This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/YKz64qjzkcbm2W2sbtXQlg38t8Y.roa File: YKz64qjzkcbm2W2sbtXQlg38t8Y.roa (raw, json) Hash identifier: md6cmjkCVjBhp2ILYsYMB25tfvee/yTEOqBHj6QyZqE= Subject key identifier: 60:AC:FA:E2:A8:F3:91:C6:E6:D9:6D:AC:6E:D5:D0:96:0D:FC:B7:C6 Certificate issuer: /CN=d98c4e8a0ea297d67b431aac438a1c20675ef867 Certificate serial: 019B77C6E6DE3950E4E871B1E7FC01F544C2 Authority key identifier: D9:8C:4E:8A:0E:A2:97:D6:7B:43:1A:AC:43:8A:1C:20:67:5E:F8:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YxOig6il9Z7QxqsQ4ocIGde-Gc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/YKz64qjzkcbm2W2sbtXQlg38t8Y.roa Signing time: Thu 01 Jan 2026 04:18:02 +0000 ROA not before: Thu 01 Jan 2026 04:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212950 IP address blocks: 2001:678:1040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft rsync://rpki.ripe.net/repository/DEFAULT/2YxOig6il9Z7QxqsQ4ocIGde-Gc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:e6:de:39:50:e4:e8:71:b1:e7:fc:01:f5:44:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d98c4e8a0ea297d67b431aac438a1c20675ef867 Validity Not Before: Jan 1 04:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=60acfae2a8f391c6e6d96dac6ed5d0960dfcb7c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:52:84:45:aa:52:59:91:3d:7c:78:1e:a1:4e: d0:ee:b4:8c:a4:2f:eb:bb:3c:42:65:e6:75:32:fd: 31:bd:4c:e9:f8:5a:83:df:c6:b4:01:9e:89:c4:ff: 49:d7:23:bd:ef:f1:42:f6:e1:3f:83:86:a5:3f:65: 47:5a:a1:99:8d:67:c2:10:5e:b5:6f:36:9b:e3:0e: 0a:84:42:92:09:58:26:f9:93:10:f2:5e:a1:f6:5c: 22:f3:14:96:35:0c:2b:93:b8:c9:f7:b0:66:7d:f6: 02:5f:86:ea:97:20:83:3a:19:3e:14:01:09:84:ca: a7:77:4b:dd:6f:60:71:be:f4:c8:58:12:e8:b8:14: 9b:14:a1:87:c5:19:da:c0:18:3e:ae:45:9f:46:c9: 0e:98:da:50:16:c5:aa:08:65:ea:67:2f:ea:62:01: e7:b0:ec:ec:df:e0:2e:e4:58:41:23:6c:f4:e1:89: 9d:e8:de:7b:3f:3d:64:a6:a9:d1:41:e4:fd:98:f7: 71:c9:85:bf:e8:73:aa:64:e9:c1:de:dc:5e:0d:bc: eb:d0:e7:77:65:19:aa:bb:ff:71:27:ab:f4:f5:c0: 0b:7a:80:ad:4d:d2:1a:21:f4:16:c2:9e:81:94:9e: ec:17:17:c4:e7:76:d3:3e:9f:3e:25:ef:5b:f7:0f: 2b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:AC:FA:E2:A8:F3:91:C6:E6:D9:6D:AC:6E:D5:D0:96:0D:FC:B7:C6 X509v3 Authority Key Identifier: keyid:D9:8C:4E:8A:0E:A2:97:D6:7B:43:1A:AC:43:8A:1C:20:67:5E:F8:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YxOig6il9Z7QxqsQ4ocIGde-Gc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/YKz64qjzkcbm2W2sbtXQlg38t8Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:1040::/48 Signature Algorithm: sha256WithRSAEncryption 34:6a:bb:38:8c:77:dd:d9:23:ae:7a:8f:a7:b7:43:b6:bd:52: 53:c1:9b:db:e3:38:78:98:9b:89:46:86:5e:83:9e:38:22:ff: ec:af:33:18:3e:5d:23:e8:96:86:26:61:73:0b:6b:6c:a4:c8: 67:92:28:b4:48:45:5d:2a:91:1a:52:98:4b:95:26:11:cb:a4: 2b:71:0c:6a:56:fa:a0:19:56:65:91:29:f6:12:e9:72:a6:10: 13:af:08:b5:02:3a:4f:85:3c:6c:41:35:d3:76:8d:3f:2f:a0: 44:93:d1:b5:b1:59:eb:dc:45:b0:04:e9:a8:11:ff:96:ff:cf: 84:af:ad:40:b9:94:1a:7a:06:e3:78:85:aa:78:09:b5:eb:c2: e8:64:81:b2:6c:8e:a3:a6:c4:ed:df:f0:13:33:88:ef:cf:87: 87:0b:70:50:3c:9f:b8:e2:e8:74:ba:05:0f:a7:cc:99:13:4d: 83:7f:88:76:40:37:39:bf:6a:ef:6e:85:26:28:d4:94:a2:ac: 3f:8e:81:dd:bc:37:3c:82:d9:ac:89:9d:60:99:ee:5d:42:14: 82:57:93:20:08:0f:f3:fb:22:88:25:a3:e9:03:ac:3d:fe:83: d6:77:c3:1f:05:84:42:b8:51:0d:b6:43:3d:b6:fe:f2:ff:46: 7f:40:c7:ea -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3xubeOVDk6HGx5/wB9UTCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5OGM0ZThhMGVhMjk3ZDY3YjQzMWFhYzQzOGExYzIwNjc1 ZWY4NjcwHhcNMjYwMTAxMDQxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MGFjZmFlMmE4ZjM5MWM2ZTZkOTZkYWM2ZWQ1ZDA5NjBkZmNiN2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1KERapSWZE9fHgeoU7Q7rSMpC/r uzxCZeZ1Mv0xvUzp+FqD38a0AZ6JxP9J1yO97/FC9uE/g4alP2VHWqGZjWfCEF61 bzab4w4KhEKSCVgm+ZMQ8l6h9lwi8xSWNQwrk7jJ97BmffYCX4bqlyCDOhk+FAEJ hMqnd0vdb2BxvvTIWBLouBSbFKGHxRnawBg+rkWfRskOmNpQFsWqCGXqZy/qYgHn sOzs3+Au5FhBI2z04Ymd6N57Pz1kpqnRQeT9mPdxyYW/6HOqZOnB3txeDbzr0Od3 ZRmqu/9xJ6v09cALeoCtTdIaIfQWwp6BlJ7sFxfE53bTPp8+Je9b9w8r0QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGCs+uKo85HG5tltrG7V0JYN/LfGMB8GA1UdIwQY MBaAFNmMTooOopfWe0MarEOKHCBnXvhnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMll4T2lnNmlsOVo3UXhxc1E0b2NJR2RlLUdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS81YTM1MmUtNWJjYS00NDY4LWI4ZDYt YmEwNmU3NGRiOTFjLzEvWUt6NjRxanprY2JtMlcyc2J0WFFsZzM4dDhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS81YTM1MmUtNWJjYS00NDY4LWI4ZDYtYmEwNmU3NGRiOTFj LzEvMll4T2lnNmlsOVo3UXhxc1E0b2NJR2RlLUdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeBBA MA0GCSqGSIb3DQEBCwUAA4IBAQA0ars4jHfd2SOueo+nt0O2vVJTwZvb4zh4mJuJ RoZeg544Iv/srzMYPl0j6JaGJmFzC2tspMhnkii0SEVdKpEaUphLlSYRy6QrcQxq VvqgGVZlkSn2EulyphATrwi1AjpPhTxsQTXTdo0/L6BEk9G1sVnr3EWwBOmoEf+W /8+Er61AuZQaegbjeIWqeAm168LoZIGybI6jpsTt3/ATM4jvz4eHC3BQPJ+44uh0 ugUPp8yZE02Df4h2QDc5v2rvboUmKNSUoqw/joHdvDc8gtmsiZ1gme5dQhSCV5Mg CA/z+yKIJaPpA6w9/oPWd8MfBYRCuFENtkM9tv7y/0Z/QMfq -----END CERTIFICATE-----Generated at Tue Jan 27 00:07:30 2026 by rpki-client