This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/ryDpy6cdN2x4PxzZve738-RUKps.roa File: ryDpy6cdN2x4PxzZve738-RUKps.roa (raw, json) Hash identifier: 7P6XIPn0h99li8ImXCuSS48Xd7ty7D1xcOSjTfq3Khg= Subject key identifier: AF:20:E9:CB:A7:1D:37:6C:78:3F:1C:D9:BD:EE:F7:F3:E4:54:2A:9B Certificate issuer: /CN=c04db7623241d7e6678fc25751fa4e0b6665186b Certificate serial: 019B7B36CB2EDD8A70A0882E55CBC43B8C71 Authority key identifier: C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/ryDpy6cdN2x4PxzZve738-RUKps.roa Signing time: Thu 01 Jan 2026 20:19:06 +0000 ROA not before: Thu 01 Jan 2026 20:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6890 IP address blocks: 2001:67c:2ed4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:cb:2e:dd:8a:70:a0:88:2e:55:cb:c4:3b:8c:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c04db7623241d7e6678fc25751fa4e0b6665186b Validity Not Before: Jan 1 20:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af20e9cba71d376c783f1cd9bdeef7f3e4542a9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d2:c4:e9:b9:84:ce:f9:30:cb:86:77:84:40: 30:79:a7:03:19:c8:b9:ba:19:2d:7a:7d:6a:95:ed: 02:be:5f:c7:c3:18:4a:b1:e8:45:dd:a4:75:f8:64: f0:29:26:db:a8:10:a6:d7:17:36:e0:62:4e:64:0c: 31:c2:f3:36:08:0a:f0:bd:36:f8:50:62:b7:80:89: 00:bd:6a:d4:38:42:cc:fe:c4:fb:dc:98:86:81:e9: cd:b7:4d:0e:ef:b4:00:4e:ca:a3:05:be:7b:ce:ea: 85:8b:a1:c3:21:29:1d:7f:7f:5d:24:16:04:8a:a7: 6f:5b:fa:38:9e:b2:e1:73:50:23:54:1b:67:fa:d4: c9:c2:c1:79:e1:a2:89:89:29:a1:f9:10:4b:18:2c: 28:c8:5b:79:5b:26:ac:55:0d:70:16:02:5c:4b:aa: 8e:e2:62:db:b2:bd:70:de:5f:4c:e2:f0:2b:5a:97: 3b:8f:38:c2:fd:12:ac:18:ce:20:af:db:32:af:f8: 50:f7:55:5a:86:81:6d:08:b4:87:54:7c:70:8d:8d: 8a:77:6f:23:67:51:fb:df:79:f9:0f:b2:34:e2:bd: ca:b3:1a:6f:6c:1e:b4:03:e2:00:24:9c:61:69:22: 2b:dd:5a:c7:95:a2:34:91:8b:04:ce:6a:dc:25:8c: 8b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:20:E9:CB:A7:1D:37:6C:78:3F:1C:D9:BD:EE:F7:F3:E4:54:2A:9B X509v3 Authority Key Identifier: keyid:C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/ryDpy6cdN2x4PxzZve738-RUKps.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2ed4::/48 Signature Algorithm: sha256WithRSAEncryption 5e:b8:9d:3f:e5:a1:5e:89:74:bd:06:b7:38:b9:7e:7b:34:dd: e0:bb:4f:92:bb:75:2b:29:5a:73:8b:f0:f4:7d:65:a4:3f:9c: a2:85:84:48:e2:32:08:5e:42:f2:f3:80:c8:f3:8f:a4:e9:1d: b6:21:eb:63:07:1c:f0:84:11:aa:1e:6e:96:14:4d:e0:cf:ca: 4f:a0:5b:be:e0:10:21:58:46:2e:5d:9d:e9:3f:8f:27:43:02: 93:f6:c8:34:44:2d:c6:f6:fc:c7:d6:fb:b0:4b:1c:a0:cd:22: c9:e6:35:3a:4a:fc:d7:13:a7:05:13:53:4a:9c:1a:81:d4:da: 61:9e:8a:07:fd:ea:99:8e:ea:d1:26:82:2f:22:01:78:c8:cc: dd:50:1d:92:c8:ad:00:78:bb:64:1a:d3:af:3f:b0:47:42:9e: 13:e2:ed:ee:2d:17:47:95:2c:4e:9c:af:a2:f8:49:12:21:e7: 4e:a0:2a:27:b6:f5:46:41:5d:b9:a5:ad:40:a8:95:59:49:62: 24:67:4d:1b:41:81:d3:04:d3:98:a3:0b:30:45:9a:9b:f8:69: ad:3e:85:52:b4:02:7d:bb:a8:f8:e1:ae:98:03:05:17:b6:ba: ad:bd:0e:8c:66:bc:ca:af:f9:8e:87:c5:f8:44:31:51:fe:9f: 8b:a5:25:98 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7Nssu3YpwoIguVcvEO4xxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwNGRiNzYyMzI0MWQ3ZTY2NzhmYzI1NzUxZmE0ZTBiNjY2 NTE4NmIwHhcNMjYwMTAxMjAxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjIwZTljYmE3MWQzNzZjNzgzZjFjZDliZGVlZjdmM2U0NTQyYTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtLE6bmEzvkwy4Z3hEAweacDGci5 uhkten1qle0Cvl/HwxhKsehF3aR1+GTwKSbbqBCm1xc24GJOZAwxwvM2CArwvTb4 UGK3gIkAvWrUOELM/sT73JiGgenNt00O77QATsqjBb57zuqFi6HDISkdf39dJBYE iqdvW/o4nrLhc1AjVBtn+tTJwsF54aKJiSmh+RBLGCwoyFt5WyasVQ1wFgJcS6qO 4mLbsr1w3l9M4vArWpc7jzjC/RKsGM4gr9syr/hQ91VahoFtCLSHVHxwjY2Kd28j Z1H733n5D7I04r3KsxpvbB60A+IAJJxhaSIr3VrHlaI0kYsEzmrcJYyLsQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFK8g6cunHTdseD8c2b3u9/PkVCqbMB8GA1UdIwQY MBaAFMBNt2IyQdfmZ4/CV1H6TgtmZRhrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0UyM1lqSkIxLVpuajhKWFVmcE9DMlpsR0dzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC82ZTg3NGUtNzNmZS00ZGJiLWI3NGMt MDQyM2YyNjNmMmNiLzEvcnlEcHk2Y2ROMng0UHh6WnZlNzM4LVJVS3BzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC82ZTg3NGUtNzNmZS00ZGJiLWI3NGMtMDQyM2YyNjNmMmNi LzEvd0UyM1lqSkIxLVpuajhKWFVmcE9DMlpsR0dzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfC7U MA0GCSqGSIb3DQEBCwUAA4IBAQBeuJ0/5aFeiXS9Brc4uX57NN3gu0+Su3UrKVpz i/D0fWWkP5yihYRI4jIIXkLy84DI84+k6R22IetjBxzwhBGqHm6WFE3gz8pPoFu+ 4BAhWEYuXZ3pP48nQwKT9sg0RC3G9vzH1vuwSxygzSLJ5jU6SvzXE6cFE1NKnBqB 1NphnooH/eqZjurRJoIvIgF4yMzdUB2SyK0AeLtkGtOvP7BHQp4T4u3uLRdHlSxO nK+i+EkSIedOoContvVGQV25pa1AqJVZSWIkZ00bQYHTBNOYowswRZqb+GmtPoVS tAJ9u6j44a6YAwUXtrqtvQ6MZrzKr/mOh8X4RDFR/p+LpSWY -----END CERTIFICATE-----Generated at Mon Jan 26 10:13:57 2026 by rpki-client