This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/wqS_wfIdBlK7kC9o4zizHf0FBlk.roa File: wqS_wfIdBlK7kC9o4zizHf0FBlk.roa (raw, json) Hash identifier: Dvd4isDlS6MYBBiZdCyk9gJMQ1pHNGRCGxx3yyLp9qE= Subject key identifier: C2:A4:BF:C1:F2:1D:06:52:BB:90:2F:68:E3:38:B3:1D:FD:05:06:59 Certificate issuer: /CN=4a7f4f8ac8ca7343ed1b4ff12ce276318b69d10e Certificate serial: 019B7910AAC21A5C97D218AC25E40CBB4521 Authority key identifier: 4A:7F:4F:8A:C8:CA:73:43:ED:1B:4F:F1:2C:E2:76:31:8B:69:D1:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/wqS_wfIdBlK7kC9o4zizHf0FBlk.roa Signing time: Thu 01 Jan 2026 10:18:13 +0000 ROA not before: Thu 01 Jan 2026 10:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214235 IP address blocks: 2a10:b9c7::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft rsync://rpki.ripe.net/repository/DEFAULT/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:aa:c2:1a:5c:97:d2:18:ac:25:e4:0c:bb:45:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a7f4f8ac8ca7343ed1b4ff12ce276318b69d10e Validity Not Before: Jan 1 10:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c2a4bfc1f21d0652bb902f68e338b31dfd050659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:17:9d:04:2c:99:1a:95:bf:95:d6:fb:80:55: 5b:6c:31:83:1a:47:2e:00:1f:bd:7f:b5:d0:b0:32: 0c:4d:43:42:93:d5:75:1b:85:c8:e4:eb:4e:80:c1: d8:83:0c:d2:9e:ea:1c:7c:ab:c3:51:d8:06:e6:e6: bc:10:36:6f:08:50:7d:61:fb:6b:14:7a:0e:fe:ef: 27:9c:79:21:ae:4c:48:01:fb:66:e6:cb:86:2a:b7: d2:9d:a2:ac:4e:50:f7:41:86:f5:89:b3:cb:eb:c4: a1:cd:6a:d9:da:d0:ef:39:10:e0:80:e7:98:9e:e7: 2c:86:92:80:28:cf:50:e3:a2:f3:04:5f:67:f8:6f: c5:00:8e:ae:1e:01:78:14:bd:a5:5c:16:89:6f:f0: 6f:d8:18:e2:09:83:e1:06:11:a4:51:8d:85:22:4f: d3:99:81:88:16:4b:b0:19:58:a4:f0:7a:4b:cf:b7: 02:6c:a4:fe:70:74:75:51:a2:8c:3d:e8:ac:bb:68: 23:7b:17:52:e6:9c:1f:3c:d8:83:91:88:29:69:a1: 1b:cb:7f:73:5a:d4:ef:72:7d:47:04:53:5f:b4:cf: f9:95:2e:3e:27:f7:8f:eb:c3:a8:f1:08:81:82:88: c8:88:a9:4d:1a:03:21:21:e2:48:6a:fc:07:e6:da: 1e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A4:BF:C1:F2:1D:06:52:BB:90:2F:68:E3:38:B3:1D:FD:05:06:59 X509v3 Authority Key Identifier: keyid:4A:7F:4F:8A:C8:CA:73:43:ED:1B:4F:F1:2C:E2:76:31:8B:69:D1:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/wqS_wfIdBlK7kC9o4zizHf0FBlk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:b9c7::/44 Signature Algorithm: sha256WithRSAEncryption 5d:13:e5:02:fc:4e:c6:e5:c1:f4:ef:dd:83:a8:e3:78:fc:bf: 49:76:a3:ff:7f:a5:aa:0b:b0:1b:4b:09:8f:08:d1:e9:67:82: 44:4e:70:31:01:92:77:24:b7:d3:8d:f8:d1:b8:3b:e3:33:3a: aa:fb:0d:fb:21:ef:0d:49:fb:52:a8:29:d0:a0:90:6f:f3:fc: fe:bd:03:81:d4:e7:fa:4f:7a:32:7c:d4:07:fb:54:9f:10:cb: 3f:c9:2f:3c:93:08:e8:1c:45:5a:9a:fb:91:a6:c2:8e:b9:2f: 1a:24:60:63:d4:f5:97:3d:10:64:3d:7e:80:ad:67:23:cf:10: 06:c0:9f:c1:98:33:bd:95:2c:1a:3d:77:9c:87:53:22:a1:9a: b3:9f:1d:5e:b2:66:1f:5d:27:8e:fa:ea:68:fe:f5:42:86:fb: 00:76:b1:39:30:38:8d:ea:0f:88:03:2b:b9:06:ec:8a:85:16: 45:22:af:9b:86:97:46:6b:20:68:1a:43:75:0c:6f:e9:aa:51: b2:c4:ae:1e:bb:2c:42:e9:2a:33:d0:6d:e6:24:7f:a1:cc:da: b4:6f:62:e7:81:a7:cd:0f:7d:34:40:fe:40:74:a9:a1:b9:75: 96:de:56:79:d8:12:80:96:e0:0d:f1:61:d5:af:5a:f0:e3:61: 3c:c4:7c:02 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EKrCGlyX0hisJeQMu0UhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhN2Y0ZjhhYzhjYTczNDNlZDFiNGZmMTJjZTI3NjMxOGI2 OWQxMGUwHhcNMjYwMTAxMTAxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMmE0YmZjMWYyMWQwNjUyYmI5MDJmNjhlMzM4YjMxZGZkMDUwNjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7xedBCyZGpW/ldb7gFVbbDGDGkcu AB+9f7XQsDIMTUNCk9V1G4XI5OtOgMHYgwzSnuocfKvDUdgG5ua8EDZvCFB9Yftr FHoO/u8nnHkhrkxIAftm5suGKrfSnaKsTlD3QYb1ibPL68ShzWrZ2tDvORDggOeY nucshpKAKM9Q46LzBF9n+G/FAI6uHgF4FL2lXBaJb/Bv2BjiCYPhBhGkUY2FIk/T mYGIFkuwGVik8HpLz7cCbKT+cHR1UaKMPeisu2gjexdS5pwfPNiDkYgpaaEby39z WtTvcn1HBFNftM/5lS4+J/eP68Oo8QiBgojIiKlNGgMhIeJIavwH5toeGQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMKkv8HyHQZSu5AvaOM4sx39BQZZMB8GA1UdIwQY MBaAFEp/T4rIynND7RtP8SzidjGLadEOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU245UGlzaktjMFB0RzBfeExPSjJNWXRwMFE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8wZTY5NjItOTZiNy00ZmI4LWE4Mzkt OWVjN2FkZDBlYjY4LzEvd3FTX3dmSWRCbEs3a0M5bzR6aXpIZjBGQmxrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8wZTY5NjItOTZiNy00ZmI4LWE4MzktOWVjN2FkZDBlYjY4 LzEvU245UGlzaktjMFB0RzBfeExPSjJNWXRwMFE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhC5xwAA MA0GCSqGSIb3DQEBCwUAA4IBAQBdE+UC/E7G5cH0792DqON4/L9JdqP/f6WqC7Ab SwmPCNHpZ4JETnAxAZJ3JLfTjfjRuDvjMzqq+w37Ie8NSftSqCnQoJBv8/z+vQOB 1Of6T3oyfNQH+1SfEMs/yS88kwjoHEVamvuRpsKOuS8aJGBj1PWXPRBkPX6ArWcj zxAGwJ/BmDO9lSwaPXech1MioZqznx1esmYfXSeO+upo/vVChvsAdrE5MDiN6g+I Ayu5BuyKhRZFIq+bhpdGayBoGkN1DG/pqlGyxK4euyxC6Soz0G3mJH+hzNq0b2Ln gafND300QP5AdKmhuXWW3lZ52BKAluAN8WHVr1rw42E8xHwC -----END CERTIFICATE-----Generated at Mon Jan 26 02:43:53 2026 by rpki-client