This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Whn7riGMypqy-dtu4gg87rcT4us.roa File: Whn7riGMypqy-dtu4gg87rcT4us.roa (raw, json) Hash identifier: IsobVhpXRyJ2cuOi5Pspor5dP9nCNDEafkc9UeUGULw= Subject key identifier: 5A:19:FB:AE:21:8C:CA:9A:B2:F9:DB:6E:E2:08:3C:EE:B7:13:E2:EB Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6EFA91C0F5A40571AE94C83A3FE48 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Whn7riGMypqy-dtu4gg87rcT4us.roa Signing time: Fri 02 Jan 2026 12:20:28 +0000 ROA not before: Fri 02 Jan 2026 12:20:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207615 IP address blocks: 2a0c:9a40:8fc0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:ef:a9:1c:0f:5a:40:57:1a:e9:4c:83:a3:fe:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a19fbae218cca9ab2f9db6ee2083ceeb713e2eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:86:fb:7e:44:e2:99:98:e4:11:0f:31:85:a2: 9a:e3:75:07:70:6b:9c:48:aa:05:94:13:f6:a3:41: fc:60:9e:ca:ef:03:b5:78:77:ab:50:c4:38:05:5d: a9:7a:29:cf:8a:0a:20:43:57:23:24:27:ab:ee:77: a5:a2:a7:1a:de:70:e6:e4:7a:ef:27:a0:0a:99:0b: d4:c0:8c:b9:ba:bb:f8:b1:3c:fc:eb:2d:d5:2e:03: 14:32:d2:8f:e0:10:47:84:9b:49:2f:f1:5c:48:41: 78:c2:79:f4:09:a8:a8:36:71:26:1e:1f:34:4c:c1: d2:7a:d5:44:9c:3d:b8:44:0b:06:a5:15:bb:7e:f8: bd:bd:4f:15:cc:15:0f:49:76:1d:1f:9e:71:df:db: 88:81:db:3d:a2:f5:34:fd:c8:e1:50:9d:4d:a0:f4: f1:58:d1:8c:48:92:a8:10:ea:e5:be:a7:67:fd:95: b5:0f:e7:92:9b:69:bd:37:3e:d4:37:dd:28:d3:00: 6d:39:2f:c7:69:c7:d4:d1:53:78:88:b5:c4:5d:41: 50:56:15:b5:0a:23:9f:b7:ac:ee:33:94:87:f2:75: ed:25:81:bb:87:d3:39:4f:b0:5b:62:12:c7:40:d0: 18:e7:45:2a:0e:68:83:53:2e:cf:0d:90:7d:7a:58: bf:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:19:FB:AE:21:8C:CA:9A:B2:F9:DB:6E:E2:08:3C:EE:B7:13:E2:EB X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Whn7riGMypqy-dtu4gg87rcT4us.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8fc0::/44 Signature Algorithm: sha256WithRSAEncryption 6a:b3:52:e8:b8:42:e8:c6:c4:3e:70:91:40:fb:63:15:e6:06: e8:0d:ac:d7:eb:63:42:a0:ed:de:cf:f5:51:cf:ec:c3:8a:ae: f4:50:6e:a1:bd:88:bd:7a:f1:56:2d:94:7d:a9:d2:dc:95:0c: bc:26:5f:6a:4b:d9:8e:71:72:67:01:87:0d:e1:4d:b4:fc:b6: c8:b6:ba:f5:a4:7f:2b:95:12:06:2d:bf:16:2c:34:ec:f7:d5: 83:33:3c:08:61:ad:fd:78:30:36:89:ec:e2:91:51:09:a1:98: 73:0d:99:51:53:88:0b:89:bc:5a:1e:f9:00:40:0c:0b:f6:b6: de:9e:9e:fd:e1:1c:9d:a6:cd:c4:a3:b5:78:a6:47:52:fb:e9: a5:fb:bf:d7:0c:26:de:6b:30:d1:2a:10:9f:68:9c:aa:2c:dd: f5:b1:86:e2:09:7e:55:92:02:e2:d6:aa:c7:dc:68:31:16:13: 65:e8:41:8f:02:dd:f0:91:1c:29:5d:c4:75:0d:08:c8:fd:94: 76:c6:a1:7e:ad:8d:66:c8:ad:15:e4:4e:af:7d:87:27:da:aa: 59:af:d5:cf:8a:a0:14:00:6c:64:f7:94:a5:d4:be:3a:9c:f0: 68:7f:41:0a:33:86:5e:1d:1e:51:6c:a5:b2:85:00:ba:2a:83: 6d:bc:19:1b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pu+pHA9aQFca6UyDo/5IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTE5ZmJhZTIxOGNjYTlhYjJmOWRiNmVlMjA4M2NlZWI3MTNlMmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIb7fkTimZjkEQ8xhaKa43UHcGuc SKoFlBP2o0H8YJ7K7wO1eHerUMQ4BV2peinPigogQ1cjJCer7neloqca3nDm5Hrv J6AKmQvUwIy5urv4sTz86y3VLgMUMtKP4BBHhJtJL/FcSEF4wnn0CaioNnEmHh80 TMHSetVEnD24RAsGpRW7fvi9vU8VzBUPSXYdH55x39uIgds9ovU0/cjhUJ1NoPTx WNGMSJKoEOrlvqdn/ZW1D+eSm2m9Nz7UN90o0wBtOS/HacfU0VN4iLXEXUFQVhW1 CiOft6zuM5SH8nXtJYG7h9M5T7BbYhLHQNAY50UqDmiDUy7PDZB9eli/OwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFoZ+64hjMqasvnbbuIIPO63E+LrMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvV2huN3JpR015cHF5LWR0dTRnZzg3cmNUNHVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgyaQI/A MA0GCSqGSIb3DQEBCwUAA4IBAQBqs1LouELoxsQ+cJFA+2MV5gboDazX62NCoO3e z/VRz+zDiq70UG6hvYi9evFWLZR9qdLclQy8Jl9qS9mOcXJnAYcN4U20/LbItrr1 pH8rlRIGLb8WLDTs99WDMzwIYa39eDA2iezikVEJoZhzDZlRU4gLibxaHvkAQAwL 9rbenp794Rydps3Eo7V4pkdS++ml+7/XDCbeazDRKhCfaJyqLN31sYbiCX5VkgLi 1qrH3GgxFhNl6EGPAt3wkRwpXcR1DQjI/ZR2xqF+rY1myK0V5E6vfYcn2qpZr9XP iqAUAGxk95Sl1L46nPBof0EKM4ZeHR5RbKWyhQC6KoNtvBkb -----END CERTIFICATE-----Generated at Tue Jan 20 09:05:52 2026 by rpki-client