This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/Wrt-X9W1hj7LG9tZllnLvca6Q2M.roa File: Wrt-X9W1hj7LG9tZllnLvca6Q2M.roa (raw, json) Hash identifier: IGQB/HiWV8olKcPujLoPipVp2mVqdIGDDzfyLjI1mJg= Subject key identifier: 5A:BB:7E:5F:D5:B5:86:3E:CB:1B:DB:59:96:59:CB:BD:C6:BA:43:63 Certificate issuer: /CN=a3e6e823f6dda67d283a9f41a72909906ac9a837 Certificate serial: 019B7B35CDFC79D4F363CACCB6B98CE8EB83 Authority key identifier: A3:E6:E8:23:F6:DD:A6:7D:28:3A:9F:41:A7:29:09:90:6A:C9:A8:37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-boI_bdpn0oOp9BpykJkGrJqDc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/Wrt-X9W1hj7LG9tZllnLvca6Q2M.roa Signing time: Thu 01 Jan 2026 20:18:02 +0000 ROA not before: Thu 01 Jan 2026 20:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197838 IP address blocks: 2a03:6607::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.crl rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft rsync://rpki.ripe.net/repository/DEFAULT/o-boI_bdpn0oOp9BpykJkGrJqDc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:cd:fc:79:d4:f3:63:ca:cc:b6:b9:8c:e8:eb:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3e6e823f6dda67d283a9f41a72909906ac9a837 Validity Not Before: Jan 1 20:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5abb7e5fd5b5863ecb1bdb599659cbbdc6ba4363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:1a:92:6b:a5:7a:91:31:2d:04:a0:ec:47:46: 36:00:b6:a5:b8:1f:7f:79:c8:67:2f:7f:b2:37:7e: 1f:63:bc:39:59:e8:ce:99:94:12:15:ef:3d:ca:2c: ea:c5:f1:7a:e5:43:c0:64:db:ef:b8:2d:31:c6:5a: fb:22:5c:43:f4:4c:0f:a4:42:63:1c:5f:eb:c9:9c: 59:6e:ac:fc:83:3d:c7:00:6f:05:65:e0:6c:fb:e1: ea:b7:67:16:04:6d:1d:72:7f:a0:d0:32:07:01:8c: e8:59:6d:f4:6f:b7:9c:1e:6b:20:ed:e5:d2:3d:61: 39:13:bf:0c:ab:dc:a3:18:42:f1:45:cb:c6:46:7e: a4:14:b8:04:7d:24:8c:b6:bb:ce:ac:96:46:31:74: b9:28:65:0d:e9:d8:ba:90:24:81:0e:a7:6c:1e:08: a4:ff:2a:cf:9f:e8:d3:e4:f1:ff:53:97:b1:43:5c: 3a:0d:cd:cd:b5:a7:a7:bc:fa:ec:fa:7e:b4:00:7c: b2:54:fb:01:7d:9a:3f:1b:e9:d6:1d:a6:fa:55:f5: 61:96:07:d1:dc:eb:8b:d2:46:cf:4d:f9:d4:ac:4f: 92:21:0d:a2:e3:ed:e8:b7:2e:81:8f:bd:c5:6a:37: ee:88:6b:d6:46:32:78:0b:15:9b:39:23:07:0a:0c: bc:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:BB:7E:5F:D5:B5:86:3E:CB:1B:DB:59:96:59:CB:BD:C6:BA:43:63 X509v3 Authority Key Identifier: keyid:A3:E6:E8:23:F6:DD:A6:7D:28:3A:9F:41:A7:29:09:90:6A:C9:A8:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-boI_bdpn0oOp9BpykJkGrJqDc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/Wrt-X9W1hj7LG9tZllnLvca6Q2M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:6607::/32 Signature Algorithm: sha256WithRSAEncryption 10:c4:03:0a:7a:df:76:18:d0:16:02:47:45:2b:31:c6:06:1a: cc:e1:2a:be:e1:a3:83:a2:e3:7f:43:89:b1:bb:00:0c:43:4e: 61:eb:56:96:63:f8:b8:b1:63:f1:26:3e:23:7a:bb:ce:07:65: 7b:8e:c0:61:65:54:b3:ca:5a:85:bd:58:14:ea:ef:e8:ac:8f: 63:23:e3:96:a1:d7:76:e2:4d:cf:5b:18:ab:89:49:5b:e1:ba: 02:f5:43:e9:57:9f:58:ea:69:46:22:d6:29:dd:4f:69:bf:7d: e3:c1:11:1f:d0:04:62:f4:43:7e:4d:5a:2e:82:40:82:76:cc: a6:1b:f9:65:fa:f0:33:03:d6:1c:3f:2e:f4:e6:d3:51:69:46: 0d:0e:70:0d:5e:de:72:35:e6:f2:97:fd:28:0f:9d:09:2b:a5: 09:c0:a7:65:8e:f8:18:32:ce:70:10:c2:96:7f:59:ec:78:20: f5:0e:a4:96:71:e9:eb:1d:4e:4f:49:86:c2:70:60:bd:61:1a: b4:c6:3a:5c:ca:4b:d2:a5:5f:2d:2c:2f:08:bf:ab:74:02:42: 68:28:a4:2e:c6:62:a8:ea:b9:31:64:b8:ea:b6:3e:b0:b4:70: 91:fe:ef:ef:aa:7b:d0:d5:5a:09:19:32:8b:4b:7e:be:02:59: b9:fa:ba:75 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt7Nc38edTzY8rMtrmM6OuDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzZTZlODIzZjZkZGE2N2QyODNhOWY0MWE3MjkwOTkwNmFj OWE4MzcwHhcNMjYwMTAxMjAxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YWJiN2U1ZmQ1YjU4NjNlY2IxYmRiNTk5NjU5Y2JiZGM2YmE0MzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xqSa6V6kTEtBKDsR0Y2ALaluB9/ echnL3+yN34fY7w5WejOmZQSFe89yizqxfF65UPAZNvvuC0xxlr7IlxD9EwPpEJj HF/ryZxZbqz8gz3HAG8FZeBs++Hqt2cWBG0dcn+g0DIHAYzoWW30b7ecHmsg7eXS PWE5E78Mq9yjGELxRcvGRn6kFLgEfSSMtrvOrJZGMXS5KGUN6di6kCSBDqdsHgik /yrPn+jT5PH/U5exQ1w6Dc3NtaenvPrs+n60AHyyVPsBfZo/G+nWHab6VfVhlgfR 3OuL0kbPTfnUrE+SIQ2i4+3oty6Bj73FajfuiGvWRjJ4CxWbOSMHCgy8FQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFFq7fl/VtYY+yxvbWZZZy73GukNjMB8GA1UdIwQY MBaAFKPm6CP23aZ9KDqfQacpCZBqyag3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvby1ib0lfYmRwbjBvT3A5QnB5a0prR3JKcURjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8xOGExYmMtOTY3Yy00OTMxLTg1YjUt MDBmMDBhZjFjOGQ3LzEvV3J0LVg5VzFoajdMRzl0Wmxsbkx2Y2E2UTJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8xOGExYmMtOTY3Yy00OTMxLTg1YjUtMDBmMDBhZjFjOGQ3 LzEvby1ib0lfYmRwbjBvT3A5QnB5a0prR3JKcURjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgNmBzAN BgkqhkiG9w0BAQsFAAOCAQEAEMQDCnrfdhjQFgJHRSsxxgYazOEqvuGjg6Ljf0OJ sbsADENOYetWlmP4uLFj8SY+I3q7zgdle47AYWVUs8pahb1YFOrv6KyPYyPjlqHX duJNz1sYq4lJW+G6AvVD6VefWOppRiLWKd1Pab9948ERH9AEYvRDfk1aLoJAgnbM phv5ZfrwMwPWHD8u9ObTUWlGDQ5wDV7ecjXm8pf9KA+dCSulCcCnZY74GDLOcBDC ln9Z7Hgg9Q6klnHp6x1OT0mGwnBgvWEatMY6XMpL0qVfLSwvCL+rdAJCaCikLsZi qOq5MWS46rY+sLRwkf7v76p70NVaCRkyi0t+vgJZufq6dQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:54 2026 by rpki-client