This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/WhV8xPFTSCjYhb1Fzg7MX4sw-hY.roa File: WhV8xPFTSCjYhb1Fzg7MX4sw-hY.roa (raw, json) Hash identifier: XB5kQKRt6CKhDUulVV55wNOu+R+cqMx1Qw5sNVZe/hI= Subject key identifier: 5A:15:7C:C4:F1:53:48:28:D8:85:BD:45:CE:0E:CC:5F:8B:30:FA:16 Certificate issuer: /CN=a2d952245bb34e40cdab5d4b090143c0d8581390 Certificate serial: 019B7E38C97DB3946454B6F30722F234D54A Authority key identifier: A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/WhV8xPFTSCjYhb1Fzg7MX4sw-hY.roa Signing time: Fri 02 Jan 2026 10:20:09 +0000 ROA not before: Fri 02 Jan 2026 10:20:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 2a0c:4144:200::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:c9:7d:b3:94:64:54:b6:f3:07:22:f2:34:d5:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2d952245bb34e40cdab5d4b090143c0d8581390 Validity Not Before: Jan 2 10:20:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a157cc4f1534828d885bd45ce0ecc5f8b30fa16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c2:d3:c9:a8:a5:8d:91:5d:20:54:51:ea:f7: 9e:8f:71:d4:dc:63:a7:7f:b3:8e:f7:aa:a0:01:b5: 1e:f5:8c:87:a1:be:fd:1d:a8:6d:d7:0f:1e:2a:0a: 7c:b2:5c:b1:5a:0f:6c:af:4b:20:0b:20:63:97:91: e2:b2:4a:de:76:01:f7:d2:bb:9f:b6:af:64:9a:6f: 29:3d:44:6d:9c:53:79:96:aa:51:54:17:09:94:63: 2c:4a:4b:ac:ef:5f:33:32:38:ac:d8:51:67:5f:68: ac:e9:0b:af:21:f2:9b:ef:c5:38:9b:d5:02:01:6e: 7b:6e:47:15:ec:ff:9d:e0:cd:26:ba:65:ff:da:f9: fa:cb:f7:19:e2:11:bd:66:8d:a5:ac:e3:51:e1:b0: 6e:23:e0:80:d8:fe:0f:20:e1:2a:b1:df:12:26:5d: 6b:ef:94:d1:9a:a3:b0:0a:d9:0b:9d:ea:77:a1:fe: aa:98:d1:db:c0:af:b1:8d:ba:94:6d:19:e0:d9:2f: c2:7c:19:a8:88:e0:9c:8d:c7:9b:4b:ff:d6:26:43: 2b:35:11:a9:59:d0:3d:fe:64:5d:f3:73:60:da:fc: fc:d1:be:61:32:f0:b3:a9:32:e6:eb:0d:c3:64:3c: 90:57:ad:74:5c:fc:1c:20:6e:5e:f3:d0:aa:f0:75: 21:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:15:7C:C4:F1:53:48:28:D8:85:BD:45:CE:0E:CC:5F:8B:30:FA:16 X509v3 Authority Key Identifier: keyid:A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/WhV8xPFTSCjYhb1Fzg7MX4sw-hY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:4144:200::/48 Signature Algorithm: sha256WithRSAEncryption 79:d2:9f:b8:2d:7e:1e:c4:65:d8:ef:c2:0e:57:4f:69:44:e7: 0f:c3:47:78:21:8e:f7:10:8f:2e:f6:88:4d:0f:0a:28:68:bf: 47:e7:4c:8c:be:8c:c4:38:ff:4c:b3:ee:56:4f:07:27:d2:6a: 00:63:03:5b:5a:eb:a6:03:46:16:52:06:3f:bf:65:88:8c:b4: 02:f3:7a:28:30:87:8d:a6:1d:2b:9b:7d:7f:53:d1:ea:0b:ad: 4b:10:35:90:09:09:3d:f1:22:43:2e:77:5a:e4:fc:91:56:f9: df:bd:db:cd:57:5d:a4:c5:e4:c1:f3:d8:ec:87:ae:41:bb:50: 1a:77:79:9c:6e:ce:84:2f:3f:05:ea:60:57:b6:1c:74:23:98: 52:f1:b9:7d:ef:d2:5c:9b:72:4f:cd:0d:d5:4e:9e:5c:ae:a9: 54:f3:1f:cf:85:2d:3f:80:01:3c:ed:b9:5c:65:06:94:70:6c: 6b:7b:3a:20:19:99:7b:69:65:48:f9:fd:c0:e8:65:b0:ed:60: bd:94:c2:06:57:95:ca:6e:e2:2d:ba:aa:aa:1e:dc:db:c5:2e: c2:88:f8:70:85:78:bc:06:34:1e:25:40:9d:79:bd:fe:21:17: ae:70:ff:85:25:e4:ce:04:4c:f0:e5:1f:37:25:8d:59:56:03: c1:80:32:cc -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OMl9s5RkVLbzByLyNNVKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyZDk1MjI0NWJiMzRlNDBjZGFiNWQ0YjA5MDE0M2MwZDg1 ODEzOTAwHhcNMjYwMTAyMTAyMDA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTE1N2NjNGYxNTM0ODI4ZDg4NWJkNDVjZTBlY2M1ZjhiMzBmYTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08LTyailjZFdIFRR6veej3HU3GOn f7OO96qgAbUe9YyHob79Haht1w8eKgp8slyxWg9sr0sgCyBjl5HiskredgH30ruf tq9kmm8pPURtnFN5lqpRVBcJlGMsSkus718zMjis2FFnX2is6QuvIfKb78U4m9UC AW57bkcV7P+d4M0mumX/2vn6y/cZ4hG9Zo2lrONR4bBuI+CA2P4PIOEqsd8SJl1r 75TRmqOwCtkLnep3of6qmNHbwK+xjbqUbRng2S/CfBmoiOCcjcebS//WJkMrNRGp WdA9/mRd83Ng2vz80b5hMvCzqTLm6w3DZDyQV610XPwcIG5e89Cq8HUhywIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFoVfMTxU0go2IW9Rc4OzF+LMPoWMB8GA1UdIwQY MBaAFKLZUiRbs05AzatdSwkBQ8DYWBOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3RsU0pGdXpUa0ROcTExTENRRkR3TmhZRTVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC80YjFhODAtNGU1Zi00OWU3LWI1MDIt YTIyZmZlZTRhNTE1LzEvV2hWOHhQRlRTQ2pZaGIxRnpnN01YNHN3LWhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC80YjFhODAtNGU1Zi00OWU3LWI1MDItYTIyZmZlZTRhNTE1 LzEvb3RsU0pGdXpUa0ROcTExTENRRkR3TmhZRTVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgxBRAIA MA0GCSqGSIb3DQEBCwUAA4IBAQB50p+4LX4exGXY78IOV09pROcPw0d4IY73EI8u 9ohNDwooaL9H50yMvozEOP9Ms+5WTwcn0moAYwNbWuumA0YWUgY/v2WIjLQC83oo MIeNph0rm31/U9HqC61LEDWQCQk98SJDLnda5PyRVvnfvdvNV12kxeTB89jsh65B u1Aad3mcbs6ELz8F6mBXthx0I5hS8bl979Jcm3JPzQ3VTp5crqlU8x/PhS0/gAE8 7blcZQaUcGxrezogGZl7aWVI+f3A6GWw7WC9lMIGV5XKbuItuqqqHtzbxS7CiPhw hXi8BjQeJUCdeb3+IReucP+FJeTOBEzw5R83JY1ZVgPBgDLM -----END CERTIFICATE-----Generated at Sun Jan 18 15:29:29 2026 by rpki-client