This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/WzL_Le9qToZCW6aHE2N-2HuJYvQ.roa File: WzL_Le9qToZCW6aHE2N-2HuJYvQ.roa (raw, json) Hash identifier: XiM6tnhPeoo8/I0UsVcX68fQNBFdvSj5FK8MxmFwo94= Subject key identifier: 5B:32:FF:2D:EF:6A:4E:86:42:5B:A6:87:13:63:7E:D8:7B:89:62:F4 Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260 Certificate serial: 019B7A5AB091D108C1CFE0271EC9D21EEA5D Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/WzL_Le9qToZCW6aHE2N-2HuJYvQ.roa Signing time: Thu 01 Jan 2026 16:18:42 +0000 ROA not before: Thu 01 Jan 2026 16:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209419 IP address blocks: 2a0d:2d41::/32 maxlen: 48 2a0e:c6c1::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:b0:91:d1:08:c1:cf:e0:27:1e:c9:d2:1e:ea:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260 Validity Not Before: Jan 1 16:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b32ff2def6a4e86425ba68713637ed87b8962f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1e:a7:96:c1:6b:4f:ed:b0:39:97:4c:14:33: 8e:48:eb:0b:57:df:1a:80:64:21:b6:fe:b8:b9:bf: 72:6e:77:07:2b:92:0f:26:86:67:49:cc:ba:49:ce: a2:5b:fd:3d:48:92:d8:9e:2b:87:0d:60:a3:e2:af: 69:d2:f9:2a:16:70:fb:ee:8a:13:bf:6a:3b:93:df: 8f:cc:71:f2:dd:19:27:c5:42:5c:ec:b7:0a:64:bb: 4d:1e:0f:33:93:27:f9:fc:2b:74:3a:62:69:40:06: 5a:68:95:6a:46:3e:42:0c:71:22:b2:d4:12:b8:86: 8e:a6:d0:a4:e5:ce:3d:b5:8c:f0:15:3a:63:86:8e: 7d:7e:75:d1:70:f1:42:13:dd:0b:1a:82:4a:81:1e: f3:99:df:28:62:37:bc:43:79:04:81:14:16:c3:15: c4:f7:ed:38:fb:90:5d:a2:62:5b:b9:a3:71:07:a8: c9:5e:42:4e:d7:0b:38:85:a0:a4:dd:1b:db:7b:18: 0d:0d:fc:d7:fb:47:a7:86:13:e9:26:f5:36:a4:2b: ce:09:d3:79:7e:8c:74:f1:6e:63:ae:51:a5:40:b8: 84:82:a9:6a:37:63:1b:e8:01:52:75:9c:07:a2:1c: 42:d4:e3:86:8c:3c:60:fc:6f:18:e5:62:36:73:fd: 25:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:32:FF:2D:EF:6A:4E:86:42:5B:A6:87:13:63:7E:D8:7B:89:62:F4 X509v3 Authority Key Identifier: keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/WzL_Le9qToZCW6aHE2N-2HuJYvQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:2d41::/32 2a0e:c6c1::/32 Signature Algorithm: sha256WithRSAEncryption c5:89:94:d0:58:e9:3c:c3:d8:93:f8:63:03:fb:a3:af:39:70: 05:45:41:b4:d9:ef:6b:81:4a:53:7f:3b:95:ac:60:28:f0:1a: f9:e0:72:db:1e:3d:96:db:da:ff:de:57:2b:a0:cf:46:6a:de: 29:4d:05:0f:5e:67:ac:d3:87:81:02:37:69:5c:a4:10:a6:3b: 5d:f9:3d:fb:8f:b4:d1:32:3c:43:20:10:3d:a0:a0:a4:ec:6c: 38:44:4c:80:70:68:4a:89:7e:b8:3a:18:9a:ea:15:72:3e:9b: 17:5b:da:93:3b:6f:d1:00:7f:db:55:2e:ed:8b:a4:f6:ad:01: cd:36:a9:04:a2:93:bd:85:dd:8b:dc:03:1e:30:36:4a:d2:ac: c1:45:cc:dc:6c:a4:6a:69:f3:7f:96:b3:8f:4b:34:77:97:d2: ce:29:03:28:35:f4:d9:45:42:f3:0d:22:8d:bf:dd:fa:55:e6: 80:b3:f1:bb:2d:a2:fd:cf:85:04:bf:d8:e9:df:63:93:7f:35: 3c:b1:d4:6f:b2:fc:5d:66:45:09:24:86:99:57:3b:f6:ba:f4: 35:fc:02:59:9c:8c:81:7c:ff:66:fd:d1:45:ce:b0:3e:25:47: 6a:ff:4e:d9:15:ad:99:5d:bc:cd:fe:26:5e:3f:43:13:e0:43: 4b:58:eb:56 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt6WrCR0QjBz+AnHsnSHupdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2OGM2NWU2OTliNTc2YWIxMTNhNzliZTg4Mjg5NDhmMWU2 Y2MyNjAwHhcNMjYwMTAxMTYxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjMyZmYyZGVmNmE0ZTg2NDI1YmE2ODcxMzYzN2VkODdiODk2MmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArR6nlsFrT+2wOZdMFDOOSOsLV98a gGQhtv64ub9ybncHK5IPJoZnScy6Sc6iW/09SJLYniuHDWCj4q9p0vkqFnD77ooT v2o7k9+PzHHy3RknxUJc7LcKZLtNHg8zkyf5/Ct0OmJpQAZaaJVqRj5CDHEistQS uIaOptCk5c49tYzwFTpjho59fnXRcPFCE90LGoJKgR7zmd8oYje8Q3kEgRQWwxXE 9+04+5BdomJbuaNxB6jJXkJO1ws4haCk3RvbexgNDfzX+0enhhPpJvU2pCvOCdN5 fox08W5jrlGlQLiEgqlqN2Mb6AFSdZwHohxC1OOGjDxg/G8Y5WI2c/0lmwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFFsy/y3vak6GQlumhxNjfth7iWL0MB8GA1UdIwQY MBaAFMaMZeaZtXarETp5vogolI8ebMJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYt NjA3ZDRmMzdmNTlmLzEvV3pMX0xlOXFUb1pDVzZhSEUyTi0ySHVKWXZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYtNjA3ZDRmMzdmNTlm LzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUAKg0tQQMF ACoOxsEwDQYJKoZIhvcNAQELBQADggEBAMWJlNBY6TzD2JP4YwP7o685cAVFQbTZ 72uBSlN/O5WsYCjwGvngctsePZbb2v/eVyugz0Zq3ilNBQ9eZ6zTh4ECN2lcpBCm O135PfuPtNEyPEMgED2goKTsbDhETIBwaEqJfrg6GJrqFXI+mxdb2pM7b9EAf9tV Lu2LpPatAc02qQSik72F3YvcAx4wNkrSrMFFzNxspGpp83+Ws49LNHeX0s4pAyg1 9NlFQvMNIo2/3fpV5oCz8bstov3PhQS/2OnfY5N/NTyx1G+y/F1mRQkkhplXO/a6 9DX8AlmcjIF8/2b90UXOsD4lR2r/TtkVrZldvM3+Jl4/QxPgQ0tY61Y= -----END CERTIFICATE-----Generated at Sun Jan 25 15:28:47 2026 by rpki-client