This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/Wun6Qz2Qs6STNSC80NWGPAsClFU.roa File: Wun6Qz2Qs6STNSC80NWGPAsClFU.roa (raw, json) Hash identifier: SDa0Mk7cpLMkML2EEhK8WxoKcKFzNItBMeoOxjoeTuQ= Subject key identifier: 5A:E9:FA:43:3D:90:B3:A4:93:35:20:BC:D0:D5:86:3C:0B:02:94:55 Certificate issuer: /CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48 Certificate serial: 019B7C80D7D33B3F093F1D8131522C856757 Authority key identifier: 2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/Wun6Qz2Qs6STNSC80NWGPAsClFU.roa Signing time: Fri 02 Jan 2026 02:19:37 +0000 ROA not before: Fri 02 Jan 2026 02:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213640 IP address blocks: 212.52.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:d7:d3:3b:3f:09:3f:1d:81:31:52:2c:85:67:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48 Validity Not Before: Jan 2 02:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ae9fa433d90b3a4933520bcd0d5863c0b029455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f2:8e:5e:51:56:42:f3:ca:fa:54:45:d6:65: 2b:e9:b7:58:2b:0f:17:8f:1f:2e:01:39:82:ad:ad: 41:e1:69:e4:93:43:0a:52:c3:72:78:4d:85:28:73: 8a:2e:43:3b:56:14:59:eb:89:bc:8f:e4:6f:6f:30: 26:9f:73:4b:b7:6e:08:a5:24:c4:34:81:f1:2a:f1: f9:f3:ec:0b:e1:2b:f8:0b:4d:73:36:0a:b1:5b:89: ef:59:07:64:d6:7b:fb:79:d4:62:6c:f9:7b:78:db: 65:32:ae:2f:b2:12:48:8c:ff:41:48:dd:7a:c6:f7: e5:af:1c:fe:f9:26:d8:de:b9:c9:ad:fd:b6:4f:0c: 93:dc:68:c9:12:64:9c:78:4a:ce:56:96:8a:d1:7f: 66:d3:d4:77:0e:46:b4:00:32:42:01:63:bf:0b:82: 1f:1a:66:3a:4d:0a:ef:8b:5d:ad:02:7f:94:90:36: 77:d9:d5:d9:44:6c:72:eb:34:a5:5f:61:40:8f:8b: af:be:f1:b6:02:4d:a0:23:ac:ce:26:4f:ad:cf:b3: f4:5e:b3:47:31:57:6d:98:91:a0:5d:a1:93:42:bb: 48:53:25:99:92:ba:34:04:09:01:c9:70:52:21:c4: cf:9f:b7:11:18:5e:56:00:97:72:75:2c:55:10:3f: ed:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E9:FA:43:3D:90:B3:A4:93:35:20:BC:D0:D5:86:3C:0B:02:94:55 X509v3 Authority Key Identifier: keyid:2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/Wun6Qz2Qs6STNSC80NWGPAsClFU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.52.14.0/24 Signature Algorithm: sha256WithRSAEncryption 03:66:80:2a:38:c1:11:6e:07:82:db:f9:bd:98:0e:64:e1:00: 93:94:9d:40:f8:e7:f4:2a:02:34:4e:9a:47:32:ea:75:fa:13: 71:67:72:72:5b:5c:30:46:1f:ce:32:4a:17:2e:84:3a:37:2d: f3:08:b3:fa:ef:1c:20:1b:36:47:7a:a7:cd:7a:9b:a0:4c:3c: 5c:82:3f:4b:b1:a6:81:49:ef:bc:5c:4e:4f:44:c1:e1:17:e6: 48:6d:e6:99:ac:41:81:68:c3:e9:19:2b:6d:f9:8b:4d:f4:6f: 4c:5c:57:fd:18:e4:8d:8d:4e:d0:98:6e:21:3a:29:80:ec:a1: ab:14:cd:01:40:c2:39:4c:4d:b5:2d:98:12:76:5c:5e:53:93: d4:15:47:7a:02:8c:0b:7c:4a:3c:1c:41:20:3b:c3:e5:5d:d4: d1:35:d7:34:67:77:b0:21:43:b7:28:00:b9:7d:1b:65:b3:47: 21:0b:4e:2f:48:d8:5c:32:8e:51:07:70:3f:98:ee:4d:7b:51: 32:07:8c:1e:4e:d9:16:54:83:ea:e3:04:a0:2c:65:3f:f0:a6: bc:a9:a9:89:ff:0a:c6:6b:ce:75:30:03:2e:2a:5d:29:ff:74: a4:80:69:a3:ea:e6:13:11:61:1d:50:52:b0:e6:7e:1b:44:26: 06:7f:2c:fd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gNfTOz8JPx2BMVIshWdXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMzY4YjBhZWM2YzdmZDQ4ZDBkOTZiNDA3N2EyM2Y5MDZh ODZhNDgwHhcNMjYwMTAyMDIxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YWU5ZmE0MzNkOTBiM2E0OTMzNTIwYmNkMGQ1ODYzYzBiMDI5NDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvKOXlFWQvPK+lRF1mUr6bdYKw8X jx8uATmCra1B4Wnkk0MKUsNyeE2FKHOKLkM7VhRZ64m8j+RvbzAmn3NLt24IpSTE NIHxKvH58+wL4Sv4C01zNgqxW4nvWQdk1nv7edRibPl7eNtlMq4vshJIjP9BSN16 xvflrxz++SbY3rnJrf22TwyT3GjJEmSceErOVpaK0X9m09R3Dka0ADJCAWO/C4If GmY6TQrvi12tAn+UkDZ32dXZRGxy6zSlX2FAj4uvvvG2Ak2gI6zOJk+tz7P0XrNH MVdtmJGgXaGTQrtIUyWZkro0BAkByXBSIcTPn7cRGF5WAJdydSxVED/t7QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFrp+kM9kLOkkzUgvNDVhjwLApRVMB8GA1UdIwQY MBaAFC42iwrsbH/UjQ2WtAd6I/kGqGpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGphTEN1eHNmOVNORFphMEIzb2otUWFvYWtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9kYzcwMzAtNzhjYy00ODAwLTg4OGQt MTQyN2RkMTZlZmE0LzEvV3VuNlF6MlFzNlNUTlNDODBOV0dQQXNDbEZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9kYzcwMzAtNzhjYy00ODAwLTg4OGQtMTQyN2RkMTZlZmE0 LzEvTGphTEN1eHNmOVNORFphMEIzb2otUWFvYWtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1DQOMA0G CSqGSIb3DQEBCwUAA4IBAQADZoAqOMERbgeC2/m9mA5k4QCTlJ1A+Of0KgI0TppH Mup1+hNxZ3JyW1wwRh/OMkoXLoQ6Ny3zCLP67xwgGzZHeqfNepugTDxcgj9LsaaB Se+8XE5PRMHhF+ZIbeaZrEGBaMPpGStt+YtN9G9MXFf9GOSNjU7QmG4hOimA7KGr FM0BQMI5TE21LZgSdlxeU5PUFUd6AowLfEo8HEEgO8PlXdTRNdc0Z3ewIUO3KAC5 fRtls0chC04vSNhcMo5RB3A/mO5Ne1EyB4weTtkWVIPq4wSgLGU/8Ka8qamJ/wrG a851MAMuKl0p/3SkgGmj6uYTEWEdUFKw5n4bRCYGfyz9 -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:14 2026 by rpki-client