This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/AtLFIWRY4cR7CihZ5mTMCE9hRiQ.roa File: AtLFIWRY4cR7CihZ5mTMCE9hRiQ.roa (raw, json) Hash identifier: /ugsPh9m3y9IwuzzpOwpcNpNS1Cz1AS8O2tXtAk0PeQ= Subject key identifier: 02:D2:C5:21:64:58:E1:C4:7B:0A:28:59:E6:64:CC:08:4F:61:46:24 Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512 Certificate serial: 019B7F151A6F922E340D7B51FDA00458EE7C Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/AtLFIWRY4cR7CihZ5mTMCE9hRiQ.roa Signing time: Fri 02 Jan 2026 14:20:47 +0000 ROA not before: Fri 02 Jan 2026 14:20:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215685 IP address blocks: 2a14:c380:330::/44 maxlen: 48 2a14:c380:600::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:1a:6f:92:2e:34:0d:7b:51:fd:a0:04:58:ee:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512 Validity Not Before: Jan 2 14:20:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=02d2c5216458e1c47b0a2859e664cc084f614624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:48:34:d4:ce:70:2f:08:04:ee:36:f3:b2:c3: f3:a0:7e:a0:04:83:09:7a:4c:4d:a0:b4:21:0a:48: f2:4d:e1:90:29:df:b3:97:91:74:5f:1f:72:b0:2b: 3f:4b:63:10:d1:06:b0:89:19:77:1c:c7:03:7e:67: 3e:f0:e6:27:e0:c5:88:2b:da:80:dc:81:e0:a2:d3: a7:21:74:8a:17:26:78:e2:f9:73:b0:1e:8e:12:4a: 09:71:91:c9:6a:e0:49:b0:42:92:74:ec:2a:dc:29: 75:c3:c6:e8:81:b0:b5:82:4b:8b:4f:90:a9:3b:cb: f5:13:af:f8:27:cb:60:74:da:29:1c:03:a3:a6:86: f6:10:ce:60:d9:f0:0e:73:f9:f5:b9:85:5c:9d:85: 68:7f:11:71:50:12:58:f9:41:51:78:df:64:f9:ca: 9d:85:be:f8:8a:16:28:5e:10:e9:4e:fb:96:34:19: 44:a6:76:27:10:65:c0:53:f2:1d:0a:c1:96:09:f7: a7:c1:f6:12:87:bf:67:7d:05:1c:a0:53:42:e8:4d: b8:c8:8d:31:eb:53:19:c3:1f:f0:47:e9:b7:4a:31: 00:7e:d0:eb:7f:cf:be:51:29:d4:86:68:6e:e8:81: 2c:ef:b5:62:4b:0c:aa:db:61:28:ed:b9:b0:71:6a: 52:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:D2:C5:21:64:58:E1:C4:7B:0A:28:59:E6:64:CC:08:4F:61:46:24 X509v3 Authority Key Identifier: keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/AtLFIWRY4cR7CihZ5mTMCE9hRiQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:c380:330::/44 2a14:c380:600::/40 Signature Algorithm: sha256WithRSAEncryption 0e:8b:e4:1d:a3:40:d7:ba:3a:7f:5c:a7:f9:c8:f7:e1:91:40: e6:91:9c:b5:df:60:0f:08:3c:15:fc:21:2d:a5:a1:98:05:a6: fc:19:2d:90:5c:17:b5:a6:fb:91:f0:99:26:6a:27:d1:3b:c1: ec:67:b3:b6:86:55:84:55:e1:0a:db:1a:19:23:29:4b:99:b5: c0:10:10:9d:ab:8b:9c:22:83:df:26:98:ee:12:7c:e8:c0:1a: b6:c5:bc:bf:d7:49:84:78:e5:a8:dd:c5:4e:04:a5:d8:c3:0b: 4e:24:4d:03:cb:95:30:7f:7d:d8:66:40:04:2b:7e:d7:20:cd: ef:a5:d5:66:6a:04:65:5b:2d:0a:56:92:d7:ac:61:0f:cf:e5: 57:5c:cc:5a:1b:80:cc:0a:19:d8:01:49:78:18:78:93:e1:e1: ba:80:2d:01:e4:97:8c:87:65:b2:a2:c5:17:94:db:f6:34:05: a8:4e:5f:75:59:02:fa:9c:53:90:0d:3a:ac:8c:89:64:0d:c5: 15:46:c5:37:de:87:48:26:29:2b:d6:6d:b5:8c:d5:79:5f:d8: 44:38:eb:3a:fa:b4:ce:b1:41:b4:ca:43:9a:54:43:38:22:f4: 59:1c:7e:af:e0:65:b8:f2:48:d5:3c:9b:c6:75:d5:52:f8:60: 34:e6:75:f5 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgISAZt/FRpvki40DXtR/aAEWO58MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YjNkZTVmOWFkYjUwZmU0MWY2ZGM3OGZmZDBhMmM5MDg2 ZDI1MTIwHhcNMjYwMTAyMTQyMDQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMmQyYzUyMTY0NThlMWM0N2IwYTI4NTllNjY0Y2MwODRmNjE0NjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0g01M5wLwgE7jbzssPzoH6gBIMJ ekxNoLQhCkjyTeGQKd+zl5F0Xx9ysCs/S2MQ0QawiRl3HMcDfmc+8OYn4MWIK9qA 3IHgotOnIXSKFyZ44vlzsB6OEkoJcZHJauBJsEKSdOwq3Cl1w8bogbC1gkuLT5Cp O8v1E6/4J8tgdNopHAOjpob2EM5g2fAOc/n1uYVcnYVofxFxUBJY+UFReN9k+cqd hb74ihYoXhDpTvuWNBlEpnYnEGXAU/IdCsGWCfenwfYSh79nfQUcoFNC6E24yI0x 61MZwx/wR+m3SjEAftDrf8++USnUhmhu6IEs77ViSwyq22Eo7bmwcWpSVwIDAQAB o4ICFDCCAhAwHQYDVR0OBBYEFALSxSFkWOHEewooWeZkzAhPYUYkMB8GA1UdIwQY MBaAFFiz3l+a21D+QfbceP/QoskIbSUSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUt NTMyMWQ2OWQ5NzlkLzEvQXRMRklXUlk0Y1I3Q2loWjVtVE1DRTloUmlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUtNTMyMWQ2OWQ5Nzlk LzEvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwcEKhTDgAMw AwYAKhTDgAYwDQYJKoZIhvcNAQELBQADggEBAA6L5B2jQNe6On9cp/nI9+GRQOaR nLXfYA8IPBX8IS2loZgFpvwZLZBcF7Wm+5HwmSZqJ9E7wexns7aGVYRV4QrbGhkj KUuZtcAQEJ2ri5wig98mmO4SfOjAGrbFvL/XSYR45ajdxU4EpdjDC04kTQPLlTB/ fdhmQAQrftcgze+l1WZqBGVbLQpWktesYQ/P5VdczFobgMwKGdgBSXgYeJPh4bqA LQHkl4yHZbKixReU2/Y0BahOX3VZAvqcU5ANOqyMiWQNxRVGxTfeh0gmKSvWbbWM 1Xlf2EQ46zr6tM6xQbTKQ5pUQzgi9Fkcfq/gZbjySNU8m8Z11VL4YDTmdfU= -----END CERTIFICATE-----Generated at Sun Jan 25 16:10:26 2026 by rpki-client