This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/WYINcTR5G8eWIm2nJo9-FZB9A-c.roa File: WYINcTR5G8eWIm2nJo9-FZB9A-c.roa (raw, json) Hash identifier: xbC6ZKVedTs8dgZW52hJX5QjfYmjqhQcuGp6AKEKmZI= Subject key identifier: 59:82:0D:71:34:79:1B:C7:96:22:6D:A7:26:8F:7E:15:90:7D:03:E7 Certificate issuer: /CN=a7fd3f89335dcf828666b28fad8ae993bd448878 Certificate serial: 019B7F153AAF95605A6C1B49F24A1B338C7B Authority key identifier: A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/WYINcTR5G8eWIm2nJo9-FZB9A-c.roa Signing time: Fri 02 Jan 2026 14:20:56 +0000 ROA not before: Fri 02 Jan 2026 14:20:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 45036 IP address blocks: 2a12:a4c2::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:3a:af:95:60:5a:6c:1b:49:f2:4a:1b:33:8c:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7fd3f89335dcf828666b28fad8ae993bd448878 Validity Not Before: Jan 2 14:20:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=59820d7134791bc796226da7268f7e15907d03e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9a:50:23:c5:d4:25:b3:f0:e9:eb:da:d9:0e: ab:97:1a:46:d4:de:24:e0:5b:e0:23:18:ac:3d:ef: 26:7b:5e:a4:ab:8d:b3:bf:d8:63:f4:fa:03:7b:89: f1:e0:90:9a:48:ee:a8:f2:93:28:16:cd:53:81:6a: e6:62:53:b4:ca:81:27:6d:ce:89:65:5d:18:89:9f: 71:eb:27:63:d1:47:72:47:d9:37:de:1e:77:b5:c5: a9:9e:5c:ff:0b:19:38:7b:eb:1d:d7:a8:15:91:16: 0f:29:25:4d:3a:51:cb:5a:f0:66:10:97:e8:a0:d6: b2:7c:03:75:a6:be:3e:64:dc:38:43:7a:e2:80:59: 8a:53:62:50:6f:d9:db:26:fe:76:0e:58:10:8b:a7: a6:6d:b8:af:e0:ff:8a:a7:d4:7f:38:77:ab:5e:36: 2e:54:1b:1a:11:b8:3c:18:6c:66:fd:88:a3:36:58: 43:44:12:84:b4:57:ce:84:34:7a:24:c5:a1:49:5e: 43:1b:8d:67:6a:22:20:bb:fd:10:fd:ad:29:27:ed: 80:de:0d:be:c5:f4:df:f8:d0:18:49:f6:8b:5c:fd: a2:c3:8d:42:cb:e2:6c:11:19:a6:03:14:4b:44:7b: 6e:61:5a:54:60:68:60:e4:f3:0a:c4:7f:5c:5a:24: 0b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:82:0D:71:34:79:1B:C7:96:22:6D:A7:26:8F:7E:15:90:7D:03:E7 X509v3 Authority Key Identifier: keyid:A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/WYINcTR5G8eWIm2nJo9-FZB9A-c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:a4c2::/32 Signature Algorithm: sha256WithRSAEncryption 0f:b3:08:62:3d:a1:7e:d4:c5:58:68:e4:db:39:09:e0:b3:e2: 29:20:fc:c8:7b:26:ee:16:be:fb:3b:4b:df:48:37:e3:ca:13: c7:0b:e9:ae:ef:ae:98:d3:e1:97:b8:83:4b:cc:25:fb:be:40: 8e:17:f6:4f:66:53:e0:11:28:05:1c:5e:b5:67:f0:ce:c1:f8: d4:a0:a0:fb:6a:b5:88:35:ff:81:d5:1d:e8:d2:a6:28:9d:1a: f0:fd:14:97:55:01:d2:85:a5:a2:49:1e:88:64:11:21:39:86: e6:41:ae:88:2a:c1:1b:97:42:2b:4d:c0:bc:2b:d3:69:9a:9b: 21:2c:5f:fe:6c:e9:87:23:ce:40:6d:d7:76:95:ab:d8:0f:8d: 8d:64:10:d8:90:5e:00:5c:ff:22:46:f6:54:21:bb:d3:70:5c: 90:a4:d4:cc:78:ca:9f:1a:d1:a7:f6:e1:72:39:03:69:eb:f1: f9:0d:d7:9c:4d:92:a6:91:0c:86:f6:1b:4a:55:d3:92:28:dd: b8:41:1d:4a:8b:cc:b6:24:f6:99:c4:f2:cc:8c:fb:79:0e:b3: d1:c5:a6:94:a6:d3:f7:3c:1c:18:53:ca:1f:f9:b5:3b:1a:45: 80:e5:d4:c2:85:e3:e1:4c:1e:9d:89:bc:75:02:36:18:8d:19: 56:ad:11:e4 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/FTqvlWBabBtJ8kobM4x7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZmQzZjg5MzM1ZGNmODI4NjY2YjI4ZmFkOGFlOTkzYmQ0 NDg4NzgwHhcNMjYwMTAyMTQyMDU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTgyMGQ3MTM0NzkxYmM3OTYyMjZkYTcyNjhmN2UxNTkwN2QwM2U3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5pQI8XUJbPw6eva2Q6rlxpG1N4k 4FvgIxisPe8me16kq42zv9hj9PoDe4nx4JCaSO6o8pMoFs1TgWrmYlO0yoEnbc6J ZV0YiZ9x6ydj0UdyR9k33h53tcWpnlz/Cxk4e+sd16gVkRYPKSVNOlHLWvBmEJfo oNayfAN1pr4+ZNw4Q3rigFmKU2JQb9nbJv52DlgQi6embbiv4P+Kp9R/OHerXjYu VBsaEbg8GGxm/YijNlhDRBKEtFfOhDR6JMWhSV5DG41naiIgu/0Q/a0pJ+2A3g2+ xfTf+NAYSfaLXP2iw41Cy+JsERmmAxRLRHtuYVpUYGhg5PMKxH9cWiQLkwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFFmCDXE0eRvHliJtpyaPfhWQfQPnMB8GA1UdIwQY MBaAFKf9P4kzXc+Chmayj62K6ZO9RIh4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcF8wX2lUTmR6NEtHWnJLUHJZcnBrNzFFaUhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8zODhmZDgtYzgxZi00ZTcxLWFmNTIt YzBiMWFkNDM1Yjk1LzEvV1lJTmNUUjVHOGVXSW0ybkpvOS1GWkI5QS1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC8zODhmZDgtYzgxZi00ZTcxLWFmNTItYzBiMWFkNDM1Yjk1 LzEvcF8wX2lUTmR6NEtHWnJLUHJZcnBrNzFFaUhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhKkwjAN BgkqhkiG9w0BAQsFAAOCAQEAD7MIYj2hftTFWGjk2zkJ4LPiKSD8yHsm7ha++ztL 30g348oTxwvpru+umNPhl7iDS8wl+75Ajhf2T2ZT4BEoBRxetWfwzsH41KCg+2q1 iDX/gdUd6NKmKJ0a8P0Ul1UB0oWlokkeiGQRITmG5kGuiCrBG5dCK03AvCvTaZqb ISxf/mzphyPOQG3XdpWr2A+NjWQQ2JBeAFz/Ikb2VCG703BckKTUzHjKnxrRp/bh cjkDaevx+Q3XnE2SppEMhvYbSlXTkijduEEdSovMtiT2mcTyzIz7eQ6z0cWmlKbT 9zwcGFPKH/m1OxpFgOXUwoXj4UwenYm8dQI2GI0ZVq0R5A== -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:13 2026 by rpki-client