4N2Ud4gZVUwcxGR/lv3SCZlZEOpAGdS8HIPsQD9QwChTB+2Db8c+ ESm1ps1/kznG9S8OAsAlDAAXjbBgoTauPIuA45lZGmHbq9lzkFkmrWSHCZ4YpfVu OTOqYbbCzohGewIi9pw+y027DH6SrD6VGIG97Vj+bwrDcWuSpj4FylaFiRVnh15y SvDz3323LDgYcVkQX//tcm4z3PvRKeoRwm+5I3GFeV74LaPdJ1bmuOpTuacI/IJL W7Rb8gci2BeBlL3s17nfRYtsBWf3vAXNeJ5u/Oa/dhuBhY8pLlRzjkHvswIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGMQMjC1WQazsHc3/Lw2uQLV0H2DMB8GA1UdIwQY MBaAFKek4jSCJoR1wbk1Y30AAsL9KZO4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDZUaU5JSW1oSFhCdVRWamZRQUN3djBwazdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wN2Y2MjMtMTRmYi00YTgwLTlmNDYt MjMzMzFiNjQ5MTZjLzEvWXhBeU1MVlpCck93ZHpmOHZEYTVBdFhRZllNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wN2Y2MjMtMTRmYi00YTgwLTlmNDYtMjMzMzFiNjQ5MTZj LzEvcDZUaU5JSW1oSFhCdVRWamZRQUN3djBwazdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhSuAAAA MA0GCSqGSIb3DQEBCwUAA4IBAQBySpApkNL8Jmx/OVMNJdcQGse9IasaWkjRvVQe iwBSxp7pUDj68N7jtUhUUGPQl2FHz9HmiNvoNqxrr6fcKh+EWLjSrH+dWyUbypF1 MJExJzjl4hSiRLKrObEw2Km9OoCap/0d/YjzO26SzF9xd0MWPYWhKcCDHr9lvJh4 ZViTwTHrQXPcRMgLXZR2cFPOnN8htTKBO19/nCV3DqhGUVvKC8sFy41UEdBbgkFd ggBL45+qYBXYKEptvwpsFREWzXTDGL6mT4XefuSXLP91znwWF9QcLxtIOBE4BW+j uxbwqK51oUzx0QycUx4vmYybKnPocwtfTbmYsCwRM9Y+j4yK -----END CERTIFICATE-----Generated at Sun Jan 25 19:15:58 2026 by rpki-client