This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wu6yzZOp4lpTzpUuO-83Bh6y-LA.roa File: wu6yzZOp4lpTzpUuO-83Bh6y-LA.roa (raw, json) Hash identifier: rIJZAMrnS+qyWJbw91rA5PEvBPuRmf6lmb4uo7zX1VU= Subject key identifier: C2:EE:B2:CD:93:A9:E2:5A:53:CE:95:2E:3B:EF:37:06:1E:B2:F8:B0 Certificate issuer: /CN=c29c1007746981fcc408839965b1671c037d121b Certificate serial: 019B7AC77B2AA2A36C1EF5E0DA0DB6D3625D Authority key identifier: C2:9C:10:07:74:69:81:FC:C4:08:83:99:65:B1:67:1C:03:7D:12:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wpwQB3RpgfzECIOZZbFnHAN9Ehs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wu6yzZOp4lpTzpUuO-83Bh6y-LA.roa Signing time: Thu 01 Jan 2026 18:17:32 +0000 ROA not before: Thu 01 Jan 2026 18:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199902 IP address blocks: 143.237.0.0/16 maxlen: 16 2001:67c:268c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft rsync://rpki.ripe.net/repository/DEFAULT/wpwQB3RpgfzECIOZZbFnHAN9Ehs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:7b:2a:a2:a3:6c:1e:f5:e0:da:0d:b6:d3:62:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c29c1007746981fcc408839965b1671c037d121b Validity Not Before: Jan 1 18:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c2eeb2cd93a9e25a53ce952e3bef37061eb2f8b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c0:32:72:c0:37:5e:44:cb:7c:77:22:34:49: ac:b1:2f:54:06:d2:ab:3a:1b:6c:68:2c:60:d9:a9: 46:3b:9a:ad:29:cd:bf:c3:fc:55:cb:e3:2c:0c:32: 95:66:74:75:b7:25:1c:40:83:3e:58:5b:45:6c:a7: 54:85:1d:b7:0f:2c:01:9c:38:dc:b0:74:1a:84:6c: 66:d9:df:cc:9b:3e:a7:be:06:ae:e0:eb:65:07:30: f9:be:e5:6f:5d:7d:c5:02:a1:32:cd:07:80:f6:c3: 22:16:21:2c:f2:94:8a:55:86:d0:46:ca:1c:1b:e4: 15:bf:4f:5a:65:d9:45:7f:5d:fe:0b:29:2f:af:a9: c1:29:f9:b5:c4:32:50:0a:5b:7c:07:cf:35:a9:a3: 51:4e:8b:b1:e0:0e:a9:b8:4f:bc:7b:b3:b2:52:98: 39:4a:57:8b:e5:35:dc:fa:ad:b0:06:12:dd:40:9e: 8f:69:04:79:52:63:e2:e5:00:1b:1d:16:7e:54:b9: 80:89:bb:0d:e9:2c:c9:05:b2:56:1e:8b:c3:ca:11: da:11:67:61:c3:17:a6:27:db:6d:a9:77:25:d2:5a: ba:e4:27:3d:85:4b:25:9e:cc:fb:56:e8:e6:63:45: 34:b8:e0:71:dd:62:54:2c:57:5f:2e:e8:9e:0b:c6: 31:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:EE:B2:CD:93:A9:E2:5A:53:CE:95:2E:3B:EF:37:06:1E:B2:F8:B0 X509v3 Authority Key Identifier: keyid:C2:9C:10:07:74:69:81:FC:C4:08:83:99:65:B1:67:1C:03:7D:12:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpwQB3RpgfzECIOZZbFnHAN9Ehs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wu6yzZOp4lpTzpUuO-83Bh6y-LA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.237.0.0/16 IPv6: 2001:67c:268c::/48 Signature Algorithm: sha256WithRSAEncryption 28:44:3d:cd:d3:9d:4e:34:da:bd:35:38:da:ec:81:08:c8:b7: 27:97:2d:e4:78:d0:78:c4:b3:32:f7:ca:03:61:33:13:57:44: bc:8b:7f:89:57:fe:cb:d0:ae:65:b0:ec:60:10:f0:b4:69:f4: db:f6:f9:96:67:44:40:c5:f6:22:54:30:d6:ff:78:a4:11:46: b1:bb:5c:22:b6:b8:3c:2a:8b:73:6d:d5:aa:7a:5f:83:1b:c0: 82:7e:f1:c9:89:6d:c6:13:fe:ca:28:88:bc:85:c4:2d:38:06: 5b:4e:a1:b7:06:6c:01:4e:54:b3:e9:22:d1:5c:b4:a4:54:bf: c5:35:69:57:5e:dd:38:e6:c3:1c:fb:95:ba:57:7c:07:7a:ef: d7:d5:6a:9e:40:0a:dc:c0:bf:0c:50:3c:6a:c1:1c:4c:e5:81: 84:6f:93:7c:93:74:2a:0a:00:dd:d1:b7:1f:23:e6:46:6a:7f: 47:80:e7:bb:a8:03:17:34:7d:a5:2c:4c:ba:5b:b7:36:c7:21: c4:a7:32:c8:fc:00:9e:25:cb:5e:e6:0e:3b:20:57:de:c4:02: 75:3e:88:ff:ec:66:23:d9:0c:e8:0b:c4:be:82:b3:c4:27:73: a5:f1:1d:0a:83:6b:bd:b1:94:14:ff:9c:d3:7c:f8:b2:16:b6: f6:23:68:56 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt6x3sqoqNsHvXg2g2202JdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyOWMxMDA3NzQ2OTgxZmNjNDA4ODM5OTY1YjE2NzFjMDM3 ZDEyMWIwHhcNMjYwMTAxMTgxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMmVlYjJjZDkzYTllMjVhNTNjZTk1MmUzYmVmMzcwNjFlYjJmOGIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMAycsA3XkTLfHciNEmssS9UBtKr OhtsaCxg2alGO5qtKc2/w/xVy+MsDDKVZnR1tyUcQIM+WFtFbKdUhR23DywBnDjc sHQahGxm2d/Mmz6nvgau4OtlBzD5vuVvXX3FAqEyzQeA9sMiFiEs8pSKVYbQRsoc G+QVv09aZdlFf13+Cykvr6nBKfm1xDJQClt8B881qaNRToux4A6puE+8e7OyUpg5 SleL5TXc+q2wBhLdQJ6PaQR5UmPi5QAbHRZ+VLmAibsN6SzJBbJWHovDyhHaEWdh wxemJ9ttqXcl0lq65Cc9hUslnsz7VujmY0U0uOBx3WJULFdfLuieC8YxawIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFMLuss2TqeJaU86VLjvvNwYesviwMB8GA1UdIwQY MBaAFMKcEAd0aYH8xAiDmWWxZxwDfRIbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3B3UUIzUnBnZnpFQ0lPWlpiRm5IQU45RWhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS84YWIyNmMtYmExNy00Mjg4LTg3NDkt OGZjOTMwZDg3MDJhLzEvd3U2eXpaT3A0bHBUenBVdU8tODNCaDZ5LUxBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS84YWIyNmMtYmExNy00Mjg4LTg3NDktOGZjOTMwZDg3MDJh LzEvd3B3UUIzUnBnZnpFQ0lPWlpiRm5IQU45RWhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjALBAIAATAFAwMAj+0wDwQC AAIwCQMHACABBnwmjDANBgkqhkiG9w0BAQsFAAOCAQEAKEQ9zdOdTjTavTU42uyB CMi3J5ct5HjQeMSzMvfKA2EzE1dEvIt/iVf+y9CuZbDsYBDwtGn02/b5lmdEQMX2 IlQw1v94pBFGsbtcIra4PCqLc23VqnpfgxvAgn7xyYltxhP+yiiIvIXELTgGW06h twZsAU5Us+ki0Vy0pFS/xTVpV17dOObDHPuVuld8B3rv19VqnkAK3MC/DFA8asEc TOWBhG+TfJN0KgoA3dG3HyPmRmp/R4Dnu6gDFzR9pSxMulu3NschxKcyyPwAniXL XuYOOyBX3sQCdT6I/+xmI9kM6AvEvoKzxCdzpfEdCoNrvbGUFP+c03z4sha29iNo Vg== -----END CERTIFICATE-----Generated at Sun Jan 25 21:06:12 2026 by rpki-client