This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/WdDfR5pgm5GQzeAWXeQkEcP9Als.roa File: WdDfR5pgm5GQzeAWXeQkEcP9Als.roa (raw, json) Hash identifier: PHS7Fi2QuZ8k4rtqstAGppZfNcCEvjMbriLsQWM1JoU= Subject key identifier: 59:D0:DF:47:9A:60:9B:91:90:CD:E0:16:5D:E4:24:11:C3:FD:02:5B Certificate issuer: /CN=835bc9bb547e27788d221bc8bbd5fb02e024480f Certificate serial: 019B76EB691390FACE5190843438515B28C4 Authority key identifier: 83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/WdDfR5pgm5GQzeAWXeQkEcP9Als.roa Signing time: Thu 01 Jan 2026 00:18:17 +0000 ROA not before: Thu 01 Jan 2026 00:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401297 IP address blocks: 2a0b:6b82::/32 maxlen: 32 2a0b:6b86:1300::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:69:13:90:fa:ce:51:90:84:34:38:51:5b:28:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=835bc9bb547e27788d221bc8bbd5fb02e024480f Validity Not Before: Jan 1 00:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=59d0df479a609b9190cde0165de42411c3fd025b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:94:1e:df:51:d5:3b:8d:9c:50:fc:79:84:ce: 91:5d:94:a3:b4:ff:21:9d:74:33:fc:8a:1b:b4:81: 2a:62:b4:b1:ff:ed:80:75:b8:d0:e5:9b:22:3f:c2: ac:cb:41:9b:14:fd:65:e9:63:30:31:92:ea:e9:4e: d2:f5:bf:7c:19:cf:ba:d7:0c:16:2c:2e:c8:fe:a3: 41:7e:20:bb:57:5c:0d:3d:55:cf:ea:6b:40:20:03: db:47:c5:b5:de:1a:3e:08:62:f2:7a:0c:46:ff:6a: a0:3f:1d:82:54:3d:d9:25:08:52:1b:2c:3a:11:cb: 10:50:20:c1:c7:0e:54:8a:eb:c3:cf:ba:8b:a2:47: a7:40:ec:89:44:0d:e3:28:46:38:8b:21:e6:cf:b0: b1:d2:26:af:53:9c:c1:b3:e3:8b:77:78:45:bd:cb: ae:83:1e:e5:84:6e:3a:94:af:58:77:7d:2b:ee:2d: ea:5f:0b:be:87:f7:d9:a4:be:b3:76:7a:72:76:c5: 26:dc:68:ec:d7:d6:91:02:ba:80:b9:07:ec:62:13: f5:69:ea:28:8e:48:65:62:7a:58:5c:bf:c1:8e:03: c9:97:3f:03:58:ee:52:6a:15:30:8f:34:b3:ef:54: a4:85:40:53:8a:73:ee:17:38:03:14:04:49:fe:15: 4f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:D0:DF:47:9A:60:9B:91:90:CD:E0:16:5D:E4:24:11:C3:FD:02:5B X509v3 Authority Key Identifier: keyid:83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/WdDfR5pgm5GQzeAWXeQkEcP9Als.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:6b82::/32 2a0b:6b86:1300::/40 Signature Algorithm: sha256WithRSAEncryption 9d:11:b0:7b:31:51:a9:94:b9:aa:dd:74:db:f2:22:0b:25:14: 5f:80:ba:f7:13:fe:f4:09:51:47:fe:cb:4d:50:61:7f:09:3d: ba:2e:e3:85:26:73:78:e6:6a:ac:48:10:e9:37:02:69:b7:8c: 21:79:c2:a1:1a:c5:7f:01:10:a6:1c:59:dc:d2:7c:cd:e2:c9: c9:93:7d:a3:27:1f:f3:ed:69:e1:50:a1:6a:37:8c:b1:30:1e: 8e:c1:b9:9a:d4:f5:f8:3d:f7:2a:df:7c:eb:a1:f8:dc:96:6b: fb:32:07:bd:9e:90:df:1d:8c:01:4c:a8:2b:e0:d1:cc:87:f2: 44:5b:ad:30:72:b2:52:2e:1a:e0:db:81:53:1d:0f:f7:02:97: a2:71:98:b3:7f:96:44:c1:7d:d3:c3:f1:8a:14:32:42:83:d3: 7d:c6:68:22:d4:25:22:ec:a5:33:12:98:c9:f5:bb:63:05:de: ac:a0:c4:31:04:6d:3a:c7:41:8a:fe:07:07:8b:fc:37:ab:c0: 82:1b:fa:a2:65:66:10:b2:f3:5b:07:07:45:be:fb:4b:f9:89: 3e:f3:be:7f:84:c5:3f:76:aa:ce:6e:33:87:87:c6:5c:63:1b: 3d:f3:10:ab:43:5b:4e:5a:0c:ef:f8:a5:0d:59:4a:a5:65:25: 5e:6f:19:6e -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgISAZt262kTkPrOUZCENDhRWyjEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzNWJjOWJiNTQ3ZTI3Nzg4ZDIyMWJjOGJiZDVmYjAyZTAy NDQ4MGYwHhcNMjYwMTAxMDAxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OWQwZGY0NzlhNjA5YjkxOTBjZGUwMTY1ZGU0MjQxMWMzZmQwMjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJQe31HVO42cUPx5hM6RXZSjtP8h nXQz/IobtIEqYrSx/+2AdbjQ5ZsiP8Ksy0GbFP1l6WMwMZLq6U7S9b98Gc+61wwW LC7I/qNBfiC7V1wNPVXP6mtAIAPbR8W13ho+CGLyegxG/2qgPx2CVD3ZJQhSGyw6 EcsQUCDBxw5UiuvDz7qLokenQOyJRA3jKEY4iyHmz7Cx0iavU5zBs+OLd3hFvcuu gx7lhG46lK9Yd30r7i3qXwu+h/fZpL6zdnpydsUm3Gjs19aRArqAuQfsYhP1aeoo jkhlYnpYXL/BjgPJlz8DWO5SahUwjzSz71SkhUBTinPuFzgDFARJ/hVPVQIDAQAB o4ICEjCCAg4wHQYDVR0OBBYEFFnQ30eaYJuRkM3gFl3kJBHD/QJbMB8GA1UdIwQY MBaAFINbybtUfid4jSIbyLvV+wLgJEgPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzF2SnUxUi1KM2lOSWh2SXU5WDdBdUFrU0E4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC85NjJmYjEtM2RmMC00ZWMyLWI1MGEt YjM2YTI0ZDM5NDI3LzEvV2REZlI1cGdtNUdRemVBV1hlUWtFY1A5QWxzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC85NjJmYjEtM2RmMC00ZWMyLWI1MGEtYjM2YTI0ZDM5NDI3 LzEvZzF2SnUxUi1KM2lOSWh2SXU5WDdBdUFrU0E4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCgGCCsGAQUFBwEHAQH/BBkwFzAVBAIAAjAPAwUAKgtrggMG ACoLa4YTMA0GCSqGSIb3DQEBCwUAA4IBAQCdEbB7MVGplLmq3XTb8iILJRRfgLr3 E/70CVFH/stNUGF/CT26LuOFJnN45mqsSBDpNwJpt4whecKhGsV/ARCmHFnc0nzN 4snJk32jJx/z7WnhUKFqN4yxMB6Owbma1PX4Pfcq33zrofjclmv7Mge9npDfHYwB TKgr4NHMh/JEW60wcrJSLhrg24FTHQ/3ApeicZizf5ZEwX3Tw/GKFDJCg9N9xmgi 1CUi7KUzEpjJ9btjBd6soMQxBG06x0GK/gcHi/w3q8CCG/qiZWYQsvNbBwdFvvtL +Yk+875/hMU/dqrObjOHh8ZcYxs98xCrQ1tOWgzv+KUNWUqlZSVebxlu -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:51 2026 by rpki-client