This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/WZ1IpRkdfyL4WyH-5Ddi7xBWTiI.roa File: WZ1IpRkdfyL4WyH-5Ddi7xBWTiI.roa (raw, json) Hash identifier: RPeU+3UPc0+GCghZ3Q3yifFW74Ureoed9qG6YRThRzQ= Subject key identifier: 59:9D:48:A5:19:1D:7F:22:F8:5B:21:FE:E4:37:62:EF:10:56:4E:22 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E396D7FA1D518832EA2B6EAD99484BE Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/WZ1IpRkdfyL4WyH-5Ddi7xBWTiI.roa Signing time: Fri 02 Jan 2026 10:20:51 +0000 ROA not before: Fri 02 Jan 2026 10:20:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215097 IP address blocks: 2a0c:b641:c30::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:6d:7f:a1:d5:18:83:2e:a2:b6:ea:d9:94:84:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=599d48a5191d7f22f85b21fee43762ef10564e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6a:dc:b9:0b:e0:e5:0c:3d:73:7c:fe:11:7a: a6:73:1b:e8:96:0d:99:a6:50:16:8f:30:bd:ee:4a: c6:75:aa:4d:35:6b:10:5d:0b:8f:b3:5e:83:e0:29: 07:60:75:a8:49:95:af:3b:50:a4:17:84:1e:d6:5c: 46:0e:a9:5e:e8:28:7d:1a:4f:8c:bf:46:b1:0e:35: 52:53:e1:3a:04:66:9c:a1:86:09:fd:64:c5:dd:ec: d5:2c:85:4e:f1:10:07:18:fb:9c:06:7f:c8:aa:b1: 13:07:26:b0:9a:e8:1b:7b:b0:ca:c8:44:1b:38:d3: b4:d0:3a:45:5f:29:35:01:5d:31:6c:ce:29:10:b2: 3a:79:b1:5a:3a:16:79:6c:94:cf:1c:1a:a3:48:00: 29:18:7b:3a:a7:bd:87:62:80:3b:af:dc:77:c0:0e: 5c:1d:03:f0:10:a2:f0:32:52:a2:6e:e3:fa:14:39: 43:b8:51:e1:4c:47:97:a6:3c:37:7d:33:d6:b6:7a: 5c:05:f0:83:4a:1b:f4:31:3e:80:d9:2c:97:e9:31: b5:20:ff:06:6c:6e:f2:1f:66:c8:58:a4:10:60:d2: 89:0b:3a:4b:90:08:db:28:b4:33:97:58:76:69:11: e9:2e:59:b0:1c:20:c6:b8:b6:38:65:6f:6f:24:a4: 8a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:9D:48:A5:19:1D:7F:22:F8:5B:21:FE:E4:37:62:EF:10:56:4E:22 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/WZ1IpRkdfyL4WyH-5Ddi7xBWTiI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:c30::/44 Signature Algorithm: sha256WithRSAEncryption 34:e0:e3:c8:9a:70:9e:5a:ff:20:8d:88:84:35:1c:3f:aa:d7: 32:c6:f8:39:13:fa:a1:9c:92:ed:17:f8:f4:64:51:1f:3d:a7: d2:33:aa:36:43:20:a2:ed:2b:fc:ad:77:2e:6b:16:a9:db:d9: c5:35:e3:17:c7:22:29:47:99:63:ac:3c:4f:7f:f7:4e:b2:57: cb:c5:a7:37:d2:a1:0e:14:e2:bf:d0:14:99:89:18:ad:d1:53: 52:ec:31:a9:c9:59:7f:1d:3b:3e:14:3a:25:36:3b:db:c2:de: db:61:6f:f7:bd:a2:b0:b5:99:b2:f4:85:7d:b8:6e:85:50:1a: 57:07:4a:1c:1e:29:29:ce:c9:cb:52:41:f0:4a:cf:be:69:78: 6b:76:ef:0a:13:25:28:59:c2:ae:51:bc:cb:21:82:a0:0d:41: c5:81:41:c4:cd:4c:c4:c4:74:5d:bd:dd:d0:d9:f7:03:9d:e3: 90:64:d5:d6:a9:d7:d7:8d:c5:fc:83:b1:28:34:d2:bd:21:a3: 07:72:03:11:34:50:63:ff:90:49:39:9b:fc:c2:58:08:81:5f: 60:ce:a5:69:4c:22:85:b2:01:1d:97:c1:f7:78:f5:c3:37:f9: 40:02:c3:ed:78:09:97:5b:ba:e5:47:d2:db:0d:6f:0a:70:ed: 2d:66:b3:dc -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OW1/odUYgy6iturZlIS+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTlkNDhhNTE5MWQ3ZjIyZjg1YjIxZmVlNDM3NjJlZjEwNTY0ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGrcuQvg5Qw9c3z+EXqmcxvolg2Z plAWjzC97krGdapNNWsQXQuPs16D4CkHYHWoSZWvO1CkF4Qe1lxGDqle6Ch9Gk+M v0axDjVSU+E6BGacoYYJ/WTF3ezVLIVO8RAHGPucBn/IqrETByawmugbe7DKyEQb ONO00DpFXyk1AV0xbM4pELI6ebFaOhZ5bJTPHBqjSAApGHs6p72HYoA7r9x3wA5c HQPwEKLwMlKibuP6FDlDuFHhTEeXpjw3fTPWtnpcBfCDShv0MT6A2SyX6TG1IP8G bG7yH2bIWKQQYNKJCzpLkAjbKLQzl1h2aRHpLlmwHCDGuLY4ZW9vJKSKiwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFmdSKUZHX8i+Fsh/uQ3Yu8QVk4iMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvV1oxSXBSa2RmeUw0V3lILTVEZGk3eEJXVGlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQww MA0GCSqGSIb3DQEBCwUAA4IBAQA04OPImnCeWv8gjYiENRw/qtcyxvg5E/qhnJLt F/j0ZFEfPafSM6o2QyCi7Sv8rXcuaxap29nFNeMXxyIpR5ljrDxPf/dOslfLxac3 0qEOFOK/0BSZiRit0VNS7DGpyVl/HTs+FDolNjvbwt7bYW/3vaKwtZmy9IV9uG6F UBpXB0ocHikpzsnLUkHwSs++aXhrdu8KEyUoWcKuUbzLIYKgDUHFgUHEzUzExHRd vd3Q2fcDneOQZNXWqdfXjcX8g7EoNNK9IaMHcgMRNFBj/5BJOZv8wlgIgV9gzqVp TCKFsgEdl8H3ePXDN/lAAsPteAmXW7rlR9LbDW8KcO0tZrPc -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:12 2026 by rpki-client