This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/wqYhJdTXa82YFv-6BFRogMV-68M.roa File: wqYhJdTXa82YFv-6BFRogMV-68M.roa (raw, json) Hash identifier: 2adtr0H63u+qw2bLDNrE5Xr8tW2MCGnw+je2lpcnNdo= Subject key identifier: C2:A6:21:25:D4:D7:6B:CD:98:16:FF:BA:04:54:68:80:C5:7E:EB:C3 Certificate issuer: /CN=1e8c77336d66f7b0238e6c184c64fa4f24d09f01 Certificate serial: 019B7D5ABD442E857C680560626B3568DAC0 Authority key identifier: 1E:8C:77:33:6D:66:F7:B0:23:8E:6C:18:4C:64:FA:4F:24:D0:9F:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/wqYhJdTXa82YFv-6BFRogMV-68M.roa Signing time: Fri 02 Jan 2026 06:17:37 +0000 ROA not before: Fri 02 Jan 2026 06:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44973 IP address blocks: 2001:678:59c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:bd:44:2e:85:7c:68:05:60:62:6b:35:68:da:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e8c77336d66f7b0238e6c184c64fa4f24d09f01 Validity Not Before: Jan 2 06:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c2a62125d4d76bcd9816ffba04546880c57eebc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:29:8d:19:ef:03:55:5b:92:4a:ff:89:14:60: 12:88:0c:05:70:af:50:da:a6:95:5a:f2:41:15:2e: d4:34:41:05:0e:1d:da:97:82:cb:81:8d:a3:d3:47: 4b:6c:6d:f7:c5:24:a8:8d:01:ab:28:b6:22:63:f7: 40:fc:ad:87:df:f4:45:86:e8:2d:17:c2:66:9d:16: 24:79:cb:b7:66:e7:be:47:67:78:9c:2f:4a:87:ee: 40:0f:dd:04:4a:8f:55:e6:21:af:9e:1b:7a:81:53: 05:19:07:5b:e2:33:e7:c4:f8:80:16:58:3a:1b:cf: b3:05:fa:2b:67:bb:d2:3a:a1:ef:31:0b:6c:ae:39: 94:eb:77:39:62:63:4b:8a:d1:2d:eb:be:5b:b2:a8: 8a:93:03:e5:0b:dd:a5:6f:f8:7d:e6:7e:9a:32:78: e6:a8:40:04:62:38:41:2d:71:ad:f9:31:a2:8a:ef: ca:a3:8f:25:de:b9:68:e3:ce:da:5c:f2:13:c3:87: 52:22:dc:1c:78:7f:86:62:6c:be:37:74:50:72:d8: 92:f2:ae:89:fb:9f:4a:c8:0c:c3:3e:ba:bd:f4:3f: 69:b1:46:08:16:62:c2:55:c0:7f:b0:40:81:c3:0b: 58:61:74:e6:7d:65:2e:23:93:cf:02:e7:91:30:ce: c7:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A6:21:25:D4:D7:6B:CD:98:16:FF:BA:04:54:68:80:C5:7E:EB:C3 X509v3 Authority Key Identifier: keyid:1E:8C:77:33:6D:66:F7:B0:23:8E:6C:18:4C:64:FA:4F:24:D0:9F:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/wqYhJdTXa82YFv-6BFRogMV-68M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:59c::/48 Signature Algorithm: sha256WithRSAEncryption 57:46:e8:12:08:be:f9:42:64:6c:e8:e7:10:b1:8d:19:99:5c: 4d:e0:f2:8c:be:62:07:5e:96:6e:3d:e5:bd:6e:69:d8:d1:57: ee:8f:7a:14:bb:dc:c1:8b:3c:38:fd:77:bd:60:04:69:3d:e8: 61:39:0f:22:c1:cf:48:6d:30:e3:c8:6e:3a:90:9b:f8:2f:f3: 5a:cc:e6:59:93:b1:f8:84:ca:24:db:b6:42:7d:31:0c:2c:8c: 21:8a:b3:13:a9:0d:00:25:0e:e6:2c:4c:10:d9:36:cd:eb:bf: 7e:f6:10:00:5c:87:4e:dc:53:5e:c3:90:e2:8e:7e:ea:bc:12: 07:c4:71:b6:b7:79:51:1d:df:7f:8b:ff:1f:42:2c:a9:b9:03: b1:61:2c:9d:01:24:99:8e:56:06:87:3b:dd:a2:a5:54:4f:9b: 8a:f0:fa:19:df:b8:c4:80:12:35:ce:24:42:0d:ee:58:ad:05: 4e:72:75:14:5c:6f:77:e8:59:81:48:ff:dd:59:b0:64:07:c3: ce:1f:30:1c:37:2a:16:0a:d8:e8:9f:03:83:80:d1:32:49:85: 02:fe:3f:04:6d:59:89:c1:bc:aa:37:21:3c:d2:3d:1f:76:fd: 95:ee:b0:71:df:1c:ab:d7:15:19:8e:9c:7b:02:46:41:31:b8: 3f:32:2e:ae -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9Wr1ELoV8aAVgYms1aNrAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlOGM3NzMzNmQ2NmY3YjAyMzhlNmMxODRjNjRmYTRmMjRk MDlmMDEwHhcNMjYwMTAyMDYxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMmE2MjEyNWQ0ZDc2YmNkOTgxNmZmYmEwNDU0Njg4MGM1N2VlYmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCmNGe8DVVuSSv+JFGASiAwFcK9Q 2qaVWvJBFS7UNEEFDh3al4LLgY2j00dLbG33xSSojQGrKLYiY/dA/K2H3/RFhugt F8JmnRYkecu3Zue+R2d4nC9Kh+5AD90ESo9V5iGvnht6gVMFGQdb4jPnxPiAFlg6 G8+zBforZ7vSOqHvMQtsrjmU63c5YmNLitEt675bsqiKkwPlC92lb/h95n6aMnjm qEAEYjhBLXGt+TGiiu/Ko48l3rlo487aXPITw4dSItwceH+GYmy+N3RQctiS8q6J +59KyAzDPrq99D9psUYIFmLCVcB/sECBwwtYYXTmfWUuI5PPAueRMM7HVQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMKmISXU12vNmBb/ugRUaIDFfuvDMB8GA1UdIwQY MBaAFB6MdzNtZvewI45sGExk+k8k0J8BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSG94M00yMW05N0Fqam13WVRHVDZUeVRRbndFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC83ZGE3OWQtNjBmNC00N2E4LTgxM2Et OTk5NTdkZjQ5OTdlLzEvd3FZaEpkVFhhODJZRnYtNkJGUm9nTVYtNjhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC83ZGE3OWQtNjBmNC00N2E4LTgxM2EtOTk5NTdkZjQ5OTdl LzEvSG94M00yMW05N0Fqam13WVRHVDZUeVRRbndFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAWc MA0GCSqGSIb3DQEBCwUAA4IBAQBXRugSCL75QmRs6OcQsY0ZmVxN4PKMvmIHXpZu PeW9bmnY0Vfuj3oUu9zBizw4/Xe9YARpPehhOQ8iwc9IbTDjyG46kJv4L/NazOZZ k7H4hMok27ZCfTEMLIwhirMTqQ0AJQ7mLEwQ2TbN679+9hAAXIdO3FNew5Dijn7q vBIHxHG2t3lRHd9/i/8fQiypuQOxYSydASSZjlYGhzvdoqVUT5uK8PoZ37jEgBI1 ziRCDe5YrQVOcnUUXG936FmBSP/dWbBkB8POHzAcNyoWCtjonwODgNEySYUC/j8E bVmJwbyqNyE80j0fdv2V7rBx3xyr1xUZjpx7AkZBMbg/Mi6u -----END CERTIFICATE-----Generated at Mon Jan 26 01:17:19 2026 by rpki-client