This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/WqDS95-He-yk3t24qKJI-_SLkPk.roa File: WqDS95-He-yk3t24qKJI-_SLkPk.roa (raw, json) Hash identifier: CpUmTzZjgX7L+EURvDrJ6FpyIH+66F1QJtHPFgkqtLs= Subject key identifier: 5A:A0:D2:F7:9F:87:7B:EC:A4:DE:DD:B8:A8:A2:48:FB:F4:8B:90:F9 Certificate issuer: /CN=334f9f83d2d74c0c0fd00da735578f737dd7da03 Certificate serial: 019B7911428283CAE640788FA1D63958B698 Authority key identifier: 33:4F:9F:83:D2:D7:4C:0C:0F:D0:0D:A7:35:57:8F:73:7D:D7:DA:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/WqDS95-He-yk3t24qKJI-_SLkPk.roa Signing time: Thu 01 Jan 2026 10:18:52 +0000 ROA not before: Thu 01 Jan 2026 10:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20473 IP address blocks: 2a12:5340:6::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 01:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:42:82:83:ca:e6:40:78:8f:a1:d6:39:58:b6:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=334f9f83d2d74c0c0fd00da735578f737dd7da03 Validity Not Before: Jan 1 10:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5aa0d2f79f877beca4deddb8a8a248fbf48b90f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:91:b9:c4:f0:cc:9d:0a:f5:86:a0:30:b8:7d: 65:fb:6a:27:a1:96:64:d8:bb:2b:a8:eb:ed:67:59: b4:70:fa:2b:96:34:33:a5:88:27:a0:f9:54:96:e5: d3:3f:30:de:3f:cc:28:ef:37:74:1e:6a:55:8a:c9: 9f:19:2b:6c:d8:17:8a:6a:d9:1c:d5:cc:06:7e:8b: 37:85:9d:94:81:5b:6a:f0:bc:21:b0:ae:84:2c:cc: cc:03:83:e9:77:83:97:50:0c:50:14:05:45:d9:ee: 1a:53:4c:63:58:55:87:8a:85:2a:40:b6:11:f1:2c: 1d:d7:df:1b:d4:fc:e1:28:89:b2:b9:f8:40:8c:dc: df:ac:fa:3d:eb:09:3b:e0:12:69:1f:04:46:71:91: d1:05:4f:51:0e:b6:bd:e8:f5:90:c4:cf:6d:03:c1: ef:4f:b0:bb:0d:43:db:6c:a3:27:3c:3e:d3:24:61: ba:85:50:37:f1:66:b1:ff:f9:5a:5a:39:82:28:17: 4e:8b:e9:53:4e:32:eb:fe:a5:f0:b1:36:48:17:ab: 04:71:ed:24:04:b1:91:3b:86:5b:ef:0c:b7:92:3d: b3:df:23:7d:56:64:1f:6b:45:fa:c8:f7:07:79:a2: 5c:e1:f6:30:88:47:96:18:9d:3f:04:a3:8f:88:fd: 5d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:A0:D2:F7:9F:87:7B:EC:A4:DE:DD:B8:A8:A2:48:FB:F4:8B:90:F9 X509v3 Authority Key Identifier: keyid:33:4F:9F:83:D2:D7:4C:0C:0F:D0:0D:A7:35:57:8F:73:7D:D7:DA:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/WqDS95-He-yk3t24qKJI-_SLkPk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:5340:6::/47 Signature Algorithm: sha256WithRSAEncryption 86:aa:80:85:cd:51:ab:f8:6b:28:f0:ad:55:a2:61:50:c8:45: 12:d0:95:dc:3c:75:d1:44:f1:08:61:a7:a7:cf:69:d5:19:d9: af:5f:e7:33:0a:82:49:54:af:4f:a0:6d:35:ee:86:df:3a:21: 2a:15:40:2c:00:51:57:71:09:3a:8a:69:43:9c:8e:15:58:cd: f6:8c:7f:c0:eb:0f:0b:02:52:85:5f:f6:8c:fa:fc:60:00:34: a1:7f:5c:2e:f1:76:61:6c:0a:04:7e:8d:6a:55:04:8f:48:06: 7b:29:44:fd:51:69:23:b4:29:a7:af:3c:fa:ef:b5:18:f4:65: 20:ef:e3:7d:4f:5b:0c:10:47:d9:78:c2:e6:12:f9:b7:3f:93: e2:51:cf:52:ff:de:1c:60:8b:5f:ce:06:d0:de:e9:11:70:06: 32:88:51:5b:dc:0d:1f:97:54:37:ef:ea:f4:31:33:8d:78:12: 60:c4:10:c3:98:d6:2f:3a:44:e6:0c:05:75:f3:b4:89:c5:e5: 55:39:8b:18:3c:78:be:82:6d:e1:54:24:fa:cd:f6:5e:bb:ce: 09:4e:73:52:f6:28:0c:79:d8:20:ba:65:0e:46:33:39:f1:14: 09:9a:85:a4:18:4f:51:de:ff:61:37:c6:6f:5f:45:97:92:af: a1:10:2b:82 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EUKCg8rmQHiPodY5WLaYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzNGY5ZjgzZDJkNzRjMGMwZmQwMGRhNzM1NTc4ZjczN2Rk N2RhMDMwHhcNMjYwMTAxMTAxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YWEwZDJmNzlmODc3YmVjYTRkZWRkYjhhOGEyNDhmYmY0OGI5MGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJG5xPDMnQr1hqAwuH1l+2onoZZk 2LsrqOvtZ1m0cPorljQzpYgnoPlUluXTPzDeP8wo7zd0HmpVismfGSts2BeKatkc 1cwGfos3hZ2UgVtq8LwhsK6ELMzMA4Ppd4OXUAxQFAVF2e4aU0xjWFWHioUqQLYR 8Swd198b1PzhKImyufhAjNzfrPo96wk74BJpHwRGcZHRBU9RDra96PWQxM9tA8Hv T7C7DUPbbKMnPD7TJGG6hVA38Wax//laWjmCKBdOi+lTTjLr/qXwsTZIF6sEce0k BLGRO4Zb7wy3kj2z3yN9VmQfa0X6yPcHeaJc4fYwiEeWGJ0/BKOPiP1dDwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFqg0vefh3vspN7duKiiSPv0i5D5MB8GA1UdIwQY MBaAFDNPn4PS10wMD9ANpzVXj3N919oDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTAtZmc5TFhUQXdQMEEybk5WZVBjMzNYMmdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS85YzVmMDYtNTlhNy00NTg4LWFjMjgt ZWZkMjBmNmMyZWMzLzEvV3FEUzk1LUhlLXlrM3QyNHFLSkktX1NMa1BrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS85YzVmMDYtNTlhNy00NTg4LWFjMjgtZWZkMjBmNmMyZWMz LzEvTTAtZmc5TFhUQXdQMEEybk5WZVBjMzNYMmdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKhJTQAAG MA0GCSqGSIb3DQEBCwUAA4IBAQCGqoCFzVGr+Gso8K1VomFQyEUS0JXcPHXRRPEI Yaenz2nVGdmvX+czCoJJVK9PoG017obfOiEqFUAsAFFXcQk6imlDnI4VWM32jH/A 6w8LAlKFX/aM+vxgADShf1wu8XZhbAoEfo1qVQSPSAZ7KUT9UWkjtCmnrzz677UY 9GUg7+N9T1sMEEfZeMLmEvm3P5PiUc9S/94cYItfzgbQ3ukRcAYyiFFb3A0fl1Q3 7+r0MTONeBJgxBDDmNYvOkTmDAV187SJxeVVOYsYPHi+gm3hVCT6zfZeu84JTnNS 9igMedggumUORjM58RQJmoWkGE9R3v9hN8ZvX0WXkq+hECuC -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:20 2026 by rpki-client