This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/wlWnFSIiYVvXp_mwjODRnhkY0UE.roa File: wlWnFSIiYVvXp_mwjODRnhkY0UE.roa (raw, json) Hash identifier: Uu3Z+8tn4NyyEWREHHOZxn7oBRlFx43GJ0VENqzt+D0= Subject key identifier: C2:55:A7:15:22:22:61:5B:D7:A7:F9:B0:8C:E0:D1:9E:19:18:D1:41 Certificate issuer: /CN=bd60edf96266b7c0d43836c854ab472cb74db034 Certificate serial: 019B7834EABD69132607CA52231302430E69 Authority key identifier: BD:60:ED:F9:62:66:B7:C0:D4:38:36:C8:54:AB:47:2C:B7:4D:B0:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWDt-WJmt8DUODbIVKtHLLdNsDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/wlWnFSIiYVvXp_mwjODRnhkY0UE.roa Signing time: Thu 01 Jan 2026 06:18:12 +0000 ROA not before: Thu 01 Jan 2026 06:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42372 IP address blocks: 2a01:d0:7fff::/48 maxlen: 48 2a01:d0:8000::/33 maxlen: 33 2a01:d0:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/vWDt-WJmt8DUODbIVKtHLLdNsDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:ea:bd:69:13:26:07:ca:52:23:13:02:43:0e:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd60edf96266b7c0d43836c854ab472cb74db034 Validity Not Before: Jan 1 06:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c255a7152222615bd7a7f9b08ce0d19e1918d141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f3:71:0b:7b:e7:58:48:c2:3d:79:7f:77:f1: 7a:ff:a4:ef:3d:0d:59:19:4f:c8:d9:dd:1e:bc:4a: 59:0f:c5:23:be:4e:b5:f9:ea:3b:ed:82:d1:34:19: f8:d3:06:2b:8a:57:2b:2e:5b:23:66:23:db:1f:43: dd:7a:ee:6d:cd:ac:6b:7c:cd:3d:01:08:26:e1:4e: 61:0e:0a:72:6e:17:b4:ec:a2:9e:a3:8f:75:cb:c8: d1:39:74:d3:1b:5f:d6:d9:32:1a:4e:90:97:59:6d: 04:dc:48:18:b9:94:a6:a7:eb:c4:16:d9:06:45:46: 44:d7:04:d0:70:5c:22:b4:b1:ae:58:61:73:65:96: 89:2a:a7:28:36:a5:3a:89:f3:01:85:59:d5:22:8f: 37:0d:65:8d:a6:ce:b4:8d:3a:3d:23:55:80:b5:13: b9:7f:c5:68:b5:1b:d1:6b:ae:ee:23:68:8d:ca:b9: eb:97:c7:b4:f3:79:87:15:9e:a8:21:2d:af:02:d4: 5b:9a:07:47:21:92:06:7a:74:04:c7:35:7c:05:a8: 68:86:ef:f9:97:3f:83:a7:5f:20:99:b0:a0:2d:cb: 2a:28:63:c9:4b:69:c0:b1:28:40:38:6b:8d:82:be: 48:12:b8:7b:a4:a8:58:59:78:b7:3f:e7:cd:ce:27: 15:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:55:A7:15:22:22:61:5B:D7:A7:F9:B0:8C:E0:D1:9E:19:18:D1:41 X509v3 Authority Key Identifier: keyid:BD:60:ED:F9:62:66:B7:C0:D4:38:36:C8:54:AB:47:2C:B7:4D:B0:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWDt-WJmt8DUODbIVKtHLLdNsDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/wlWnFSIiYVvXp_mwjODRnhkY0UE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:d0:7fff::-2a01:d0:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 54:83:26:9b:e2:b6:57:4c:75:92:cb:8d:8b:34:45:95:9c:bf: 71:43:a9:a7:5d:64:c5:b4:07:66:fa:40:4b:ea:41:7c:2f:c5: 74:d8:81:20:c9:35:ab:0f:6d:fe:33:12:99:82:76:82:b4:ad: d1:39:ce:41:af:75:45:3e:45:82:a7:86:98:25:31:bc:34:52: 31:16:d6:f5:4e:63:d0:c6:e4:26:6f:84:4e:5d:f6:a2:60:3b: c4:65:71:fc:3c:78:fc:74:ef:d2:08:7c:31:a3:6d:08:cf:ed: af:69:0f:c9:e7:f2:2f:e2:fd:33:8d:c6:0c:b5:2a:e7:47:fa: 23:6f:af:98:b7:56:d5:74:b6:0c:00:8d:a6:60:18:19:5b:dc: 92:14:cd:fa:55:bc:7c:d0:d0:11:46:d9:8c:69:37:8b:9e:75: 4b:b0:82:09:a6:79:41:10:84:86:67:bb:e9:0e:4c:6b:91:4d: d0:76:e8:03:38:62:d1:59:f3:d0:25:78:23:2a:cf:0e:47:1f: 17:c2:99:1e:84:e7:67:f0:85:cf:e7:39:ba:3c:47:5d:74:f1: 03:ca:70:ba:c6:1f:d3:8d:0b:d3:f2:c4:fd:93:92:2d:e0:18: 5e:f4:95:b7:22:72:9a:6a:04:d7:50:36:00:60:08:bc:e0:ae: d2:9b:d9:c9 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt4NOq9aRMmB8pSIxMCQw5pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkNjBlZGY5NjI2NmI3YzBkNDM4MzZjODU0YWI0NzJjYjc0 ZGIwMzQwHhcNMjYwMTAxMDYxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjU1YTcxNTIyMjI2MTViZDdhN2Y5YjA4Y2UwZDE5ZTE5MThkMTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifNxC3vnWEjCPXl/d/F6/6TvPQ1Z GU/I2d0evEpZD8Ujvk61+eo77YLRNBn40wYrilcrLlsjZiPbH0Pdeu5tzaxrfM09 AQgm4U5hDgpybhe07KKeo491y8jROXTTG1/W2TIaTpCXWW0E3EgYuZSmp+vEFtkG RUZE1wTQcFwitLGuWGFzZZaJKqcoNqU6ifMBhVnVIo83DWWNps60jTo9I1WAtRO5 f8VotRvRa67uI2iNyrnrl8e083mHFZ6oIS2vAtRbmgdHIZIGenQExzV8Bahohu/5 lz+Dp18gmbCgLcsqKGPJS2nAsShAOGuNgr5IErh7pKhYWXi3P+fNzicVlwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMJVpxUiImFb16f5sIzg0Z4ZGNFBMB8GA1UdIwQY MBaAFL1g7fliZrfA1Dg2yFSrRyy3TbA0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdldEdC1XSm10OERVT0RiSVZLdEhMTGROc0RRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9iNWQ1YmItMjNjNi00YjNkLTk0Yzgt NDJiYmYxYTZhNjViLzEvd2xXbkZTSWlZVnZYcF9td2pPRFJuaGtZMFVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9iNWQ1YmItMjNjNi00YjNkLTk0YzgtNDJiYmYxYTZhNjVi LzEvdldEdC1XSm10OERVT0RiSVZLdEhMTGROc0RRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASMBADBwAqAQDQ f/8DBQAqAQDQMA0GCSqGSIb3DQEBCwUAA4IBAQBUgyab4rZXTHWSy42LNEWVnL9x Q6mnXWTFtAdm+kBL6kF8L8V02IEgyTWrD23+MxKZgnaCtK3ROc5Br3VFPkWCp4aY JTG8NFIxFtb1TmPQxuQmb4ROXfaiYDvEZXH8PHj8dO/SCHwxo20Iz+2vaQ/J5/Iv 4v0zjcYMtSrnR/ojb6+Yt1bVdLYMAI2mYBgZW9ySFM36Vbx80NARRtmMaTeLnnVL sIIJpnlBEISGZ7vpDkxrkU3QdugDOGLRWfPQJXgjKs8ORx8XwpkehOdn8IXP5zm6 PEdddPEDynC6xh/TjQvT8sT9k5It4Bhe9JW3InKaagTXUDYAYAi84K7Sm9nJ -----END CERTIFICATE-----Generated at Mon Jan 26 00:24:30 2026 by rpki-client