This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/WQdZNfyoXAF_mZl28cfENCrtIMs.roa File: WQdZNfyoXAF_mZl28cfENCrtIMs.roa (raw, json) Hash identifier: U3LDO+4WO64Jt5h3Mz2CbjqUHfSHcu4yyw0WNvXOY9o= Subject key identifier: 59:07:59:35:FC:A8:5C:01:7F:99:99:76:F1:C7:C4:34:2A:ED:20:CB Certificate issuer: /CN=459b2fd0053bdd7e7775398db163bee8772478a5 Certificate serial: 019B78353DDD180E3A646AEFADC542B9FC0E Authority key identifier: 45:9B:2F:D0:05:3B:DD:7E:77:75:39:8D:B1:63:BE:E8:77:24:78:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/WQdZNfyoXAF_mZl28cfENCrtIMs.roa Signing time: Thu 01 Jan 2026 06:18:33 +0000 ROA not before: Thu 01 Jan 2026 06:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 174 IP address blocks: 209.127.202.0/24 maxlen: 24 2a01:4ce0:50::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.crl rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:3d:dd:18:0e:3a:64:6a:ef:ad:c5:42:b9:fc:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=459b2fd0053bdd7e7775398db163bee8772478a5 Validity Not Before: Jan 1 06:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=59075935fca85c017f999976f1c7c4342aed20cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c1:12:60:54:76:c5:e7:82:b7:16:8c:99:21: ce:39:38:83:c7:c4:a6:40:df:81:ff:85:66:4f:4f: cd:a4:31:7f:1f:00:33:dc:cc:25:2e:db:fe:6e:d3: d9:f7:c1:68:98:1c:00:42:c3:f8:1f:35:37:62:b6: f8:85:d7:4c:8d:50:7b:91:f3:12:a3:67:f2:e5:f6: 3e:62:08:f3:c4:11:e1:b2:d3:89:e5:fe:9c:c0:5c: 74:5c:bd:be:55:64:2f:df:cb:61:7f:63:ea:9a:ee: 89:c1:ce:bc:6d:37:8b:a2:5b:c6:ad:1d:ac:75:b2: 9b:05:0e:73:2b:e7:25:58:76:a1:33:d6:94:f0:fe: 43:48:9b:32:95:a6:0d:f9:bc:7d:21:e6:c6:d7:46: ac:00:94:7d:22:ff:a4:b1:18:dd:1a:31:28:68:66: b4:d6:7a:2a:9b:5b:49:8e:d3:aa:e8:ae:7b:d9:09: e4:a9:f5:1d:29:03:8a:10:4e:30:6a:d9:f2:71:14: 3a:8f:50:19:ea:6b:8e:b1:83:ce:3d:49:1b:c5:ff: 1b:51:c6:1d:82:7a:df:8c:7b:41:7b:f0:3f:b8:5a: df:35:c5:32:74:76:44:48:c6:d4:97:93:36:eb:58: 6f:c9:0c:13:30:77:15:24:20:bc:ef:da:7d:c6:96: 41:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:07:59:35:FC:A8:5C:01:7F:99:99:76:F1:C7:C4:34:2A:ED:20:CB X509v3 Authority Key Identifier: keyid:45:9B:2F:D0:05:3B:DD:7E:77:75:39:8D:B1:63:BE:E8:77:24:78:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/WQdZNfyoXAF_mZl28cfENCrtIMs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.127.202.0/24 IPv6: 2a01:4ce0:50::/48 Signature Algorithm: sha256WithRSAEncryption 18:a8:ea:93:61:cc:6a:e9:d1:17:d4:6c:7e:75:99:8a:af:70: 82:1d:58:3f:36:0c:8a:cc:a6:ad:93:68:af:69:16:db:75:94: b1:50:47:64:4c:bf:b9:de:11:39:1e:a8:70:d3:aa:78:83:31: 17:7e:f8:b0:16:2b:e5:14:e6:f3:44:6c:d0:7b:79:d4:f6:89: 04:6f:3b:06:04:a3:70:4e:5a:7c:89:ed:0a:d8:f3:1c:c7:b9: 72:03:01:41:88:c3:ca:76:ae:a8:1a:ac:d1:07:a8:6b:5a:68: 33:33:31:a2:e0:5e:52:30:95:5d:de:46:a1:c0:61:aa:e7:d4: 56:4e:bc:04:3f:9c:53:fb:a4:92:30:1d:d0:33:b6:cc:f9:a7: 05:3a:bb:b8:75:f5:f2:a9:ea:8c:43:49:71:39:19:05:a0:4b: af:0c:00:72:4c:e3:12:ef:4a:ff:30:12:e0:01:c2:6b:b2:7a: ba:c3:33:78:2f:0a:29:07:d7:0f:19:c2:56:76:05:b8:c4:d5: 92:6a:c0:72:02:73:9f:93:d4:68:f9:7a:5e:e3:14:7a:f5:13: 25:de:d7:1b:3c:b9:4e:b3:af:6d:d4:04:9e:ce:56:92:81:83: 99:5a:7c:ae:f8:41:67:70:7b:16:2f:bf:2a:7c:e9:98:87:ca: 23:9b:13:20 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt4NT3dGA46ZGrvrcVCufwOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OWIyZmQwMDUzYmRkN2U3Nzc1Mzk4ZGIxNjNiZWU4Nzcy NDc4YTUwHhcNMjYwMTAxMDYxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTA3NTkzNWZjYTg1YzAxN2Y5OTk5NzZmMWM3YzQzNDJhZWQyMGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18ESYFR2xeeCtxaMmSHOOTiDx8Sm QN+B/4VmT0/NpDF/HwAz3MwlLtv+btPZ98FomBwAQsP4HzU3Yrb4hddMjVB7kfMS o2fy5fY+YgjzxBHhstOJ5f6cwFx0XL2+VWQv38thf2Pqmu6Jwc68bTeLolvGrR2s dbKbBQ5zK+clWHahM9aU8P5DSJsylaYN+bx9IebG10asAJR9Iv+ksRjdGjEoaGa0 1noqm1tJjtOq6K572QnkqfUdKQOKEE4watnycRQ6j1AZ6muOsYPOPUkbxf8bUcYd gnrfjHtBe/A/uFrfNcUydHZESMbUl5M261hvyQwTMHcVJCC879p9xpZBiQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFFkHWTX8qFwBf5mZdvHHxDQq7SDLMB8GA1UdIwQY MBaAFEWbL9AFO91+d3U5jbFjvuh3JHilMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlpzdjBBVTczWDUzZFRtTnNXTy02SGNrZUtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8yZGRkNTgtNjAzNy00OTRiLTk5MmYt YWI4ZTk3ZDg1NWNjLzEvV1FkWk5meW9YQUZfbVpsMjhjZkVOQ3J0SU1zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy8yZGRkNTgtNjAzNy00OTRiLTk5MmYtYWI4ZTk3ZDg1NWNj LzEvUlpzdjBBVTczWDUzZFRtTnNXTy02SGNrZUtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQA0X/KMA8E AgACMAkDBwAqAUzgAFAwDQYJKoZIhvcNAQELBQADggEBABio6pNhzGrp0RfUbH51 mYqvcIIdWD82DIrMpq2TaK9pFtt1lLFQR2RMv7neETkeqHDTqniDMRd++LAWK+UU 5vNEbNB7edT2iQRvOwYEo3BOWnyJ7QrY8xzHuXIDAUGIw8p2rqgarNEHqGtaaDMz MaLgXlIwlV3eRqHAYarn1FZOvAQ/nFP7pJIwHdAztsz5pwU6u7h19fKp6oxDSXE5 GQWgS68MAHJM4xLvSv8wEuABwmuyerrDM3gvCikH1w8ZwlZ2BbjE1ZJqwHICc5+T 1Gj5el7jFHr1EyXe1xs8uU6zr23UBJ7OVpKBg5lafK74QWdwexYvvyp86ZiHyiOb EyA= -----END CERTIFICATE-----Generated at Mon Jan 12 00:54:08 2026 by rpki-client