This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/Wp-glj4jLDxWifTRA7ilsUKXI0w.roa File: Wp-glj4jLDxWifTRA7ilsUKXI0w.roa (raw, json) Hash identifier: vAjHOys3Ggc83LnsEZEpKy5P5ZSFbz3QKqyxgLEsEXc= Subject key identifier: 5A:9F:A0:96:3E:23:2C:3C:56:89:F4:D1:03:B8:A5:B1:42:97:23:4C Certificate issuer: /CN=f970049cba7f39aeed31d65313c7b953f3fda135 Certificate serial: 019B7E374A9FAAFD830A5AF2774112ADDFDE Authority key identifier: F9:70:04:9C:BA:7F:39:AE:ED:31:D6:53:13:C7:B9:53:F3:FD:A1:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/Wp-glj4jLDxWifTRA7ilsUKXI0w.roa Signing time: Fri 02 Jan 2026 10:18:31 +0000 ROA not before: Fri 02 Jan 2026 10:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8989 IP address blocks: 2a02:980::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:4a:9f:aa:fd:83:0a:5a:f2:77:41:12:ad:df:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f970049cba7f39aeed31d65313c7b953f3fda135 Validity Not Before: Jan 2 10:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a9fa0963e232c3c5689f4d103b8a5b14297234c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d2:a5:51:8e:2f:9e:3f:61:40:41:90:1a:bd: 20:e1:cb:bf:44:81:c6:11:e6:b5:88:da:1d:d5:48: a6:78:9c:30:5c:e3:cd:2f:2b:d2:e2:6d:15:66:9b: 88:12:28:15:1c:7a:dd:14:79:e7:ae:f6:8c:5a:6f: c4:14:74:2a:b5:da:c8:d8:47:ce:50:68:17:9d:94: 31:90:8f:33:94:2c:d7:f3:f2:8d:f1:82:9b:02:af: a1:28:d8:b4:0b:a3:e5:76:77:ab:9f:7e:8c:e0:97: 15:f5:09:c7:be:c8:a3:9b:b5:30:b7:e7:d3:88:eb: e9:5d:af:21:9d:50:cb:ca:8d:31:74:46:3f:6c:e7: 97:90:6d:93:97:ed:34:7b:3e:a8:dd:d6:5e:7d:e9: ac:64:cd:12:7a:a5:29:57:38:47:64:cf:d8:b8:e0: 18:7d:5c:5b:fc:fa:a5:50:a3:73:0a:2a:eb:b3:ba: a1:06:27:aa:d3:48:be:8f:2f:f5:8f:87:24:15:12: 38:0c:d4:01:d5:31:db:97:e4:de:69:75:10:cd:1d: d1:3f:88:5d:cb:15:e8:5a:4e:11:69:5b:af:08:b1: 9b:94:8b:61:17:22:2d:92:5c:ae:e2:04:3c:d1:1c: 49:a8:0f:45:30:6c:82:01:df:3e:af:17:fc:49:5f: 13:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:9F:A0:96:3E:23:2C:3C:56:89:F4:D1:03:B8:A5:B1:42:97:23:4C X509v3 Authority Key Identifier: keyid:F9:70:04:9C:BA:7F:39:AE:ED:31:D6:53:13:C7:B9:53:F3:FD:A1:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/Wp-glj4jLDxWifTRA7ilsUKXI0w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:980::/29 Signature Algorithm: sha256WithRSAEncryption 79:72:40:ba:2c:17:b0:5b:d5:ee:a6:38:0b:99:2d:d3:e4:35: cc:80:eb:8e:3a:26:96:a3:ea:57:5c:5a:ef:d0:90:9c:d6:46: d5:ad:10:05:f8:d3:7a:de:a4:86:f0:58:f6:d4:eb:50:73:8b: a9:d2:25:3a:32:2d:fe:28:b2:5b:37:f1:ca:8c:91:14:45:da: 98:03:18:f2:95:fa:54:8e:f2:01:23:63:f2:aa:01:2d:40:24: 07:14:c2:55:bd:7c:8d:ca:2d:1b:33:c3:17:5a:3c:0d:57:32: 29:e9:08:6a:e5:7d:2f:43:c2:5e:60:39:e6:fc:dd:6c:74:3e: e1:f7:77:93:e6:71:4e:06:29:c4:d0:6d:14:d3:71:b0:22:89: b2:e2:35:ee:7c:ba:f7:19:83:76:9f:3e:94:da:bb:a9:d9:72: 44:de:a2:06:a9:bb:92:c8:49:fc:b3:e2:4a:c1:32:69:a8:c9: d0:9b:2d:51:e5:d6:77:13:5e:36:97:8a:4d:1b:51:5d:51:56: 89:07:d8:6f:44:7d:a6:5e:f6:15:d4:d7:b3:1b:cb:ae:04:b1: cf:7d:72:5a:83:35:ba:1b:39:1e:a9:a1:96:c5:98:59:8f:3e: 5d:a2:10:16:0a:be:8f:0f:c0:c7:12:dc:a1:84:46:18:8a:ae: f5:6c:1d:d3 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+N0qfqv2DClryd0ESrd/eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5NzAwNDljYmE3ZjM5YWVlZDMxZDY1MzEzYzdiOTUzZjNm ZGExMzUwHhcNMjYwMTAyMTAxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTlmYTA5NjNlMjMyYzNjNTY4OWY0ZDEwM2I4YTViMTQyOTcyMzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4NKlUY4vnj9hQEGQGr0g4cu/RIHG Eea1iNod1UimeJwwXOPNLyvS4m0VZpuIEigVHHrdFHnnrvaMWm/EFHQqtdrI2EfO UGgXnZQxkI8zlCzX8/KN8YKbAq+hKNi0C6Pldnern36M4JcV9QnHvsijm7Uwt+fT iOvpXa8hnVDLyo0xdEY/bOeXkG2Tl+00ez6o3dZefemsZM0SeqUpVzhHZM/YuOAY fVxb/PqlUKNzCirrs7qhBieq00i+jy/1j4ckFRI4DNQB1THbl+TeaXUQzR3RP4hd yxXoWk4RaVuvCLGblIthFyItklyu4gQ80RxJqA9FMGyCAd8+rxf8SV8TNQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFqfoJY+Iyw8Von00QO4pbFClyNMMB8GA1UdIwQY MBaAFPlwBJy6fzmu7THWUxPHuVPz/aE1MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1YQUVuTHBfT2E3dE1kWlRFOGU1VV9QOW9UVS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIvMTNmNWYxLTQ1YjYtNGJjMS1iNWE1 LTUyMWZhNDFkZmM5Ni8xL1dwLWdsajRqTER4V2lmVFJBN2lsc1VLWEkwdy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYTIvMTNmNWYxLTQ1YjYtNGJjMS1iNWE1LTUyMWZhNDFkZmM5 Ni8xLzEtWEFFbkxwX09hN3RNZFpURThlNVVfUDlvVFUuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQMqAgmA MA0GCSqGSIb3DQEBCwUAA4IBAQB5ckC6LBewW9XupjgLmS3T5DXMgOuOOiaWo+pX XFrv0JCc1kbVrRAF+NN63qSG8Fj21OtQc4up0iU6Mi3+KLJbN/HKjJEURdqYAxjy lfpUjvIBI2PyqgEtQCQHFMJVvXyNyi0bM8MXWjwNVzIp6Qhq5X0vQ8JeYDnm/N1s dD7h93eT5nFOBinE0G0U03GwIomy4jXufLr3GYN2nz6U2rup2XJE3qIGqbuSyEn8 s+JKwTJpqMnQmy1R5dZ3E142l4pNG1FdUVaJB9hvRH2mXvYV1NezG8uuBLHPfXJa gzW6GzkeqaGWxZhZjz5dohAWCr6PD8DHEtyhhEYYiq71bB3T -----END CERTIFICATE-----Generated at Mon Jan 26 08:39:11 2026 by rpki-client