This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/WYQDjBxDm_OoBGcgcgmE7OCjFt0.roa File: WYQDjBxDm_OoBGcgcgmE7OCjFt0.roa (raw, json) Hash identifier: eECr25yVYsujT6+QLvSz9j18MPQkn37aHPMM7Z3Jdzg= Subject key identifier: 59:84:03:8C:1C:43:9B:F3:A8:04:67:20:72:09:84:EC:E0:A3:16:DD Certificate issuer: /CN=e709f762e082ead3d6d7e4cae29efbb4d12f575e Certificate serial: 019B7D5CB73D9DC67AA83F1B310DF71A6E98 Authority key identifier: E7:09:F7:62:E0:82:EA:D3:D6:D7:E4:CA:E2:9E:FB:B4:D1:2F:57:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/WYQDjBxDm_OoBGcgcgmE7OCjFt0.roa Signing time: Fri 02 Jan 2026 06:19:46 +0000 ROA not before: Fri 02 Jan 2026 06:19:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62080 IP address blocks: 2001:678:310::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:b7:3d:9d:c6:7a:a8:3f:1b:31:0d:f7:1a:6e:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e709f762e082ead3d6d7e4cae29efbb4d12f575e Validity Not Before: Jan 2 06:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5984038c1c439bf3a8046720720984ece0a316dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:df:f3:6e:1a:17:5a:7e:d4:86:a3:2a:1d:09: a0:0c:2c:7e:d3:2d:30:a7:e0:2a:fd:83:01:4f:db: bb:bb:07:56:8e:c0:17:43:fb:d5:1e:e6:ac:6a:17: 4b:46:ac:23:09:fd:1c:81:37:1e:89:17:1c:17:8e: 14:a1:f4:e6:dd:f4:45:64:d8:95:41:94:ba:18:62: b9:50:66:ab:9e:0e:06:c7:09:b4:9c:6c:4c:b0:01: fa:76:86:10:e4:70:f2:33:9e:95:2a:33:ef:b6:1f: 4e:e5:4d:9c:99:2e:06:26:a1:ab:1d:68:4f:c4:7b: 3d:51:5a:5a:f6:df:68:31:67:1f:7d:21:c0:30:ac: d8:a6:77:62:e4:71:bc:06:3d:81:a0:f8:61:3a:90: 97:1b:cf:fd:30:91:96:88:9d:5b:03:af:dc:33:43: d5:da:84:87:e3:79:dc:c8:d7:35:9f:aa:7a:bc:1f: ca:2c:ec:59:88:56:2d:b2:2b:c5:95:f1:15:5c:ca: 59:3c:48:4f:c8:08:72:2c:6e:6c:ed:f1:06:dd:bd: 5b:37:13:48:be:b9:5d:0e:40:c9:08:3e:eb:18:40: 85:a2:95:f2:64:35:49:9a:eb:84:ea:e4:2b:69:0a: 15:07:15:89:c6:c7:f6:d4:26:2e:af:56:e5:63:02: c5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:84:03:8C:1C:43:9B:F3:A8:04:67:20:72:09:84:EC:E0:A3:16:DD X509v3 Authority Key Identifier: keyid:E7:09:F7:62:E0:82:EA:D3:D6:D7:E4:CA:E2:9E:FB:B4:D1:2F:57:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/WYQDjBxDm_OoBGcgcgmE7OCjFt0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:310::/48 Signature Algorithm: sha256WithRSAEncryption 47:56:b5:6c:46:10:48:59:68:ac:b3:8f:dd:0f:10:ed:5a:7c: 34:a0:66:2f:a2:b8:73:54:53:93:05:c8:82:55:40:4f:ad:33: 59:e6:b7:98:38:34:ea:68:4f:6b:01:9c:28:db:bd:3e:79:4c: 66:4b:5f:7f:24:d6:a9:d5:54:b6:2b:e7:dc:a4:fc:cd:01:51: 18:5e:3d:78:fb:22:80:82:ba:a6:2d:3f:54:40:30:26:55:99: 41:e3:5f:e7:32:8a:a7:23:c1:89:81:e4:b8:2b:77:c6:ef:b9: fe:0b:26:c6:64:fe:c6:1a:de:22:7b:d2:74:57:e8:92:73:01: 99:96:52:a2:24:14:82:e7:1c:71:52:df:bd:c7:6d:d6:b0:6d: 90:29:79:f5:3a:46:c2:08:d3:66:46:29:74:b8:73:ff:66:4f: 1b:f7:44:48:e1:e6:76:99:87:d7:97:f6:2e:a4:c0:03:6c:48: 9a:e1:21:d9:61:7f:80:31:f5:e4:39:fa:66:c9:85:6c:90:04: 8d:6d:f2:01:9d:1c:10:a3:49:c9:9f:d1:b1:fb:b4:bb:fe:d7: 49:38:21:26:4e:bc:21:2e:20:72:6c:a2:5a:31:bf:2e:10:8b: a0:c8:0c:32:03:d8:c7:4c:6d:c5:eb:14:4d:d2:39:5f:0a:bf: 40:c2:e6:13 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XLc9ncZ6qD8bMQ33Gm6YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3MDlmNzYyZTA4MmVhZDNkNmQ3ZTRjYWUyOWVmYmI0ZDEy ZjU3NWUwHhcNMjYwMTAyMDYxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTg0MDM4YzFjNDM5YmYzYTgwNDY3MjA3MjA5ODRlY2UwYTMxNmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5N/zbhoXWn7UhqMqHQmgDCx+0y0w p+Aq/YMBT9u7uwdWjsAXQ/vVHuasahdLRqwjCf0cgTceiRccF44UofTm3fRFZNiV QZS6GGK5UGarng4Gxwm0nGxMsAH6doYQ5HDyM56VKjPvth9O5U2cmS4GJqGrHWhP xHs9UVpa9t9oMWcffSHAMKzYpndi5HG8Bj2BoPhhOpCXG8/9MJGWiJ1bA6/cM0PV 2oSH43ncyNc1n6p6vB/KLOxZiFYtsivFlfEVXMpZPEhPyAhyLG5s7fEG3b1bNxNI vrldDkDJCD7rGECFopXyZDVJmuuE6uQraQoVBxWJxsf21CYur1blYwLFLQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFmEA4wcQ5vzqARnIHIJhOzgoxbdMB8GA1UdIwQY MBaAFOcJ92LggurT1tfkyuKe+7TRL1deMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXduM1l1Q0M2dFBXMS1USzRwNzd0TkV2VjE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wYmRhNGEtNWMxMC00NGRiLThmNjIt YWU0ZmE3ZjE3ZjljLzEvV1lRRGpCeERtX09vQkdjZ2NnbUU3T0NqRnQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8wYmRhNGEtNWMxMC00NGRiLThmNjItYWU0ZmE3ZjE3Zjlj LzEvNXduM1l1Q0M2dFBXMS1USzRwNzd0TkV2VjE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAMQ MA0GCSqGSIb3DQEBCwUAA4IBAQBHVrVsRhBIWWiss4/dDxDtWnw0oGYvorhzVFOT BciCVUBPrTNZ5reYODTqaE9rAZwo270+eUxmS19/JNap1VS2K+fcpPzNAVEYXj14 +yKAgrqmLT9UQDAmVZlB41/nMoqnI8GJgeS4K3fG77n+CybGZP7GGt4ie9J0V+iS cwGZllKiJBSC5xxxUt+9x23WsG2QKXn1OkbCCNNmRil0uHP/Zk8b90RI4eZ2mYfX l/YupMADbEia4SHZYX+AMfXkOfpmyYVskASNbfIBnRwQo0nJn9Gx+7S7/tdJOCEm TrwhLiBybKJaMb8uEIugyAwyA9jHTG3F6xRN0jlfCr9AwuYT -----END CERTIFICATE-----Generated at Mon Jan 26 13:46:31 2026 by rpki-client