This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/WHWyqsD1mYj5_y-VLcDJiAd4f6c.roa File: WHWyqsD1mYj5_y-VLcDJiAd4f6c.roa (raw, json) Hash identifier: hpHGyxGwJsURhLlOyKcdgQWlWL4B+EzZCE+vO4x908w= Subject key identifier: 58:75:B2:AA:C0:F5:99:88:F9:FF:2F:95:2D:C0:C9:88:07:78:7F:A7 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E394DA373724659FBDB93FCAE903F7A Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/WHWyqsD1mYj5_y-VLcDJiAd4f6c.roa Signing time: Fri 02 Jan 2026 10:20:43 +0000 ROA not before: Fri 02 Jan 2026 10:20:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210349 IP address blocks: 2a0c:b641:3b0::/44 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:4d:a3:73:72:46:59:fb:db:93:fc:ae:90:3f:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5875b2aac0f59988f9ff2f952dc0c98807787fa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:12:e5:bb:71:cb:73:69:1c:7b:38:86:7c:fd: 9d:02:05:f0:91:fc:6b:ee:32:cc:ff:e2:1a:b6:89: 9e:cc:5e:fb:64:35:38:5b:8b:0d:65:af:2b:67:a2: fb:19:2f:dc:2c:df:86:be:85:f7:1a:83:7b:ce:28: 91:dd:c5:72:6a:98:a6:71:43:f9:21:c5:76:6f:58: 78:1c:13:9e:42:7b:e3:97:b5:52:1f:12:2b:4b:36: ae:ea:6f:c5:a1:83:27:b2:9e:32:74:9b:9a:75:ea: 39:c6:88:62:1d:8f:39:05:53:0b:84:29:ce:02:48: a9:1e:85:f9:6e:eb:e5:ff:60:72:18:26:43:a7:4d: 51:53:b4:95:43:e4:89:78:8f:41:a9:53:b2:da:df: 0a:de:40:1f:3d:01:89:67:68:f6:bb:3b:ae:c7:41: 76:6f:f6:54:a0:bf:66:39:4b:cc:3c:35:8f:d9:ff: f4:65:db:e9:ad:30:de:c7:27:08:94:b2:08:93:4b: d6:b3:2e:c4:ee:ae:dd:4d:73:80:77:d7:53:90:9a: bc:d4:be:c6:ac:d8:17:b2:bb:f3:03:d4:b8:6f:c3: 8e:ab:7d:6c:62:16:ff:c2:ca:9c:5b:4d:55:8f:15: 20:2d:02:b8:f6:2f:f5:47:c9:b7:5c:ac:0f:14:6b: ab:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:75:B2:AA:C0:F5:99:88:F9:FF:2F:95:2D:C0:C9:88:07:78:7F:A7 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/WHWyqsD1mYj5_y-VLcDJiAd4f6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:3b0::/44 Signature Algorithm: sha256WithRSAEncryption 28:fb:8e:87:56:00:b9:98:f6:77:10:7e:82:ed:b4:d3:60:7b: b9:1a:5f:8d:13:61:02:65:0d:89:9f:e2:84:2e:01:dc:4d:7e: 70:46:85:06:3e:5f:b3:b8:2d:48:3d:97:f2:6a:75:3d:e8:09: 7f:9e:38:52:59:90:e1:15:cc:97:04:db:eb:b6:fd:2a:9c:75: 91:6e:e5:00:2d:94:dd:97:ff:4e:ac:d7:70:37:c5:df:d5:2f: 7e:23:53:f5:5d:95:74:88:31:b7:33:85:83:88:6d:a4:7f:77: ed:5e:85:72:8f:92:9a:c5:a4:fa:e6:21:da:be:6e:05:02:4e: 9e:67:3a:1a:8b:6c:a9:32:9d:2b:c9:5b:0b:c5:ab:7d:9e:47: 68:3d:48:ef:d6:a6:46:5c:40:80:b6:12:49:f1:02:17:d4:09: 03:cc:8b:8b:b0:aa:f8:61:51:01:ba:dc:69:c3:47:a2:d7:39: 35:cd:43:5c:18:30:ee:24:2e:82:b3:77:34:67:8c:d0:3f:2e: 3d:92:5c:4f:18:d2:73:7d:6f:6a:18:3c:9c:38:c1:f4:01:a6: 08:79:09:67:28:13:72:10:bf:fb:73:33:38:83:2f:ff:4b:f3: 1e:40:55:d7:29:60:52:35:89:40:a2:3d:ea:26:45:66:7f:7b: dc:f0:a7:fb -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OU2jc3JGWfvbk/yukD96MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODc1YjJhYWMwZjU5OTg4ZjlmZjJmOTUyZGMwYzk4ODA3Nzg3ZmE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBLlu3HLc2kceziGfP2dAgXwkfxr 7jLM/+IatomezF77ZDU4W4sNZa8rZ6L7GS/cLN+GvoX3GoN7ziiR3cVyapimcUP5 IcV2b1h4HBOeQnvjl7VSHxIrSzau6m/FoYMnsp4ydJuadeo5xohiHY85BVMLhCnO AkipHoX5buvl/2ByGCZDp01RU7SVQ+SJeI9BqVOy2t8K3kAfPQGJZ2j2uzuux0F2 b/ZUoL9mOUvMPDWP2f/0ZdvprTDexycIlLIIk0vWsy7E7q7dTXOAd9dTkJq81L7G rNgXsrvzA9S4b8OOq31sYhb/wsqcW01VjxUgLQK49i/1R8m3XKwPFGurywIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFh1sqrA9ZmI+f8vlS3AyYgHeH+nMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvV0hXeXFzRDFtWWo1X3ktVkxjREppQWQ0ZjZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQOw MA0GCSqGSIb3DQEBCwUAA4IBAQAo+46HVgC5mPZ3EH6C7bTTYHu5Gl+NE2ECZQ2J n+KELgHcTX5wRoUGPl+zuC1IPZfyanU96Al/njhSWZDhFcyXBNvrtv0qnHWRbuUA LZTdl/9OrNdwN8Xf1S9+I1P1XZV0iDG3M4WDiG2kf3ftXoVyj5KaxaT65iHavm4F Ak6eZzoai2ypMp0ryVsLxat9nkdoPUjv1qZGXECAthJJ8QIX1AkDzIuLsKr4YVEB utxpw0ei1zk1zUNcGDDuJC6Cs3c0Z4zQPy49klxPGNJzfW9qGDycOMH0AaYIeQln KBNyEL/7czM4gy//S/MeQFXXKWBSNYlAoj3qJkVmf3vc8Kf7 -----END CERTIFICATE-----Generated at Tue Jan 20 02:45:58 2026 by rpki-client