This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/W9_g4b-CMQ6D1sqjA4YzgGuli5w.roa File: W9_g4b-CMQ6D1sqjA4YzgGuli5w.roa (raw, json) Hash identifier: ztnY3TGaOM5GfMSdCJhzlPekP7YMDl7GucYVODuGAvI= Subject key identifier: 5B:DF:E0:E1:BF:82:31:0E:83:D6:CA:A3:03:86:33:80:6B:A5:8B:9C Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7207E7C0127B4B5B655E80E2095E3CA0 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/W9_g4b-CMQ6D1sqjA4YzgGuli5w.roa Signing time: Wed 31 Dec 2025 01:31:19 +0000 ROA not before: Wed 31 Dec 2025 01:31:19 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 47263 IP address blocks: 2a06:de02:1a02::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 06:43:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:07:e7:c0:12:7b:4b:5b:65:5e:80:e2:09:5e:3c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Dec 31 01:31:19 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5bdfe0e1bf82310e83d6caa3038633806ba58b9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fd:e7:41:d6:e9:7c:0d:7e:4b:d4:cb:a3:b7: 45:61:55:b6:1d:6d:10:aa:d2:a2:c3:95:26:74:68: 30:54:79:86:27:b1:04:50:62:0a:c3:ed:a2:dd:2d: fe:7e:9a:35:3a:f0:e0:99:2d:6a:20:98:52:90:a7: ed:f3:79:88:6a:7f:ca:ec:0f:3e:19:54:1f:62:37: b8:c2:fe:5b:b4:d0:1f:31:b9:6d:32:fb:ff:07:4e: b9:7b:26:5a:c6:3a:4b:51:cd:01:ab:1e:96:58:20: b2:3f:9f:66:95:76:72:fd:a2:d8:5a:20:55:f2:d7: 3d:c9:60:5c:9b:3b:71:79:5a:f9:7d:0c:4e:6b:6d: 12:12:1e:bf:5a:f0:d0:8f:35:24:04:27:af:f6:8a: c4:36:df:d1:1c:99:01:0d:6d:11:b7:31:ff:dd:97: dd:a4:4a:f6:98:49:bd:e9:9e:68:c2:57:6f:c6:e6: fb:b9:88:f0:8c:80:3a:30:75:e1:ee:f1:6f:95:38: 0b:ea:6e:90:03:60:5e:17:d0:04:1c:59:15:fa:23: 88:0f:2e:11:ff:d2:c5:8a:a8:b3:b8:a8:e1:73:53: 4e:0b:64:58:32:e2:7a:68:13:5d:85:7c:10:17:ea: a6:50:68:02:0d:35:91:a6:d2:97:47:ff:c9:e8:e3: 6f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:DF:E0:E1:BF:82:31:0E:83:D6:CA:A3:03:86:33:80:6B:A5:8B:9C X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/W9_g4b-CMQ6D1sqjA4YzgGuli5w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:de02:1a02::/48 Signature Algorithm: sha256WithRSAEncryption b2:97:03:e7:ec:fc:b5:ed:6d:e4:87:9f:7a:00:40:6a:df:6f: 7f:c0:74:58:e1:7d:7e:96:ac:99:0a:8f:71:5e:de:bc:86:2a: 7a:90:8f:88:71:82:30:21:c3:2b:3d:32:ac:72:b0:7c:a7:36: a3:5a:44:35:f7:77:6e:a0:cd:be:b6:f7:55:20:6c:1d:29:fa: 79:4c:4c:ee:e7:a2:5f:18:f3:d4:51:2d:d2:37:e2:5e:5d:41: df:45:83:13:21:07:ca:67:26:8e:87:8e:a1:88:cc:ef:93:cb: 84:0d:40:33:f3:cc:f8:10:62:46:57:9b:1b:3f:5b:4e:8a:b1: 24:cb:d3:fe:d5:a8:f0:fc:66:a2:2a:9b:da:8c:7a:1f:a4:35: 46:0a:17:7c:7f:2e:ad:96:68:f7:64:23:d6:44:9f:33:d0:85: e1:01:ad:2a:02:ee:1f:60:04:7b:c9:68:36:39:8d:d4:24:5c: 6a:30:8c:35:96:cc:47:73:66:e7:82:fc:d9:07:db:9a:97:b4: 27:43:33:44:a7:18:b6:47:74:d8:4c:33:b0:f2:9f:ad:c9:1b: fe:ff:c6:6c:3a:9a:47:48:06:be:28:1a:2c:6e:72:dc:4c:dc: 2b:56:8b:1b:28:40:6f:1a:2f:04:31:40:d8:54:4b:d7:91:fa: b1:60:08:be -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZtyB+fAEntLW2VegOIJXjygMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjUxMjMxMDEzMTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YmRmZTBlMWJmODIzMTBlODNkNmNhYTMwMzg2MzM4MDZiYTU4YjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsv3nQdbpfA1+S9TLo7dFYVW2HW0Q qtKiw5UmdGgwVHmGJ7EEUGIKw+2i3S3+fpo1OvDgmS1qIJhSkKft83mIan/K7A8+ GVQfYje4wv5btNAfMbltMvv/B065eyZaxjpLUc0Bqx6WWCCyP59mlXZy/aLYWiBV 8tc9yWBcmztxeVr5fQxOa20SEh6/WvDQjzUkBCev9orENt/RHJkBDW0RtzH/3Zfd pEr2mEm96Z5owldvxub7uYjwjIA6MHXh7vFvlTgL6m6QA2BeF9AEHFkV+iOIDy4R /9LFiqizuKjhc1NOC2RYMuJ6aBNdhXwQF+qmUGgCDTWRptKXR//J6ONv2QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFvf4OG/gjEOg9bKowOGM4BrpYucMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvVzlfZzRiLUNNUTZEMXNxakE0WXpnR3VsaTV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgbeAhoC MA0GCSqGSIb3DQEBCwUAA4IBAQCylwPn7Py17W3kh596AEBq329/wHRY4X1+lqyZ Co9xXt68hip6kI+IcYIwIcMrPTKscrB8pzajWkQ193duoM2+tvdVIGwdKfp5TEzu 56JfGPPUUS3SN+JeXUHfRYMTIQfKZyaOh46hiMzvk8uEDUAz88z4EGJGV5sbP1tO irEky9P+1ajw/GaiKpvajHofpDVGChd8fy6tlmj3ZCPWRJ8z0IXhAa0qAu4fYAR7 yWg2OY3UJFxqMIw1lsxHc2bngvzZB9ual7QnQzNEpxi2R3TYTDOw8p+tyRv+/8Zs OppHSAa+KBosbnLcTNwrVosbKEBvGi8EMUDYVEvXkfqxYAi+ -----END CERTIFICATE-----Generated at Wed Dec 31 12:45:39 2025 by rpki-client