This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WuMCvqUvDa3ltNc0cde2ZUXMcgQ.roa File: WuMCvqUvDa3ltNc0cde2ZUXMcgQ.roa (raw, json) Hash identifier: LSZfRTeAneVwcr2WfbjtFq3wjjTb9wWjzvalKt7twH0= Subject key identifier: 5A:E3:02:BE:A5:2F:0D:AD:E5:B4:D7:34:71:D7:B6:65:45:CC:72:04 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B73258DABBD963A13A0D9876D8B7A2A12 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WuMCvqUvDa3ltNc0cde2ZUXMcgQ.roa Signing time: Wed 31 Dec 2025 06:43:19 +0000 ROA not before: Wed 31 Dec 2025 06:43:19 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 210643 IP address blocks: 2a0e:97c0:9b0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 06:43:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:73:25:8d:ab:bd:96:3a:13:a0:d9:87:6d:8b:7a:2a:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Dec 31 06:43:19 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5ae302bea52f0dade5b4d73471d7b66545cc7204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:cf:b7:cb:1b:38:ad:a5:61:30:db:bc:cd:5b: ab:d6:a0:6b:66:db:aa:d5:e6:47:95:1e:f6:78:9a: 65:8d:f5:c6:bb:0e:70:22:5c:e2:25:6f:16:c8:ad: d3:f1:ac:eb:7a:cd:ef:c6:20:03:e0:6f:2c:ee:2f: 16:74:33:0a:d4:e4:1f:e9:6e:7b:d9:a6:c6:e6:81: 4d:63:cb:37:5c:d1:73:20:9b:71:3f:df:49:f6:36: e7:ea:81:47:24:d2:c5:a3:da:a0:e2:ce:dc:62:cc: 23:22:1b:98:c8:8a:cc:06:37:06:90:4a:41:b7:c6: 1b:68:f1:ff:b3:12:69:a5:9f:c4:b5:c9:ef:fb:96: 29:79:fb:3a:7a:0c:c1:d5:dc:cb:5a:40:3d:21:5b: e9:23:02:5b:a3:3f:18:56:0e:21:36:d5:99:b1:c9: b8:cd:65:63:81:b5:c4:31:ee:ec:23:86:89:ae:f3: 4b:a6:e7:35:e3:4d:3c:21:da:7d:5e:fe:fc:6e:e1: 2a:25:82:34:69:98:6f:c1:b3:aa:22:98:53:30:9c: bb:1e:f6:76:c6:ab:84:9c:57:7f:3f:48:f9:91:0b: 09:2b:2b:76:c9:42:64:6b:c4:3a:40:bd:db:eb:6f: d1:94:76:f4:9e:45:75:0d:9e:74:d2:6f:8c:1d:da: c0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E3:02:BE:A5:2F:0D:AD:E5:B4:D7:34:71:D7:B6:65:45:CC:72:04 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WuMCvqUvDa3ltNc0cde2ZUXMcgQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:9b0::/44 Signature Algorithm: sha256WithRSAEncryption 00:c7:4a:e1:c7:72:1b:5b:49:d4:8e:aa:28:99:b0:06:e3:72: f0:a1:ee:9b:7b:07:05:d0:f4:2a:3b:af:d3:9e:f3:09:7e:ad: 63:35:91:40:49:03:3c:25:57:e4:f8:da:9a:33:41:33:a1:df: 3b:4c:45:c9:da:56:c6:51:72:2b:97:8f:b7:df:7c:ca:ef:c8: 01:d3:ba:3b:d8:3e:d2:00:36:d2:22:a9:fb:07:da:74:55:76: bd:bd:cc:37:b1:ac:21:8a:ca:e1:d8:eb:c4:60:a0:ca:aa:97: 3e:21:c7:c2:e4:13:7f:3a:5c:69:20:05:07:be:96:2b:94:74: 07:11:41:0a:46:61:69:55:ea:b2:2b:9a:22:96:91:1e:26:53: e3:6f:a3:30:cf:44:78:94:82:33:7b:4c:05:ad:b0:c6:4f:d4: 09:09:ad:f1:86:c9:25:70:53:5d:cd:f6:ec:a5:6c:58:f0:71: 11:7c:a7:9d:d3:ee:4d:00:c1:a2:b7:47:ba:aa:fc:7c:6a:36: e3:88:a0:b5:84:7d:90:fd:72:eb:fc:e8:31:e2:32:d0:3c:7c: b3:29:18:01:df:fa:84:a1:4c:5c:c8:35:41:c5:e6:de:e4:90: 2c:c4:88:0e:ae:bc:36:90:52:07:ce:00:ef:82:eb:a1:e3:e2: 6e:5b:2c:02 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZtzJY2rvZY6E6DZh22LeioSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjUxMjMxMDY0MzE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YWUzMDJiZWE1MmYwZGFkZTViNGQ3MzQ3MWQ3YjY2NTQ1Y2M3MjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApc+3yxs4raVhMNu8zVur1qBrZtuq 1eZHlR72eJpljfXGuw5wIlziJW8WyK3T8azres3vxiAD4G8s7i8WdDMK1OQf6W57 2abG5oFNY8s3XNFzIJtxP99J9jbn6oFHJNLFo9qg4s7cYswjIhuYyIrMBjcGkEpB t8YbaPH/sxJppZ/Etcnv+5Ypefs6egzB1dzLWkA9IVvpIwJboz8YVg4hNtWZscm4 zWVjgbXEMe7sI4aJrvNLpuc14008Idp9Xv78buEqJYI0aZhvwbOqIphTMJy7HvZ2 xquEnFd/P0j5kQsJKyt2yUJka8Q6QL3b62/RlHb0nkV1DZ500m+MHdrAbQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFrjAr6lLw2t5bTXNHHXtmVFzHIEMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvV3VNQ3ZxVXZEYTNsdE5jMGNkZTJaVVhNY2dRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwAmw MA0GCSqGSIb3DQEBCwUAA4IBAQAAx0rhx3IbW0nUjqoombAG43Lwoe6bewcF0PQq O6/TnvMJfq1jNZFASQM8JVfk+NqaM0Ezod87TEXJ2lbGUXIrl4+333zK78gB07o7 2D7SADbSIqn7B9p0VXa9vcw3sawhisrh2OvEYKDKqpc+IcfC5BN/OlxpIAUHvpYr lHQHEUEKRmFpVeqyK5oilpEeJlPjb6Mwz0R4lIIze0wFrbDGT9QJCa3xhsklcFNd zfbspWxY8HERfKed0+5NAMGit0e6qvx8ajbjiKC1hH2Q/XLr/Ogx4jLQPHyzKRgB 3/qEoUxcyDVBxebe5JAsxIgOrrw2kFIHzgDvguuh4+JuWywC -----END CERTIFICATE-----Generated at Wed Dec 31 12:45:33 2025 by rpki-client