This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/wRa2msDykSiyRHn54_Q8d6xwuIU.roa File: wRa2msDykSiyRHn54_Q8d6xwuIU.roa (raw, json) Hash identifier: fqSJKRU7LsdyWH4sWljeEEw39KAYlkJWKtuTi0YtdJM= Subject key identifier: C1:16:B6:9A:C0:F2:91:28:B2:44:79:F9:E3:F4:3C:77:AC:70:B8:85 Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0 Certificate serial: 019B7758E7C589E08BF833730D028CCAA05D Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/wRa2msDykSiyRHn54_Q8d6xwuIU.roa Signing time: Thu 01 Jan 2026 02:17:53 +0000 ROA not before: Thu 01 Jan 2026 02:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207469 IP address blocks: 2a0f:5707:ffe0::/46 maxlen: 48 2a0f:5707:fff3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:e7:c5:89:e0:8b:f8:33:73:0d:02:8c:ca:a0:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0 Validity Not Before: Jan 1 02:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c116b69ac0f29128b24479f9e3f43c77ac70b885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:57:ee:5a:f2:94:64:a8:76:ae:bc:14:2f:33: 22:a3:eb:a4:65:1d:b0:47:d4:df:88:58:8f:f1:b6: 86:90:73:8d:67:2a:a6:5a:64:96:34:99:93:bd:e0: ee:27:dc:b1:b9:c1:be:f3:d9:89:a2:90:98:5c:d5: 05:16:40:d7:01:4d:cd:7c:b0:0d:21:02:04:92:b2: 63:b7:ae:6e:e8:d6:3d:8e:6b:e6:20:5d:0f:54:30: 37:9a:58:cc:70:43:78:f4:a8:61:1a:dc:4a:4a:ff: 85:67:63:bc:3e:9a:96:16:66:1e:84:6c:14:94:6c: 11:3d:55:16:6a:43:ac:18:17:0a:40:a2:d6:38:76: 62:bd:db:ee:11:c3:85:b5:61:11:14:b9:8c:61:2f: 62:16:9a:69:f2:b3:38:0f:8a:47:46:d8:d1:ff:e2: c7:54:db:ab:59:42:57:7a:28:ca:89:2e:6f:87:fb: b2:5a:8c:4e:c0:77:fb:f3:95:e8:a4:45:f5:22:87: 65:13:ea:61:24:87:53:84:e0:92:54:6b:e0:a7:3d: fb:3a:05:99:5b:d4:21:74:dc:f3:57:fd:e9:a1:b6: e0:e6:e0:c9:d2:ae:08:bd:3c:ea:b1:d7:73:77:35: 68:e9:46:d5:9f:dd:f3:f3:0f:42:a4:bf:30:21:6f: 96:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:16:B6:9A:C0:F2:91:28:B2:44:79:F9:E3:F4:3C:77:AC:70:B8:85 X509v3 Authority Key Identifier: keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/wRa2msDykSiyRHn54_Q8d6xwuIU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:5707:ffe0::/46 2a0f:5707:fff3::/48 Signature Algorithm: sha256WithRSAEncryption 20:49:24:5f:ba:8b:96:9a:f2:6b:25:5a:fa:3b:ed:ca:07:2a: 77:d6:9b:e1:b5:63:5b:19:01:21:00:23:ee:f7:f0:e7:04:87: 8b:48:d7:9c:3d:77:e9:5e:11:1e:20:1f:0b:e0:78:d8:a7:3b: cb:ce:2a:02:b5:6c:2a:3f:8f:67:13:22:a6:08:c7:2d:38:37: af:94:37:e3:44:5a:48:07:4b:a5:6b:42:b8:b1:e4:4d:f2:52: 3a:22:d1:04:dd:d8:b7:6e:e6:fc:b4:70:d2:49:d0:cd:70:49: 68:71:a9:c0:a3:de:6a:d5:30:e9:1f:5b:51:5c:12:57:6d:4f: 72:ae:8a:a7:f7:9d:8d:a9:9f:ff:7b:9c:45:ed:16:48:4f:f8: ee:28:fa:a5:77:5e:0b:01:4c:4f:a4:8e:62:54:79:4d:d2:6c: ef:01:7f:d5:69:a8:7a:91:2a:5e:c2:da:34:23:ff:f7:dd:d9: 9b:9c:91:e3:25:f7:97:e0:1d:1c:57:cc:54:9c:ae:36:34:20: 2e:9e:1f:19:af:a4:35:e1:cb:04:c7:da:82:e1:22:d6:94:a2: 1f:f3:03:a0:b3:36:5b:a5:c8:a5:58:f3:8c:df:63:20:3f:50: 92:33:b4:f8:0d:e3:58:47:8a:b6:5d:bc:76:04:7c:73:27:8a: 68:ea:9d:1e -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3WOfFieCL+DNzDQKMyqBdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNjQ0YzExNTY4NTE4MDNmMzdhZGVlYzA4NzZjY2Y5ODlk NWFlZjAwHhcNMjYwMTAxMDIxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTE2YjY5YWMwZjI5MTI4YjI0NDc5ZjllM2Y0M2M3N2FjNzBiODg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVfuWvKUZKh2rrwULzMio+ukZR2w R9TfiFiP8baGkHONZyqmWmSWNJmTveDuJ9yxucG+89mJopCYXNUFFkDXAU3NfLAN IQIEkrJjt65u6NY9jmvmIF0PVDA3mljMcEN49KhhGtxKSv+FZ2O8PpqWFmYehGwU lGwRPVUWakOsGBcKQKLWOHZivdvuEcOFtWERFLmMYS9iFppp8rM4D4pHRtjR/+LH VNurWUJXeijKiS5vh/uyWoxOwHf785XopEX1IodlE+phJIdThOCSVGvgpz37OgWZ W9QhdNzzV/3pobbg5uDJ0q4IvTzqsddzdzVo6UbVn93z8w9CpL8wIW+WoQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMEWtprA8pEoskR5+eP0PHescLiFMB8GA1UdIwQY MBaAFEpkTBFWhRgD83re7Ah2zPmJ1a7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3Mzkt Y2MxYzliNWY2NjQwLzEvd1JhMm1zRHlrU2l5UkhuNTRfUThkNnh3dUlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3MzktY2MxYzliNWY2NjQw LzEvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcCKg9XB//g AwcAKg9XB//zMA0GCSqGSIb3DQEBCwUAA4IBAQAgSSRfuouWmvJrJVr6O+3KByp3 1pvhtWNbGQEhACPu9/DnBIeLSNecPXfpXhEeIB8L4HjYpzvLzioCtWwqP49nEyKm CMctODevlDfjRFpIB0ula0K4seRN8lI6ItEE3di3bub8tHDSSdDNcElocanAo95q 1TDpH1tRXBJXbU9yroqn952NqZ//e5xF7RZIT/juKPqld14LAUxPpI5iVHlN0mzv AX/Vaah6kSpewto0I//33dmbnJHjJfeX4B0cV8xUnK42NCAunh8Zr6Q14csEx9qC 4SLWlKIf8wOgszZbpcilWPOM32MgP1CSM7T4DeNYR4q2Xbx2BHxzJ4po6p0e -----END CERTIFICATE-----Generated at Mon Jan 26 01:41:19 2026 by rpki-client