This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/WJ-fLCvpA2b7b4xbzc2R6ukUcDA.roa File: WJ-fLCvpA2b7b4xbzc2R6ukUcDA.roa (raw, json) Hash identifier: SBFLbGd5ofqXRAn4g/0xvSlGhywAxzvjT5O22NBuorc= Subject key identifier: 58:9F:9F:2C:2B:E9:03:66:FB:6F:8C:5B:CD:CD:91:EA:E9:14:70:30 Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Certificate serial: 019B77C7690F32ACDD675A56F5DEAE75CB2B Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/WJ-fLCvpA2b7b4xbzc2R6ukUcDA.roa Signing time: Thu 01 Jan 2026 04:18:35 +0000 ROA not before: Thu 01 Jan 2026 04:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206174 IP address blocks: 2a0c:1240::/29 maxlen: 29 2a12:3740::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:69:0f:32:ac:dd:67:5a:56:f5:de:ae:75:cb:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Validity Not Before: Jan 1 04:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=589f9f2c2be90366fb6f8c5bcdcd91eae9147030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:59:6a:91:37:75:f8:bb:3c:af:bb:77:85:75: 49:00:06:b9:37:26:f8:27:5f:0c:5d:7d:e5:d6:ed: 7a:de:2e:c8:42:02:9b:be:4c:8f:76:8b:12:3d:35: 87:c7:00:c1:e9:f5:09:5d:4f:71:f7:9b:67:b4:7b: 88:bc:24:0e:e4:e1:2a:c2:48:ed:37:49:38:ad:58: ed:97:7d:7b:fe:d4:a6:71:87:2a:16:27:61:2c:6b: db:11:64:4e:ef:80:1b:45:83:ad:cc:a2:90:ec:01: 93:a6:c5:71:e7:e9:f8:9e:a4:98:a9:b4:e2:a0:9b: 12:c8:62:55:39:d0:20:94:72:a7:41:c4:63:72:1c: 03:e3:c1:9c:49:52:63:66:92:c1:d9:a1:40:d2:c9: 88:9e:26:ba:49:49:12:07:49:d6:38:1e:f6:48:21: 5a:1d:e7:b8:17:3d:59:a3:f7:64:f3:65:c3:72:36: f0:20:a1:7a:5c:d9:8b:98:97:2d:2f:88:a8:56:1f: 09:ae:f6:fa:9b:6d:30:43:20:81:97:2e:f5:ec:2f: 70:b8:18:bd:1b:2e:29:da:60:70:8f:af:5d:2f:79: b7:02:c2:d3:dc:1d:f8:9e:7c:05:67:9b:3e:86:ea: 50:59:99:14:40:fd:30:c9:43:2a:3c:6d:eb:19:5a: 53:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:9F:9F:2C:2B:E9:03:66:FB:6F:8C:5B:CD:CD:91:EA:E9:14:70:30 X509v3 Authority Key Identifier: keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/WJ-fLCvpA2b7b4xbzc2R6ukUcDA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:1240::/29 2a12:3740::/29 Signature Algorithm: sha256WithRSAEncryption 26:3d:5d:fd:d0:dd:84:1c:f2:85:29:75:e2:82:f5:b0:a3:bf: da:d6:d1:5d:b4:e2:53:9d:55:2c:da:5d:03:eb:2c:3c:0e:a8: 74:34:a9:ae:9f:18:b2:f2:57:36:dc:3e:59:ca:44:b6:27:19: bb:8f:99:bc:be:9c:44:c1:7f:f3:a7:f8:3d:52:6a:dc:5e:53: 5a:06:b1:85:12:01:c5:a4:08:c5:e5:3a:0c:f3:2a:ee:71:36: 0e:ef:90:9f:99:85:5d:a5:b7:5e:82:17:21:10:35:0a:e3:1a: 1d:6a:82:51:f0:af:3c:3c:48:2a:69:0a:bc:4e:c7:19:cb:ee: 58:f4:ff:a7:b0:1f:9f:9d:98:59:0f:b7:22:b6:10:6d:31:3f: 8f:03:6a:16:c8:7f:0d:5f:ca:3d:57:3f:55:2c:8f:85:bf:30: 42:34:66:c3:97:09:b4:a5:0d:7b:1f:b6:f2:88:12:e8:ec:2b: 43:a3:61:a3:a7:cc:e0:d8:9b:3a:27:01:33:b8:c0:6c:0d:c6: 9b:2b:f7:ed:b5:48:bd:cc:3a:c9:91:7d:68:76:62:87:33:42: 62:94:9e:cc:93:0f:6a:53:50:1f:f5:8f:dd:2d:2b:b2:9f:c9: 0e:66:26:98:9b:79:fc:f4:55:6b:ba:c8:e4:32:25:14:61:39: 91:94:d7:08 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3x2kPMqzdZ1pW9d6udcsrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiOTQ0N2ZlOWE0YWNjN2Q2ZmY3MmQ2Yzc5OGQ0M2Q2NmNk NTBjM2YwHhcNMjYwMTAxMDQxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODlmOWYyYzJiZTkwMzY2ZmI2ZjhjNWJjZGNkOTFlYWU5MTQ3MDMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvllqkTd1+Ls8r7t3hXVJAAa5Nyb4 J18MXX3l1u163i7IQgKbvkyPdosSPTWHxwDB6fUJXU9x95tntHuIvCQO5OEqwkjt N0k4rVjtl317/tSmcYcqFidhLGvbEWRO74AbRYOtzKKQ7AGTpsVx5+n4nqSYqbTi oJsSyGJVOdAglHKnQcRjchwD48GcSVJjZpLB2aFA0smInia6SUkSB0nWOB72SCFa Hee4Fz1Zo/dk82XDcjbwIKF6XNmLmJctL4ioVh8Jrvb6m20wQyCBly717C9wuBi9 Gy4p2mBwj69dL3m3AsLT3B34nnwFZ5s+hupQWZkUQP0wyUMqPG3rGVpTGQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFFifnywr6QNm+2+MW83NkerpFHAwMB8GA1UdIwQY MBaAFHuUR/6aSsx9b/ctbHmNQ9Zs1Qw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUt OWZjZWI0NWQ2ZmRiLzEvV0otZkxDdnBBMmI3YjR4YnpjMlI2dWtVY0RBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUtOWZjZWI0NWQ2ZmRi LzEvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUDKgwSQAMF AyoSN0AwDQYJKoZIhvcNAQELBQADggEBACY9Xf3Q3YQc8oUpdeKC9bCjv9rW0V20 4lOdVSzaXQPrLDwOqHQ0qa6fGLLyVzbcPlnKRLYnGbuPmby+nETBf/On+D1Satxe U1oGsYUSAcWkCMXlOgzzKu5xNg7vkJ+ZhV2lt16CFyEQNQrjGh1qglHwrzw8SCpp CrxOxxnL7lj0/6ewH5+dmFkPtyK2EG0xP48DahbIfw1fyj1XP1Usj4W/MEI0ZsOX CbSlDXsftvKIEujsK0OjYaOnzODYmzonATO4wGwNxpsr9+21SL3MOsmRfWh2Yocz QmKUnsyTD2pTUB/1j90tK7KfyQ5mJpibefz0VWu6yOQyJRRhOZGU1wg= -----END CERTIFICATE-----Generated at Sun Jan 25 17:41:38 2026 by rpki-client