This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/yOwm8PAogeL-5gZQPd_Cyyg6N0I.roa File: yOwm8PAogeL-5gZQPd_Cyyg6N0I.roa (raw, json) Hash identifier: vW0Vmr1vq9bGJ6Ym4MtyGJzRrkBpl9YpkjvvSpfLLRY= Subject key identifier: C8:EC:26:F0:F0:28:81:E2:FE:E6:06:50:3D:DF:C2:CB:28:3A:37:42 Certificate issuer: /CN=6283b6d1d86102e9edf2abddaa7c9347aac717c7 Certificate serial: 019B7EA63F5EB04CA65A50934791CD6C6AB5 Authority key identifier: 62:83:B6:D1:D8:61:02:E9:ED:F2:AB:DD:AA:7C:93:47:AA:C7:17:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YoO20dhhAunt8qvdqnyTR6rHF8c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/yOwm8PAogeL-5gZQPd_Cyyg6N0I.roa Signing time: Fri 02 Jan 2026 12:19:43 +0000 ROA not before: Fri 02 Jan 2026 12:19:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20473 IP address blocks: 2a0f:d3c0:ff00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/YoO20dhhAunt8qvdqnyTR6rHF8c.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/YoO20dhhAunt8qvdqnyTR6rHF8c.mft rsync://rpki.ripe.net/repository/DEFAULT/YoO20dhhAunt8qvdqnyTR6rHF8c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:3f:5e:b0:4c:a6:5a:50:93:47:91:cd:6c:6a:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6283b6d1d86102e9edf2abddaa7c9347aac717c7 Validity Not Before: Jan 2 12:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8ec26f0f02881e2fee606503ddfc2cb283a3742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:12:78:d0:63:23:d1:30:42:9f:54:f4:7b:d0: 81:7e:d3:50:db:54:80:76:69:ee:ed:af:ac:39:fe: 4c:24:fb:1c:13:19:46:3b:a2:89:87:f9:85:08:12: b8:aa:00:70:3a:b4:53:33:f3:d8:0e:63:0f:8f:84: bc:ae:eb:e0:44:0b:11:fc:9d:29:0f:92:be:2f:c1: 05:8d:c7:b8:cc:ef:5e:22:2f:24:3e:f8:0e:d0:ce: 56:b1:af:59:14:fa:44:83:27:01:8c:a3:b7:7f:1d: df:73:0d:77:6a:65:00:70:1b:25:85:33:05:10:6c: 03:91:42:a3:92:47:54:7d:5e:a0:49:a8:bd:5c:a4: 93:60:d5:06:67:54:bd:89:54:d3:6b:c1:33:f8:e0: 3b:72:6f:f1:6e:b9:e9:a2:60:2f:a5:46:ad:87:ca: 26:bb:f6:1f:e4:c0:23:b6:12:bd:09:35:b4:c9:e2: 1b:d1:38:1a:02:7d:ad:95:6c:65:35:26:42:76:ac: aa:0a:fd:20:61:22:91:1b:1e:e9:6f:82:0f:e5:13: 67:47:1c:a9:6e:af:f1:bf:4a:fc:41:41:05:1f:7e: f0:f7:6f:25:79:be:10:fc:82:96:aa:86:b2:08:2c: 21:8f:e8:24:a6:6d:30:b8:ee:3e:8b:1c:fc:b8:50: 9a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:EC:26:F0:F0:28:81:E2:FE:E6:06:50:3D:DF:C2:CB:28:3A:37:42 X509v3 Authority Key Identifier: keyid:62:83:B6:D1:D8:61:02:E9:ED:F2:AB:DD:AA:7C:93:47:AA:C7:17:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YoO20dhhAunt8qvdqnyTR6rHF8c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/yOwm8PAogeL-5gZQPd_Cyyg6N0I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/YoO20dhhAunt8qvdqnyTR6rHF8c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:d3c0:ff00::/48 Signature Algorithm: sha256WithRSAEncryption c0:7c:e1:5a:24:fd:3d:26:e2:2a:0a:84:fc:08:d2:7b:ff:ab: 2e:bb:da:7e:f1:ec:db:7c:bb:0a:bf:3e:b5:92:02:9f:e7:e9: 52:23:22:f5:c3:af:35:45:83:54:cb:ed:3d:3d:71:16:12:d4: f8:90:22:64:da:44:5f:a9:4e:6b:62:ea:b0:a5:6a:ad:d0:1a: 86:e1:97:2a:b3:02:c2:e7:6e:34:c9:cd:c5:b2:b3:99:a9:92: 90:0d:02:fc:52:4b:90:65:0c:17:bc:aa:8b:be:2b:8d:0d:96: fc:80:be:10:91:a8:87:f6:85:42:93:41:27:e7:f6:61:bd:6f: 33:27:e4:d6:db:0e:57:32:0c:ca:4b:5b:35:2a:58:cf:29:ab: e1:7c:ba:fe:20:9a:b6:2b:23:97:28:71:48:a1:8e:ec:8b:42: 11:5e:3b:c0:1e:87:08:36:9e:0a:aa:04:e6:1e:28:d7:65:21: 7b:45:c6:a8:e8:3a:47:38:03:d6:28:1c:cc:8d:ff:d4:ee:9f: e0:2b:e5:1e:7d:3f:ff:ca:03:96:a3:ca:e4:2c:f5:38:98:d0: 4a:20:70:bb:5d:03:f0:8e:1e:e3:f6:3f:bf:b3:0a:89:c1:c7: c4:4a:3f:b8:fd:30:a8:34:db:50:8a:72:b1:6c:7a:87:01:9c: dd:6a:72:27 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pj9esEymWlCTR5HNbGq1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyODNiNmQxZDg2MTAyZTllZGYyYWJkZGFhN2M5MzQ3YWFj NzE3YzcwHhcNMjYwMTAyMTIxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOGVjMjZmMGYwMjg4MWUyZmVlNjA2NTAzZGRmYzJjYjI4M2EzNzQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxJ40GMj0TBCn1T0e9CBftNQ21SA dmnu7a+sOf5MJPscExlGO6KJh/mFCBK4qgBwOrRTM/PYDmMPj4S8ruvgRAsR/J0p D5K+L8EFjce4zO9eIi8kPvgO0M5Wsa9ZFPpEgycBjKO3fx3fcw13amUAcBslhTMF EGwDkUKjkkdUfV6gSai9XKSTYNUGZ1S9iVTTa8Ez+OA7cm/xbrnpomAvpUath8om u/Yf5MAjthK9CTW0yeIb0TgaAn2tlWxlNSZCdqyqCv0gYSKRGx7pb4IP5RNnRxyp bq/xv0r8QUEFH37w928leb4Q/IKWqoayCCwhj+gkpm0wuO4+ixz8uFCaeQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMjsJvDwKIHi/uYGUD3fwssoOjdCMB8GA1UdIwQY MBaAFGKDttHYYQLp7fKr3ap8k0eqxxfHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWW9PMjBkaGhBdW50OHF2ZHFueVRSNnJIRjhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9iZDQzMTctYjllZi00YjIzLTgwYWQt OTE0ZTQ4ODFlZWE4LzEveU93bThQQW9nZUwtNWdaUVBkX0N5eWc2TjBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9iZDQzMTctYjllZi00YjIzLTgwYWQtOTE0ZTQ4ODFlZWE4 LzEvWW9PMjBkaGhBdW50OHF2ZHFueVRSNnJIRjhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg/TwP8A MA0GCSqGSIb3DQEBCwUAA4IBAQDAfOFaJP09JuIqCoT8CNJ7/6suu9p+8ezbfLsK vz61kgKf5+lSIyL1w681RYNUy+09PXEWEtT4kCJk2kRfqU5rYuqwpWqt0BqG4Zcq swLC5240yc3FsrOZqZKQDQL8UkuQZQwXvKqLviuNDZb8gL4QkaiH9oVCk0En5/Zh vW8zJ+TW2w5XMgzKS1s1KljPKavhfLr+IJq2KyOXKHFIoY7si0IRXjvAHocINp4K qgTmHijXZSF7Rcao6DpHOAPWKBzMjf/U7p/gK+UefT//ygOWo8rkLPU4mNBKIHC7 XQPwjh7j9j+/swqJwcfESj+4/TCoNNtQinKxbHqHAZzdanIn -----END CERTIFICATE-----Generated at Sun Jan 25 09:04:01 2026 by rpki-client