This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/_wihqOtidKZWJVAWbVxY5-gbD1U.roa File: _wihqOtidKZWJVAWbVxY5-gbD1U.roa (raw, json) Hash identifier: dRRnud8MeH13gdxeZJGerx3DLMBFpzuf4jGIz1NB0ac= Subject key identifier: FF:08:A1:A8:EB:62:74:A6:56:25:50:16:6D:5C:58:E7:E8:1B:0F:55 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E39653CB7C77AE2DFCE4F2678D24F6E Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/_wihqOtidKZWJVAWbVxY5-gbD1U.roa Signing time: Fri 02 Jan 2026 10:20:49 +0000 ROA not before: Fri 02 Jan 2026 10:20:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213690 IP address blocks: 2a0c:b641:d80::/44 maxlen: 128 2a0c:b641:d90::/44 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:65:3c:b7:c7:7a:e2:df:ce:4f:26:78:d2:4f:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff08a1a8eb6274a6562550166d5c58e7e81b0f55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e0:df:03:11:3e:7b:01:a0:bf:9d:8d:45:20: ce:7d:11:28:87:c3:73:b1:01:be:61:ad:0b:12:7b: bf:a8:98:46:68:33:e7:5a:29:3b:69:b9:ad:a9:ea: d8:96:70:b7:46:9e:ac:d0:ca:f9:7c:a2:91:94:52: b5:f3:b6:ba:2f:65:1a:6c:4b:24:7e:0d:fb:50:0c: c1:dc:e1:e0:3f:2f:96:db:81:28:6c:12:e2:fe:4a: 5c:56:d6:39:93:69:26:9f:c1:61:04:c8:95:af:91: 8d:7b:dc:5d:0a:c5:b3:5b:6d:0e:3d:2d:e3:ec:21: da:8c:9b:63:0b:30:62:fb:7e:a0:14:70:98:4e:7b: 16:02:6a:0d:a9:3f:5d:12:9c:45:ca:00:2f:7f:1e: e9:d9:7b:7b:1f:dd:30:3f:d2:81:2a:7c:99:04:f7: d3:f4:27:77:07:94:de:54:58:db:26:5d:e0:9c:62: fc:9a:28:89:ab:48:22:3b:3d:09:dc:25:0b:0d:33: a7:56:e9:2b:8c:d2:69:75:af:ae:7d:59:63:f9:17: 2a:3a:24:13:cf:f0:c9:f6:ab:e2:81:26:96:17:8b: 99:f6:1b:ff:31:e2:8c:38:47:07:5e:e8:c8:26:59: 05:0a:2f:d1:7a:39:c0:74:8b:2f:a8:21:4f:4f:40: 6a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:08:A1:A8:EB:62:74:A6:56:25:50:16:6D:5C:58:E7:E8:1B:0F:55 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/_wihqOtidKZWJVAWbVxY5-gbD1U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:d80::/43 Signature Algorithm: sha256WithRSAEncryption 9d:0c:ba:3c:2f:04:75:0c:90:93:20:41:bb:f7:93:26:cd:2c: be:8b:45:8e:06:d3:43:0c:7d:29:b7:d4:3f:14:dd:8a:3c:56: fe:11:6c:e1:41:5c:41:87:e2:35:18:7f:85:d3:ac:71:30:bc: ef:94:ea:63:26:e5:15:62:df:34:19:4a:c4:9f:cb:4e:7b:f8: da:98:01:73:a6:22:e8:69:91:1f:30:cf:f7:d6:75:91:4b:0b: 00:5c:c2:95:bb:89:7e:08:6a:cd:66:a1:60:63:58:de:d3:ef: 19:5e:c7:a2:d3:56:da:ea:6c:7a:70:d6:dd:98:33:a9:a1:58: 58:18:e1:42:ae:e6:ad:5f:34:c6:c6:c6:26:64:d8:2b:14:d6: ed:84:54:bf:95:bc:eb:9b:01:2d:7e:1c:4e:5c:60:bc:b0:c7: 1b:8c:6d:3b:49:72:33:a0:73:7c:f9:1a:63:09:ec:2b:93:a1: 06:f1:1c:a9:65:8f:5a:ff:ca:62:64:02:62:b8:41:ea:1d:24: c4:c8:c4:0f:8e:54:6a:30:a6:81:24:54:36:3e:05:8b:73:1b: 25:81:99:7f:e7:a3:89:b7:46:a5:2f:9c:df:49:10:e8:2d:f2: f5:9e:fb:d8:2f:e2:22:f6:0a:08:8a:73:ad:82:77:15:2f:52: da:21:33:32 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OWU8t8d64t/OTyZ40k9uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjA4YTFhOGViNjI3NGE2NTYyNTUwMTY2ZDVjNThlN2U4MWIwZjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeDfAxE+ewGgv52NRSDOfREoh8Nz sQG+Ya0LEnu/qJhGaDPnWik7abmtqerYlnC3Rp6s0Mr5fKKRlFK187a6L2UabEsk fg37UAzB3OHgPy+W24EobBLi/kpcVtY5k2kmn8FhBMiVr5GNe9xdCsWzW20OPS3j 7CHajJtjCzBi+36gFHCYTnsWAmoNqT9dEpxFygAvfx7p2Xt7H90wP9KBKnyZBPfT 9Cd3B5TeVFjbJl3gnGL8miiJq0giOz0J3CULDTOnVukrjNJpda+ufVlj+RcqOiQT z/DJ9qvigSaWF4uZ9hv/MeKMOEcHXujIJlkFCi/RejnAdIsvqCFPT0BqeQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFP8IoajrYnSmViVQFm1cWOfoGw9VMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvX3dpaHFPdGlkS1pXSlZBV2JWeFk1LWdiRDFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcFKgy2QQ2A MA0GCSqGSIb3DQEBCwUAA4IBAQCdDLo8LwR1DJCTIEG795MmzSy+i0WOBtNDDH0p t9Q/FN2KPFb+EWzhQVxBh+I1GH+F06xxMLzvlOpjJuUVYt80GUrEn8tOe/jamAFz piLoaZEfMM/31nWRSwsAXMKVu4l+CGrNZqFgY1je0+8ZXsei01ba6mx6cNbdmDOp oVhYGOFCruatXzTGxsYmZNgrFNbthFS/lbzrmwEtfhxOXGC8sMcbjG07SXIzoHN8 +RpjCewrk6EG8RypZY9a/8piZAJiuEHqHSTEyMQPjlRqMKaBJFQ2PgWLcxslgZl/ 56OJt0alL5zfSRDoLfL1nvvYL+Ii9goIinOtgncVL1LaITMy -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:54 2026 by rpki-client