This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/WiOXXkvgTsUMJh2SB31kcxISa0I.roa File: WiOXXkvgTsUMJh2SB31kcxISa0I.roa (raw, json) Hash identifier: Ug6Us7ZSr7Hic6TNnmKhB5WDJGEDtwfaBPHgJG/vxFQ= Subject key identifier: 5A:23:97:5E:4B:E0:4E:C5:0C:26:1D:92:07:7D:64:73:12:12:6B:42 Certificate issuer: /CN=7af6779e62b4612887fe6f8d4e9c0e3731f6e108 Certificate serial: 019B7F83222CB9B8977890BF56A6369729FF Authority key identifier: 7A:F6:77:9E:62:B4:61:28:87:FE:6F:8D:4E:9C:0E:37:31:F6:E1:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evZ3nmK0YSiH_m-NTpwONzH24Qg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/WiOXXkvgTsUMJh2SB31kcxISa0I.roa Signing time: Fri 02 Jan 2026 16:20:58 +0000 ROA not before: Fri 02 Jan 2026 16:20:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208772 IP address blocks: 2a0f:d607::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft rsync://rpki.ripe.net/repository/DEFAULT/evZ3nmK0YSiH_m-NTpwONzH24Qg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:22:2c:b9:b8:97:78:90:bf:56:a6:36:97:29:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7af6779e62b4612887fe6f8d4e9c0e3731f6e108 Validity Not Before: Jan 2 16:20:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a23975e4be04ec50c261d92077d647312126b42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:07:ea:21:1e:76:d7:b9:39:c2:1f:26:90:44: 08:75:75:5d:86:8d:0b:9f:9c:2a:d7:26:70:85:86: 2b:ef:95:38:45:55:e2:00:91:b6:a2:68:6e:ef:27: e9:12:3f:66:ea:c0:17:ca:74:0b:51:ab:6f:e6:4a: ec:35:95:38:55:cd:fc:65:17:cb:a4:8e:39:31:51: f2:21:21:19:db:0e:e7:b4:26:36:4e:5a:0e:a0:84: 3a:d9:50:f6:4a:f9:db:1c:4c:b7:39:c7:32:83:04: 61:74:c9:00:43:37:be:43:98:af:c8:3b:4a:ae:1d: 45:bf:2e:12:b5:64:7f:15:f6:23:31:98:e9:98:e3: b5:ee:9d:24:50:11:37:5e:8b:c3:62:c3:9d:78:d3: 90:c8:52:3d:f3:1a:77:32:5f:53:a9:1c:54:8f:25: e7:8b:d7:7c:e8:04:6f:f8:9a:6b:c3:3a:63:9e:5f: 11:a7:fa:19:d3:44:bb:2a:88:c1:9d:ac:2d:b0:68: 84:24:4a:af:ce:46:9e:50:c5:88:17:2d:a5:f5:69: 98:76:63:10:14:46:27:f6:1e:a5:b4:ce:cc:21:ed: 61:da:67:32:5c:bb:4b:f5:87:02:ee:3a:bb:98:8c: 6b:e8:79:8c:76:58:04:50:98:ac:a6:d1:4f:af:eb: b3:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:23:97:5E:4B:E0:4E:C5:0C:26:1D:92:07:7D:64:73:12:12:6B:42 X509v3 Authority Key Identifier: keyid:7A:F6:77:9E:62:B4:61:28:87:FE:6F:8D:4E:9C:0E:37:31:F6:E1:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evZ3nmK0YSiH_m-NTpwONzH24Qg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/WiOXXkvgTsUMJh2SB31kcxISa0I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:d607::/44 Signature Algorithm: sha256WithRSAEncryption 57:bb:6b:53:0c:a4:a3:40:4d:e9:13:26:f9:06:4c:cf:bc:e3: eb:09:12:76:44:0d:47:8f:31:3e:65:0c:55:aa:90:6f:45:4b: 25:37:50:75:59:8e:3c:f1:f9:e4:08:1f:96:c6:90:4b:e6:0c: df:58:3c:65:66:06:ea:38:5c:53:d9:5e:0b:c2:8d:c0:17:5c: 33:2f:72:8b:52:b3:8c:10:b2:60:5b:6c:c4:bc:ec:c3:66:ee: 22:20:3a:35:b0:e0:1d:19:80:3d:2c:22:5e:6c:3f:54:f7:68: a3:6f:fb:4f:1a:9f:b3:9b:76:da:86:eb:ec:f5:e2:8c:c0:56: fb:55:f0:9a:c4:21:19:6f:52:3a:8c:90:de:6d:c8:12:4d:6e: 1b:44:85:90:2a:d9:ef:69:d6:c0:1c:0c:59:d6:cc:00:4b:93: 4d:e2:ad:ff:6d:65:58:24:3a:a7:0c:a5:a0:ec:64:57:5d:fc: 5d:a2:a5:52:a7:09:86:85:c6:c0:3e:eb:a1:09:de:5b:be:7e: fd:bb:17:95:47:08:f0:96:fa:38:e8:c5:d5:8e:fb:85:0e:5b: eb:01:31:f9:5e:e5:0f:c1:0b:a9:0c:0c:43:d3:a7:53:3d:60: f5:09:a6:da:d6:13:cd:91:99:b5:d1:b4:52:38:82:43:9b:7a: 38:45:fa:6d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/gyIsubiXeJC/VqY2lyn/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhZjY3NzllNjJiNDYxMjg4N2ZlNmY4ZDRlOWMwZTM3MzFm NmUxMDgwHhcNMjYwMTAyMTYyMDU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTIzOTc1ZTRiZTA0ZWM1MGMyNjFkOTIwNzdkNjQ3MzEyMTI2YjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wfqIR5217k5wh8mkEQIdXVdho0L n5wq1yZwhYYr75U4RVXiAJG2omhu7yfpEj9m6sAXynQLUatv5krsNZU4Vc38ZRfL pI45MVHyISEZ2w7ntCY2TloOoIQ62VD2SvnbHEy3OccygwRhdMkAQze+Q5ivyDtK rh1Fvy4StWR/FfYjMZjpmOO17p0kUBE3XovDYsOdeNOQyFI98xp3Ml9TqRxUjyXn i9d86ARv+Jprwzpjnl8Rp/oZ00S7KojBnawtsGiEJEqvzkaeUMWIFy2l9WmYdmMQ FEYn9h6ltM7MIe1h2mcyXLtL9YcC7jq7mIxr6HmMdlgEUJisptFPr+uzyQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFojl15L4E7FDCYdkgd9ZHMSEmtCMB8GA1UdIwQY MBaAFHr2d55itGEoh/5vjU6cDjcx9uEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXZaM25tSzBZU2lIX20tTlRwd09OekgyNFFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8zMGIxMjQtODdmMi00YzdhLWJjMGUt NzkwNzc1Yzc3OWM1LzEvV2lPWFhrdmdUc1VNSmgyU0IzMWtjeElTYTBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS8zMGIxMjQtODdmMi00YzdhLWJjMGUtNzkwNzc1Yzc3OWM1 LzEvZXZaM25tSzBZU2lIX20tTlRwd09OekgyNFFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg/WBwAA MA0GCSqGSIb3DQEBCwUAA4IBAQBXu2tTDKSjQE3pEyb5BkzPvOPrCRJ2RA1HjzE+ ZQxVqpBvRUslN1B1WY488fnkCB+WxpBL5gzfWDxlZgbqOFxT2V4Lwo3AF1wzL3KL UrOMELJgW2zEvOzDZu4iIDo1sOAdGYA9LCJebD9U92ijb/tPGp+zm3bahuvs9eKM wFb7VfCaxCEZb1I6jJDebcgSTW4bRIWQKtnvadbAHAxZ1swAS5NN4q3/bWVYJDqn DKWg7GRXXfxdoqVSpwmGhcbAPuuhCd5bvn79uxeVRwjwlvo46MXVjvuFDlvrATH5 XuUPwQupDAxD06dTPWD1Caba1hPNkZm10bRSOIJDm3o4Rfpt -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:21 2026 by rpki-client