This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/W1cAPJ3_hsin5sg3SFN-I-fRi7Y.roa File: W1cAPJ3_hsin5sg3SFN-I-fRi7Y.roa (raw, json) Hash identifier: erx02c52Q0mpo1XHedFTyVKhLZoX/L7oImNg9iLQdyM= Subject key identifier: 5B:57:00:3C:9D:FF:86:C8:A7:E6:C8:37:48:53:7E:23:E7:D1:8B:B6 Certificate issuer: /CN=5bcd40d10b56f3b532fa0dfd01d817ef93da1a34 Certificate serial: 019B7B35DFCB1ADAC8F04D8E7CB638259423 Authority key identifier: 5B:CD:40:D1:0B:56:F3:B5:32:FA:0D:FD:01:D8:17:EF:93:DA:1A:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W81A0QtW87Uy-g39AdgX75PaGjQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/W1cAPJ3_hsin5sg3SFN-I-fRi7Y.roa Signing time: Thu 01 Jan 2026 20:18:06 +0000 ROA not before: Thu 01 Jan 2026 20:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212149 IP address blocks: 2a0f:8640:b00b::/48 maxlen: 48 2a0f:8641:b00b::/48 maxlen: 48 2a0f:8642:b00b::/48 maxlen: 48 2a0f:8643:b00b::/48 maxlen: 48 2a0f:8644:b00b::/48 maxlen: 48 2a0f:8645:b00b::/48 maxlen: 48 2a0f:8646:b00b::/48 maxlen: 48 2a0f:8647:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/W81A0QtW87Uy-g39AdgX75PaGjQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/W81A0QtW87Uy-g39AdgX75PaGjQ.mft rsync://rpki.ripe.net/repository/DEFAULT/W81A0QtW87Uy-g39AdgX75PaGjQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:df:cb:1a:da:c8:f0:4d:8e:7c:b6:38:25:94:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bcd40d10b56f3b532fa0dfd01d817ef93da1a34 Validity Not Before: Jan 1 20:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b57003c9dff86c8a7e6c83748537e23e7d18bb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:61:96:c0:3e:56:bc:70:d8:04:96:13:f8:c2: 3f:13:76:59:b9:f9:b8:e8:19:cd:b1:42:00:63:ab: 8c:76:27:7c:bd:e0:4e:1f:d8:c4:21:66:aa:a3:ca: 1e:f0:b1:3d:71:24:31:38:68:22:ea:b7:a5:b0:5e: cb:03:6e:cb:da:37:2b:84:94:df:da:f6:f3:24:0f: 8f:1f:d4:ad:f4:e4:d6:59:97:bc:e7:db:10:06:c6: 6a:fb:df:67:54:20:91:7a:16:a3:90:31:6c:b4:3f: 5f:dc:98:0a:7c:ff:b6:03:c7:9d:e1:3f:87:22:67: a3:1e:9e:ec:ed:15:88:e5:d7:fb:78:e2:f5:a4:cd: 2f:8c:4f:7e:97:ce:a5:3a:91:b9:fe:20:2c:41:0b: 68:9a:db:15:50:4c:a5:19:b2:af:c2:6f:31:1c:a4: 22:33:43:3f:81:31:f7:62:92:96:fd:ac:a8:d0:c5: 5d:2c:3e:1a:f2:f3:85:57:2b:ee:ac:ed:65:0b:5c: 48:9e:d3:9a:d2:a3:73:3c:9c:91:29:6a:26:f8:95: 70:7b:28:d9:c1:d6:c5:84:61:6c:70:9e:91:70:3f: 86:1b:32:a2:55:97:03:2a:37:99:d9:24:88:04:20: 8c:22:8f:22:46:13:d3:44:4f:cb:e6:d5:e8:5e:7f: 12:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:57:00:3C:9D:FF:86:C8:A7:E6:C8:37:48:53:7E:23:E7:D1:8B:B6 X509v3 Authority Key Identifier: keyid:5B:CD:40:D1:0B:56:F3:B5:32:FA:0D:FD:01:D8:17:EF:93:DA:1A:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W81A0QtW87Uy-g39AdgX75PaGjQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/W1cAPJ3_hsin5sg3SFN-I-fRi7Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/W81A0QtW87Uy-g39AdgX75PaGjQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:8640:b00b::/48 2a0f:8641:b00b::/48 2a0f:8642:b00b::/48 2a0f:8643:b00b::/48 2a0f:8644:b00b::/48 2a0f:8645:b00b::/48 2a0f:8646:b00b::/48 2a0f:8647:b00b::/48 Signature Algorithm: sha256WithRSAEncryption bc:58:df:68:22:fb:8f:ec:bf:b0:2b:72:23:6a:93:c4:0f:31: 6b:bf:df:d1:19:4d:9d:84:fe:28:1e:bd:ed:8a:ea:fd:a2:bd: d8:52:20:35:ec:b1:bb:aa:df:ca:b8:05:dc:e5:a7:02:c9:37: 97:e2:c2:5d:51:80:53:fe:81:94:fc:d6:b1:08:f7:30:73:a2: 61:d5:d5:d8:d1:bd:3a:f3:6b:ad:2e:ae:fe:0e:44:85:42:26: 8f:20:5f:85:fe:ab:f3:c9:54:7f:b0:94:0a:f5:4a:64:42:5e: 0a:6d:08:36:65:dc:9b:5e:6c:3f:d5:70:fe:9b:a2:4e:3b:b7: 6a:8d:1e:cf:f1:6e:e3:03:00:23:36:76:46:c4:ff:e0:4f:0d: 4c:a4:1e:64:d9:63:b4:ee:aa:59:2c:0a:cc:31:15:b7:33:00: 96:43:6f:3e:53:70:58:c7:8e:76:98:97:0d:c7:51:42:4e:9c: e6:c1:e5:8b:e0:ef:49:5a:8e:90:8c:74:49:15:9d:a7:3b:ea: 2f:53:18:69:32:b6:07:ac:21:d2:8a:b4:9e:5d:47:fa:29:02: 51:4b:8c:05:f3:ed:f3:76:1e:d8:07:0c:0c:8d:ca:64:cb:a3: c3:1c:b0:de:1a:0c:38:b2:0c:0e:02:6e:0c:79:64:bf:b6:84: c9:52:ae:12 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgISAZt7Nd/LGtrI8E2OfLY4JZQjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViY2Q0MGQxMGI1NmYzYjUzMmZhMGRmZDAxZDgxN2VmOTNk YTFhMzQwHhcNMjYwMTAxMjAxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjU3MDAzYzlkZmY4NmM4YTdlNmM4Mzc0ODUzN2UyM2U3ZDE4YmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02GWwD5WvHDYBJYT+MI/E3ZZufm4 6BnNsUIAY6uMdid8veBOH9jEIWaqo8oe8LE9cSQxOGgi6relsF7LA27L2jcrhJTf 2vbzJA+PH9St9OTWWZe859sQBsZq+99nVCCRehajkDFstD9f3JgKfP+2A8ed4T+H ImejHp7s7RWI5df7eOL1pM0vjE9+l86lOpG5/iAsQQtomtsVUEylGbKvwm8xHKQi M0M/gTH3YpKW/ayo0MVdLD4a8vOFVyvurO1lC1xIntOa0qNzPJyRKWom+JVweyjZ wdbFhGFscJ6RcD+GGzKiVZcDKjeZ2SSIBCCMIo8iRhPTRE/L5tXoXn8SNQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFFtXADyd/4bIp+bIN0hTfiPn0Yu2MB8GA1UdIwQY MBaAFFvNQNELVvO1MvoN/QHYF++T2ho0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzgxQTBRdFc4N1V5LWczOUFkZ1g3NVBhR2pRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9iZmY3NTgtNGI4My00NzNkLWIwNzIt YTJjZTFjYzhiODdmLzEvVzFjQVBKM19oc2luNXNnM1NGTi1JLWZSaTdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9iZmY3NTgtNGI4My00NzNkLWIwNzItYTJjZTFjYzhiODdm LzEvVzgxQTBRdFc4N1V5LWczOUFkZ1g3NVBhR2pRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAAjBIAwcAKg+GQLAL AwcAKg+GQbALAwcAKg+GQrALAwcAKg+GQ7ALAwcAKg+GRLALAwcAKg+GRbALAwcA Kg+GRrALAwcAKg+GR7ALMA0GCSqGSIb3DQEBCwUAA4IBAQC8WN9oIvuP7L+wK3Ij apPEDzFrv9/RGU2dhP4oHr3tiur9or3YUiA17LG7qt/KuAXc5acCyTeX4sJdUYBT /oGU/NaxCPcwc6Jh1dXY0b0682utLq7+DkSFQiaPIF+F/qvzyVR/sJQK9UpkQl4K bQg2ZdybXmw/1XD+m6JOO7dqjR7P8W7jAwAjNnZGxP/gTw1MpB5k2WO07qpZLArM MRW3MwCWQ28+U3BYx452mJcNx1FCTpzmweWL4O9JWo6QjHRJFZ2nO+ovUxhpMrYH rCHSirSeXUf6KQJRS4wF8+3zdh7YBwwMjcpky6PDHLDeGgw4sgwOAm4MeWS/toTJ Uq4S -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:30 2026 by rpki-client