This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/wMyT5ecrU-MyY2aIqpaR2gM9BBE.roa File: wMyT5ecrU-MyY2aIqpaR2gM9BBE.roa (raw, json) Hash identifier: judBddHifVmvZE7sb5oOlv25s69wDyj3YDkdXm4InqI= Subject key identifier: C0:CC:93:E5:E7:2B:53:E3:32:63:66:88:AA:96:91:DA:03:3D:04:11 Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Certificate serial: 019B7F8397E7F79BF6BA8969AD52449DF497 Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/wMyT5ecrU-MyY2aIqpaR2gM9BBE.roa Signing time: Fri 02 Jan 2026 16:21:29 +0000 ROA not before: Fri 02 Jan 2026 16:21:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208266 IP address blocks: 2a0e:800:ff20::/48 maxlen: 48 2a0e:800:ff21::/48 maxlen: 48 2a0e:800:ff40::/42 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:97:e7:f7:9b:f6:ba:89:69:ad:52:44:9d:f4:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Validity Not Before: Jan 2 16:21:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c0cc93e5e72b53e332636688aa9691da033d0411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:25:f2:27:96:6d:d3:9c:7f:70:92:9a:50:43: 8d:52:d2:ee:69:0c:7a:cd:f3:78:18:e7:fd:b6:6f: fd:86:8e:7b:a3:e0:b0:b2:08:ab:70:43:04:94:ce: 11:2d:70:c1:ec:eb:f8:33:73:c1:f2:e4:0c:06:d3: 28:9b:09:51:7a:94:a1:3f:19:9f:c0:46:47:56:ac: 82:2c:7c:b9:29:c5:bd:8f:9f:c0:19:49:47:ff:c4: 3a:b6:b2:a0:d5:24:82:64:bc:47:1e:20:2d:e3:8e: 61:5c:0e:9a:75:b2:2e:c8:9e:cd:93:f1:57:a3:fe: a0:fd:ff:64:91:35:ae:47:50:87:82:8c:c9:e5:29: 0a:93:98:7e:82:fe:0c:f4:c0:f7:84:59:0e:66:c3: eb:c4:42:ca:17:14:f9:7e:2a:47:e8:2f:2b:18:b3: b5:5a:d1:9a:c6:12:91:88:a7:77:e9:97:52:9d:1b: 9a:51:ac:1d:1a:8f:ab:76:4c:13:f8:6b:3d:87:e7: 7a:08:93:15:e5:a7:72:a0:fb:65:90:bd:eb:8d:a1: df:45:0f:ee:88:d2:b9:85:ee:35:8b:a0:53:01:e6: 56:c4:7d:c2:63:45:85:bd:e6:7e:a4:64:97:92:b4: 9b:48:df:73:21:84:94:b7:88:f2:63:01:88:e6:e7: b8:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:CC:93:E5:E7:2B:53:E3:32:63:66:88:AA:96:91:DA:03:3D:04:11 X509v3 Authority Key Identifier: keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/wMyT5ecrU-MyY2aIqpaR2gM9BBE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:800:ff20::/47 2a0e:800:ff40::/42 Signature Algorithm: sha256WithRSAEncryption 4a:54:a1:93:ff:e2:c0:3c:d7:d1:4a:98:40:f4:dd:5b:27:47: c6:d1:de:77:36:e8:a8:71:1a:1b:27:b7:ce:6f:2d:1b:55:06: 24:0f:bd:96:fe:4e:bd:3a:b4:de:26:b1:a0:6c:c0:41:b0:c9: 6a:c1:f9:f4:30:15:8e:03:b6:64:77:36:ce:df:fe:cd:5f:4f: 6e:0a:2e:4c:b0:c5:f4:6b:45:a3:a6:6b:92:de:dc:88:d7:9a: 45:f8:2e:82:76:a7:2c:98:b1:30:5e:61:31:ea:ef:95:71:32: 73:8b:4e:a6:0f:92:a8:ae:a2:37:50:64:54:1c:b9:8f:5a:18: af:1e:5a:21:49:a3:37:20:e2:88:a8:e1:e6:dc:1b:da:7a:af: 8f:1d:0e:38:de:5a:58:07:7e:ae:0d:41:86:85:97:26:a8:fb: 76:9d:7b:82:68:90:7c:c7:7a:fa:dc:35:ec:41:ad:7c:aa:3b: 74:49:6c:e1:50:9d:e5:4c:d6:ef:49:61:28:67:70:2e:9a:e7: 78:a7:09:15:89:66:6b:c0:3d:c9:89:18:3b:03:a9:d9:ba:66: 18:3d:61:53:1f:a5:db:01:86:0b:69:ea:02:81:93:66:04:56: 99:9d:17:6f:93:40:6c:b9:4f:f9:46:5a:9b:94:f8:fa:8a:68: fe:2a:20:88 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/g5fn95v2uolprVJEnfSXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyY2U3NTkzMjAxOTViOWNjMThjY2ZjYjFiNTMyYWVhOTQ5 MjU4ZjEwHhcNMjYwMTAyMTYyMTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMGNjOTNlNWU3MmI1M2UzMzI2MzY2ODhhYTk2OTFkYTAzM2QwNDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCXyJ5Zt05x/cJKaUEONUtLuaQx6 zfN4GOf9tm/9ho57o+CwsgircEMElM4RLXDB7Ov4M3PB8uQMBtMomwlRepShPxmf wEZHVqyCLHy5KcW9j5/AGUlH/8Q6trKg1SSCZLxHHiAt445hXA6adbIuyJ7Nk/FX o/6g/f9kkTWuR1CHgozJ5SkKk5h+gv4M9MD3hFkOZsPrxELKFxT5fipH6C8rGLO1 WtGaxhKRiKd36ZdSnRuaUawdGo+rdkwT+Gs9h+d6CJMV5adyoPtlkL3rjaHfRQ/u iNK5he41i6BTAeZWxH3CY0WFveZ+pGSXkrSbSN9zIYSUt4jyYwGI5ue46QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMDMk+XnK1PjMmNmiKqWkdoDPQQRMB8GA1UdIwQY MBaAFELOdZMgGVucwYzPyxtTKuqUkljxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUt Njk3OTQ4ZWE3MWY1LzEvd015VDVlY3JVLU15WTJhSXFwYVIyZ005QkJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUtNjk3OTQ4ZWE3MWY1 LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcBKg4IAP8g AwcGKg4IAP9AMA0GCSqGSIb3DQEBCwUAA4IBAQBKVKGT/+LAPNfRSphA9N1bJ0fG 0d53NuiocRobJ7fOby0bVQYkD72W/k69OrTeJrGgbMBBsMlqwfn0MBWOA7ZkdzbO 3/7NX09uCi5MsMX0a0WjpmuS3tyI15pF+C6CdqcsmLEwXmEx6u+VcTJzi06mD5Ko rqI3UGRUHLmPWhivHlohSaM3IOKIqOHm3Bvaeq+PHQ443lpYB36uDUGGhZcmqPt2 nXuCaJB8x3r63DXsQa18qjt0SWzhUJ3lTNbvSWEoZ3Aumud4pwkViWZrwD3JiRg7 A6nZumYYPWFTH6XbAYYLaeoCgZNmBFaZnRdvk0BsuU/5RlqblPj6imj+KiCI -----END CERTIFICATE-----Generated at Sun Jan 25 10:33:09 2026 by rpki-client