This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/wpoL_iSupuiaeUF0rSK5oTJDYgk.roa File: wpoL_iSupuiaeUF0rSK5oTJDYgk.roa (raw, json) Hash identifier: tmpMUF0ltyMmfrFAPsjl7BnWO5nUIh5IyWezk54S+Pw= Subject key identifier: C2:9A:0B:FE:24:AE:A6:E8:9A:79:41:74:AD:22:B9:A1:32:43:62:09 Certificate issuer: /CN=a122d6d21bd04c46224653a49be029e3c024b846 Certificate serial: 019B7E38C22BF0C5C2F6267018B2B368BD47 Authority key identifier: A1:22:D6:D2:1B:D0:4C:46:22:46:53:A4:9B:E0:29:E3:C0:24:B8:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oSLW0hvQTEYiRlOkm-Ap48AkuEY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/wpoL_iSupuiaeUF0rSK5oTJDYgk.roa Signing time: Fri 02 Jan 2026 10:20:07 +0000 ROA not before: Fri 02 Jan 2026 10:20:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 398891 IP address blocks: 2a14:af00::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.crl rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft rsync://rpki.ripe.net/repository/DEFAULT/oSLW0hvQTEYiRlOkm-Ap48AkuEY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:c2:2b:f0:c5:c2:f6:26:70:18:b2:b3:68:bd:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a122d6d21bd04c46224653a49be029e3c024b846 Validity Not Before: Jan 2 10:20:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c29a0bfe24aea6e89a794174ad22b9a132436209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2a:75:07:15:03:d7:6d:a8:e5:21:5f:dc:86: 2b:74:fc:f9:3c:0d:bd:82:3e:61:38:c8:cd:ac:da: d9:e9:ac:01:5e:fa:4d:3a:d2:53:eb:e3:07:07:01: bd:67:62:ad:d3:e2:84:08:e8:80:88:af:6d:da:a5: 60:d1:02:4d:6c:72:dd:7e:03:70:8f:16:02:7b:49: ac:11:84:9d:9e:b6:3a:75:c9:75:a6:26:88:16:4b: b0:c7:a9:b7:4b:d9:7f:a9:0c:cb:de:0d:3d:0e:4c: 32:d4:b7:86:1f:b7:72:c8:8d:f9:db:ac:00:2d:31: 72:5a:6a:e5:81:8f:f8:ed:47:91:5a:a3:50:f3:22: 6d:22:bb:09:b5:87:ad:7a:9f:65:e6:f1:4c:d1:79: 85:d9:73:6a:f7:53:b7:1b:de:81:9c:7b:f6:2c:f5: 16:8d:6e:68:3a:c2:93:18:74:5c:30:5b:18:49:64: a5:f1:ce:4b:a7:a8:9f:8b:59:19:cf:5f:19:e6:f8: 23:45:12:46:b0:ef:14:a9:97:9b:a8:6a:18:f9:39: cd:b7:c8:c6:73:a4:c8:d1:d5:ae:98:9e:47:09:d5: c2:44:b9:f0:e3:f3:23:05:9e:e4:bf:22:fb:84:8e: c4:d8:7b:15:db:50:b0:4d:c4:c1:67:4b:50:1e:fe: 60:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:9A:0B:FE:24:AE:A6:E8:9A:79:41:74:AD:22:B9:A1:32:43:62:09 X509v3 Authority Key Identifier: keyid:A1:22:D6:D2:1B:D0:4C:46:22:46:53:A4:9B:E0:29:E3:C0:24:B8:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSLW0hvQTEYiRlOkm-Ap48AkuEY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/wpoL_iSupuiaeUF0rSK5oTJDYgk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:af00::/29 Signature Algorithm: sha256WithRSAEncryption 4d:69:4b:dd:cc:28:f1:51:56:a6:9e:14:0d:11:d8:66:ba:7e: 63:6d:fa:5a:19:0b:fd:f6:ee:5f:c8:99:f0:17:91:3c:57:48: a4:66:0a:63:d1:89:7d:0c:de:dc:41:fa:58:6e:01:c9:a1:f7: 3d:10:11:53:04:2a:bc:8f:91:f5:f5:ed:f7:5c:26:17:82:ad: 33:4f:e3:4f:cd:79:8a:c9:be:2b:10:bd:72:33:54:62:73:c8: 82:21:5c:94:3a:0e:ab:98:e3:f7:89:5e:19:3d:f6:9b:66:ab: b6:92:43:bb:f1:45:f5:cf:5a:d7:9d:10:ad:c3:72:b3:5c:8d: cc:34:0a:e4:9c:cb:1b:a0:40:22:eb:e2:bc:85:4f:77:14:ed: ed:5f:83:52:15:57:7f:fc:e3:21:49:02:42:7d:17:bb:d5:b3: 7a:4e:5c:60:b5:36:0a:03:e0:66:93:8c:2c:8e:b6:df:74:cb: 41:11:6f:0c:78:bf:5e:55:0b:f4:5a:c1:79:10:4f:3e:67:fa: 73:b8:03:e7:bf:35:63:c6:1b:61:20:bd:a2:ad:40:06:7b:57: 1a:dc:86:21:f1:5f:a9:2c:c3:c1:0f:ab:4c:85:dc:22:90:da: cf:ab:0b:5b:6a:9e:b7:68:b2:ce:2f:e1:7c:a9:a3:4d:ff:70: d4:45:35:14 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+OMIr8MXC9iZwGLKzaL1HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExMjJkNmQyMWJkMDRjNDYyMjQ2NTNhNDliZTAyOWUzYzAy NGI4NDYwHhcNMjYwMTAyMTAyMDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjlhMGJmZTI0YWVhNmU4OWE3OTQxNzRhZDIyYjlhMTMyNDM2MjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySp1BxUD122o5SFf3IYrdPz5PA29 gj5hOMjNrNrZ6awBXvpNOtJT6+MHBwG9Z2Kt0+KECOiAiK9t2qVg0QJNbHLdfgNw jxYCe0msEYSdnrY6dcl1piaIFkuwx6m3S9l/qQzL3g09Dkwy1LeGH7dyyI3526wA LTFyWmrlgY/47UeRWqNQ8yJtIrsJtYetep9l5vFM0XmF2XNq91O3G96BnHv2LPUW jW5oOsKTGHRcMFsYSWSl8c5Lp6ifi1kZz18Z5vgjRRJGsO8UqZebqGoY+TnNt8jG c6TI0dWumJ5HCdXCRLnw4/MjBZ7kvyL7hI7E2HsV21CwTcTBZ0tQHv5gAwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFMKaC/4krqbomnlBdK0iuaEyQ2IJMB8GA1UdIwQY MBaAFKEi1tIb0ExGIkZTpJvgKePAJLhGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1NMVzBodlFURVlpUmxPa20tQXA0OEFrdUVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wNDhhZmMtZDJjYy00ZTMzLTg2MDct NWYyNTFhMDNmYTJiLzEvd3BvTF9pU3VwdWlhZVVGMHJTSzVvVEpEWWdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8wNDhhZmMtZDJjYy00ZTMzLTg2MDctNWYyNTFhMDNmYTJi LzEvb1NMVzBodlFURVlpUmxPa20tQXA0OEFrdUVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhSvADAN BgkqhkiG9w0BAQsFAAOCAQEATWlL3cwo8VFWpp4UDRHYZrp+Y236WhkL/fbuX8iZ 8BeRPFdIpGYKY9GJfQze3EH6WG4ByaH3PRARUwQqvI+R9fXt91wmF4KtM0/jT815 ism+KxC9cjNUYnPIgiFclDoOq5jj94leGT32m2artpJDu/FF9c9a150QrcNys1yN zDQK5JzLG6BAIuvivIVPdxTt7V+DUhVXf/zjIUkCQn0Xu9Wzek5cYLU2CgPgZpOM LI6233TLQRFvDHi/XlUL9FrBeRBPPmf6c7gD5781Y8YbYSC9oq1ABntXGtyGIfFf qSzDwQ+rTIXcIpDaz6sLW2qet2iyzi/hfKmjTf9w1EU1FA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:38 2026 by rpki-client