This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/WU6rhKIDYlOBv_KujW4inrtjlG4.roa File: WU6rhKIDYlOBv_KujW4inrtjlG4.roa (raw, json) Hash identifier: 2rbgw8A9EQVeZV9x2K7KWn9IeU+joxL6h/Zkl0kTa98= Subject key identifier: 59:4E:AB:84:A2:03:62:53:81:BF:F2:AE:8D:6E:22:9E:BB:63:94:6E Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f Certificate serial: 019B7F13FB7AEE4BDE17A6108C74A15214CF Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/WU6rhKIDYlOBv_KujW4inrtjlG4.roa Signing time: Fri 02 Jan 2026 14:19:34 +0000 ROA not before: Fri 02 Jan 2026 14:19:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56981 IP address blocks: 2a02:2698:7800::/38 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 23:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:fb:7a:ee:4b:de:17:a6:10:8c:74:a1:52:14:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f Validity Not Before: Jan 2 14:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=594eab84a203625381bff2ae8d6e229ebb63946e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:02:9c:f8:e5:71:59:84:ba:e6:23:bb:df:3f: 67:94:93:ed:a4:6f:28:54:d5:91:bf:d0:f2:ee:02: 9c:c2:ea:84:19:88:0b:8c:4e:ae:4b:96:c3:da:0c: 6c:68:0c:16:5b:4c:c2:d2:86:6c:3e:a9:c9:2b:b2: d1:84:04:56:e2:27:03:ad:b1:2b:78:da:6c:0a:af: 2c:40:ca:7e:9d:84:13:50:6b:29:f7:9e:d0:9d:89: 5e:2b:20:22:01:41:51:6f:4f:a9:84:d9:25:43:ad: 1a:da:81:54:72:7d:3f:0d:3d:5a:ec:0c:9a:62:eb: d2:7b:cc:9d:d7:9b:af:3c:87:ff:b8:2a:b5:8e:5b: ca:69:f1:98:99:d5:b1:5b:08:d4:a1:5f:02:df:c2: 98:ba:ca:ac:0b:46:eb:bc:ee:5c:b6:47:49:ce:08: d2:a0:7e:37:38:a6:d5:c4:48:32:52:be:eb:a0:c2: 3c:37:3c:ff:cd:a7:f2:49:10:6c:fb:6d:db:7f:a1: bd:93:c3:d0:05:36:d9:0a:69:18:c3:5a:fe:7e:f4: 98:9e:f4:9b:c6:ef:1e:b1:81:c1:90:69:67:88:8f: 49:ee:47:77:16:0f:ed:f5:15:70:ef:97:4f:5f:c9: 65:27:92:2c:eb:45:b7:90:ae:ff:04:97:16:0b:6e: c2:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:4E:AB:84:A2:03:62:53:81:BF:F2:AE:8D:6E:22:9E:BB:63:94:6E X509v3 Authority Key Identifier: keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/WU6rhKIDYlOBv_KujW4inrtjlG4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:2698:7800::/38 Signature Algorithm: sha256WithRSAEncryption 49:46:99:45:b7:b6:20:8c:10:47:f0:66:31:f4:4c:0e:8c:e7: aa:3d:8a:20:4f:33:e8:ef:36:e8:ff:3b:04:b8:32:25:da:43: 43:b3:50:a7:36:c7:bd:ec:ff:10:08:e4:f4:5d:1f:83:5d:dd: e9:a1:07:b1:b2:e7:17:0b:ff:7d:75:8a:ee:ac:ce:e0:a5:c8: 79:3d:03:51:d3:af:b6:cb:36:e5:cf:89:00:34:96:70:95:9b: 7e:97:1b:cb:04:d2:10:c4:64:f2:29:ad:75:1d:9c:60:b4:12: 50:1f:5b:43:0e:cf:38:7b:60:f7:80:cf:3d:3d:81:0d:f3:bf: ee:e5:e8:f5:3e:22:3b:77:a4:b6:13:46:60:9e:7a:57:9d:5a: ed:40:09:33:21:99:79:99:cc:9d:26:91:d4:5e:1d:ed:19:04: 7a:fc:77:98:08:fd:e1:3e:54:ad:df:01:7e:43:d0:ae:a4:cf: 67:8b:f0:44:ce:a6:70:cf:10:a1:29:1e:4b:3b:67:9e:8c:51: 72:21:d7:7c:63:35:6f:2f:63:22:c6:f8:0f:85:cd:99:c6:01: 93:1f:27:4c:ce:de:5f:76:e2:7e:cf:8b:e2:32:69:79:00:3b: 3b:d3:32:53:87:fd:d7:86:be:e3:b2:18:b7:fd:bd:d9:dc:f0: d9:31:e1:2a -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt/E/t67kveF6YQjHShUhTPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MDJiOTVjZTYyMzlkNTI2YzM1YWU3YThlMmNlYjQ4YWVi ODJiNWYwHhcNMjYwMTAyMTQxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTRlYWI4NGEyMDM2MjUzODFiZmYyYWU4ZDZlMjI5ZWJiNjM5NDZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgKc+OVxWYS65iO73z9nlJPtpG8o VNWRv9Dy7gKcwuqEGYgLjE6uS5bD2gxsaAwWW0zC0oZsPqnJK7LRhARW4icDrbEr eNpsCq8sQMp+nYQTUGsp957QnYleKyAiAUFRb0+phNklQ60a2oFUcn0/DT1a7Aya YuvSe8yd15uvPIf/uCq1jlvKafGYmdWxWwjUoV8C38KYusqsC0brvO5ctkdJzgjS oH43OKbVxEgyUr7roMI8Nzz/zafySRBs+23bf6G9k8PQBTbZCmkYw1r+fvSYnvSb xu8esYHBkGlniI9J7kd3Fg/t9RVw75dPX8llJ5Is60W3kK7/BJcWC27CIwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFFlOq4SiA2JTgb/yro1uIp67Y5RuMB8GA1UdIwQY MBaAFAgCuVzmI51SbDWueo4s60iuuCtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDIt Y2YwYWEzZWNhZDI4LzEvV1U2cmhLSURZbE9Cdl9LdWpXNGlucnRqbEc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDItY2YwYWEzZWNhZDI4 LzEvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCKgImmHgw DQYJKoZIhvcNAQELBQADggEBAElGmUW3tiCMEEfwZjH0TA6M56o9iiBPM+jvNuj/ OwS4MiXaQ0OzUKc2x73s/xAI5PRdH4Nd3emhB7Gy5xcL/311iu6szuClyHk9A1HT r7bLNuXPiQA0lnCVm36XG8sE0hDEZPIprXUdnGC0ElAfW0MOzzh7YPeAzz09gQ3z v+7l6PU+Ijt3pLYTRmCeeledWu1ACTMhmXmZzJ0mkdReHe0ZBHr8d5gI/eE+VK3f AX5D0K6kz2eL8ETOpnDPEKEpHks7Z56MUXIh13xjNW8vYyLG+A+FzZnGAZMfJ0zO 3l924n7Pi+IyaXkAOzvTMlOH/deGvuOyGLf9vdnc8Nkx4So= -----END CERTIFICATE-----Generated at Thu Feb 5 05:54:43 2026 by rpki-client