This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/w5wexF-hJcvTksgksSednww4z4E.roa File: w5wexF-hJcvTksgksSednww4z4E.roa (raw, json) Hash identifier: e+qIfWqcWPWmwyJXZsE4ITGx8fFJ1s+k83g6vuyixn8= Subject key identifier: C3:9C:1E:C4:5F:A1:25:CB:D3:92:C8:24:B1:27:9D:9F:0C:38:CF:81 Certificate issuer: /CN=a72d178c8e53f52131c1fb64743c960cf897fd0c Certificate serial: 019B7D5C5FEED178057D9211E1832C3FA9B3 Authority key identifier: A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/w5wexF-hJcvTksgksSednww4z4E.roa Signing time: Fri 02 Jan 2026 06:19:24 +0000 ROA not before: Fri 02 Jan 2026 06:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12732 IP address blocks: 2a06:9380::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.crl rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:5f:ee:d1:78:05:7d:92:11:e1:83:2c:3f:a9:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a72d178c8e53f52131c1fb64743c960cf897fd0c Validity Not Before: Jan 2 06:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c39c1ec45fa125cbd392c824b1279d9f0c38cf81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d4:32:f6:6c:df:30:17:1a:87:f9:6e:be:ba: 85:c3:33:b1:07:67:81:5b:aa:59:9b:cc:c3:a9:62: b3:5a:84:e3:ca:c8:f6:e9:c0:3a:56:22:76:d8:f2: 8c:ae:b4:5f:78:86:4c:6b:22:4e:69:23:37:89:3f: 06:27:34:62:49:26:43:22:7f:87:45:34:7f:0f:54: 00:02:ce:6c:8e:da:60:c3:fd:47:5f:e2:f2:a7:99: d6:ed:02:d4:7e:57:29:e2:b7:f3:bb:2a:6a:58:26: 79:e6:d8:5f:d4:99:08:34:d2:58:c2:0b:15:fc:21: c1:3f:97:14:b3:a4:e1:7e:74:3f:10:61:6d:bf:35: 68:9c:b0:1a:b8:23:76:d6:a8:f0:3b:3c:1c:21:3d: ba:68:c7:47:b1:d4:d0:a1:01:68:4f:02:32:79:2b: 0a:d4:83:8a:68:15:86:46:06:ee:ee:a8:92:f8:6a: 08:84:f0:17:f4:53:58:6a:69:7f:c0:e7:8d:17:a3: d3:e2:eb:d6:6f:4e:8f:1f:99:94:81:dd:c1:40:a5: 11:c7:4d:50:ad:cf:55:14:f7:74:04:70:30:dd:fb: f2:43:2d:91:73:0d:44:37:41:6b:88:3f:2a:63:24: c5:d0:0f:7f:4c:d0:9f:09:17:98:4d:f4:d2:cd:32: 09:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:9C:1E:C4:5F:A1:25:CB:D3:92:C8:24:B1:27:9D:9F:0C:38:CF:81 X509v3 Authority Key Identifier: keyid:A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/w5wexF-hJcvTksgksSednww4z4E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9380::/29 Signature Algorithm: sha256WithRSAEncryption 30:a6:91:8e:b1:c6:b2:89:f6:61:c8:4c:7c:e3:9f:44:5e:55: f1:9c:6b:f7:d4:d9:0c:de:c1:49:78:28:3a:4a:d6:81:c4:e2: a1:7f:03:e5:44:29:18:74:0a:98:4c:3f:7d:06:7a:50:02:1b: d9:55:72:dd:27:07:87:48:fe:27:38:94:5c:03:3f:32:e0:98: 7b:f3:6b:3c:61:28:1a:bd:ee:4f:3d:7d:07:e7:a4:54:a2:06: df:6d:68:f9:d7:08:da:6f:3d:03:b8:ae:53:fc:5d:d6:51:0d: 08:b5:6c:7d:1c:61:2b:20:e6:7c:15:fc:65:d6:4c:2c:2d:64: a2:05:54:92:f0:0c:b2:2e:26:0b:3e:15:54:55:61:a9:6c:6e: 24:ae:6b:f0:72:b3:c9:88:02:f6:e2:9a:da:6d:1a:20:60:60: b5:f0:93:5a:18:9a:be:64:ba:3e:80:38:6c:c6:a9:ed:e6:92: f4:6c:99:0b:9b:9e:70:48:51:2b:df:5d:97:d4:5d:56:86:41: c3:43:c2:0f:7a:00:05:c7:1d:a4:04:a5:67:c8:09:4e:22:2a: b8:be:bb:13:d8:3c:09:19:e0:c7:1a:20:e1:9b:82:73:e3:19: 69:ae:a7:6e:fd:e1:ea:4d:3e:b5:1a:cc:21:e4:c5:c3:16:ea: 3e:c5:2a:de -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt9XF/u0XgFfZIR4YMsP6mzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3MmQxNzhjOGU1M2Y1MjEzMWMxZmI2NDc0M2M5NjBjZjg5 N2ZkMGMwHhcNMjYwMTAyMDYxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzljMWVjNDVmYTEyNWNiZDM5MmM4MjRiMTI3OWQ5ZjBjMzhjZjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9Qy9mzfMBcah/luvrqFwzOxB2eB W6pZm8zDqWKzWoTjysj26cA6ViJ22PKMrrRfeIZMayJOaSM3iT8GJzRiSSZDIn+H RTR/D1QAAs5sjtpgw/1HX+Lyp5nW7QLUflcp4rfzuypqWCZ55thf1JkINNJYwgsV /CHBP5cUs6ThfnQ/EGFtvzVonLAauCN21qjwOzwcIT26aMdHsdTQoQFoTwIyeSsK 1IOKaBWGRgbu7qiS+GoIhPAX9FNYaml/wOeNF6PT4uvWb06PH5mUgd3BQKURx01Q rc9VFPd0BHAw3fvyQy2Rcw1EN0FriD8qYyTF0A9/TNCfCReYTfTSzTIJaQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFMOcHsRfoSXL05LIJLEnnZ8MOM+BMB8GA1UdIwQY MBaAFKctF4yOU/UhMcH7ZHQ8lgz4l/0MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHkwWGpJNVQ5U0V4d2Z0a2REeVdEUGlYX1F3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8xYjgxM2EtNWU4Ni00NWIwLTk5Y2Qt MjhiOWQyNjFlY2IxLzEvdzV3ZXhGLWhKY3ZUa3Nna3NTZWRud3c0ejRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC8xYjgxM2EtNWU4Ni00NWIwLTk5Y2QtMjhiOWQyNjFlY2Ix LzEvcHkwWGpJNVQ5U0V4d2Z0a2REeVdEUGlYX1F3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgaTgDAN BgkqhkiG9w0BAQsFAAOCAQEAMKaRjrHGson2YchMfOOfRF5V8Zxr99TZDN7BSXgo OkrWgcTioX8D5UQpGHQKmEw/fQZ6UAIb2VVy3ScHh0j+JziUXAM/MuCYe/NrPGEo Gr3uTz19B+ekVKIG321o+dcI2m89A7iuU/xd1lENCLVsfRxhKyDmfBX8ZdZMLC1k ogVUkvAMsi4mCz4VVFVhqWxuJK5r8HKzyYgC9uKa2m0aIGBgtfCTWhiavmS6PoA4 bMap7eaS9GyZC5uecEhRK99dl9RdVoZBw0PCD3oABccdpASlZ8gJTiIquL67E9g8 CRngxxog4ZuCc+MZaa6nbv3h6k0+tRrMIeTFwxbqPsUq3g== -----END CERTIFICATE-----Generated at Mon Jan 26 11:43:11 2026 by rpki-client