This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WKni9bKFaKHTYSEMofw4VCCESjA.roa File: WKni9bKFaKHTYSEMofw4VCCESjA.roa (raw, json) Hash identifier: cDopjYZvUe1lcm29Qc/1g0WWPnI32AqbMonn+299dfA= Subject key identifier: 58:A9:E2:F5:B2:85:68:A1:D3:61:21:0C:A1:FC:38:54:20:84:4A:30 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D0E37B5DF392725E7708F4791670A Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WKni9bKFaKHTYSEMofw4VCCESjA.roa Signing time: Fri 02 Jan 2026 06:20:09 +0000 ROA not before: Fri 02 Jan 2026 06:20:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207705 IP address blocks: 2a0e:b107:1950::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:0e:37:b5:df:39:27:25:e7:70:8f:47:91:67:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58a9e2f5b28568a1d361210ca1fc385420844a30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a4:b9:f2:a9:63:aa:25:3b:79:e2:92:4d:a3: 92:ba:5b:3c:2e:55:41:60:b6:69:0b:a6:37:56:28: b9:f6:76:e5:c8:5f:86:81:f0:a0:59:78:ac:63:b9: 7c:17:a4:74:d5:d3:ed:56:5b:f8:5e:3a:6a:5b:89: 1b:5e:a5:b3:67:71:44:f2:4c:9d:62:c0:c5:c7:8d: 17:0d:11:f6:72:f0:f1:f5:0b:31:91:e0:ed:84:83: e4:1b:3d:2d:34:67:6a:45:e2:ac:bb:ba:9b:9d:16: 58:67:fc:88:8c:6a:77:33:52:b2:04:c1:bc:8c:2a: b1:8b:04:ff:02:1e:4c:ae:38:ad:f6:85:81:50:f0: df:53:d7:82:ad:24:53:59:02:ee:30:1f:9a:39:e8: ea:0f:17:f4:76:5d:f6:72:cb:9f:c8:0d:fa:31:93: 64:fb:a5:3d:87:18:27:1f:00:ff:d9:5f:96:95:65: 51:99:fc:26:85:86:d3:b0:c8:92:55:87:5f:86:8f: d4:52:3a:34:3b:f6:7c:c6:54:05:15:7a:8d:8d:c0: 74:ec:00:a7:ae:7f:83:4a:c2:1f:df:05:a7:3f:f6: e8:45:e5:7d:78:9d:ef:b9:e4:05:68:56:1b:db:88: 62:68:c7:5b:48:24:39:79:3f:8b:f4:49:55:94:51: 28:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:A9:E2:F5:B2:85:68:A1:D3:61:21:0C:A1:FC:38:54:20:84:4A:30 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WKni9bKFaKHTYSEMofw4VCCESjA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:1950::/44 Signature Algorithm: sha256WithRSAEncryption 3f:22:1c:51:ba:31:69:d9:4c:5f:de:2e:2f:41:5e:76:c1:bf: 9c:5d:81:79:87:a8:5d:98:96:65:46:09:c1:91:b3:3b:81:b5: 7f:8a:97:91:03:92:d6:f1:ef:cc:34:70:3e:87:8b:22:e3:0c: 17:1f:58:37:de:f1:08:99:ef:e6:16:d0:f5:c0:d5:a1:17:6c: 6e:32:a5:f8:5e:4a:18:2c:bb:62:50:3c:e5:20:9e:3b:e8:fd: dd:c7:1a:19:27:bb:dd:d6:79:40:1e:11:5e:88:9c:29:aa:69: 64:9e:58:61:8e:ee:f7:a5:c0:68:ea:53:04:f6:dd:f9:e7:55: 05:c8:44:09:81:de:ec:04:61:b0:94:2b:ca:60:9a:9e:a4:09: 83:04:8e:b2:d1:0e:38:e5:a7:8a:2e:76:4b:dd:31:52:8d:d8: 85:11:de:d1:33:6d:d5:92:32:ac:a5:45:1e:94:c6:9b:5d:aa: 99:94:c5:2a:4d:19:64:b2:7e:6f:8d:2d:a2:7c:97:a9:d3:f9: 7a:72:51:d4:65:22:d3:20:a2:d2:56:92:bd:22:3f:c2:70:08: fa:5e:e2:f3:6b:3d:7d:af:dc:fc:bb:a6:c9:81:6d:20:b2:6a: d4:58:7d:9b:7b:fc:e0:e7:4b:b3:93:cd:83:37:84:e4:f1:c1: ad:31:69:c1 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XQ43td85JyXncI9HkWcKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OGE5ZTJmNWIyODU2OGExZDM2MTIxMGNhMWZjMzg1NDIwODQ0YTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aS58qljqiU7eeKSTaOSuls8LlVB YLZpC6Y3Vii59nblyF+GgfCgWXisY7l8F6R01dPtVlv4XjpqW4kbXqWzZ3FE8kyd YsDFx40XDRH2cvDx9QsxkeDthIPkGz0tNGdqReKsu7qbnRZYZ/yIjGp3M1KyBMG8 jCqxiwT/Ah5Mrjit9oWBUPDfU9eCrSRTWQLuMB+aOejqDxf0dl32csufyA36MZNk +6U9hxgnHwD/2V+WlWVRmfwmhYbTsMiSVYdfho/UUjo0O/Z8xlQFFXqNjcB07ACn rn+DSsIf3wWnP/boReV9eJ3vueQFaFYb24hiaMdbSCQ5eT+L9ElVlFEoLwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFip4vWyhWih02EhDKH8OFQghEowMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvV0tuaTliS0ZhS0hUWVNFTW9mdzRWQ0NFU2pBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBxlQ MA0GCSqGSIb3DQEBCwUAA4IBAQA/IhxRujFp2Uxf3i4vQV52wb+cXYF5h6hdmJZl RgnBkbM7gbV/ipeRA5LW8e/MNHA+h4si4wwXH1g33vEIme/mFtD1wNWhF2xuMqX4 XkoYLLtiUDzlIJ476P3dxxoZJ7vd1nlAHhFeiJwpqmlknlhhju73pcBo6lME9t35 51UFyEQJgd7sBGGwlCvKYJqepAmDBI6y0Q445aeKLnZL3TFSjdiFEd7RM23VkjKs pUUelMabXaqZlMUqTRlksn5vjS2ifJep0/l6clHUZSLTIKLSVpK9Ij/CcAj6XuLz az19r9z8u6bJgW0gsmrUWH2be/zg50uzk82DN4Tk8cGtMWnB -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:24 2026 by rpki-client