This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/WL0tgHjXPonIgpA9aEym0R7QJaA.roa File: WL0tgHjXPonIgpA9aEym0R7QJaA.roa (raw, json) Hash identifier: 9pBr0W2ydRSI4qFK7wS98rz+8aVtBJo8NKM5L8oOaEk= Subject key identifier: 58:BD:2D:80:78:D7:3E:89:C8:82:90:3D:68:4C:A6:D1:1E:D0:25:A0 Certificate issuer: /CN=f219383a3e3f116a9bcc4769c8517cdce40765c7 Certificate serial: 019B7F853AFDFDB4FF912879817C9BBF88E6 Authority key identifier: F2:19:38:3A:3E:3F:11:6A:9B:CC:47:69:C8:51:7C:DC:E4:07:65:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hk4Oj4_EWqbzEdpyFF83OQHZcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/WL0tgHjXPonIgpA9aEym0R7QJaA.roa Signing time: Fri 02 Jan 2026 16:23:16 +0000 ROA not before: Fri 02 Jan 2026 16:23:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203339 IP address blocks: 2a02:4840:1111::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8hk4Oj4_EWqbzEdpyFF83OQHZcc.crl rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8hk4Oj4_EWqbzEdpyFF83OQHZcc.mft rsync://rpki.ripe.net/repository/DEFAULT/8hk4Oj4_EWqbzEdpyFF83OQHZcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:3a:fd:fd:b4:ff:91:28:79:81:7c:9b:bf:88:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f219383a3e3f116a9bcc4769c8517cdce40765c7 Validity Not Before: Jan 2 16:23:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58bd2d8078d73e89c882903d684ca6d11ed025a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:6f:9f:48:41:b0:df:86:59:10:df:6f:0c:53: 22:f5:a4:9a:37:dd:e4:90:0b:ea:78:3f:27:41:21: 5c:2d:78:af:9e:62:9a:bb:8c:69:16:37:16:df:8b: 46:7d:d2:00:29:87:b1:13:bf:3b:5a:3c:56:cb:af: be:c3:73:95:9a:25:d7:1f:4b:49:0b:64:ca:fa:99: ed:51:96:5d:d8:91:38:68:47:29:f3:09:ed:bc:41: 8f:a1:4f:12:7d:a3:85:19:82:8b:44:d7:76:a9:7a: 60:b0:cf:a1:7b:28:fe:07:09:dc:94:ab:bf:bc:c4: 54:53:59:47:62:2c:db:55:8e:59:1e:c5:c7:89:b7: dd:c1:50:34:b1:94:ef:b1:6e:24:37:fc:78:7f:eb: 7a:2c:c4:03:83:12:a4:55:00:ef:47:bd:12:9f:e6: 96:54:22:84:05:cc:b8:9f:25:31:46:72:17:33:46: a8:12:a8:a4:99:80:e1:88:dd:aa:13:f8:1f:61:09: 8a:b3:20:d5:e5:f6:86:4f:90:2d:5e:a8:ac:ff:a6: d7:8f:1b:36:a2:b4:7b:3c:14:85:35:56:c6:53:0c: 5e:ea:2f:eb:da:2d:01:78:d4:85:6e:28:20:e6:0c: 13:36:dc:c4:c5:f0:41:aa:13:82:03:c8:5e:49:e5: 79:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:BD:2D:80:78:D7:3E:89:C8:82:90:3D:68:4C:A6:D1:1E:D0:25:A0 X509v3 Authority Key Identifier: keyid:F2:19:38:3A:3E:3F:11:6A:9B:CC:47:69:C8:51:7C:DC:E4:07:65:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hk4Oj4_EWqbzEdpyFF83OQHZcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/WL0tgHjXPonIgpA9aEym0R7QJaA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8hk4Oj4_EWqbzEdpyFF83OQHZcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:4840:1111::/48 Signature Algorithm: sha256WithRSAEncryption 45:44:8c:af:cc:c9:54:b9:a3:d0:d7:db:5d:6e:f7:45:ce:68: cf:3a:e3:7d:21:3f:e1:a6:fb:3a:f6:70:43:32:48:16:6f:3c: 48:0c:e2:c1:76:4b:3e:05:c3:ef:1f:59:a8:5d:a7:fe:40:5f: 23:9d:4c:ed:51:40:8f:71:a0:c3:1f:e3:8c:2f:e7:79:70:e8: d7:20:2c:d5:d4:c3:ad:fc:2a:82:3a:83:5e:3b:a5:28:59:fe: 55:00:cd:11:9f:29:41:06:e1:a1:68:b9:d7:63:49:b1:fa:62: 55:3e:60:19:a2:46:b0:32:d9:2c:39:93:c3:75:dd:8b:aa:1a: cf:02:38:85:5b:af:77:48:9b:df:b3:36:ae:06:33:b4:6e:7d: 52:04:e3:6a:0c:6d:5d:27:50:aa:5c:c0:48:c0:97:ec:45:11: a3:27:eb:59:e2:e5:8e:7f:cc:6a:86:fe:38:ed:3e:fb:cc:9b: 39:23:0b:d2:c4:fd:9d:59:26:fb:93:c5:14:35:38:10:14:e7: 86:40:91:de:16:f1:5c:9b:52:78:32:11:fe:90:2d:0b:d4:dd: 82:99:53:94:b7:fc:00:ae:04:c8:0c:2e:56:7d:f5:4b:87:07: a3:24:02:29:04:cf:ca:4d:4f:37:09:2c:48:42:f1:ab:45:a5: 25:f9:eb:d8 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/hTr9/bT/kSh5gXybv4jmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyMTkzODNhM2UzZjExNmE5YmNjNDc2OWM4NTE3Y2RjZTQw NzY1YzcwHhcNMjYwMTAyMTYyMzE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OGJkMmQ4MDc4ZDczZTg5Yzg4MjkwM2Q2ODRjYTZkMTFlZDAyNWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32+fSEGw34ZZEN9vDFMi9aSaN93k kAvqeD8nQSFcLXivnmKau4xpFjcW34tGfdIAKYexE787WjxWy6++w3OVmiXXH0tJ C2TK+pntUZZd2JE4aEcp8wntvEGPoU8SfaOFGYKLRNd2qXpgsM+heyj+BwnclKu/ vMRUU1lHYizbVY5ZHsXHibfdwVA0sZTvsW4kN/x4f+t6LMQDgxKkVQDvR70Sn+aW VCKEBcy4nyUxRnIXM0aoEqikmYDhiN2qE/gfYQmKsyDV5faGT5AtXqis/6bXjxs2 orR7PBSFNVbGUwxe6i/r2i0BeNSFbigg5gwTNtzExfBBqhOCA8heSeV5kQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFi9LYB41z6JyIKQPWhMptEe0CWgMB8GA1UdIwQY MBaAFPIZODo+PxFqm8xHachRfNzkB2XHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGhrNE9qNF9FV3FiekVkcHlGRjgzT1FIWmNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS83Y2YwYjEtMjI5OC00NDg0LWJkODAt NmNjOWY2Y2JhYWM0LzEvV0wwdGdIalhQb25JZ3BBOWFFeW0wUjdRSmFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS83Y2YwYjEtMjI5OC00NDg0LWJkODAtNmNjOWY2Y2JhYWM0 LzEvOGhrNE9qNF9FV3FiekVkcHlGRjgzT1FIWmNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgJIQBER MA0GCSqGSIb3DQEBCwUAA4IBAQBFRIyvzMlUuaPQ19tdbvdFzmjPOuN9IT/hpvs6 9nBDMkgWbzxIDOLBdks+BcPvH1moXaf+QF8jnUztUUCPcaDDH+OML+d5cOjXICzV 1MOt/CqCOoNeO6UoWf5VAM0RnylBBuGhaLnXY0mx+mJVPmAZokawMtksOZPDdd2L qhrPAjiFW693SJvfszauBjO0bn1SBONqDG1dJ1CqXMBIwJfsRRGjJ+tZ4uWOf8xq hv447T77zJs5IwvSxP2dWSb7k8UUNTgQFOeGQJHeFvFcm1J4MhH+kC0L1N2CmVOU t/wArgTIDC5WffVLhwejJAIpBM/KTU83CSxIQvGrRaUl+evY -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:08 2026 by rpki-client