This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/wb6tluOUZUayN9G05LwXOnEHcWs.roa File: wb6tluOUZUayN9G05LwXOnEHcWs.roa (raw, json) Hash identifier: jn6hTpf5caV20SdBM51r7krZlI86ZWqMVK8AHsPyORw= Subject key identifier: C1:BE:AD:96:E3:94:65:46:B2:37:D1:B4:E4:BC:17:3A:71:07:71:6B Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d Certificate serial: 019B7F84413388D17601AB5CAED058B9B788 Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/wb6tluOUZUayN9G05LwXOnEHcWs.roa Signing time: Fri 02 Jan 2026 16:22:12 +0000 ROA not before: Fri 02 Jan 2026 16:22:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1273 IP address blocks: 2a0c:9e00::/32 maxlen: 32 2a0c:9e01::/32 maxlen: 32 2a0c:9e04::/32 maxlen: 32 2a0c:fe03::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:24:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:41:33:88:d1:76:01:ab:5c:ae:d0:58:b9:b7:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d Validity Not Before: Jan 2 16:22:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1bead96e3946546b237d1b4e4bc173a7107716b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2b:be:51:ca:98:6a:62:98:39:e9:9d:c7:85: 79:fc:86:bc:b5:cd:aa:f3:2e:a3:26:53:27:74:73: 46:e2:7c:2f:fa:f8:d9:7b:f2:ee:86:3a:64:95:a3: 32:8b:f4:bd:63:d9:cf:54:ab:8a:2f:1e:64:36:8e: 8e:18:1e:7d:ff:7e:54:d9:73:91:e3:27:d9:a2:aa: 65:6b:ed:d8:cb:cc:ce:93:cc:8c:bd:45:b8:19:b9: 21:f3:89:dd:f3:72:f6:c8:fb:be:ea:9f:88:9f:7a: 80:1b:e3:81:d4:24:f1:7a:c6:9d:79:0b:35:c1:d9: 85:7c:16:8b:6d:b0:c1:4e:ef:09:98:9e:06:f2:c6: 62:82:cc:cf:b3:27:6f:68:77:b3:31:e7:6a:0b:93: cf:56:2b:2d:23:de:6b:64:c8:38:73:9f:78:38:5a: f2:02:31:1d:ea:3c:18:86:f8:be:d5:ee:12:3b:84: a1:b7:d5:45:ff:a9:26:52:44:03:3c:da:1a:ac:8d: b7:60:68:10:45:3d:dd:d3:b4:2d:20:e1:4f:2a:15: 71:dc:44:b3:b9:a4:ca:ad:44:b4:82:a8:d8:63:18: 03:c7:59:67:ef:91:12:94:46:be:84:3f:87:a2:1d: 3f:43:8e:5a:c0:60:bf:db:7b:f7:2e:b2:c4:f0:45: 0b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:BE:AD:96:E3:94:65:46:B2:37:D1:B4:E4:BC:17:3A:71:07:71:6B X509v3 Authority Key Identifier: keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/wb6tluOUZUayN9G05LwXOnEHcWs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9e00::/31 2a0c:9e04::/32 2a0c:fe03::/32 Signature Algorithm: sha256WithRSAEncryption 75:39:1e:4c:7b:f2:f3:60:a3:2e:b7:f6:5b:28:59:77:5e:13: 9e:85:9a:ae:87:4e:8f:8c:63:ac:ab:cc:ff:2d:e1:10:90:81: 96:1a:01:a1:e8:15:9b:9c:c3:99:a9:6c:58:97:c8:1f:7a:38: aa:d5:14:47:ba:6e:30:19:ad:3a:ad:b6:f6:26:76:4f:74:1b: 63:a8:9f:71:50:0f:dc:93:62:52:91:3c:51:91:4e:8c:ed:95: bf:06:75:88:d3:3f:13:70:4c:59:65:f0:b5:b7:2e:48:db:6c: 29:6a:b3:a4:f4:00:65:71:3b:13:f0:8b:f7:62:2d:cc:4b:af: 72:36:6d:80:68:35:00:56:88:82:1a:45:c9:b9:a1:31:82:b0: 04:ab:d2:18:96:55:79:29:d6:c5:fd:1f:e3:56:27:51:5d:b9: da:63:32:69:9d:1a:9c:df:72:0b:d3:8c:11:71:85:66:06:fc: d0:32:4b:27:c5:d0:f6:ee:9a:5b:94:bb:ca:30:a9:1e:fc:08: 2e:6c:a7:b4:cc:5d:f9:82:cf:d0:b8:c9:a0:cd:6f:5b:a2:27: 98:dd:e0:11:20:db:5a:d8:81:f4:cd:8f:63:e8:d5:8e:ba:b3: eb:54:b6:43:71:25:ea:01:74:eb:2c:6a:8e:bd:a2:21:5b:48: 80:c7:05:9f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/hEEziNF2AatcrtBYubeIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw MTRiOGQwHhcNMjYwMTAyMTYyMjEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMWJlYWQ5NmUzOTQ2NTQ2YjIzN2QxYjRlNGJjMTczYTcxMDc3MTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryu+UcqYamKYOemdx4V5/Ia8tc2q 8y6jJlMndHNG4nwv+vjZe/LuhjpklaMyi/S9Y9nPVKuKLx5kNo6OGB59/35U2XOR 4yfZoqpla+3Yy8zOk8yMvUW4Gbkh84nd83L2yPu+6p+In3qAG+OB1CTxesadeQs1 wdmFfBaLbbDBTu8JmJ4G8sZigszPsydvaHezMedqC5PPVistI95rZMg4c594OFry AjEd6jwYhvi+1e4SO4Sht9VF/6kmUkQDPNoarI23YGgQRT3d07QtIOFPKhVx3ESz uaTKrUS0gqjYYxgDx1ln75ESlEa+hD+Hoh0/Q45awGC/23v3LrLE8EULEQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMG+rZbjlGVGsjfRtOS8FzpxB3FrMB8GA1UdIwQY MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt NmJjNzU1NzhiNGMzLzEvd2I2dGx1T1VaVWF5TjlHMDVMd1hPbkVIY1dzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUBKgyeAAMF ACoMngQDBQAqDP4DMA0GCSqGSIb3DQEBCwUAA4IBAQB1OR5Me/LzYKMut/ZbKFl3 XhOehZquh06PjGOsq8z/LeEQkIGWGgGh6BWbnMOZqWxYl8gfejiq1RRHum4wGa06 rbb2JnZPdBtjqJ9xUA/ck2JSkTxRkU6M7ZW/BnWI0z8TcExZZfC1ty5I22wparOk 9ABlcTsT8Iv3Yi3MS69yNm2AaDUAVoiCGkXJuaExgrAEq9IYllV5KdbF/R/jVidR XbnaYzJpnRqc33IL04wRcYVmBvzQMksnxdD27ppblLvKMKke/AgubKe0zF35gs/Q uMmgzW9boieY3eARINta2IH0zY9j6NWOurPrVLZDcSXqAXTrLGqOvaIhW0iAxwWf -----END CERTIFICATE-----Generated at Wed Jan 21 16:57:57 2026 by rpki-client