This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/wA9ChWaX9aTjQjNN5mYeaC542Nc.roa File: wA9ChWaX9aTjQjNN5mYeaC542Nc.roa (raw, json) Hash identifier: uwS9DbntInTGgRyBcScvO12ZNTWYbWh0ii3LNRApI90= Subject key identifier: C0:0F:42:85:66:97:F5:A4:E3:42:33:4D:E6:66:1E:68:2E:78:D8:D7 Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a Certificate serial: 019B7DCB43D075F40B7D748052A9EF0661DE Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/wA9ChWaX9aTjQjNN5mYeaC542Nc.roa Signing time: Fri 02 Jan 2026 08:20:31 +0000 ROA not before: Fri 02 Jan 2026 08:20:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52048 IP address blocks: 2a06:c3c0::/48 maxlen: 48 2a09:d000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:43:d0:75:f4:0b:7d:74:80:52:a9:ef:06:61:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a Validity Not Before: Jan 2 08:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c00f42856697f5a4e342334de6661e682e78d8d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8c:71:6a:5f:7a:25:2b:29:7b:63:68:bb:b5: ee:af:b3:cb:3b:c4:59:39:ff:61:39:a8:a8:e9:e7: 1b:02:4d:7d:34:5f:31:19:83:53:c1:5d:56:d6:10: c8:c9:b8:70:0b:a6:c7:fe:23:f9:1b:50:57:b5:6c: cc:86:e0:af:85:0a:99:fd:10:9b:ca:5a:b8:09:36: 1b:39:da:b3:99:ac:fd:35:df:a6:2c:26:9a:97:ac: 2c:da:4c:fa:66:68:cc:eb:13:85:92:26:dc:3f:cb: 15:a7:79:4c:5d:89:7f:80:60:6e:8d:e9:a4:d8:98: bc:b2:07:95:0e:3f:64:22:1b:53:b4:75:d1:fe:70: a8:f3:e9:f9:39:a7:be:13:b4:6f:69:12:2b:de:a2: b3:f8:cb:c2:82:cb:c0:ee:b5:f3:32:3e:6e:40:40: 41:d5:60:8c:d4:ed:22:35:cf:33:d0:7f:1a:84:fb: 87:4c:7a:1a:2a:c9:6e:cb:99:37:1e:b6:11:c6:a9: 05:c2:2c:04:24:2b:a2:04:18:7f:eb:a9:30:aa:b2: 7d:53:99:fa:3d:89:07:16:00:e8:a7:61:b4:fc:f2: fd:aa:94:1a:00:48:3c:cb:c2:88:5d:c9:8f:71:26: 8a:03:aa:b0:47:ec:a0:37:cf:af:72:72:a4:89:98: 8a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:0F:42:85:66:97:F5:A4:E3:42:33:4D:E6:66:1E:68:2E:78:D8:D7 X509v3 Authority Key Identifier: keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/wA9ChWaX9aTjQjNN5mYeaC542Nc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:c3c0::/48 2a09:d000::/48 Signature Algorithm: sha256WithRSAEncryption 95:b0:11:ca:4a:d4:6d:56:bc:9f:13:af:16:81:ad:a4:05:07: 75:40:c4:90:24:ae:07:44:68:02:cc:60:9d:bd:13:3e:4b:d0: 9e:1b:48:dc:d1:4c:78:96:a4:90:91:fd:fd:f0:4d:b4:2f:04: 09:ce:e0:ac:55:3d:86:a9:9f:0c:63:dc:2b:b9:cb:10:96:49: a9:95:5a:6a:dc:24:71:1f:83:4a:6b:25:d0:64:82:56:5f:1b: d3:72:ec:0a:f1:4e:51:0f:66:7e:eb:9a:6a:ba:28:ac:5b:6b: 44:15:64:0c:86:ca:24:c3:45:52:71:77:43:04:aa:38:d1:46: 30:9d:b3:31:4d:65:a4:f9:98:77:b5:9e:48:bc:4a:06:78:b8: 3c:6b:92:e0:90:e5:ae:4f:ad:4a:c0:cc:14:67:d0:f2:89:22: cd:61:9a:5c:e1:41:0b:1f:90:6a:34:cc:73:57:a5:dc:d4:23: 25:67:41:09:40:07:42:73:f1:83:84:47:f2:54:84:18:5c:e4: a5:3f:89:99:e4:8d:d4:08:56:32:cb:d7:e3:07:6b:c8:6b:4a: 1c:51:2f:80:54:43:26:7c:b7:f0:41:63:6d:e2:99:78:47:c2: 58:3c:e6:e0:4f:c2:cb:20:a4:1b:28:f0:8b:6c:e6:ba:3b:6c: a9:9b:eb:ec -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9y0PQdfQLfXSAUqnvBmHeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NjM2NTM1NWI2NjU1NjRhMjEwYzM1OGM2OGEwMTE3Yjdm YmViOWEwHhcNMjYwMTAyMDgyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDBmNDI4NTY2OTdmNWE0ZTM0MjMzNGRlNjY2MWU2ODJlNzhkOGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIxxal96JSspe2Nou7Xur7PLO8RZ Of9hOaio6ecbAk19NF8xGYNTwV1W1hDIybhwC6bH/iP5G1BXtWzMhuCvhQqZ/RCb ylq4CTYbOdqzmaz9Nd+mLCaal6ws2kz6ZmjM6xOFkibcP8sVp3lMXYl/gGBujemk 2Ji8sgeVDj9kIhtTtHXR/nCo8+n5Oae+E7RvaRIr3qKz+MvCgsvA7rXzMj5uQEBB 1WCM1O0iNc8z0H8ahPuHTHoaKsluy5k3HrYRxqkFwiwEJCuiBBh/66kwqrJ9U5n6 PYkHFgDop2G0/PL9qpQaAEg8y8KIXcmPcSaKA6qwR+ygN8+vcnKkiZiKxwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMAPQoVml/Wk40IzTeZmHmgueNjXMB8GA1UdIwQY MBaAFHRjZTVbZlVkohDDWMaKARe3++uaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGIt NmE0ZWNhZjhiM2IxLzEvd0E5Q2hXYVg5YVRqUWpOTjVtWWVhQzU0Mk5jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGItNmE0ZWNhZjhiM2Ix LzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgbDwAAA AwcAKgnQAAAAMA0GCSqGSIb3DQEBCwUAA4IBAQCVsBHKStRtVryfE68Wga2kBQd1 QMSQJK4HRGgCzGCdvRM+S9CeG0jc0Ux4lqSQkf398E20LwQJzuCsVT2GqZ8MY9wr ucsQlkmplVpq3CRxH4NKayXQZIJWXxvTcuwK8U5RD2Z+65pquiisW2tEFWQMhsok w0VScXdDBKo40UYwnbMxTWWk+Zh3tZ5IvEoGeLg8a5LgkOWuT61KwMwUZ9DyiSLN YZpc4UELH5BqNMxzV6Xc1CMlZ0EJQAdCc/GDhEfyVIQYXOSlP4mZ5I3UCFYyy9fj B2vIa0ocUS+AVEMmfLfwQWNt4pl4R8JYPObgT8LLIKQbKPCLbOa6O2ypm+vs -----END CERTIFICATE-----Generated at Sun Jan 25 07:17:26 2026 by rpki-client