This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/WhUk6n98tXI5h5in1BqnsUxgu_8.roa File: WhUk6n98tXI5h5in1BqnsUxgu_8.roa (raw, json) Hash identifier: iRMAOemF7/kO2oQYJyqOR4Wo5Bvc3H5mJCbofdltrSk= Subject key identifier: 5A:15:24:EA:7F:7C:B5:72:39:87:98:A7:D4:1A:A7:B1:4C:60:BB:FF Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b Certificate serial: 019B7C7F55AD46610C49B7877231CDBD7F9D Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/WhUk6n98tXI5h5in1BqnsUxgu_8.roa Signing time: Fri 02 Jan 2026 02:17:58 +0000 ROA not before: Fri 02 Jan 2026 02:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42503 IP address blocks: 2001:1a68:7::/48 maxlen: 48 2001:1a68:b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.mft rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:55:ad:46:61:0c:49:b7:87:72:31:cd:bd:7f:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b Validity Not Before: Jan 2 02:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a1524ea7f7cb572398798a7d41aa7b14c60bbff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:11:f8:e7:35:f3:77:7f:0d:dc:fe:8b:d2:3d: b3:a8:83:92:8f:7b:d7:9e:ec:46:27:ac:5f:03:61: 4e:e5:d7:ae:b0:1b:a1:c7:fc:9d:5d:81:76:79:9b: 14:a0:d5:b9:cd:99:6d:41:b3:d3:49:b7:20:6b:ae: 9e:86:8e:97:ca:87:2a:88:2f:a3:fb:09:00:21:eb: f2:56:90:59:c0:1b:c0:31:d3:b0:8e:db:15:54:4f: d0:01:46:8c:ea:53:23:24:3d:bb:6f:58:e6:b5:72: 16:bc:0b:c1:d8:1b:86:f1:ab:f0:00:66:67:cf:bf: 3a:66:98:d8:6f:90:c3:d3:e6:39:80:dc:93:81:f5: 48:f8:c0:ad:a0:c3:22:22:59:50:60:65:54:50:29: 09:f7:c9:aa:30:81:d7:27:f8:15:67:00:27:f0:c5: b9:ed:fd:85:08:1d:21:22:d6:fd:73:5a:57:78:94: d2:7a:58:81:e1:80:12:5b:7f:99:31:85:5f:31:c6: 01:57:f4:b5:47:b6:01:33:e3:2c:40:aa:23:49:1d: 20:7c:41:0f:bd:b4:31:f6:b8:f4:da:22:ec:a0:70: 35:f1:e5:98:09:be:f8:b5:a0:4e:af:fd:31:d3:91: 75:c9:68:cb:f1:eb:6d:41:9c:e9:7d:fa:db:e9:b2: 32:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:15:24:EA:7F:7C:B5:72:39:87:98:A7:D4:1A:A7:B1:4C:60:BB:FF X509v3 Authority Key Identifier: keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/WhUk6n98tXI5h5in1BqnsUxgu_8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:1a68:7::/48 2001:1a68:b::/48 Signature Algorithm: sha256WithRSAEncryption 6d:4d:18:11:3c:f3:b3:6d:bf:d9:40:b4:a7:ed:e7:e5:9c:c3: 29:08:57:de:af:c2:2a:b5:b9:86:27:e0:01:e0:50:00:0f:7c: f1:5d:82:2a:33:db:ba:6c:33:9e:b0:21:e4:71:bf:31:03:3f: 71:78:e4:2a:1d:fe:0b:b0:08:c1:1c:e5:29:77:6f:e6:18:c7: e0:0e:b2:84:66:6d:c3:33:3c:7c:f7:6d:9c:2d:fe:dc:c9:f3: 8f:41:7e:1e:38:86:01:47:4c:71:bd:ef:b6:29:62:e0:a3:25: 0a:70:a3:0a:5b:5a:2c:c1:5a:3a:80:5b:9e:a1:33:01:2e:1c: 95:f5:e3:07:a5:89:90:bc:f0:e0:b5:9f:f0:3d:ec:cb:49:e1: c0:5f:79:b5:0c:ee:f4:e8:c1:d8:1b:8b:26:cc:0b:70:d4:ef: 13:c3:61:59:9c:ff:93:93:4f:c4:28:4c:9d:84:77:b0:b1:ba: d8:ec:ab:b0:7b:d0:36:b3:ac:0f:73:ed:95:b1:0a:4c:d0:14: c6:2a:d2:11:21:85:e7:a9:54:54:df:7d:d0:59:e2:84:12:98: ff:e4:17:17:32:fa:3e:73:3d:43:53:eb:c3:fa:70:36:11:10: 58:82:3c:b1:e0:fe:ac:5e:c5:8d:28:1c:b0:cd:d7:c4:dc:8a: 30:a5:95:38 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8f1WtRmEMSbeHcjHNvX+dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4YzUxMGZjOWI4NjVkOTZlM2FmYzdjNTYwNTZlZmFkOWEz MzBjNWIwHhcNMjYwMTAyMDIxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTE1MjRlYTdmN2NiNTcyMzk4Nzk4YTdkNDFhYTdiMTRjNjBiYmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRH45zXzd38N3P6L0j2zqIOSj3vX nuxGJ6xfA2FO5deusBuhx/ydXYF2eZsUoNW5zZltQbPTSbcga66eho6XyocqiC+j +wkAIevyVpBZwBvAMdOwjtsVVE/QAUaM6lMjJD27b1jmtXIWvAvB2BuG8avwAGZn z786ZpjYb5DD0+Y5gNyTgfVI+MCtoMMiIllQYGVUUCkJ98mqMIHXJ/gVZwAn8MW5 7f2FCB0hItb9c1pXeJTSeliB4YASW3+ZMYVfMcYBV/S1R7YBM+MsQKojSR0gfEEP vbQx9rj02iLsoHA18eWYCb74taBOr/0x05F1yWjL8ettQZzpffrb6bIy6QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFoVJOp/fLVyOYeYp9Qap7FMYLv/MB8GA1UdIwQY MBaAFGjFEPybhl2W46/HxWBW762aMwxbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEt NWQ2NjVlOTk4ZjZhLzEvV2hVazZuOTh0WEk1aDVpbjFCcW5zVXhndV84LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEtNWQ2NjVlOTk4ZjZh LzEvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAIAEaaAAH AwcAIAEaaAALMA0GCSqGSIb3DQEBCwUAA4IBAQBtTRgRPPOzbb/ZQLSn7eflnMMp CFfer8IqtbmGJ+AB4FAAD3zxXYIqM9u6bDOesCHkcb8xAz9xeOQqHf4LsAjBHOUp d2/mGMfgDrKEZm3DMzx8922cLf7cyfOPQX4eOIYBR0xxve+2KWLgoyUKcKMKW1os wVo6gFueoTMBLhyV9eMHpYmQvPDgtZ/wPezLSeHAX3m1DO706MHYG4smzAtw1O8T w2FZnP+Tk0/EKEydhHewsbrY7Kuwe9A2s6wPc+2VsQpM0BTGKtIRIYXnqVRU333Q WeKEEpj/5BcXMvo+cz1DU+vD+nA2ERBYgjyx4P6sXsWNKBywzdfE3IowpZU4 -----END CERTIFICATE-----Generated at Mon Jan 26 18:54:53 2026 by rpki-client