This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/2WG9_auLWLnABS1HW4iOt2pWC_o.roa File: 2WG9_auLWLnABS1HW4iOt2pWC_o.roa (raw, json) Hash identifier: 7Sy76mTSIMhku20UWsQfLStgGuU+xLVJeVa4x3HtASs= Subject key identifier: D9:61:BD:FD:AB:8B:58:B9:C0:05:2D:47:5B:88:8E:B7:6A:56:0B:FA Certificate issuer: /CN=c1db67b85104e4db598fea15678699c92473bda0 Certificate serial: 019B7BA38B1A8613F2A9847C2E69076C5ECC Authority key identifier: C1:DB:67:B8:51:04:E4:DB:59:8F:EA:15:67:86:99:C9:24:73:BD:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdtnuFEE5NtZj-oVZ4aZySRzvaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/2WG9_auLWLnABS1HW4iOt2pWC_o.roa Signing time: Thu 01 Jan 2026 22:17:54 +0000 ROA not before: Thu 01 Jan 2026 22:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216475 IP address blocks: 2a0c:dd80:2000::/48 maxlen: 48 2a0c:dd80:3000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/wdtnuFEE5NtZj-oVZ4aZySRzvaA.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/wdtnuFEE5NtZj-oVZ4aZySRzvaA.mft rsync://rpki.ripe.net/repository/DEFAULT/wdtnuFEE5NtZj-oVZ4aZySRzvaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:8b:1a:86:13:f2:a9:84:7c:2e:69:07:6c:5e:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1db67b85104e4db598fea15678699c92473bda0 Validity Not Before: Jan 1 22:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d961bdfdab8b58b9c0052d475b888eb76a560bfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:3c:87:8b:90:3a:58:3f:67:87:49:e6:b2:61: 43:45:e0:cc:f4:6c:15:b3:76:57:80:fd:d9:c7:4a: be:00:5b:a5:13:a7:ba:f5:24:c8:db:3a:dd:99:85: d1:5c:bf:df:d5:44:e0:eb:bb:10:a1:ca:23:06:85: 65:f9:3a:86:cf:f1:ff:de:56:d3:88:25:91:08:52: 6a:1e:1e:00:af:54:66:c9:de:6f:15:27:90:ef:1d: b5:90:a1:14:c2:dc:51:54:c2:fc:99:42:12:0f:99: bd:32:4a:f7:a7:10:1a:52:43:53:f8:17:84:28:54: 84:e8:15:e3:db:90:4c:e8:d0:42:94:89:50:86:8b: 7a:c0:68:b5:0e:3d:d7:ed:1b:d3:8a:3f:bd:eb:e1: 9c:95:81:bf:be:c3:94:f0:89:ee:5d:33:97:a8:7c: 7b:e5:b7:3a:08:03:3a:ef:8f:8b:ff:65:b1:e4:da: c6:28:14:32:df:26:6b:61:93:d5:9a:09:2f:f4:ce: 67:a4:dc:84:91:66:6a:68:1b:1c:02:77:6f:44:9c: 33:ee:f4:03:c6:bd:34:3b:a6:37:6e:a6:25:b1:a1: bf:3c:cf:50:fe:88:c8:fa:86:a8:30:35:d7:cb:f8: d6:39:10:35:bb:8f:d3:eb:26:4d:fb:99:69:24:64: ea:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:61:BD:FD:AB:8B:58:B9:C0:05:2D:47:5B:88:8E:B7:6A:56:0B:FA X509v3 Authority Key Identifier: keyid:C1:DB:67:B8:51:04:E4:DB:59:8F:EA:15:67:86:99:C9:24:73:BD:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdtnuFEE5NtZj-oVZ4aZySRzvaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/2WG9_auLWLnABS1HW4iOt2pWC_o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/wdtnuFEE5NtZj-oVZ4aZySRzvaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:dd80:2000::/48 2a0c:dd80:3000::/48 Signature Algorithm: sha256WithRSAEncryption bb:f5:58:f5:41:53:17:c0:75:73:ca:cb:9a:04:c5:31:58:91: 91:04:d5:87:93:0e:6b:a1:7f:de:6d:af:00:2a:75:72:d8:0b: 26:90:f7:cf:f2:4e:1e:26:4a:da:2c:ed:90:f6:62:c1:19:c6: e0:fb:77:87:b6:bc:bf:82:c9:c4:96:da:da:07:52:98:ca:07: 9b:be:89:47:71:49:aa:29:23:61:2e:4a:4c:25:4c:d7:6e:76: 26:db:75:74:06:61:61:3d:ed:78:ff:a2:25:65:76:db:59:dd: 30:df:00:2f:93:b2:f9:f6:32:46:47:fb:09:f0:2f:0b:1a:52: bf:99:a7:07:49:00:3a:e7:f4:5f:4c:a1:91:6a:6f:11:a2:ce: 2e:c0:81:25:ce:4c:46:98:55:cf:7b:52:8b:8e:b0:b7:f2:85: a2:e7:8e:df:89:2f:ec:d8:86:f0:d8:d6:c8:14:86:7f:98:f8: 3f:28:6c:b8:8b:ce:82:f9:18:82:e5:38:b3:6d:1e:35:b5:41: 6f:1b:c3:31:6f:05:88:3f:5a:fd:2a:7b:02:58:a9:69:93:34: 1c:49:85:0f:83:47:57:82:3b:b1:62:aa:5b:f9:f9:d5:f8:43: 09:7c:24:4c:06:58:57:23:99:18:7d:e4:4f:93:78:3e:21:a1: 49:c9:27:ae -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7o4sahhPyqYR8LmkHbF7MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxZGI2N2I4NTEwNGU0ZGI1OThmZWExNTY3ODY5OWM5MjQ3 M2JkYTAwHhcNMjYwMTAxMjIxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTYxYmRmZGFiOGI1OGI5YzAwNTJkNDc1Yjg4OGViNzZhNTYwYmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TyHi5A6WD9nh0nmsmFDReDM9GwV s3ZXgP3Zx0q+AFulE6e69STI2zrdmYXRXL/f1UTg67sQocojBoVl+TqGz/H/3lbT iCWRCFJqHh4Ar1Rmyd5vFSeQ7x21kKEUwtxRVML8mUISD5m9Mkr3pxAaUkNT+BeE KFSE6BXj25BM6NBClIlQhot6wGi1Dj3X7RvTij+96+GclYG/vsOU8InuXTOXqHx7 5bc6CAM674+L/2Wx5NrGKBQy3yZrYZPVmgkv9M5npNyEkWZqaBscAndvRJwz7vQD xr00O6Y3bqYlsaG/PM9Q/ojI+oaoMDXXy/jWORA1u4/T6yZN+5lpJGTqcQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNlhvf2ri1i5wAUtR1uIjrdqVgv6MB8GA1UdIwQY MBaAFMHbZ7hRBOTbWY/qFWeGmckkc72gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2R0bnVGRUU1TnRaai1vVlo0YVp5U1J6dmFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC82YTY1MzUtNmY0Mi00ZjJkLTllYjkt N2Q0YzhmMzdmNWZkLzEvMldHOV9hdUxXTG5BQlMxSFc0aU90MnBXQ19vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC82YTY1MzUtNmY0Mi00ZjJkLTllYjktN2Q0YzhmMzdmNWZk LzEvd2R0bnVGRUU1TnRaai1vVlo0YVp5U1J6dmFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgzdgCAA AwcAKgzdgDAAMA0GCSqGSIb3DQEBCwUAA4IBAQC79Vj1QVMXwHVzysuaBMUxWJGR BNWHkw5roX/eba8AKnVy2AsmkPfP8k4eJkraLO2Q9mLBGcbg+3eHtry/gsnEltra B1KYygebvolHcUmqKSNhLkpMJUzXbnYm23V0BmFhPe14/6IlZXbbWd0w3wAvk7L5 9jJGR/sJ8C8LGlK/macHSQA65/RfTKGRam8Ros4uwIElzkxGmFXPe1KLjrC38oWi 547fiS/s2Ibw2NbIFIZ/mPg/KGy4i86C+RiC5TizbR41tUFvG8MxbwWIP1r9KnsC WKlpkzQcSYUPg0dXgjuxYqpb+fnV+EMJfCRMBlhXI5kYfeRPk3g+IaFJySeu -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:55 2026 by rpki-client