This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/wnxy5V-1cEegaxJtKVAMut3benM.roa File: wnxy5V-1cEegaxJtKVAMut3benM.roa (raw, json) Hash identifier: sUdU5a1rnsEdOVKYhJDEO/xTx4mzMBYqk5k2KepP1tw= Subject key identifier: C2:7C:72:E5:5F:B5:70:47:A0:6B:12:6D:29:50:0C:BA:DD:DB:7A:73 Certificate issuer: /CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2 Certificate serial: 019B7BA3703049C6C6A846975C9E85F3F0E1 Authority key identifier: 29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/wnxy5V-1cEegaxJtKVAMut3benM.roa Signing time: Thu 01 Jan 2026 22:17:47 +0000 ROA not before: Thu 01 Jan 2026 22:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213943 IP address blocks: 2a01:e901:10f::/48 maxlen: 48 2a01:e901:11f::/48 maxlen: 48 2a01:e901:12f::/48 maxlen: 48 2a01:e901:13f::/48 maxlen: 48 2a01:e901:14f::/48 maxlen: 48 2a01:e901:15f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:70:30:49:c6:c6:a8:46:97:5c:9e:85:f3:f0:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2 Validity Not Before: Jan 1 22:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c27c72e55fb57047a06b126d29500cbadddb7a73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c5:fc:01:b5:61:14:2b:92:b0:a2:19:6e:18: d5:f3:39:72:36:a5:e1:af:de:e2:e7:4e:b9:06:c2: 2f:d2:1b:79:a8:5e:85:e8:47:7e:5f:eb:70:96:18: ac:ec:26:2c:59:00:df:ed:4c:77:dd:2d:79:11:c8: e3:bb:cd:f7:83:0a:f2:d3:62:d4:9d:95:aa:d9:9c: 0a:9e:a2:59:72:7f:5e:2b:df:bb:c0:b0:ce:14:c0: 08:f6:58:ba:d0:8c:c3:71:51:ec:6a:7b:9f:78:41: d3:a7:77:cc:43:a0:54:2f:84:bc:99:67:9c:be:ce: 52:20:5f:e8:92:ea:ca:9e:0c:2d:54:c0:8e:6e:f3: 4f:77:a3:66:87:c5:b1:23:5b:f9:29:18:80:20:50: 56:84:38:f9:a7:cf:ac:d4:22:c0:eb:02:cd:f4:62: 9e:d8:3c:89:92:13:df:b5:71:4e:19:07:bb:c0:72: e8:10:45:0f:a3:11:a0:1b:88:9d:70:5c:0e:ae:26: 86:a0:7a:bb:6f:27:80:53:bc:45:bb:b5:cd:fc:6e: 1d:28:e1:9a:74:a4:46:c4:e5:bb:69:3c:9b:c9:99: 3f:dd:7a:7e:dd:0d:ec:7e:d2:9e:e7:a7:8b:29:e2: 40:fb:7a:96:40:1a:ab:cf:5c:08:2a:1f:26:02:4e: 88:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:7C:72:E5:5F:B5:70:47:A0:6B:12:6D:29:50:0C:BA:DD:DB:7A:73 X509v3 Authority Key Identifier: keyid:29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/wnxy5V-1cEegaxJtKVAMut3benM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:e901:10f::/48 2a01:e901:11f::/48 2a01:e901:12f::/48 2a01:e901:13f::/48 2a01:e901:14f::/48 2a01:e901:15f::/48 Signature Algorithm: sha256WithRSAEncryption 7b:a8:4b:60:59:bc:99:1e:e2:a5:73:d1:18:79:d9:e6:8a:dd: 33:f9:53:d1:61:d5:da:01:74:14:0b:62:bf:0b:4f:2d:ce:31: 43:5f:76:9c:da:cd:24:6b:df:2e:7b:c7:54:26:6a:ce:3b:4c: 1e:05:30:05:93:41:b5:d3:e4:38:26:90:c9:33:57:4d:a6:fe: fd:3f:16:7a:15:bb:cf:df:12:c6:49:f4:15:5a:95:c2:1c:7f: 34:3e:30:ee:e2:f9:af:a1:03:0e:49:5d:cb:ab:5a:e3:dd:c8: 42:c2:52:72:49:4f:02:ba:da:eb:21:47:71:f0:7f:b5:a6:a0: b4:6c:44:50:86:28:d3:4a:df:3b:c2:c7:0e:98:74:7e:6e:4b: ba:fe:e3:c9:4c:25:23:11:7e:13:95:8c:54:90:1a:ef:d6:b5: 68:be:df:59:20:7a:f2:e4:59:c3:5e:41:7c:1b:83:15:5c:38: 34:1d:af:d1:09:34:00:a1:35:15:aa:4b:58:bc:dc:ed:4c:26: 87:45:a7:ff:b4:aa:f3:32:eb:2f:b8:c0:6e:b4:88:84:1a:ff: 94:f2:54:6c:97:d3:87:1c:33:14:74:8f:a8:26:d2:90:08:de: ca:da:6d:7f:7c:51:ad:b5:7c:17:88:1a:47:61:d7:87:af:44: 66:ce:cc:ce -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt7o3AwScbGqEaXXJ6F8/DhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NjhiNGUwZWY4MTA2ZjBlMTJhYjhlNTAxZDJhYTRlMzZi NzgzYzIwHhcNMjYwMTAxMjIxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjdjNzJlNTVmYjU3MDQ3YTA2YjEyNmQyOTUwMGNiYWRkZGI3YTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8X8AbVhFCuSsKIZbhjV8zlyNqXh r97i5065BsIv0ht5qF6F6Ed+X+twlhis7CYsWQDf7Ux33S15Ecjju833gwry02LU nZWq2ZwKnqJZcn9eK9+7wLDOFMAI9li60IzDcVHsanufeEHTp3fMQ6BUL4S8mWec vs5SIF/okurKngwtVMCObvNPd6Nmh8WxI1v5KRiAIFBWhDj5p8+s1CLA6wLN9GKe 2DyJkhPftXFOGQe7wHLoEEUPoxGgG4idcFwOriaGoHq7byeAU7xFu7XN/G4dKOGa dKRGxOW7aTybyZk/3Xp+3Q3sftKe56eLKeJA+3qWQBqrz1wIKh8mAk6IyQIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFMJ8cuVftXBHoGsSbSlQDLrd23pzMB8GA1UdIwQY MBaAFClotODvgQbw4Sq45QHSqk42t4PCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1dpMDRPLUJCdkRoS3JqbEFkS3FUamEzZzhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80ODE2MzctNmMxYy00NWU4LThmYmQt NDRmOGVkNWQ2MWQ3LzEvd254eTVWLTFjRWVnYXhKdEtWQU11dDNiZW5NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy80ODE2MzctNmMxYy00NWU4LThmYmQtNDRmOGVkNWQ2MWQ3 LzEvS1dpMDRPLUJCdkRoS3JqbEFkS3FUamEzZzhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAAjA2AwcAKgHpAQEP AwcAKgHpAQEfAwcAKgHpAQEvAwcAKgHpAQE/AwcAKgHpAQFPAwcAKgHpAQFfMA0G CSqGSIb3DQEBCwUAA4IBAQB7qEtgWbyZHuKlc9EYednmit0z+VPRYdXaAXQUC2K/ C08tzjFDX3ac2s0ka98ue8dUJmrOO0weBTAFk0G10+Q4JpDJM1dNpv79PxZ6FbvP 3xLGSfQVWpXCHH80PjDu4vmvoQMOSV3Lq1rj3chCwlJySU8CutrrIUdx8H+1pqC0 bERQhijTSt87wscOmHR+bku6/uPJTCUjEX4TlYxUkBrv1rVovt9ZIHry5FnDXkF8 G4MVXDg0Ha/RCTQAoTUVqktYvNztTCaHRaf/tKrzMusvuMButIiEGv+U8lRsl9OH HDMUdI+oJtKQCN7K2m1/fFGttXwXiBpHYdeHr0RmzszO -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:26 2026 by rpki-client