This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/we525uMQgB9-kMJf0V900havd3M.roa File: we525uMQgB9-kMJf0V900havd3M.roa (raw, json) Hash identifier: ipSc3ryk3I8uJJNXcxpVFFRtBRT/Jabtx+W/0Q+/npg= Subject key identifier: C1:EE:76:E6:E3:10:80:1F:7E:90:C2:5F:D1:5F:74:D2:16:AF:77:73 Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a Certificate serial: 019B8DFABA3239BD73EC3F6148644A009916 Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/we525uMQgB9-kMJf0V900havd3M.roa Signing time: Mon 05 Jan 2026 11:46:17 +0000 ROA not before: Mon 05 Jan 2026 11:46:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212634 IP address blocks: 2a03:5840:13b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8d:fa:ba:32:39:bd:73:ec:3f:61:48:64:4a:00:99:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a Validity Not Before: Jan 5 11:46:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1ee76e6e310801f7e90c25fd15f74d216af7773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:56:97:11:1e:bd:db:d4:d5:96:e3:2a:28:cc: c4:54:25:ab:b6:6a:5a:00:79:5b:4e:64:48:ff:ea: b2:bc:da:c5:53:29:6f:6b:70:f1:56:af:d1:86:78: 2d:a0:10:7a:70:cb:0b:14:5a:48:40:41:ce:ee:6a: 45:23:31:dc:ec:1f:a0:80:eb:2c:22:af:b0:1b:a1: a9:2c:42:0f:ee:00:18:44:8a:7b:d3:08:3c:8e:d2: 76:9b:11:d3:f1:ed:98:da:e9:57:2c:e9:82:16:9e: 1e:6f:06:9c:79:82:b8:f7:ee:f2:a5:94:63:e5:10: 0a:22:c8:54:43:af:34:22:d1:c4:15:ad:ec:8b:02: 20:e6:ab:14:61:a2:00:0c:e7:b6:35:96:12:c3:c7: f4:bd:31:e6:27:78:a7:e8:a8:1c:22:e8:b6:7c:f7: 32:28:2c:2d:55:d0:61:bd:0a:e7:02:f2:10:35:2b: 14:ab:d9:40:cd:20:27:6c:dc:c6:82:b4:58:44:09: 8d:29:b1:72:c8:6f:9c:19:19:69:4d:f0:da:6e:e4: 45:34:6a:5c:6b:a6:5f:fc:ee:bb:0b:56:79:70:d1: ba:04:ad:6e:ff:4f:a2:53:fe:2a:aa:4c:03:3c:4e: da:a1:c6:44:60:7e:17:06:d9:1a:85:4a:72:a6:f3: 9e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:EE:76:E6:E3:10:80:1F:7E:90:C2:5F:D1:5F:74:D2:16:AF:77:73 X509v3 Authority Key Identifier: keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/we525uMQgB9-kMJf0V900havd3M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:5840:13b::/48 Signature Algorithm: sha256WithRSAEncryption 88:cb:4c:49:2d:2a:0e:08:8e:ce:0a:1c:32:82:d7:4f:aa:1f: 2f:ef:de:55:4e:3a:e0:b8:8f:b7:b0:79:54:e6:c1:f5:13:e1: 3d:5a:b3:d8:c1:18:da:2d:ea:50:74:8e:bb:e0:7b:eb:32:fb: 0e:46:d7:0d:d7:de:9b:e4:21:23:ef:73:87:a9:64:eb:0d:2c: 85:c5:04:9c:6d:76:70:11:f4:d9:20:d2:9c:1a:43:56:6b:6c: ad:38:39:ed:e5:f5:c8:af:1a:3c:f5:0a:04:e7:d8:8f:e9:f1: a6:6f:49:9e:f6:38:a5:bb:a3:dd:07:3b:20:a5:0d:27:c1:9f: 90:8f:33:7b:64:56:a1:c6:02:b6:56:1f:fe:76:9a:12:b7:27: 98:9f:e9:96:56:17:0d:4d:df:7f:97:d9:1a:99:39:9c:4d:94: 43:30:cd:17:52:77:35:d6:c6:f1:6d:e1:6a:dc:dd:7d:70:54: 23:a6:9d:58:43:c8:e0:29:20:d3:5d:db:3b:00:06:12:63:3a: b4:d6:88:27:4b:d6:7c:00:5f:4e:22:22:e0:9e:2d:7e:58:14: 08:5a:ea:fd:82:f8:5e:94:f0:16:31:33:37:22:cb:85:4d:a5: c2:70:56:fc:15:c1:4d:4e:84:92:a8:5f:c3:9f:34:42:47:9e: 97:67:6b:14 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZuN+royOb1z7D9hSGRKAJkWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3NzcwNWU4OWJiNjViNDcyZTRlMDE4NGQ2ZmU5YmZiOGM1 ODYzNWEwHhcNMjYwMTA1MTE0NjE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMWVlNzZlNmUzMTA4MDFmN2U5MGMyNWZkMTVmNzRkMjE2YWY3NzczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVaXER6929TVluMqKMzEVCWrtmpa AHlbTmRI/+qyvNrFUylva3DxVq/RhngtoBB6cMsLFFpIQEHO7mpFIzHc7B+ggOss Iq+wG6GpLEIP7gAYRIp70wg8jtJ2mxHT8e2Y2ulXLOmCFp4ebwaceYK49+7ypZRj 5RAKIshUQ680ItHEFa3siwIg5qsUYaIADOe2NZYSw8f0vTHmJ3in6KgcIui2fPcy KCwtVdBhvQrnAvIQNSsUq9lAzSAnbNzGgrRYRAmNKbFyyG+cGRlpTfDabuRFNGpc a6Zf/O67C1Z5cNG6BK1u/0+iU/4qqkwDPE7aocZEYH4XBtkahUpypvOesQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMHudubjEIAffpDCX9FfdNIWr3dzMB8GA1UdIwQY MBaAFPd3BeibtltHLk4BhNb+m/uMWGNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYt NmNiODk3OTFkN2ZkLzEvd2U1MjV1TVFnQjkta01KZjBWOTAwaGF2ZDNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYtNmNiODk3OTFkN2Zk LzEvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgNYQAE7 MA0GCSqGSIb3DQEBCwUAA4IBAQCIy0xJLSoOCI7OChwygtdPqh8v795VTjrguI+3 sHlU5sH1E+E9WrPYwRjaLepQdI674HvrMvsORtcN196b5CEj73OHqWTrDSyFxQSc bXZwEfTZINKcGkNWa2ytODnt5fXIrxo89QoE59iP6fGmb0me9jilu6PdBzsgpQ0n wZ+QjzN7ZFahxgK2Vh/+dpoStyeYn+mWVhcNTd9/l9kamTmcTZRDMM0XUnc11sbx beFq3N19cFQjpp1YQ8jgKSDTXds7AAYSYzq01ognS9Z8AF9OIiLgni1+WBQIWur9 gvhelPAWMTM3IsuFTaXCcFb8FcFNToSSqF/DnzRCR56XZ2sU -----END CERTIFICATE-----Generated at Fri Jan 23 15:23:14 2026 by rpki-client