This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/WfrFEmCPRY6ziwxCZ5iAPeQrpwc.roa File: WfrFEmCPRY6ziwxCZ5iAPeQrpwc.roa (raw, json) Hash identifier: Mk5FHbgOkd1RMCXgBYHYmcVT6F73CxCfoHTOc1sFbTs= Subject key identifier: 59:FA:C5:12:60:8F:45:8E:B3:8B:0C:42:67:98:80:3D:E4:2B:A7:07 Certificate issuer: /CN=37e751a11c1a7888fa58dbfc32c8959bc946303e Certificate serial: 019B7A5ABF84F7C593E22800910B59C696B5 Authority key identifier: 37:E7:51:A1:1C:1A:78:88:FA:58:DB:FC:32:C8:95:9B:C9:46:30:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/WfrFEmCPRY6ziwxCZ5iAPeQrpwc.roa Signing time: Thu 01 Jan 2026 16:18:46 +0000 ROA not before: Thu 01 Jan 2026 16:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 2a10:9007::/32 maxlen: 32 2a10:9007::/48 maxlen: 48 2a10:9007:1::/48 maxlen: 48 2a10:9007:2::/48 maxlen: 48 2a10:9007:3::/48 maxlen: 48 2a10:9007:4::/48 maxlen: 48 2a10:9007:5::/48 maxlen: 48 2a10:9007:6::/48 maxlen: 48 2a10:9007:7::/48 maxlen: 48 2a10:9007:8::/48 maxlen: 48 2a10:9007:9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:bf:84:f7:c5:93:e2:28:00:91:0b:59:c6:96:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37e751a11c1a7888fa58dbfc32c8959bc946303e Validity Not Before: Jan 1 16:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=59fac512608f458eb38b0c426798803de42ba707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d1:61:cb:24:20:85:89:e6:44:7d:a6:1d:88: 89:4b:06:7f:2e:e0:7b:39:cf:a0:cd:51:c3:c9:9f: 04:cc:34:4d:a3:fe:d5:6c:f7:90:41:4c:ae:bf:bb: 4e:ab:dc:2d:ce:00:40:ef:73:8d:cf:fa:9a:2a:a3: 4c:89:de:f9:31:08:55:b2:23:bd:0b:d9:f1:9a:ff: 92:33:57:b8:a1:7e:d0:09:a8:5b:b6:ba:bd:74:b5: 7b:e9:8c:7c:8c:94:07:04:2c:93:72:d4:4b:0b:60: af:cf:da:ba:95:c1:58:b5:1b:5c:f1:ae:e7:20:b5: d8:28:38:4d:ad:bf:cf:25:f6:d0:e9:dd:43:2e:66: eb:ab:ea:2a:19:70:6a:36:55:18:78:67:96:89:e4: 56:be:42:3c:04:0e:e2:e0:1b:b1:45:27:75:95:62: f0:94:51:08:86:c3:f6:21:86:e2:c5:7e:c9:54:03: 3c:55:25:dd:7d:d1:63:e9:d5:c1:81:cb:88:58:bd: 18:90:fe:83:bb:1f:3f:17:a9:21:7b:9c:07:90:08: 94:9e:f9:6c:33:fa:ab:fa:dd:5e:64:6f:64:14:ce: 8f:c8:22:73:a6:fb:68:28:f9:7e:06:ca:49:d4:e6: ec:3a:d1:e0:e5:75:18:85:e2:c0:c0:41:52:e3:fc: 2d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:FA:C5:12:60:8F:45:8E:B3:8B:0C:42:67:98:80:3D:E4:2B:A7:07 X509v3 Authority Key Identifier: keyid:37:E7:51:A1:1C:1A:78:88:FA:58:DB:FC:32:C8:95:9B:C9:46:30:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/WfrFEmCPRY6ziwxCZ5iAPeQrpwc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:9007::/32 Signature Algorithm: sha256WithRSAEncryption 37:11:00:5c:04:4c:e3:4b:d4:1f:ed:36:f1:2c:43:24:14:63: 1a:ea:70:11:3e:fd:4d:a2:cd:f3:36:f6:40:17:b6:42:a7:b9: 54:1e:2e:b1:eb:e6:3f:84:1f:2d:db:1c:64:15:54:14:1e:ef: 61:2f:03:c0:64:84:69:3a:99:8a:28:e6:ba:93:d5:e2:90:72: 3b:45:c7:8a:07:24:34:0b:7f:f4:22:14:42:22:1c:77:31:09: e0:67:03:62:ab:a3:d0:2c:bc:bc:59:66:56:47:de:c2:f6:bf: 15:df:bd:21:2f:ec:9d:83:7c:94:09:c4:9b:bb:64:b1:a4:93: a0:23:23:9b:12:12:50:75:cc:b1:12:51:d3:8c:67:d6:a0:ac: 60:e5:03:04:12:c1:01:19:b7:16:bd:7d:d2:b3:49:54:63:f5: 78:8c:82:2a:b7:56:ad:ea:11:b7:a1:47:59:1b:49:bc:c7:05: 1c:b3:39:76:d0:c9:86:8a:90:b3:1e:77:7d:6f:e8:9a:e4:dd: 8e:7c:6c:f1:5e:86:bf:5b:8b:34:41:41:a2:eb:13:eb:b6:6b: fb:f8:2c:4f:b4:42:d1:9e:a7:95:a1:9c:87:0f:06:97:38:23: 36:db:da:85:ee:f2:ae:3c:d6:8a:41:98:8f:b8:ff:b9:12:f3: 47:21:e8:58 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt6Wr+E98WT4igAkQtZxpa1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3ZTc1MWExMWMxYTc4ODhmYTU4ZGJmYzMyYzg5NTliYzk0 NjMwM2UwHhcNMjYwMTAxMTYxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OWZhYzUxMjYwOGY0NThlYjM4YjBjNDI2Nzk4ODAzZGU0MmJhNzA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtFhyyQghYnmRH2mHYiJSwZ/LuB7 Oc+gzVHDyZ8EzDRNo/7VbPeQQUyuv7tOq9wtzgBA73ONz/qaKqNMid75MQhVsiO9 C9nxmv+SM1e4oX7QCahbtrq9dLV76Yx8jJQHBCyTctRLC2Cvz9q6lcFYtRtc8a7n ILXYKDhNrb/PJfbQ6d1DLmbrq+oqGXBqNlUYeGeWieRWvkI8BA7i4BuxRSd1lWLw lFEIhsP2IYbixX7JVAM8VSXdfdFj6dXBgcuIWL0YkP6Dux8/F6khe5wHkAiUnvls M/qr+t1eZG9kFM6PyCJzpvtoKPl+BspJ1ObsOtHg5XUYheLAwEFS4/wtkwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFFn6xRJgj0WOs4sMQmeYgD3kK6cHMB8GA1UdIwQY MBaAFDfnUaEcGniI+ljb/DLIlZvJRjA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTi1kUm9Sd2FlSWo2V052OE1zaVZtOGxHTUQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS82YjAzNDQtODIyOS00ZDI1LWI0OTgt OGNlN2M0ZmM1ZTBiLzEvV2ZyRkVtQ1BSWTZ6aXd4Q1o1aUFQZVFycHdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS82YjAzNDQtODIyOS00ZDI1LWI0OTgtOGNlN2M0ZmM1ZTBi LzEvTi1kUm9Sd2FlSWo2V052OE1zaVZtOGxHTUQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhCQBzAN BgkqhkiG9w0BAQsFAAOCAQEANxEAXARM40vUH+028SxDJBRjGupwET79TaLN8zb2 QBe2Qqe5VB4usevmP4QfLdscZBVUFB7vYS8DwGSEaTqZiijmupPV4pByO0XHigck NAt/9CIUQiIcdzEJ4GcDYquj0Cy8vFlmVkfewva/Fd+9IS/snYN8lAnEm7tksaST oCMjmxISUHXMsRJR04xn1qCsYOUDBBLBARm3Fr190rNJVGP1eIyCKrdWreoRt6FH WRtJvMcFHLM5dtDJhoqQsx53fW/omuTdjnxs8V6Gv1uLNEFBousT67Zr+/gsT7RC 0Z6nlaGchw8GlzgjNtvahe7yrjzWikGYj7j/uRLzRyHoWA== -----END CERTIFICATE-----Generated at Sun Jan 25 15:13:59 2026 by rpki-client