This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/WZUijTMQNkg4Mxbly5hdNos_rjs.roa File: WZUijTMQNkg4Mxbly5hdNos_rjs.roa (raw, json) Hash identifier: C7fl8WX0RaMtDKD0pM1CwXjYKWYLLGp2dN3xxHySHZ8= Subject key identifier: 59:95:22:8D:33:10:36:48:38:33:16:E5:CB:98:5D:36:8B:3F:AE:3B Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6C4DAC805215CFF141790FD6F4887 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/WZUijTMQNkg4Mxbly5hdNos_rjs.roa Signing time: Fri 02 Jan 2026 12:20:17 +0000 ROA not before: Fri 02 Jan 2026 12:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 32167 IP address blocks: 2a0c:9a40:9d00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:c4:da:c8:05:21:5c:ff:14:17:90:fd:6f:48:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5995228d33103648383316e5cb985d368b3fae3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e6:cf:01:01:51:99:7c:eb:41:4a:c4:a3:fa: 63:a8:74:03:4f:3e:c1:66:53:43:ae:89:ae:d9:88: e6:c8:45:0e:ab:c9:3e:8d:9d:53:f6:b8:08:e0:8a: 38:e5:13:74:c4:0c:28:c8:4f:8c:4d:23:3f:e2:dd: 71:90:8e:ff:22:67:36:88:93:18:97:88:59:d7:bd: 0e:13:2f:89:2f:39:69:5d:bf:03:7a:1d:cc:e7:5c: 0f:1f:d7:1f:0c:32:a7:f8:89:f6:68:31:12:b6:21: 18:af:e4:16:21:5a:6d:3c:72:47:05:58:90:a7:73: f3:7d:8e:02:66:08:f2:cf:f7:13:9e:ae:18:32:78: 08:5c:1b:07:89:81:d4:6c:3e:7b:cc:8b:13:22:60: f7:fc:a8:f5:83:23:17:3c:9d:70:8c:2e:ce:ef:41: fd:91:31:e1:ab:da:79:a1:6f:de:73:14:f4:a4:03: ab:b9:75:14:2a:3e:9f:c7:b1:0a:45:00:72:89:96: 63:e8:ea:56:1f:93:b5:3b:f7:c7:6f:41:a1:ef:a4: 22:61:85:81:66:34:e5:f2:69:28:7e:04:2c:b7:dd: cf:6d:78:7a:32:e5:c2:11:9a:06:b0:c9:45:e6:3a: 88:56:c8:b7:45:96:fc:1c:d9:af:63:eb:40:4a:dd: 6c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:95:22:8D:33:10:36:48:38:33:16:E5:CB:98:5D:36:8B:3F:AE:3B X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/WZUijTMQNkg4Mxbly5hdNos_rjs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:9d00::/40 Signature Algorithm: sha256WithRSAEncryption 42:74:03:d0:d9:31:e5:3a:d9:29:22:11:99:eb:00:09:cd:c5: b2:f1:a9:f3:bc:9a:1e:c0:00:28:28:e7:e8:30:a1:d9:2b:c1: 3b:66:60:68:89:2d:30:15:74:9a:ea:94:6c:26:f8:4f:59:9f: 6a:f6:44:49:53:0e:5a:28:29:78:ac:62:11:81:ec:a1:5e:df: c1:e8:9c:be:ec:31:10:15:c2:99:92:0d:de:87:d3:b3:7e:f1: fe:62:d9:65:b9:45:c0:86:a2:93:42:64:57:e5:b8:8a:32:37: e2:ba:8c:35:fd:b3:fd:97:da:b7:4f:ca:99:af:01:5a:c0:0b: 2d:07:5e:7b:d9:e8:b2:d8:f5:57:f7:ce:f8:84:e7:69:06:76: e8:0d:7d:55:1a:4a:9a:3c:f9:da:e1:42:ef:73:e7:c6:3e:79: 80:fb:a1:fa:14:82:57:35:c9:a2:dd:c9:c4:cf:4f:00:77:a1: e7:9b:80:03:65:d3:a7:c7:db:9d:e3:56:ab:ab:2d:d8:89:24: 88:51:60:45:d8:63:e8:2d:4d:a4:86:4f:f1:52:ab:f8:3b:01: b5:c8:33:92:2f:5e:ed:4e:15:74:10:7c:3b:b1:5c:db:a8:5f: 85:19:fb:3d:d3:41:08:ce:22:04:f3:54:8d:ab:87:69:dd:90: 4e:2e:17:a9 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+psTayAUhXP8UF5D9b0iHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTk1MjI4ZDMzMTAzNjQ4MzgzMzE2ZTVjYjk4NWQzNjhiM2ZhZTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+bPAQFRmXzrQUrEo/pjqHQDTz7B ZlNDromu2YjmyEUOq8k+jZ1T9rgI4Io45RN0xAwoyE+MTSM/4t1xkI7/Imc2iJMY l4hZ170OEy+JLzlpXb8Deh3M51wPH9cfDDKn+In2aDEStiEYr+QWIVptPHJHBViQ p3PzfY4CZgjyz/cTnq4YMngIXBsHiYHUbD57zIsTImD3/Kj1gyMXPJ1wjC7O70H9 kTHhq9p5oW/ecxT0pAOruXUUKj6fx7EKRQByiZZj6OpWH5O1O/fHb0Gh76QiYYWB ZjTl8mkofgQst93PbXh6MuXCEZoGsMlF5jqIVsi3RZb8HNmvY+tASt1sUQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFFmVIo0zEDZIODMW5cuYXTaLP647MB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvV1pVaWpUTVFOa2c0TXhibHk1aGROb3NfcmpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgyaQJ0w DQYJKoZIhvcNAQELBQADggEBAEJ0A9DZMeU62SkiEZnrAAnNxbLxqfO8mh7AACgo 5+gwodkrwTtmYGiJLTAVdJrqlGwm+E9Zn2r2RElTDlooKXisYhGB7KFe38HonL7s MRAVwpmSDd6H07N+8f5i2WW5RcCGopNCZFfluIoyN+K6jDX9s/2X2rdPypmvAVrA Cy0HXnvZ6LLY9Vf3zviE52kGdugNfVUaSpo8+drhQu9z58Y+eYD7ofoUglc1yaLd ycTPTwB3oeebgANl06fH253jVqurLdiJJIhRYEXYY+gtTaSGT/FSq/g7AbXIM5Iv Xu1OFXQQfDuxXNuoX4UZ+z3TQQjOIgTzVI2rh2ndkE4uF6k= -----END CERTIFICATE-----Generated at Tue Jan 20 09:05:53 2026 by rpki-client