This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/WYq_SwOSBS5C2flPsPwqJm7TWQ0.roa File: WYq_SwOSBS5C2flPsPwqJm7TWQ0.roa (raw, json) Hash identifier: 6TuNzzukIi+p4GfJ3ZlekfC6HWDwvlGuM10xKCq4iF4= Subject key identifier: 59:8A:BF:4B:03:92:05:2E:42:D9:F9:4F:B0:FC:2A:26:6E:D3:59:0D Certificate issuer: /CN=8b819441c7093034a9d4656a2f6d36ab24033fe4 Certificate serial: 019B7C11218EC3922ACE415E6C5C32065965 Authority key identifier: 8B:81:94:41:C7:09:30:34:A9:D4:65:6A:2F:6D:36:AB:24:03:3F:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4GUQccJMDSp1GVqL202qyQDP-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/WYq_SwOSBS5C2flPsPwqJm7TWQ0.roa Signing time: Fri 02 Jan 2026 00:17:36 +0000 ROA not before: Fri 02 Jan 2026 00:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213405 IP address blocks: 2001:67c:2920::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/i4GUQccJMDSp1GVqL202qyQDP-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:21:8e:c3:92:2a:ce:41:5e:6c:5c:32:06:59:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b819441c7093034a9d4656a2f6d36ab24033fe4 Validity Not Before: Jan 2 00:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=598abf4b0392052e42d9f94fb0fc2a266ed3590d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2c:7f:ad:c4:03:32:f7:9b:c1:d4:d0:60:c1: d6:7d:75:c7:09:2f:f0:5b:8d:9d:e4:f9:28:62:15: a2:e8:b3:53:e1:e0:e4:cc:1d:8d:7c:9a:f4:1c:f2: 90:ea:ce:5e:b7:08:e5:01:ce:6d:b5:df:08:d2:0d: 41:5d:18:4e:ca:a9:2d:26:c8:30:68:4d:66:7c:ea: 4a:0d:59:71:ac:b5:30:e5:1e:05:84:79:83:f4:fe: 06:a5:64:8a:23:44:7f:c9:37:37:9c:24:10:a9:7b: 94:bf:83:02:73:98:c0:d2:d7:9f:e1:7e:27:db:79: 3b:97:12:64:61:df:03:9c:f7:81:46:1e:9c:fe:37: 40:29:77:aa:e1:f0:70:a7:c3:e6:05:8b:8f:f6:74: e6:3d:ae:d8:74:a1:47:0c:92:d2:bf:78:40:89:34: 80:cc:08:40:07:b2:3a:5f:b2:ce:fb:4d:28:70:a7: 78:f1:bf:21:2e:11:8f:86:e1:dc:a1:31:8c:cf:c6: 21:8f:4e:42:80:28:8f:71:64:ff:e7:1a:38:62:ba: 48:47:5b:50:ed:47:1d:78:1d:56:be:00:06:cf:c3: e8:8c:c5:34:15:bd:d0:9a:dd:1f:7c:7f:02:df:01: 78:9a:ae:e1:9d:fe:df:9b:8a:a0:9c:e7:11:53:06: 65:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:8A:BF:4B:03:92:05:2E:42:D9:F9:4F:B0:FC:2A:26:6E:D3:59:0D X509v3 Authority Key Identifier: keyid:8B:81:94:41:C7:09:30:34:A9:D4:65:6A:2F:6D:36:AB:24:03:3F:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4GUQccJMDSp1GVqL202qyQDP-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/WYq_SwOSBS5C2flPsPwqJm7TWQ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2920::/48 Signature Algorithm: sha256WithRSAEncryption 27:c1:70:36:0e:5f:d4:e5:f0:51:2c:7b:95:00:d8:19:6b:2a: 0c:f2:1e:9a:c5:60:12:4c:b3:96:37:8d:3d:4c:8b:c1:08:fd: e5:56:b4:1e:11:91:f3:01:f2:29:dc:54:00:4e:5b:6f:30:ee: bf:5d:37:11:7f:ee:2c:c4:80:c1:6d:d4:57:e6:61:92:7a:c9: aa:79:e0:df:4e:7f:ff:11:68:7a:f6:be:7f:b7:38:86:e3:6f: 27:f8:8c:4f:7d:a0:60:3c:6a:7b:f1:65:72:fa:f0:2d:cb:67: 9c:bb:41:fc:fc:2b:a4:4e:a7:7e:4d:f6:95:5a:b0:d1:b7:fd: 45:fa:f6:aa:1b:80:01:40:d0:fa:9a:f5:de:a3:69:d6:e0:44: 0b:a8:84:ab:f7:ea:5c:0c:93:dc:02:0b:cc:d8:41:26:4e:cd: a8:07:8c:04:e8:32:6c:65:4e:c8:84:66:18:10:de:1d:68:3c: f0:8c:29:f5:82:37:cb:16:6d:3e:da:a3:b6:b3:6c:49:c8:69: 64:cb:04:0d:a2:f9:57:40:4d:8a:9c:be:7c:cd:34:a3:60:65: bb:33:17:be:ee:ce:cb:68:86:9d:02:b4:4f:38:38:b9:e5:ba: 96:9d:2b:b3:56:53:98:4b:3d:53:cd:25:4a:58:6f:e7:c7:ed: 73:c1:26:21 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8ESGOw5IqzkFebFwyBlllMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiODE5NDQxYzcwOTMwMzRhOWQ0NjU2YTJmNmQzNmFiMjQw MzNmZTQwHhcNMjYwMTAyMDAxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OThhYmY0YjAzOTIwNTJlNDJkOWY5NGZiMGZjMmEyNjZlZDM1OTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtix/rcQDMvebwdTQYMHWfXXHCS/w W42d5PkoYhWi6LNT4eDkzB2NfJr0HPKQ6s5etwjlAc5ttd8I0g1BXRhOyqktJsgw aE1mfOpKDVlxrLUw5R4FhHmD9P4GpWSKI0R/yTc3nCQQqXuUv4MCc5jA0tef4X4n 23k7lxJkYd8DnPeBRh6c/jdAKXeq4fBwp8PmBYuP9nTmPa7YdKFHDJLSv3hAiTSA zAhAB7I6X7LO+00ocKd48b8hLhGPhuHcoTGMz8Yhj05CgCiPcWT/5xo4YrpIR1tQ 7UcdeB1WvgAGz8PojMU0Fb3Qmt0ffH8C3wF4mq7hnf7fm4qgnOcRUwZlRwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFmKv0sDkgUuQtn5T7D8KiZu01kNMB8GA1UdIwQY MBaAFIuBlEHHCTA0qdRlai9tNqskAz/kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTRHVVFjY0pNRFNwMUdWcUwyMDJxeVFEUC1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9kZmZiMTktZDQ2Ny00ZWU1LThjZjYt ZjYzZDIwYTc4Zjc1LzEvV1lxX1N3T1NCUzVDMmZsUHNQd3FKbTdUV1EwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9kZmZiMTktZDQ2Ny00ZWU1LThjZjYtZjYzZDIwYTc4Zjc1 LzEvaTRHVVFjY0pNRFNwMUdWcUwyMDJxeVFEUC1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCkg MA0GCSqGSIb3DQEBCwUAA4IBAQAnwXA2Dl/U5fBRLHuVANgZayoM8h6axWASTLOW N409TIvBCP3lVrQeEZHzAfIp3FQATltvMO6/XTcRf+4sxIDBbdRX5mGSesmqeeDf Tn//EWh69r5/tziG428n+IxPfaBgPGp78WVy+vAty2ecu0H8/CukTqd+TfaVWrDR t/1F+vaqG4ABQND6mvXeo2nW4EQLqISr9+pcDJPcAgvM2EEmTs2oB4wE6DJsZU7I hGYYEN4daDzwjCn1gjfLFm0+2qO2s2xJyGlkywQNovlXQE2KnL58zTSjYGW7Mxe+ 7s7LaIadArRPODi55bqWnSuzVlOYSz1TzSVKWG/nx+1zwSYh -----END CERTIFICATE-----Generated at Mon Jan 26 14:27:31 2026 by rpki-client