This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/RWS9bhHErxhI76ViZIzuvYt-AP8.roa File: RWS9bhHErxhI76ViZIzuvYt-AP8.roa (raw, json) Hash identifier: +RnK+fCwo61WgDiJVgO/R4YOMLNWXhkMeClRUVrunnE= Subject key identifier: 45:64:BD:6E:11:C4:AF:18:48:EF:A5:62:64:8C:EE:BD:8B:7E:00:FF Certificate issuer: /CN=4776afb74fad5baf0a6180b49510d8b8497df8d3 Certificate serial: 019B7BA52291BA916D4A0AAF58435A4A2A87 Authority key identifier: 47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/RWS9bhHErxhI76ViZIzuvYt-AP8.roa Signing time: Thu 01 Jan 2026 22:19:38 +0000 ROA not before: Thu 01 Jan 2026 22:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212222 IP address blocks: 2a04:2b00:14cc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:22:91:ba:91:6d:4a:0a:af:58:43:5a:4a:2a:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4776afb74fad5baf0a6180b49510d8b8497df8d3 Validity Not Before: Jan 1 22:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4564bd6e11c4af1848efa562648ceebd8b7e00ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:85:8d:b6:7d:7d:7b:c7:ce:84:e9:09:a1:c7: 58:41:70:01:7a:8f:4d:2a:0c:fe:fc:fa:d2:99:08: 91:48:ce:38:78:fd:a4:2c:56:db:4c:d0:50:94:01: 6f:08:0c:c2:e2:7c:9c:5a:c0:3d:0e:4f:6b:b3:32: 3f:04:c2:c2:0e:3d:83:cb:51:5b:e3:ca:46:79:84: 69:39:bd:70:eb:95:39:eb:b5:27:6a:cf:0d:3c:54: 62:98:4d:9d:4b:c2:9d:22:67:10:0f:08:07:ca:bf: 12:f4:6c:21:7b:97:f4:39:c0:c2:d3:d4:36:c5:d5: 51:bb:a6:c2:42:47:c6:85:74:0f:52:df:df:77:54: b9:77:43:51:aa:39:bc:72:72:6e:2a:84:a6:86:8b: 86:00:c6:9a:37:65:9e:93:b2:9c:ad:60:65:37:e5: 20:eb:10:95:7f:7a:6f:d0:5a:fd:32:ee:77:12:1f: 14:1a:20:58:14:36:01:f5:ce:76:42:af:53:68:bb: 20:55:16:77:f8:c0:28:b1:99:e1:f8:39:24:75:d5: ef:0a:a3:08:c5:fa:c0:ce:db:3d:c3:7d:78:5f:e0: 94:73:79:50:e8:8e:8a:72:f1:c5:54:f5:a8:68:67: 39:91:10:14:59:ac:e1:aa:58:e2:fe:35:ac:51:ed: 13:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:64:BD:6E:11:C4:AF:18:48:EF:A5:62:64:8C:EE:BD:8B:7E:00:FF X509v3 Authority Key Identifier: keyid:47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/RWS9bhHErxhI76ViZIzuvYt-AP8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a04:2b00:14cc::/48 Signature Algorithm: sha256WithRSAEncryption 89:b5:ef:d8:b4:0a:0f:81:04:44:0d:b3:24:92:1d:a1:85:84: 43:41:12:c7:21:6a:71:af:71:6d:27:77:49:ee:86:cd:cc:b2: 54:8c:a4:9c:6c:84:24:06:f4:06:74:b6:c3:09:dd:d7:23:f1: bb:71:0a:df:c0:65:22:8c:04:40:e3:8e:b3:02:03:a5:d7:dc: 82:55:a7:66:08:d0:8e:0a:ef:cd:ee:e0:2d:e1:b9:f2:04:81: 37:a0:25:0c:f0:48:ac:a5:86:6d:03:a8:3b:31:d3:46:04:43: 42:3f:33:66:bc:54:0a:d5:e2:93:af:b5:1d:88:0f:21:d3:96: 8a:4a:91:05:cf:98:16:f7:52:f8:ca:57:41:db:ee:2f:86:9f: 87:6c:0a:9b:df:a9:f9:11:f1:1e:67:c0:80:1d:39:6b:76:35: e2:1d:c5:2b:a9:0e:5e:a6:24:7d:47:d6:2c:e1:9d:fd:ed:fe: 82:71:56:92:19:f8:a3:69:c5:f3:f6:a8:e8:1b:8f:67:97:c2: bc:7d:54:b4:38:e9:cd:1f:bb:93:20:46:d6:71:19:89:89:e9: 04:63:49:50:25:f4:29:2f:a0:6c:31:52:08:44:33:99:3d:95: 02:7a:66:1d:ad:c5:6c:bf:d2:1e:62:78:99:41:57:1e:11:4a: 6b:13:a2:09 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7pSKRupFtSgqvWENaSiqHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NzZhZmI3NGZhZDViYWYwYTYxODBiNDk1MTBkOGI4NDk3 ZGY4ZDMwHhcNMjYwMTAxMjIxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTY0YmQ2ZTExYzRhZjE4NDhlZmE1NjI2NDhjZWViZDhiN2UwMGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4WNtn19e8fOhOkJocdYQXABeo9N Kgz+/PrSmQiRSM44eP2kLFbbTNBQlAFvCAzC4nycWsA9Dk9rszI/BMLCDj2Dy1Fb 48pGeYRpOb1w65U567Unas8NPFRimE2dS8KdImcQDwgHyr8S9Gwhe5f0OcDC09Q2 xdVRu6bCQkfGhXQPUt/fd1S5d0NRqjm8cnJuKoSmhouGAMaaN2Wek7KcrWBlN+Ug 6xCVf3pv0Fr9Mu53Eh8UGiBYFDYB9c52Qq9TaLsgVRZ3+MAosZnh+DkkddXvCqMI xfrAzts9w314X+CUc3lQ6I6KcvHFVPWoaGc5kRAUWazhqlji/jWsUe0TmQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEVkvW4RxK8YSO+lYmSM7r2LfgD/MB8GA1UdIwQY MBaAFEd2r7dPrVuvCmGAtJUQ2LhJffjTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mNzFjYzItYjcxZC00NjY4LTg2NjEt MDUzOGU5NWYzZjEyLzEvUldTOWJoSEVyeGhJNzZWaVpJenV2WXQtQVA4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9mNzFjYzItYjcxZC00NjY4LTg2NjEtMDUzOGU5NWYzZjEy LzEvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgQrABTM MA0GCSqGSIb3DQEBCwUAA4IBAQCJte/YtAoPgQREDbMkkh2hhYRDQRLHIWpxr3Ft J3dJ7obNzLJUjKScbIQkBvQGdLbDCd3XI/G7cQrfwGUijARA446zAgOl19yCVadm CNCOCu/N7uAt4bnyBIE3oCUM8EispYZtA6g7MdNGBENCPzNmvFQK1eKTr7UdiA8h 05aKSpEFz5gW91L4yldB2+4vhp+HbAqb36n5EfEeZ8CAHTlrdjXiHcUrqQ5epiR9 R9Ys4Z397f6CcVaSGfijacXz9qjoG49nl8K8fVS0OOnNH7uTIEbWcRmJiekEY0lQ JfQpL6BsMVIIRDOZPZUCemYdrcVsv9IeYniZQVceEUprE6IJ -----END CERTIFICATE-----Generated at Mon Jan 26 21:17:37 2026 by rpki-client