This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/WaZa3O1op2Py8EHD9_ozXMS93qM.roa File: WaZa3O1op2Py8EHD9_ozXMS93qM.roa (raw, json) Hash identifier: 8FtaOWgJoh3KpqD4c4HC6dKZYcGZBruTB4MZGeeqiVQ= Subject key identifier: 59:A6:5A:DC:ED:68:A7:63:F2:F0:41:C3:F7:FA:33:5C:C4:BD:DE:A3 Certificate issuer: /CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5 Certificate serial: 019B78A2130DCE27EF9E9378D1F30865A432 Authority key identifier: 36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/WaZa3O1op2Py8EHD9_ozXMS93qM.roa Signing time: Thu 01 Jan 2026 08:17:26 +0000 ROA not before: Thu 01 Jan 2026 08:17:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397651 IP address blocks: 2a09:dc00::/29 maxlen: 29 2a0a:1f40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:13:0d:ce:27:ef:9e:93:78:d1:f3:08:65:a4:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5 Validity Not Before: Jan 1 08:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=59a65adced68a763f2f041c3f7fa335cc4bddea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:05:ce:13:22:bf:d5:ae:85:93:0f:67:04:05: f7:e9:08:fa:f3:90:f7:b4:c8:a3:fa:1b:0c:ae:03: 21:35:91:27:ab:c5:63:f2:98:41:ed:29:66:bb:f5: f5:bc:da:b9:af:c9:d9:58:f4:59:41:6d:2a:9d:d7: fa:77:16:36:05:0b:96:d1:e9:b8:cf:ce:d4:a3:21: ed:bf:10:7f:46:af:92:67:af:35:8a:c2:ce:52:a0: 47:04:f0:02:a5:9b:93:0e:90:aa:5e:33:55:a8:fd: bc:48:b4:74:d0:cb:ee:c6:cc:3c:1a:fe:ac:d3:b5: 07:ef:61:24:69:a9:5b:20:29:56:cd:a3:0e:17:49: e8:e3:b1:66:e4:2b:0e:4a:78:2d:f7:8d:11:7f:27: 28:94:e1:77:6f:8c:c0:af:33:14:ec:b7:b7:8e:78: 27:9e:85:5a:58:7c:56:18:b5:fd:68:36:76:56:d7: e8:09:15:fa:98:76:6b:d4:10:06:fc:cc:76:72:c7: a7:96:c5:17:36:55:2b:9f:0c:dc:96:03:2c:65:0b: 00:66:6a:3d:f6:db:e0:8e:ca:7c:b3:e6:2f:c6:67: f7:59:f1:f1:35:9f:ee:41:c4:61:cb:40:15:61:eb: f2:9e:5c:3e:bf:b4:8e:e0:fd:9d:68:0d:57:0c:3e: bf:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:A6:5A:DC:ED:68:A7:63:F2:F0:41:C3:F7:FA:33:5C:C4:BD:DE:A3 X509v3 Authority Key Identifier: keyid:36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/WaZa3O1op2Py8EHD9_ozXMS93qM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:dc00::/29 2a0a:1f40::/29 Signature Algorithm: sha256WithRSAEncryption 49:ee:72:03:50:75:e1:a9:9d:a9:5b:06:f6:a0:16:ac:92:e7: 9b:27:5f:33:01:b2:bb:d4:33:d6:96:41:0b:07:1c:53:9b:42: 1c:de:91:84:14:3a:e0:3e:57:18:f9:22:c8:c0:88:07:cb:8c: d8:64:5d:25:96:da:4b:c5:ce:9c:b8:5c:f4:c8:2e:cd:d1:a6: fb:75:88:81:69:c2:6e:02:e2:f9:5c:3c:41:b0:ab:33:87:42: 5a:8c:8c:91:b9:c9:d1:0e:90:32:3b:de:cc:43:02:3c:df:9d: 1b:d9:ba:05:1c:e9:79:e5:fe:99:83:ee:5a:85:31:36:b0:8a: fa:97:1e:8a:e9:9d:f4:13:63:37:df:c6:31:18:52:96:dc:68: 16:d5:47:bb:d7:1d:8e:66:5c:1e:27:68:c6:99:94:67:6d:45: 93:a9:6b:9b:f4:e4:2f:29:53:df:f4:4a:12:61:34:45:b2:76: 09:db:b0:6f:03:9d:c5:1c:cc:51:93:60:ce:fe:99:de:41:61: b9:8a:85:06:75:47:93:a3:8c:ff:ab:b9:0a:27:15:9d:d2:86: 0d:4d:08:71:44:8c:e0:ec:4e:96:87:f5:88:de:14:9e:b5:c8: c5:71:fc:2e:71:89:c5:da:84:14:ce:81:c7:74:90:fa:ec:4b: 6b:b6:d3:09 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt4ohMNzifvnpN40fMIZaQyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2MjJmYzJmOGFkOGIwMDgzNTdkYmU2ZjAxOTU5NjBjOWRl NjFiZDUwHhcNMjYwMTAxMDgxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OWE2NWFkY2VkNjhhNzYzZjJmMDQxYzNmN2ZhMzM1Y2M0YmRkZWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswXOEyK/1a6Fkw9nBAX36Qj685D3 tMij+hsMrgMhNZEnq8Vj8phB7Slmu/X1vNq5r8nZWPRZQW0qndf6dxY2BQuW0em4 z87UoyHtvxB/Rq+SZ681isLOUqBHBPACpZuTDpCqXjNVqP28SLR00Mvuxsw8Gv6s 07UH72EkaalbIClWzaMOF0no47Fm5CsOSngt940RfycolOF3b4zArzMU7Le3jngn noVaWHxWGLX9aDZ2VtfoCRX6mHZr1BAG/Mx2csenlsUXNlUrnwzclgMsZQsAZmo9 9tvgjsp8s+Yvxmf3WfHxNZ/uQcRhy0AVYevynlw+v7SO4P2daA1XDD6/VwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFFmmWtztaKdj8vBBw/f6M1zEvd6jMB8GA1UdIwQY MBaAFDYi/C+K2LAINX2+bwGVlgyd5hvVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmlMOEw0cllzQWcxZmI1dkFaV1dESjNtRzlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9mNjNlNTgtOWVmYy00MDgyLTgyYmIt MDg4MzVkZmY2YzRmLzEvV2FaYTNPMW9wMlB5OEVIRDlfb3pYTVM5M3FNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9mNjNlNTgtOWVmYy00MDgyLTgyYmItMDg4MzVkZmY2YzRm LzEvTmlMOEw0cllzQWcxZmI1dkFaV1dESjNtRzlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUDKgncAAMF AyoKH0AwDQYJKoZIhvcNAQELBQADggEBAEnucgNQdeGpnalbBvagFqyS55snXzMB srvUM9aWQQsHHFObQhzekYQUOuA+Vxj5IsjAiAfLjNhkXSWW2kvFzpy4XPTILs3R pvt1iIFpwm4C4vlcPEGwqzOHQlqMjJG5ydEOkDI73sxDAjzfnRvZugUc6Xnl/pmD 7lqFMTawivqXHorpnfQTYzffxjEYUpbcaBbVR7vXHY5mXB4naMaZlGdtRZOpa5v0 5C8pU9/0ShJhNEWydgnbsG8DncUczFGTYM7+md5BYbmKhQZ1R5OjjP+ruQonFZ3S hg1NCHFEjODsTpaH9YjeFJ61yMVx/C5xicXahBTOgcd0kPrsS2u20wk= -----END CERTIFICATE-----Generated at Sun Jan 25 12:18:26 2026 by rpki-client