This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Yw1-5HUfXZ7VR5aMluoYnVgEahY.roa File: Yw1-5HUfXZ7VR5aMluoYnVgEahY.roa (raw, json) Hash identifier: xEjMYoWqPs41n/WBuAl3n3DhBhffKGuMcQzuKiysjRo= Subject key identifier: 63:0D:7E:E4:75:1F:5D:9E:D5:47:96:8C:96:EA:18:9D:58:04:6A:16 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CC12BFB343708E2C7741C192A8611 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Yw1-5HUfXZ7VR5aMluoYnVgEahY.roa Signing time: Fri 02 Jan 2026 06:19:49 +0000 ROA not before: Fri 02 Jan 2026 06:19:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59936 IP address blocks: 2a0e:97c0:40e::/48 maxlen: 48 2a0e:97c0:40f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:c1:2b:fb:34:37:08:e2:c7:74:1c:19:2a:86:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=630d7ee4751f5d9ed547968c96ea189d58046a16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ea:90:68:f3:cd:04:3b:a5:6e:be:c3:1c:93: b8:c5:ad:5f:ce:22:2c:6e:e9:e3:9d:f7:2b:ce:da: bf:f1:8e:9b:56:e8:c3:c6:ef:92:93:58:6b:15:f4: 6e:d3:83:7f:28:82:12:f2:25:c2:96:48:00:4e:d4: b8:2b:51:4f:f3:d4:25:7b:37:a0:b1:03:5f:33:7d: 11:18:7d:eb:9c:03:9c:12:5a:c4:9c:4f:30:51:62: a5:19:c1:67:54:29:13:4e:6b:cf:79:26:b7:86:44: b3:8e:fd:69:ed:f5:92:b7:2f:3c:78:94:d6:a6:36: 71:3e:7e:d3:d6:66:a3:4b:b5:35:85:45:69:6a:85: 9b:b5:15:72:0e:11:e2:c1:2d:8f:bf:05:fd:e3:97: e8:27:5e:03:2b:b6:52:a3:01:64:8a:d1:fa:cd:83: 73:ba:79:45:8e:76:29:8a:a7:bd:42:18:65:1d:63: c1:dc:02:d4:ad:cf:35:58:5e:28:b9:58:8e:52:ef: fe:cf:1c:c9:36:05:a3:fc:e4:94:d4:fd:13:5c:a2: 07:c4:33:34:21:a4:8f:4f:1c:ae:cc:d8:65:83:db: e0:bc:b9:69:97:e7:6a:dd:d7:08:8f:8c:84:f0:38: e2:25:8a:ed:38:6d:1e:54:27:33:41:d1:4b:7a:9a: 3b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:0D:7E:E4:75:1F:5D:9E:D5:47:96:8C:96:EA:18:9D:58:04:6A:16 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Yw1-5HUfXZ7VR5aMluoYnVgEahY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:40e::/47 Signature Algorithm: sha256WithRSAEncryption b4:60:f4:52:3f:6e:cf:53:6b:d9:a7:bf:b6:6f:1c:15:fb:6b: df:e3:36:28:63:28:29:ac:56:bd:c2:24:7e:f2:8b:4d:0e:96: ad:67:d2:2d:95:db:9d:3b:ac:20:c3:d1:62:37:8d:cb:46:66: dc:f1:1b:e7:2b:c4:f1:3c:20:50:f6:0a:f9:fd:1a:f6:84:7d: 1c:67:8d:1e:95:e7:64:f8:ec:4a:70:9d:a8:f6:db:e5:40:fa: bb:38:dc:a4:f2:1c:24:75:3e:25:aa:53:b7:22:e2:d9:75:2a: 76:12:8f:63:16:82:d8:e2:82:58:e8:79:42:f4:9a:a4:c7:e7: 37:6d:dd:89:c7:b4:c7:9c:ab:02:0b:f0:4a:99:52:32:e1:ad: 50:a2:5a:4f:6d:61:20:a9:cc:ba:7d:3f:64:72:fa:d1:8e:ed: 02:48:d8:2c:e8:79:10:e0:00:6e:a9:db:ef:fc:c2:8f:64:2f: c2:eb:3b:4a:41:7a:52:84:59:8a:93:71:69:3b:54:c7:16:ed: c3:bd:da:cc:b7:47:3d:e2:10:fb:cb:e9:95:d9:19:ee:1b:f7: 84:5e:c2:d1:4f:28:b2:62:88:39:d9:65:b5:53:ef:91:2b:de: 51:83:7a:82:16:a7:74:f7:89:05:a1:04:0c:ef:a2:a5:2e:c5: ba:c9:92:2f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XMEr+zQ3COLHdBwZKoYRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzBkN2VlNDc1MWY1ZDllZDU0Nzk2OGM5NmVhMTg5ZDU4MDQ2YTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOqQaPPNBDulbr7DHJO4xa1fziIs bunjnfcrztq/8Y6bVujDxu+Sk1hrFfRu04N/KIIS8iXClkgATtS4K1FP89Qlezeg sQNfM30RGH3rnAOcElrEnE8wUWKlGcFnVCkTTmvPeSa3hkSzjv1p7fWSty88eJTW pjZxPn7T1majS7U1hUVpaoWbtRVyDhHiwS2PvwX945foJ14DK7ZSowFkitH6zYNz unlFjnYpiqe9QhhlHWPB3ALUrc81WF4ouViOUu/+zxzJNgWj/OSU1P0TXKIHxDM0 IaSPTxyuzNhlg9vgvLlpl+dq3dcIj4yE8DjiJYrtOG0eVCczQdFLepo7rQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGMNfuR1H12e1UeWjJbqGJ1YBGoWMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvWXcxLTVIVWZYWjdWUjVhTWx1b1luVmdFYWhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKg6XwAQO MA0GCSqGSIb3DQEBCwUAA4IBAQC0YPRSP27PU2vZp7+2bxwV+2vf4zYoYygprFa9 wiR+8otNDpatZ9ItldudO6wgw9FiN43LRmbc8RvnK8TxPCBQ9gr5/Rr2hH0cZ40e ledk+OxKcJ2o9tvlQPq7ONyk8hwkdT4lqlO3IuLZdSp2Eo9jFoLY4oJY6HlC9Jqk x+c3bd2Jx7THnKsCC/BKmVIy4a1QolpPbWEgqcy6fT9kcvrRju0CSNgs6HkQ4ABu qdvv/MKPZC/C6ztKQXpShFmKk3FpO1THFu3DvdrMt0c94hD7y+mV2RnuG/eEXsLR TyiyYog52WW1U++RK95Rg3qCFqd094kFoQQM76KlLsW6yZIv -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:25 2026 by rpki-client