This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/wiLmfdGgzijMr6H7FRSYjpbRctE.roa File: wiLmfdGgzijMr6H7FRSYjpbRctE.roa (raw, json) Hash identifier: Z51vNTE/VSPJwzjerq5rKZBcW7aBhn2nt4GaxW27CY8= Subject key identifier: C2:22:E6:7D:D1:A0:CE:28:CC:AF:A1:FB:15:14:98:8E:96:D1:72:D1 Certificate issuer: /CN=edbe73ab2730f34e94f120e9bfc55af4405369f6 Certificate serial: 019B7FF15436B159E7C41B4C9EBD02485F79 Authority key identifier: ED:BE:73:AB:27:30:F3:4E:94:F1:20:E9:BF:C5:5A:F4:40:53:69:F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7b5zqycw806U8SDpv8Va9EBTafY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/wiLmfdGgzijMr6H7FRSYjpbRctE.roa Signing time: Fri 02 Jan 2026 18:21:20 +0000 ROA not before: Fri 02 Jan 2026 18:21:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42708 IP address blocks: 2001:67c:d34::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.crl rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.mft rsync://rpki.ripe.net/repository/DEFAULT/7b5zqycw806U8SDpv8Va9EBTafY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:54:36:b1:59:e7:c4:1b:4c:9e:bd:02:48:5f:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edbe73ab2730f34e94f120e9bfc55af4405369f6 Validity Not Before: Jan 2 18:21:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c222e67dd1a0ce28ccafa1fb1514988e96d172d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:51:4c:ba:cc:b7:08:ed:6c:8a:c9:8a:54:66: fc:32:4d:01:a0:11:26:21:64:24:03:ba:95:00:d2: 4e:ef:4f:58:aa:cd:d1:0b:32:d2:a0:43:52:a6:58: 5f:6a:25:d2:8b:3d:c1:85:ef:15:d9:89:6d:4b:85: a9:7d:66:6d:00:6a:d1:53:ec:ca:90:cf:4d:b5:23: b8:e0:ba:9f:6f:13:d4:45:c8:ee:63:d7:bf:b7:15: 85:63:6b:bf:d9:77:20:b1:2a:b0:93:c9:ee:10:fb: 12:db:85:c3:5a:09:74:89:e3:85:69:36:57:fb:b4: 1f:f3:73:d1:e0:f1:c9:a8:e2:06:c8:8a:03:e3:e8: ed:ad:01:32:94:40:19:ee:2f:ca:e6:30:b0:c7:4e: eb:ec:f0:66:6b:7d:e2:ec:4e:74:ac:3e:b9:27:a3: 44:30:95:70:3a:f9:0c:2d:b8:28:57:06:64:c5:46: f3:76:00:ef:22:80:d5:c7:0d:bc:d2:af:b9:c3:b5: 3c:e2:f8:85:2e:8b:e9:68:37:7f:41:be:44:e0:26: f6:21:35:97:7c:0f:52:5d:e8:d5:1b:de:75:34:04: ef:7e:7f:13:86:73:0d:0f:14:71:12:5e:ec:01:2c: 08:19:b5:f1:bc:00:21:2f:87:3f:d6:ff:02:27:7e: 14:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:22:E6:7D:D1:A0:CE:28:CC:AF:A1:FB:15:14:98:8E:96:D1:72:D1 X509v3 Authority Key Identifier: keyid:ED:BE:73:AB:27:30:F3:4E:94:F1:20:E9:BF:C5:5A:F4:40:53:69:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b5zqycw806U8SDpv8Va9EBTafY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/wiLmfdGgzijMr6H7FRSYjpbRctE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:d34::/48 Signature Algorithm: sha256WithRSAEncryption 99:7b:77:63:a1:8d:bf:e3:f8:b2:66:58:e8:aa:54:a0:2e:e5: a7:08:09:bf:76:c7:27:7e:b7:4f:9a:4b:88:fe:51:ba:7e:e0: 15:11:5c:b8:18:b4:6c:a0:93:29:9b:db:6f:c3:d8:80:24:87: 61:a8:1f:75:73:74:8a:94:fb:16:ff:ef:76:c8:b2:e7:32:3f: ca:4e:95:32:58:8b:36:59:93:ce:05:02:49:cb:c5:59:fd:28: bd:8d:67:7f:7a:e1:f0:03:53:c1:70:d2:15:19:47:c3:76:92: 58:d7:50:89:68:7c:28:ab:1e:70:59:a2:f4:85:04:96:13:90: 3e:f6:71:3f:19:6b:9f:3d:d0:1b:f0:b0:11:c3:2d:26:02:bd: 9f:73:f2:b3:85:f6:c8:8d:a8:79:c1:1c:73:91:46:f9:a5:4d: f7:5a:52:fa:f3:a5:65:98:81:90:60:88:39:28:85:28:a8:88: 67:1e:51:5c:4d:f5:41:53:aa:33:8a:cd:12:66:9f:4c:78:d8: ec:b1:c1:36:1d:fe:56:0b:34:0b:b3:14:89:51:ee:a5:12:fe: 0a:6d:10:c9:32:97:ed:9d:9c:ca:15:c2:21:a8:38:71:48:27: c9:99:79:c2:c0:38:03:81:2a:3b:0f:7e:0e:17:4f:8c:ed:bc: e7:d0:95:21 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/8VQ2sVnnxBtMnr0CSF95MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkYmU3M2FiMjczMGYzNGU5NGYxMjBlOWJmYzU1YWY0NDA1 MzY5ZjYwHhcNMjYwMTAyMTgyMTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjIyZTY3ZGQxYTBjZTI4Y2NhZmExZmIxNTE0OTg4ZTk2ZDE3MmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1FMusy3CO1sismKVGb8Mk0BoBEm IWQkA7qVANJO709Yqs3RCzLSoENSplhfaiXSiz3Bhe8V2YltS4WpfWZtAGrRU+zK kM9NtSO44LqfbxPURcjuY9e/txWFY2u/2XcgsSqwk8nuEPsS24XDWgl0ieOFaTZX +7Qf83PR4PHJqOIGyIoD4+jtrQEylEAZ7i/K5jCwx07r7PBma33i7E50rD65J6NE MJVwOvkMLbgoVwZkxUbzdgDvIoDVxw280q+5w7U84viFLovpaDd/Qb5E4Cb2ITWX fA9SXejVG951NATvfn8ThnMNDxRxEl7sASwIGbXxvAAhL4c/1v8CJ34UqQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMIi5n3RoM4ozK+h+xUUmI6W0XLRMB8GA1UdIwQY MBaAFO2+c6snMPNOlPEg6b/FWvRAU2n2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2I1enF5Y3c4MDZVOFNEcHY4VmE5RUJUYWZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8xMjdmYjMtN2Q4Ny00NjhiLTk0ZDIt MmY5MDU5YzRmM2E1LzEvd2lMbWZkR2d6aWpNcjZIN0ZSU1lqcGJSY3RFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC8xMjdmYjMtN2Q4Ny00NjhiLTk0ZDItMmY5MDU5YzRmM2E1 LzEvN2I1enF5Y3c4MDZVOFNEcHY4VmE5RUJUYWZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA00 MA0GCSqGSIb3DQEBCwUAA4IBAQCZe3djoY2/4/iyZljoqlSgLuWnCAm/dscnfrdP mkuI/lG6fuAVEVy4GLRsoJMpm9tvw9iAJIdhqB91c3SKlPsW/+92yLLnMj/KTpUy WIs2WZPOBQJJy8VZ/Si9jWd/euHwA1PBcNIVGUfDdpJY11CJaHwoqx5wWaL0hQSW E5A+9nE/GWufPdAb8LARwy0mAr2fc/KzhfbIjah5wRxzkUb5pU33WlL686VlmIGQ YIg5KIUoqIhnHlFcTfVBU6ozis0SZp9MeNjsscE2Hf5WCzQLsxSJUe6lEv4KbRDJ MpftnZzKFcIhqDhxSCfJmXnCwDgDgSo7D34OF0+M7bzn0JUh -----END CERTIFICATE-----Generated at Mon Jan 19 17:48:57 2026 by rpki-client