This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/yvdM8oqK9UEjHe-j9vf4hYEvsHI.roa File: yvdM8oqK9UEjHe-j9vf4hYEvsHI.roa (raw, json) Hash identifier: FyIoG3Rlf0BHBBnW/KlrAfAwmMpmY2nq+UoGuSzOyGI= Subject key identifier: CA:F7:4C:F2:8A:8A:F5:41:23:1D:EF:A3:F6:F7:F8:85:81:2F:B0:72 Certificate issuer: /CN=fe8199e8345567d8516b788fe2e1d397e27c73a4 Certificate serial: 019B7E37D2B0635A0654EBE9954654B17D50 Authority key identifier: FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/yvdM8oqK9UEjHe-j9vf4hYEvsHI.roa Signing time: Fri 02 Jan 2026 10:19:06 +0000 ROA not before: Fri 02 Jan 2026 10:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 2a05:e9c0:4400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:d2:b0:63:5a:06:54:eb:e9:95:46:54:b1:7d:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe8199e8345567d8516b788fe2e1d397e27c73a4 Validity Not Before: Jan 2 10:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=caf74cf28a8af541231defa3f6f7f885812fb072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:08:46:91:7e:7e:47:95:0f:2a:61:96:54:f4: 06:6d:1b:5a:47:88:3b:6b:47:26:b9:e2:ea:a3:46: a2:fe:2d:01:e3:59:31:6b:54:65:d3:79:f7:db:8c: e5:64:90:8b:1d:b8:7f:28:3a:6e:c3:45:0f:32:c7: a3:c6:7c:78:a0:09:35:3f:0e:aa:f9:73:97:cb:e3: e5:a4:5a:e2:60:af:50:d2:9f:92:17:56:35:26:d1: 86:8c:03:34:08:88:ff:7a:7d:a1:16:b1:85:b6:2a: 05:0d:56:99:b0:93:f2:cc:a4:d4:b3:72:f9:c3:6c: 7a:36:0d:e5:21:b0:e5:b6:7d:7c:c8:2f:70:53:41: a8:f3:17:a5:76:c1:04:32:b0:b1:fe:7b:cf:f2:19: 47:00:83:bf:b2:f0:aa:91:54:10:65:91:02:bf:6a: b8:7c:61:d4:4f:6a:3c:c9:75:28:00:9c:12:db:55: 50:ed:da:d1:f4:70:27:fc:7e:25:94:2e:6d:53:28: 3a:eb:68:6f:53:12:f6:65:f6:6e:bd:f6:23:9e:42: 18:2a:3e:dd:b0:ad:57:b6:ee:54:25:ba:44:e1:ca: 7e:96:17:18:f7:60:68:62:3e:99:0f:62:c3:8d:44: 3a:14:1a:8d:9d:6c:24:c9:b5:ba:b1:9f:63:f9:93: 98:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:F7:4C:F2:8A:8A:F5:41:23:1D:EF:A3:F6:F7:F8:85:81:2F:B0:72 X509v3 Authority Key Identifier: keyid:FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/yvdM8oqK9UEjHe-j9vf4hYEvsHI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:e9c0:4400::/40 Signature Algorithm: sha256WithRSAEncryption 6f:14:c8:91:c6:6c:f5:3e:77:1b:53:46:c2:81:d7:d1:66:74: 60:01:a2:20:b8:2d:b7:55:50:37:21:7c:ef:68:ec:5b:ba:40: 9d:b0:0e:23:87:01:fa:31:b6:00:33:26:18:26:e9:b0:a9:61: 7e:02:c3:f1:0f:8f:39:62:69:cb:e4:e5:60:61:4c:9a:db:75: 36:42:65:eb:8f:f5:df:ef:4a:59:8b:d8:34:e7:37:35:0a:e4: ec:06:cd:68:a9:c5:74:3a:1d:35:88:6f:ab:04:54:6d:b1:48: 5c:41:0d:72:14:94:1a:eb:b3:2c:e9:fa:ef:8a:06:97:a5:f9: d4:eb:75:88:1d:ad:7f:bb:35:a6:bc:f4:b6:bd:ca:f4:17:2b: c9:43:7a:c0:58:46:ef:a4:bb:26:98:ce:ed:75:cb:fd:73:34: a2:e0:73:b5:25:44:4a:a9:92:59:ef:e4:3f:5a:66:03:15:a6: 9b:cd:3d:11:df:da:fc:c7:8f:96:35:ba:5c:aa:2c:b9:e7:99: d4:c3:29:d8:3b:0e:55:a3:d3:1d:89:65:cf:97:03:06:09:84: 11:35:c1:20:2d:88:9a:d3:d6:3b:6c:14:4e:47:c2:c1:10:b9: 3b:31:b4:3a:60:66:1d:fe:06:69:bb:2f:28:78:a5:31:70:ec: 66:75:72:a1 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+N9KwY1oGVOvplUZUsX1QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlODE5OWU4MzQ1NTY3ZDg1MTZiNzg4ZmUyZTFkMzk3ZTI3 YzczYTQwHhcNMjYwMTAyMTAxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYWY3NGNmMjhhOGFmNTQxMjMxZGVmYTNmNmY3Zjg4NTgxMmZiMDcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwhGkX5+R5UPKmGWVPQGbRtaR4g7 a0cmueLqo0ai/i0B41kxa1Rl03n324zlZJCLHbh/KDpuw0UPMsejxnx4oAk1Pw6q +XOXy+PlpFriYK9Q0p+SF1Y1JtGGjAM0CIj/en2hFrGFtioFDVaZsJPyzKTUs3L5 w2x6Ng3lIbDltn18yC9wU0Go8xeldsEEMrCx/nvP8hlHAIO/svCqkVQQZZECv2q4 fGHUT2o8yXUoAJwS21VQ7drR9HAn/H4llC5tUyg662hvUxL2ZfZuvfYjnkIYKj7d sK1Xtu5UJbpE4cp+lhcY92BoYj6ZD2LDjUQ6FBqNnWwkybW6sZ9j+ZOYEQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFMr3TPKKivVBIx3vo/b3+IWBL7ByMB8GA1UdIwQY MBaAFP6Bmeg0VWfYUWt4j+Lh05fifHOkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX29HWjZEUlZaOWhSYTNpUDR1SFRsLUo4YzZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9kMDllMzQtY2MxMS00Mzk0LTkwNGQt ODQwY2NiMzRiM2Y1LzEveXZkTThvcUs5VUVqSGUtajl2ZjRoWUV2c0hJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9kMDllMzQtY2MxMS00Mzk0LTkwNGQtODQwY2NiMzRiM2Y1 LzEvX29HWjZEUlZaOWhSYTNpUDR1SFRsLUo4YzZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXpwEQw DQYJKoZIhvcNAQELBQADggEBAG8UyJHGbPU+dxtTRsKB19FmdGABoiC4LbdVUDch fO9o7Fu6QJ2wDiOHAfoxtgAzJhgm6bCpYX4Cw/EPjzliacvk5WBhTJrbdTZCZeuP 9d/vSlmL2DTnNzUK5OwGzWipxXQ6HTWIb6sEVG2xSFxBDXIUlBrrsyzp+u+KBpel +dTrdYgdrX+7Naa89La9yvQXK8lDesBYRu+kuyaYzu11y/1zNKLgc7UlREqpklnv 5D9aZgMVppvNPRHf2vzHj5Y1ulyqLLnnmdTDKdg7DlWj0x2JZc+XAwYJhBE1wSAt iJrT1jtsFE5HwsEQuTsxtDpgZh3+Bmm7Lyh4pTFw7GZ1cqE= -----END CERTIFICATE-----Generated at Sun Jan 25 15:14:51 2026 by rpki-client