This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/W5T5YM6RakWxLAbO8hgQK3sFPwE.roa File: W5T5YM6RakWxLAbO8hgQK3sFPwE.roa (raw, json) Hash identifier: UQWL1nZftQZ6mbwJ6AE7C+SY69nqOWZ3rKoLddHHVmM= Subject key identifier: 5B:94:F9:60:CE:91:6A:45:B1:2C:06:CE:F2:18:10:2B:7B:05:3F:01 Certificate issuer: /CN=7bab6c11d41162db0306858f83e5e65121132a6b Certificate serial: 019B7911316C0DF0B926E783B355E14E5F7B Authority key identifier: 7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/W5T5YM6RakWxLAbO8hgQK3sFPwE.roa Signing time: Thu 01 Jan 2026 10:18:48 +0000 ROA not before: Thu 01 Jan 2026 10:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210715 IP address blocks: 2a07:22c1:38::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:31:6c:0d:f0:b9:26:e7:83:b3:55:e1:4e:5f:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bab6c11d41162db0306858f83e5e65121132a6b Validity Not Before: Jan 1 10:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b94f960ce916a45b12c06cef218102b7b053f01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f7:30:22:1f:6b:f9:83:fb:94:03:8a:99:85: 98:15:35:b5:cb:08:d0:a1:dd:7d:2e:2d:37:a1:d9: 9a:47:ee:5e:ef:e1:d1:06:66:c9:83:9d:59:65:da: 76:8c:ab:19:59:41:0a:c2:31:e9:f0:c0:5f:ad:b0: e4:5f:05:50:ad:08:bd:db:26:ea:98:b1:99:12:2e: 2c:ad:06:bb:ab:d4:26:68:b8:e2:dc:7a:36:1d:81: 8d:19:d6:8b:72:d8:76:68:ef:e8:a2:a3:5c:29:3c: 43:14:77:64:5e:ca:73:e9:3c:48:f3:2b:97:39:41: ce:6c:b2:b3:8c:17:99:84:3b:18:40:fe:8e:d5:b5: ae:a8:20:11:db:28:7d:0e:a3:83:73:0b:7a:76:7a: 4c:17:2e:70:bf:fd:cc:14:8b:9a:f8:18:79:14:b7: 94:9a:35:7f:23:b0:8b:ea:51:22:0c:bb:f1:1a:e4: cd:6e:72:48:17:ed:1f:08:45:23:6f:13:c2:49:1c: e3:37:16:f7:5c:90:ae:56:1d:4a:b3:08:f4:dd:ad: e0:c1:e5:32:2c:73:b0:7a:24:b9:7e:c9:7c:8e:49: 53:1c:34:db:31:52:b8:0b:7d:5e:87:3e:3e:71:a5: 0a:b4:6d:0a:cd:23:eb:da:f7:df:71:dd:9c:41:c6: 9d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:94:F9:60:CE:91:6A:45:B1:2C:06:CE:F2:18:10:2B:7B:05:3F:01 X509v3 Authority Key Identifier: keyid:7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/W5T5YM6RakWxLAbO8hgQK3sFPwE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:22c1:38::/48 Signature Algorithm: sha256WithRSAEncryption 36:31:a4:35:7d:63:98:96:aa:c6:fc:55:54:e8:d6:7e:3a:17: db:be:00:e9:2b:93:03:a6:da:91:f6:9b:01:aa:a0:a3:e3:ac: b1:2d:f0:9b:12:cf:2e:54:60:16:12:93:09:0e:4c:bf:1b:70: 15:d0:07:29:60:82:64:49:e7:6f:4b:33:cc:cb:5e:4c:18:61: 83:c3:a0:d5:a9:f6:e7:09:00:c2:6d:86:2d:21:15:b4:09:46: 04:5e:9d:6f:44:b9:e9:74:9b:56:45:97:2f:49:b5:2e:e3:aa: b6:9c:8e:f8:38:e3:c8:93:e5:3f:5e:a0:28:33:16:88:3c:22: 50:cb:17:42:69:d6:8f:ff:20:84:3f:b8:92:2d:06:d3:f5:fd: af:b5:9f:13:70:4e:d9:64:cc:b1:11:f3:e4:0b:1c:fa:7c:91: 98:09:02:6e:78:11:91:aa:11:d3:7b:d5:fa:7b:e5:19:d2:b1: ee:53:af:2a:4b:8b:e2:f4:e2:e2:37:38:b3:87:89:65:c0:8d: b6:05:ca:e0:3d:c1:d8:52:1e:08:0d:c6:4c:26:77:36:22:9a: 8a:66:19:ed:67:1a:45:42:5a:b2:f8:b4:59:09:35:1e:9d:bb: e3:c1:4f:5b:36:03:68:10:1d:3f:21:3a:51:0d:33:a6:bd:97: 43:ff:b0:e2 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5ETFsDfC5JueDs1XhTl97MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiYWI2YzExZDQxMTYyZGIwMzA2ODU4ZjgzZTVlNjUxMjEx MzJhNmIwHhcNMjYwMTAxMTAxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Yjk0Zjk2MGNlOTE2YTQ1YjEyYzA2Y2VmMjE4MTAyYjdiMDUzZjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofcwIh9r+YP7lAOKmYWYFTW1ywjQ od19Li03odmaR+5e7+HRBmbJg51ZZdp2jKsZWUEKwjHp8MBfrbDkXwVQrQi92ybq mLGZEi4srQa7q9QmaLji3Ho2HYGNGdaLcth2aO/ooqNcKTxDFHdkXspz6TxI8yuX OUHObLKzjBeZhDsYQP6O1bWuqCAR2yh9DqODcwt6dnpMFy5wv/3MFIua+Bh5FLeU mjV/I7CL6lEiDLvxGuTNbnJIF+0fCEUjbxPCSRzjNxb3XJCuVh1Kswj03a3gweUy LHOweiS5fsl8jklTHDTbMVK4C31ehz4+caUKtG0KzSPr2vffcd2cQcadpwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFuU+WDOkWpFsSwGzvIYECt7BT8BMB8GA1UdIwQY MBaAFHurbBHUEWLbAwaFj4Pl5lEhEyprMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTZ0c0VkUVJZdHNEQm9XUGctWG1VU0VUS21zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9kMzM0YWQtNTI0MC00ZGFhLWEwNTAt OWY1YmY3MzY3MjBlLzEvVzVUNVlNNlJha1d4TEFiTzhoZ1FLM3NGUHdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9kMzM0YWQtNTI0MC00ZGFhLWEwNTAtOWY1YmY3MzY3MjBl LzEvZTZ0c0VkUVJZdHNEQm9XUGctWG1VU0VUS21zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgciwQA4 MA0GCSqGSIb3DQEBCwUAA4IBAQA2MaQ1fWOYlqrG/FVU6NZ+OhfbvgDpK5MDptqR 9psBqqCj46yxLfCbEs8uVGAWEpMJDky/G3AV0AcpYIJkSedvSzPMy15MGGGDw6DV qfbnCQDCbYYtIRW0CUYEXp1vRLnpdJtWRZcvSbUu46q2nI74OOPIk+U/XqAoMxaI PCJQyxdCadaP/yCEP7iSLQbT9f2vtZ8TcE7ZZMyxEfPkCxz6fJGYCQJueBGRqhHT e9X6e+UZ0rHuU68qS4vi9OLiNzizh4llwI22BcrgPcHYUh4IDcZMJnc2IpqKZhnt ZxpFQlqy+LRZCTUenbvjwU9bNgNoEB0/ITpRDTOmvZdD/7Di -----END CERTIFICATE-----Generated at Mon Jan 26 01:41:15 2026 by rpki-client