This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/WoJCGFQyPD7fJgWRXTNxxrmi7IA.roa File: WoJCGFQyPD7fJgWRXTNxxrmi7IA.roa (raw, json) Hash identifier: rPmZbrV7SIsTdeGu/1qJQQ8AkYuLMStM58OYdp4CW6k= Subject key identifier: 5A:82:42:18:54:32:3C:3E:DF:26:05:91:5D:33:71:C6:B9:A2:EC:80 Certificate issuer: /CN=e0110606f524dbaa538e67e123cafbc6df3386c0 Certificate serial: 019B79109568098D0DC904431F08D204BF8A Authority key identifier: E0:11:06:06:F5:24:DB:AA:53:8E:67:E1:23:CA:FB:C6:DF:33:86:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BEGBvUk26pTjmfhI8r7xt8zhsA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/WoJCGFQyPD7fJgWRXTNxxrmi7IA.roa Signing time: Thu 01 Jan 2026 10:18:08 +0000 ROA not before: Thu 01 Jan 2026 10:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8881 IP address blocks: 2001:67c:ed8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft rsync://rpki.ripe.net/repository/DEFAULT/4BEGBvUk26pTjmfhI8r7xt8zhsA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:95:68:09:8d:0d:c9:04:43:1f:08:d2:04:bf:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0110606f524dbaa538e67e123cafbc6df3386c0 Validity Not Before: Jan 1 10:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a82421854323c3edf2605915d3371c6b9a2ec80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:04:91:63:87:de:b3:5a:1f:77:2b:51:fb:e0: 26:bc:80:be:00:84:4b:2e:65:09:ae:71:d3:f8:29: 9c:ff:b7:08:27:c8:d9:5b:aa:10:81:58:76:34:c5: b8:23:d9:ed:68:3a:c3:40:89:21:72:a4:f1:2c:02: b5:45:aa:6f:56:ad:5b:8a:46:5b:8d:b5:69:a8:cc: 9d:c6:81:1e:9a:1c:9b:c9:c5:d7:41:b5:82:92:fc: aa:e1:01:80:b6:4b:03:06:40:90:06:f5:85:8f:ed: 96:d2:78:ab:5a:78:7f:d0:21:a9:27:2d:b1:a7:eb: df:ee:6a:20:3c:6f:db:a3:73:c8:f4:45:d9:5d:dc: 41:f0:0e:ef:b6:33:fd:41:04:fa:fc:c3:b6:2b:d4: 13:5f:77:de:9e:17:b2:a1:bf:b7:c5:f7:81:d7:dc: 91:42:a1:25:8a:ef:3c:57:bd:e9:b0:2e:b0:28:d1: 52:d0:34:d5:e6:2e:f2:45:71:91:3b:81:74:c2:10: 94:ba:68:0c:48:39:2c:84:fd:7f:85:40:bb:56:ed: 53:cc:a6:53:79:ae:8a:f9:b4:fe:ab:8c:ed:b0:6b: 2f:df:18:22:e3:66:d5:13:5d:62:bc:2d:d2:c2:82: 6c:4f:3a:67:41:1e:ff:fc:5f:45:4f:f1:73:3d:88: 32:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:82:42:18:54:32:3C:3E:DF:26:05:91:5D:33:71:C6:B9:A2:EC:80 X509v3 Authority Key Identifier: keyid:E0:11:06:06:F5:24:DB:AA:53:8E:67:E1:23:CA:FB:C6:DF:33:86:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BEGBvUk26pTjmfhI8r7xt8zhsA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/WoJCGFQyPD7fJgWRXTNxxrmi7IA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:ed8::/48 Signature Algorithm: sha256WithRSAEncryption 75:89:7f:e4:83:b0:5e:64:36:37:7d:fd:5a:5a:78:cf:b5:14: 0c:61:cd:eb:55:8b:79:57:74:63:fd:34:c0:3f:c9:18:cd:ae: 52:74:40:35:c9:0a:3c:83:59:f7:2f:6e:85:1d:c5:67:87:6c: 7a:7d:70:e9:c4:cf:0f:9f:f2:e8:2c:7c:17:f3:23:ba:f9:d0: 00:49:6d:ed:57:05:0d:1e:b6:04:81:05:14:13:18:69:07:91: d6:4e:b3:de:1f:6f:e9:43:11:bb:a3:49:97:d4:12:f5:18:fa: 04:67:57:ce:ed:b5:38:e9:52:58:47:bf:ec:27:b3:eb:f0:71: f8:e2:c5:c6:20:9f:23:43:a6:62:fe:27:60:20:3f:0d:f7:9a: 2e:62:b7:0f:e6:e6:30:b2:4c:7e:4a:42:58:a4:fd:78:d0:6d: 75:1e:8d:38:c0:e8:8c:1b:c4:c8:16:a4:54:05:c4:5e:d3:05: 5c:46:94:d6:89:54:1b:20:62:2d:c7:9b:c4:81:5d:16:46:55: f8:69:ae:89:ec:a5:31:d5:f7:98:44:08:a4:0e:7c:a7:32:2a: cf:e4:60:f3:0c:92:4b:01:a8:99:e3:fd:5a:2f:85:8a:16:6d: 28:cc:b2:31:01:66:e3:de:34:c0:19:16:0e:7e:de:68:03:d3: 49:2e:b8:b4 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EJVoCY0NyQRDHwjSBL+KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwMTEwNjA2ZjUyNGRiYWE1MzhlNjdlMTIzY2FmYmM2ZGYz Mzg2YzAwHhcNMjYwMTAxMTAxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTgyNDIxODU0MzIzYzNlZGYyNjA1OTE1ZDMzNzFjNmI5YTJlYzgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwSRY4fes1ofdytR++AmvIC+AIRL LmUJrnHT+Cmc/7cIJ8jZW6oQgVh2NMW4I9ntaDrDQIkhcqTxLAK1RapvVq1bikZb jbVpqMydxoEemhybycXXQbWCkvyq4QGAtksDBkCQBvWFj+2W0nirWnh/0CGpJy2x p+vf7mogPG/bo3PI9EXZXdxB8A7vtjP9QQT6/MO2K9QTX3fenheyob+3xfeB19yR QqEliu88V73psC6wKNFS0DTV5i7yRXGRO4F0whCUumgMSDkshP1/hUC7Vu1TzKZT ea6K+bT+q4ztsGsv3xgi42bVE11ivC3SwoJsTzpnQR7//F9FT/FzPYgyAQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFqCQhhUMjw+3yYFkV0zcca5ouyAMB8GA1UdIwQY MBaAFOARBgb1JNuqU45n4SPK+8bfM4bAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEJFR0J2VWsyNnBUam1maEk4cjd4dDh6aHNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS83M2Y3NDktNDU2MC00YWJlLThkMGIt ZTJjMWFiYWZhYTZjLzEvV29KQ0dGUXlQRDdmSmdXUlhUTnh4cm1pN0lBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS83M2Y3NDktNDU2MC00YWJlLThkMGItZTJjMWFiYWZhYTZj LzEvNEJFR0J2VWsyNnBUam1maEk4cjd4dDh6aHNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA7Y MA0GCSqGSIb3DQEBCwUAA4IBAQB1iX/kg7BeZDY3ff1aWnjPtRQMYc3rVYt5V3Rj /TTAP8kYza5SdEA1yQo8g1n3L26FHcVnh2x6fXDpxM8Pn/LoLHwX8yO6+dAASW3t VwUNHrYEgQUUExhpB5HWTrPeH2/pQxG7o0mX1BL1GPoEZ1fO7bU46VJYR7/sJ7Pr 8HH44sXGIJ8jQ6Zi/idgID8N95ouYrcP5uYwskx+SkJYpP140G11Ho04wOiMG8TI FqRUBcRe0wVcRpTWiVQbIGItx5vEgV0WRlX4aa6J7KUx1feYRAikDnynMirP5GDz DJJLAaiZ4/1aL4WKFm0ozLIxAWbj3jTAGRYOft5oA9NJLri0 -----END CERTIFICATE-----Generated at Sun Jan 25 16:09:52 2026 by rpki-client