This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/WOK1iT_PCPPQV6sHVEx5Px_Y9fE.roa File: WOK1iT_PCPPQV6sHVEx5Px_Y9fE.roa (raw, json) Hash identifier: 94hNqjQI8cFTU6a6Kw0AEcP1Xdns+Wtf+3N07hYhGa0= Subject key identifier: 58:E2:B5:89:3F:CF:08:F3:D0:57:AB:07:54:4C:79:3F:1F:D8:F5:F1 Certificate issuer: /CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2 Certificate serial: 019C0F50F7926C74F94B32457D38DA740143 Authority key identifier: EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/WOK1iT_PCPPQV6sHVEx5Px_Y9fE.roa Signing time: Fri 30 Jan 2026 14:31:30 +0000 ROA not before: Fri 30 Jan 2026 14:31:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201790 IP address blocks: 2a07:cec0:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 03:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0f:50:f7:92:6c:74:f9:4b:32:45:7d:38:da:74:01:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2 Validity Not Before: Jan 30 14:31:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58e2b5893fcf08f3d057ab07544c793f1fd8f5f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4e:b4:ea:08:2f:5d:84:85:97:29:96:1a:d8: 88:8c:83:df:21:9c:bf:bb:f0:c0:8f:36:3d:c4:b8: ab:41:b0:f8:15:7e:d2:44:7b:83:95:f0:ea:26:5d: b5:31:c3:c2:70:37:91:3c:f2:ef:f0:6f:c6:00:90: b6:61:8f:34:09:b9:7d:c2:c0:7e:43:06:ee:10:62: 85:f6:aa:0f:40:86:7b:5f:68:d2:7a:e2:df:19:8a: 1d:c8:0e:e7:e9:31:ce:75:25:7a:fc:24:b6:08:6a: 52:b6:b2:76:9d:16:10:17:cb:06:b3:2e:b8:56:e9: 8f:d7:5b:d7:ea:9c:31:01:42:df:1f:c0:d2:2a:10: 1b:b7:92:cf:9c:80:d6:e3:f7:b0:8f:ef:f9:90:75: 62:a8:75:cd:3f:aa:f3:1f:ae:5d:34:89:c9:89:c6: e5:87:71:7b:2f:37:51:5a:88:97:fc:8b:7e:e9:4e: 29:7c:56:57:ce:33:f9:7c:16:13:42:a2:1e:6f:7f: 86:75:a2:a1:a4:4e:30:70:93:ac:41:ad:ef:be:9b: 6f:30:4d:18:0e:5d:8f:93:08:a0:79:2b:7c:e5:ba: 26:88:73:2b:4c:8f:bc:3a:e9:e8:78:f7:5a:e4:dd: 63:68:d0:d9:fb:58:9a:93:14:93:cd:e4:20:0d:13: f5:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:E2:B5:89:3F:CF:08:F3:D0:57:AB:07:54:4C:79:3F:1F:D8:F5:F1 X509v3 Authority Key Identifier: keyid:EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/WOK1iT_PCPPQV6sHVEx5Px_Y9fE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:cec0:3::/48 Signature Algorithm: sha256WithRSAEncryption 20:dc:f3:fa:28:e0:1f:5d:f1:f4:17:15:44:2d:66:25:ad:2c: ea:c0:13:70:0e:47:a6:4c:3a:db:27:13:72:fd:c5:b3:93:55: 7c:0f:a7:d7:db:5c:8f:04:d5:be:16:68:9c:bd:15:9d:46:59: 6b:dd:e9:52:b3:29:a7:b1:b0:1f:fc:06:cd:7b:1b:d1:09:70: fc:db:be:7b:51:6a:a0:63:df:dc:59:c3:a6:e7:b5:95:3a:4f: 14:c9:95:0e:91:72:53:e9:2a:98:03:ed:89:57:e6:1e:7e:cf: 4c:51:f9:cc:71:a9:51:2a:29:ee:3d:cd:d7:a5:07:65:84:92: 34:87:69:73:b2:f3:18:92:ec:8a:dd:94:0b:b1:ae:f4:41:8c: 6e:84:6a:90:32:48:dc:dd:f0:2a:26:57:07:0f:22:72:55:ed: 91:36:82:54:93:d6:d2:47:1e:d2:52:56:67:21:08:ce:a9:83: 7d:cd:87:91:20:34:74:19:0d:21:cc:c3:89:3b:56:a8:7c:95: 5d:b6:82:81:10:27:af:37:2c:32:e2:22:14:7b:ca:ca:9b:67: 95:b3:33:73:7b:a3:39:7f:42:85:a8:83:2b:47:15:57:82:14: 7e:c7:30:5a:ae:66:17:5d:3f:9f:96:b9:1d:3c:51:08:b1:25: 43:40:3e:49 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZwPUPeSbHT5SzJFfTjadAFDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmYTViNjIzNDdhMWI2NGNlYTQ5YTJhYjNhYjQ5ODNjMzQ4 NjFmYjIwHhcNMjYwMTMwMTQzMTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OGUyYjU4OTNmY2YwOGYzZDA1N2FiMDc1NDRjNzkzZjFmZDhmNWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzk606ggvXYSFlymWGtiIjIPfIZy/ u/DAjzY9xLirQbD4FX7SRHuDlfDqJl21McPCcDeRPPLv8G/GAJC2YY80Cbl9wsB+ QwbuEGKF9qoPQIZ7X2jSeuLfGYodyA7n6THOdSV6/CS2CGpStrJ2nRYQF8sGsy64 VumP11vX6pwxAULfH8DSKhAbt5LPnIDW4/ewj+/5kHViqHXNP6rzH65dNInJicbl h3F7LzdRWoiX/It+6U4pfFZXzjP5fBYTQqIeb3+GdaKhpE4wcJOsQa3vvptvME0Y Dl2PkwigeSt85bomiHMrTI+8OunoePda5N1jaNDZ+1iakxSTzeQgDRP1gQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFjitYk/zwjz0FerB1RMeT8f2PXxMB8GA1UdIwQY MBaAFO+ltiNHobZM6kmiqzq0mDw0hh+yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzZXMkkwZWh0a3pxU2FLck9yU1lQRFNHSDdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yNGRiMjEtZWZiOS00MDdlLTk2YWQt MDEzZDJhMTFjMGE1LzEvV09LMWlUX1BDUFBRVjZzSFZFeDVQeF9ZOWZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8yNGRiMjEtZWZiOS00MDdlLTk2YWQtMDEzZDJhMTFjMGE1 LzEvNzZXMkkwZWh0a3pxU2FLck9yU1lQRFNHSDdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgfOwAAD MA0GCSqGSIb3DQEBCwUAA4IBAQAg3PP6KOAfXfH0FxVELWYlrSzqwBNwDkemTDrb JxNy/cWzk1V8D6fX21yPBNW+FmicvRWdRllr3elSsymnsbAf/AbNexvRCXD82757 UWqgY9/cWcOm57WVOk8UyZUOkXJT6SqYA+2JV+Yefs9MUfnMcalRKinuPc3XpQdl hJI0h2lzsvMYkuyK3ZQLsa70QYxuhGqQMkjc3fAqJlcHDyJyVe2RNoJUk9bSRx7S UlZnIQjOqYN9zYeRIDR0GQ0hzMOJO1aofJVdtoKBECevNywy4iIUe8rKm2eVszNz e6M5f0KFqIMrRxVXghR+xzBarmYXXT+flrkdPFEIsSVDQD5J -----END CERTIFICATE-----Generated at Thu Feb 5 09:31:22 2026 by rpki-client