This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/wxz1w9N01mmxSvGgIsWae99YxTQ.roa File: wxz1w9N01mmxSvGgIsWae99YxTQ.roa (raw, json) Hash identifier: iFbDtKOlX43kBVqb72QWq4q0dWkZ5/Y7Xkqt/URNSM0= Subject key identifier: C3:1C:F5:C3:D3:74:D6:69:B1:4A:F1:A0:22:C5:9A:7B:DF:58:C5:34 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA70AB7D54654A7F0821782705A3AE9 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/wxz1w9N01mmxSvGgIsWae99YxTQ.roa Signing time: Fri 02 Jan 2026 12:20:34 +0000 ROA not before: Fri 02 Jan 2026 12:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214147 IP address blocks: 2a0c:9a40:8c10::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:0a:b7:d5:46:54:a7:f0:82:17:82:70:5a:3a:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c31cf5c3d374d669b14af1a022c59a7bdf58c534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:16:8f:0e:11:15:41:9a:1a:b5:e9:c5:f2:35: 6b:26:1b:1b:1e:ed:df:c3:28:23:84:ee:2c:1c:55: f8:ff:93:48:11:04:34:2f:c5:a3:ad:73:a8:c7:c4: 01:be:9e:c9:6d:30:3e:94:0c:9a:78:ad:e6:fe:af: b1:b1:1b:36:81:49:d8:ac:a5:ac:a9:6f:6c:3c:10: a7:7d:b6:9e:9c:9c:fa:b6:8e:f8:b6:41:61:41:da: eb:7d:42:ae:fc:16:6a:70:cc:bf:3f:2d:08:4a:fe: 57:de:0d:24:13:65:f6:74:e1:00:ac:82:74:39:81: 00:8e:2c:af:73:b7:71:14:be:62:b0:4c:4f:3a:2e: 4d:66:27:be:49:39:b9:03:ca:37:89:6c:26:c7:67: 75:58:6a:de:6b:10:03:f9:ca:1e:74:b0:bf:0f:a4: ae:bf:27:b0:86:5f:5b:47:9c:f2:b8:b6:22:05:ed: 1c:65:07:35:c3:6b:be:81:f5:72:9f:47:b5:fc:7f: 4a:22:63:b1:c8:ea:62:fe:37:61:42:26:3f:36:4e: fe:b2:cd:91:cf:3c:62:cc:53:22:94:1e:0a:12:13: f3:67:9c:42:cc:88:8d:0e:38:c2:f0:07:24:e5:3d: 6c:4c:f3:20:12:01:00:fc:97:03:a4:23:2d:d4:78: cc:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:1C:F5:C3:D3:74:D6:69:B1:4A:F1:A0:22:C5:9A:7B:DF:58:C5:34 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/wxz1w9N01mmxSvGgIsWae99YxTQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8c10::/44 Signature Algorithm: sha256WithRSAEncryption 3d:51:45:f1:85:d1:8b:77:18:20:cd:b8:f8:c8:90:37:9b:04: cc:0c:17:db:43:3a:25:ac:7b:e3:38:0a:a4:6d:63:7c:7b:47: 64:76:01:1d:85:bb:bc:58:14:e4:57:92:d1:10:23:94:fe:75: 09:71:de:4c:db:25:cb:0a:ab:47:a9:f7:90:45:ff:a6:09:7e: bd:5d:55:16:ff:f7:e0:0d:c5:bb:f1:21:93:f0:98:ec:ac:71: 0d:eb:0e:c7:b2:a2:e2:a7:57:f2:2a:a7:a0:4b:6e:73:20:fd: e9:a9:a8:fb:26:46:ea:b7:e7:ac:59:78:f2:0e:7b:7b:da:4c: ae:94:1a:2c:d5:5a:d3:67:c5:62:54:45:bb:06:4b:d3:3b:9a: 3b:4d:cc:be:71:e2:b3:af:6f:c7:76:b7:27:15:bd:c0:93:3a: 63:a8:f5:3c:4b:84:05:05:c0:7a:f1:80:b3:03:41:d4:f0:91: f1:3b:b1:0d:63:02:60:ca:87:b7:c9:15:47:4c:f5:03:92:ec: 24:6b:22:a2:bc:8a:59:de:f0:92:0b:47:6e:33:3c:17:35:82: ff:a0:ca:9c:ea:67:33:88:04:bd:f6:d6:aa:90:77:bd:4e:eb: 2b:42:8c:91:6e:0f:d1:a6:94:d8:f5:52:57:7d:df:7b:7b:36: 0a:26:e1:45 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pwq31UZUp/CCF4JwWjrpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzFjZjVjM2QzNzRkNjY5YjE0YWYxYTAyMmM1OWE3YmRmNThjNTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBaPDhEVQZoatenF8jVrJhsbHu3f wygjhO4sHFX4/5NIEQQ0L8WjrXOox8QBvp7JbTA+lAyaeK3m/q+xsRs2gUnYrKWs qW9sPBCnfbaenJz6to74tkFhQdrrfUKu/BZqcMy/Py0ISv5X3g0kE2X2dOEArIJ0 OYEAjiyvc7dxFL5isExPOi5NZie+STm5A8o3iWwmx2d1WGreaxAD+coedLC/D6Su vyewhl9bR5zyuLYiBe0cZQc1w2u+gfVyn0e1/H9KImOxyOpi/jdhQiY/Nk7+ss2R zzxizFMilB4KEhPzZ5xCzIiNDjjC8Ack5T1sTPMgEgEA/JcDpCMt1HjMQwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMMc9cPTdNZpsUrxoCLFmnvfWMU0MB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvd3h6MXc5TjAxbW14U3ZHZ0lzV2FlOTlZeFRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgyaQIwQ MA0GCSqGSIb3DQEBCwUAA4IBAQA9UUXxhdGLdxggzbj4yJA3mwTMDBfbQzolrHvj OAqkbWN8e0dkdgEdhbu8WBTkV5LRECOU/nUJcd5M2yXLCqtHqfeQRf+mCX69XVUW //fgDcW78SGT8JjsrHEN6w7HsqLip1fyKqegS25zIP3pqaj7Jkbqt+esWXjyDnt7 2kyulBos1VrTZ8ViVEW7BkvTO5o7Tcy+ceKzr2/HdrcnFb3AkzpjqPU8S4QFBcB6 8YCzA0HU8JHxO7ENYwJgyoe3yRVHTPUDkuwkayKivIpZ3vCSC0duMzwXNYL/oMqc 6mcziAS99taqkHe9TusrQoyRbg/RppTY9VJXfd97ezYKJuFF -----END CERTIFICATE-----Generated at Tue Jan 20 09:05:51 2026 by rpki-client