This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/whsxlRD8ACtbwVUDR7WD9M1I_Zo.roa File: whsxlRD8ACtbwVUDR7WD9M1I_Zo.roa (raw, json) Hash identifier: WyhnHPwfaB8TlTtQhX3k0EqL0gIjvm9v03iJPq6dfuQ= Subject key identifier: C2:1B:31:95:10:FC:00:2B:5B:C1:55:03:47:B5:83:F4:CD:48:FD:9A Certificate issuer: /CN=30d58e40c6d91f3729e57e3344d308b5992fe46e Certificate serial: 019B797E3326D7E0E79236F7D6BB2A1428AD Authority key identifier: 30:D5:8E:40:C6:D9:1F:37:29:E5:7E:33:44:D3:08:B5:99:2F:E4:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MNWOQMbZHzcp5X4zRNMItZkv5G4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/whsxlRD8ACtbwVUDR7WD9M1I_Zo.roa Signing time: Thu 01 Jan 2026 12:17:52 +0000 ROA not before: Thu 01 Jan 2026 12:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20473 IP address blocks: 2a13:141:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.crl rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.mft rsync://rpki.ripe.net/repository/DEFAULT/MNWOQMbZHzcp5X4zRNMItZkv5G4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 20:58:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:33:26:d7:e0:e7:92:36:f7:d6:bb:2a:14:28:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30d58e40c6d91f3729e57e3344d308b5992fe46e Validity Not Before: Jan 1 12:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c21b319510fc002b5bc1550347b583f4cd48fd9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f5:a9:d5:5b:f7:4b:8c:41:3a:91:fa:6e:6f: e9:f8:91:49:f0:a9:dc:a4:56:e8:b1:ff:9d:0f:16: a9:1d:9d:4b:f8:ee:0b:40:34:87:3c:ea:69:a0:5f: ea:bc:0d:50:01:9d:95:12:7b:4c:40:8a:71:7f:4e: f0:91:d7:a7:56:7c:9e:04:f9:23:b8:e7:cb:f4:04: 56:f6:b0:bf:02:15:31:a8:7e:96:b6:b3:8a:5c:c3: 00:0d:b4:0c:33:cf:83:0d:97:d8:26:3d:e5:39:90: 23:84:fd:8b:47:a6:43:00:83:9e:03:58:05:1e:8a: 76:b6:9a:a0:00:e0:f9:50:4c:d2:ec:74:76:52:d7: 4d:15:9d:f2:ac:8b:fd:1f:f4:c7:b1:0a:0c:40:9f: 91:17:8d:8b:21:fe:15:a4:fd:a2:f8:8a:fe:26:6d: 05:a7:37:21:7a:01:ca:32:4b:93:5f:f6:51:bb:e6: 31:9c:c5:ad:6f:ef:e1:d6:4f:0b:a9:28:45:97:c7: 5d:29:d3:61:df:5f:18:c1:1c:02:76:6a:fb:95:0b: 67:35:8d:95:b1:b9:be:e9:ad:88:d0:ce:fe:38:cc: dd:39:0e:7e:1d:07:02:a7:40:90:ed:7d:5a:fb:bc: 8a:ed:fa:40:a5:5f:19:62:ba:ce:04:6d:5f:12:78: 1e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:1B:31:95:10:FC:00:2B:5B:C1:55:03:47:B5:83:F4:CD:48:FD:9A X509v3 Authority Key Identifier: keyid:30:D5:8E:40:C6:D9:1F:37:29:E5:7E:33:44:D3:08:B5:99:2F:E4:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNWOQMbZHzcp5X4zRNMItZkv5G4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/whsxlRD8ACtbwVUDR7WD9M1I_Zo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:141:2::/48 Signature Algorithm: sha256WithRSAEncryption 26:e3:e7:5c:1e:05:47:cd:1b:17:92:6c:a1:9c:e2:ee:9b:31: f9:6d:55:6c:77:92:8d:82:f9:da:17:75:92:f7:c9:64:5f:f9: a8:91:85:da:d2:f6:72:85:05:72:dc:05:45:18:a8:9d:b9:9d: 98:b4:9d:e4:33:14:7b:b3:64:40:bf:d1:98:6a:8c:12:9e:38: cf:33:8c:3c:33:c9:55:a8:0f:07:c0:96:ed:54:87:ed:c8:40: bf:8a:e3:27:b7:af:b1:52:0c:40:52:82:10:04:87:26:0d:0b: a0:7a:ec:66:f8:bb:6f:1e:e0:e9:5b:dd:81:fe:62:fe:b9:3b: d9:5e:21:ed:1b:08:67:50:c9:64:6e:e6:d0:f5:fb:fc:01:1d: f4:11:bd:82:47:81:9c:b7:ba:ad:f1:40:89:ce:12:90:0b:d1: 6c:a8:fd:1f:b6:65:14:ac:50:9a:24:cf:90:8d:a6:e9:fb:1d: ab:10:ff:f5:34:9d:14:0a:a8:04:c4:32:1c:d8:cd:b5:00:91: 35:26:70:36:c3:b5:4d:5b:35:37:7c:07:da:4b:1a:0a:97:f9: b0:a9:84:78:87:e0:87:a9:d7:94:8b:54:3a:ec:cb:95:8b:67: d7:b9:a2:c1:30:66:b4:6d:46:f0:20:7a:5c:9d:ea:25:88:3d: af:23:1d:3f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5fjMm1+Dnkjb31rsqFCitMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwZDU4ZTQwYzZkOTFmMzcyOWU1N2UzMzQ0ZDMwOGI1OTky ZmU0NmUwHhcNMjYwMTAxMTIxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjFiMzE5NTEwZmMwMDJiNWJjMTU1MDM0N2I1ODNmNGNkNDhmZDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfWp1Vv3S4xBOpH6bm/p+JFJ8Knc pFbosf+dDxapHZ1L+O4LQDSHPOppoF/qvA1QAZ2VEntMQIpxf07wkdenVnyeBPkj uOfL9ARW9rC/AhUxqH6WtrOKXMMADbQMM8+DDZfYJj3lOZAjhP2LR6ZDAIOeA1gF Hop2tpqgAOD5UEzS7HR2UtdNFZ3yrIv9H/THsQoMQJ+RF42LIf4VpP2i+Ir+Jm0F pzchegHKMkuTX/ZRu+YxnMWtb+/h1k8LqShFl8ddKdNh318YwRwCdmr7lQtnNY2V sbm+6a2I0M7+OMzdOQ5+HQcCp0CQ7X1a+7yK7fpApV8ZYrrOBG1fEngeiQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMIbMZUQ/AArW8FVA0e1g/TNSP2aMB8GA1UdIwQY MBaAFDDVjkDG2R83KeV+M0TTCLWZL+RuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTU5XT1FNYlpIemNwNVg0elJOTUl0Wmt2NUc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy82MjVhMzAtM2E2Yi00NjYxLTg0MGEt ZjgyYjcwZDhhMGE3LzEvd2hzeGxSRDhBQ3Rid1ZVRFI3V0Q5TTFJX1pvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy82MjVhMzAtM2E2Yi00NjYxLTg0MGEtZjgyYjcwZDhhMGE3 LzEvTU5XT1FNYlpIemNwNVg0elJOTUl0Wmt2NUc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhMBQQAC MA0GCSqGSIb3DQEBCwUAA4IBAQAm4+dcHgVHzRsXkmyhnOLumzH5bVVsd5KNgvna F3WS98lkX/mokYXa0vZyhQVy3AVFGKiduZ2YtJ3kMxR7s2RAv9GYaowSnjjPM4w8 M8lVqA8HwJbtVIftyEC/iuMnt6+xUgxAUoIQBIcmDQugeuxm+LtvHuDpW92B/mL+ uTvZXiHtGwhnUMlkbubQ9fv8AR30Eb2CR4Gct7qt8UCJzhKQC9FsqP0ftmUUrFCa JM+Qjabp+x2rEP/1NJ0UCqgExDIc2M21AJE1JnA2w7VNWzU3fAfaSxoKl/mwqYR4 h+CHqdeUi1Q67MuVi2fXuaLBMGa0bUbwIHpcneoliD2vIx0/ -----END CERTIFICATE-----Generated at Sun Jan 11 02:59:39 2026 by rpki-client