This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/YDy6wLds96Yf3zX0RUfnfXQDw5Q.roa File: YDy6wLds96Yf3zX0RUfnfXQDw5Q.roa (raw, json) Hash identifier: 86RzS+pw/jn2zDtIOdA8fDYlhM/9zcSkfL4mjAAa2B4= Subject key identifier: 60:3C:BA:C0:B7:6C:F7:A6:1F:DF:35:F4:45:47:E7:7D:74:03:C3:94 Certificate issuer: /CN=6cc3853da70cdea0dba46414b6b0e6d1f1716e74 Certificate serial: 019B77587CAC2A7E501E374199F3146A603C Authority key identifier: 6C:C3:85:3D:A7:0C:DE:A0:DB:A4:64:14:B6:B0:E6:D1:F1:71:6E:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMOFPacM3qDbpGQUtrDm0fFxbnQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/YDy6wLds96Yf3zX0RUfnfXQDw5Q.roa Signing time: Thu 01 Jan 2026 02:17:26 +0000 ROA not before: Thu 01 Jan 2026 02:17:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216418 IP address blocks: 2001:67c:2dc8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.mft rsync://rpki.ripe.net/repository/DEFAULT/bMOFPacM3qDbpGQUtrDm0fFxbnQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:7c:ac:2a:7e:50:1e:37:41:99:f3:14:6a:60:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cc3853da70cdea0dba46414b6b0e6d1f1716e74 Validity Not Before: Jan 1 02:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=603cbac0b76cf7a61fdf35f44547e77d7403c394 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:ce:ab:7a:29:0d:5e:f7:2c:76:05:3b:94:ad: 6e:5e:c3:1e:57:5a:5c:16:10:cc:8c:53:61:e3:82: 91:12:e1:91:fc:f1:4f:0f:6c:da:3a:48:19:d5:18: 6c:84:83:6b:2e:fd:7f:fc:bd:ce:ff:51:dc:bd:09: e5:d6:66:db:e1:6e:77:d7:48:ec:9f:a0:34:27:6f: b2:08:7a:50:4a:d9:be:0f:40:61:0f:89:d2:87:12: 5b:ee:bb:a4:c4:8a:e9:38:b8:3c:64:04:ef:ad:41: ed:cd:5f:25:06:78:76:90:cf:4f:f8:c9:6a:4e:60: 5c:01:9e:3a:e1:5e:63:a0:5a:1d:fa:c5:6e:5f:eb: b6:a1:f6:54:4c:5c:97:89:e4:3f:f3:97:e9:91:88: ff:7a:b6:a7:b8:8b:05:b4:f0:3d:09:6f:28:59:d7: bb:ce:43:33:39:ef:b5:d5:39:d6:6e:d2:86:5f:88: e4:b1:e0:3f:b1:d9:73:78:e5:e5:d6:ae:5d:28:7b: 2b:31:9d:3a:6a:b1:a1:e9:eb:74:ef:a3:0f:82:63: 5a:9b:19:c0:2e:74:e3:77:59:35:66:4d:56:1e:29: 6f:0f:fc:20:f4:d4:7f:4c:6d:80:00:02:21:af:2b: b3:64:2b:ce:41:11:1e:dc:2c:92:02:bf:46:5c:63: cf:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:3C:BA:C0:B7:6C:F7:A6:1F:DF:35:F4:45:47:E7:7D:74:03:C3:94 X509v3 Authority Key Identifier: keyid:6C:C3:85:3D:A7:0C:DE:A0:DB:A4:64:14:B6:B0:E6:D1:F1:71:6E:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMOFPacM3qDbpGQUtrDm0fFxbnQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/YDy6wLds96Yf3zX0RUfnfXQDw5Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2dc8::/48 Signature Algorithm: sha256WithRSAEncryption 64:fa:59:8c:b7:d4:71:58:ee:f9:ab:a0:7b:f7:b0:67:ca:c7: a1:a5:50:48:8f:bd:19:0a:9b:9b:26:ee:07:23:4a:a6:e1:87: e0:f9:38:30:1e:00:dd:37:fe:b4:7e:f2:0e:2d:c6:a2:99:6e: d0:d6:75:b3:0b:21:41:e3:46:6d:53:98:f8:45:37:ec:1e:f1: ff:40:1f:3d:60:ff:f8:c8:f6:4a:2b:55:94:d5:33:c1:c5:91: 8e:7f:e4:4a:2e:72:fc:db:d3:da:26:e2:a1:3b:42:8a:83:18: fd:2a:75:6a:aa:89:1a:6b:f5:db:63:df:8d:49:75:02:64:ee: 16:31:9d:ef:c2:a1:36:50:32:5e:c5:07:2c:8c:f8:9e:ce:28: 8c:b0:aa:f0:8f:af:59:ce:55:52:ef:b7:ed:c8:ac:ed:0f:98: 53:0c:24:09:f3:b5:c9:be:a8:7e:e4:f3:24:aa:c4:de:0a:d6: 12:7d:07:c7:2e:b1:0c:4c:66:e4:48:e7:55:ef:8f:db:36:78: 61:6b:a2:04:ad:1a:68:b1:53:d6:d9:4c:46:ed:3c:80:e7:6f: 48:08:b2:e0:e0:34:03:9a:e6:ca:ec:ad:bb:36:80:48:df:c4: 12:b1:b4:68:64:b7:2a:a2:8b:46:6f:32:65:d8:97:54:31:57: 1d:7b:2f:5b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WHysKn5QHjdBmfMUamA8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYzM4NTNkYTcwY2RlYTBkYmE0NjQxNGI2YjBlNmQxZjE3 MTZlNzQwHhcNMjYwMTAxMDIxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDNjYmFjMGI3NmNmN2E2MWZkZjM1ZjQ0NTQ3ZTc3ZDc0MDNjMzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8c6reikNXvcsdgU7lK1uXsMeV1pc FhDMjFNh44KREuGR/PFPD2zaOkgZ1RhshINrLv1//L3O/1HcvQnl1mbb4W5310js n6A0J2+yCHpQStm+D0BhD4nShxJb7rukxIrpOLg8ZATvrUHtzV8lBnh2kM9P+Mlq TmBcAZ464V5joFod+sVuX+u2ofZUTFyXieQ/85fpkYj/eranuIsFtPA9CW8oWde7 zkMzOe+11TnWbtKGX4jkseA/sdlzeOXl1q5dKHsrMZ06arGh6et076MPgmNamxnA LnTjd1k1Zk1WHilvD/wg9NR/TG2AAAIhryuzZCvOQREe3CySAr9GXGPPtQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGA8usC3bPemH9819EVH5310A8OUMB8GA1UdIwQY MBaAFGzDhT2nDN6g26RkFLaw5tHxcW50MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk1PRlBhY00zcURicEdRVXRyRG0wZkZ4Ym5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9kMTI4ZGUtZDYxZC00ZjAzLTkxMzQt MDQ2YTY4YWI0YzhkLzEvWUR5NndMZHM5NllmM3pYMFJVZm5mWFFEdzVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9kMTI4ZGUtZDYxZC00ZjAzLTkxMzQtMDQ2YTY4YWI0Yzhk LzEvYk1PRlBhY00zcURicEdRVXRyRG0wZkZ4Ym5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfC3I MA0GCSqGSIb3DQEBCwUAA4IBAQBk+lmMt9RxWO75q6B797BnysehpVBIj70ZCpub Ju4HI0qm4Yfg+TgwHgDdN/60fvIOLcaimW7Q1nWzCyFB40ZtU5j4RTfsHvH/QB89 YP/4yPZKK1WU1TPBxZGOf+RKLnL829PaJuKhO0KKgxj9KnVqqokaa/XbY9+NSXUC ZO4WMZ3vwqE2UDJexQcsjPieziiMsKrwj69ZzlVS77ftyKztD5hTDCQJ87XJvqh+ 5PMkqsTeCtYSfQfHLrEMTGbkSOdV74/bNnhha6IErRposVPW2UxG7TyA529ICLLg 4DQDmubK7K27NoBI38QSsbRoZLcqootGbzJl2JdUMVcdey9b -----END CERTIFICATE-----Generated at Sun Jan 25 10:19:58 2026 by rpki-client