This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WxncQHcMntRhW1-fhI_iMdSrK6Q.roa File: WxncQHcMntRhW1-fhI_iMdSrK6Q.roa (raw, json) Hash identifier: kSFJ5AKudRNUKFooQuTJ/ZIrAH2ctYA/TsPNtZv+WU4= Subject key identifier: 5B:19:DC:40:77:0C:9E:D4:61:5B:5F:9F:84:8F:E2:31:D4:AB:2B:A4 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CDBDC1ED611034BBE31158DF18E02 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WxncQHcMntRhW1-fhI_iMdSrK6Q.roa Signing time: Fri 02 Jan 2026 06:19:56 +0000 ROA not before: Fri 02 Jan 2026 06:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198747 IP address blocks: 2a0e:97c0:388::/48 maxlen: 48 2a0e:97c0:38f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:db:dc:1e:d6:11:03:4b:be:31:15:8d:f1:8e:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b19dc40770c9ed4615b5f9f848fe231d4ab2ba4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d5:ef:01:ab:86:2d:6d:34:70:4f:13:e0:f2: 36:45:ec:3f:41:d4:d8:b2:ef:5e:d7:32:5e:8b:8d: 18:f4:70:da:1a:76:2b:db:2f:d0:cc:8e:4b:7a:52: 98:e0:c7:21:a1:8b:61:96:18:b1:f7:06:0c:99:db: dd:51:84:e8:cc:4b:48:f2:93:72:47:4f:28:da:79: 05:74:b7:31:60:46:9e:d8:9f:a8:82:cc:93:b5:7b: 1d:09:b0:aa:f5:d8:a3:33:71:bf:b2:fb:d7:4e:e2: 30:f3:8f:ae:c5:3f:2a:eb:84:40:f8:90:8b:a6:9a: 0f:34:d7:8e:01:87:8c:f3:de:71:8d:ba:a7:92:cc: d4:e6:0a:d6:c1:6b:0c:b1:dd:ad:f5:33:02:94:a7: 08:51:80:e6:eb:c4:d2:6e:2a:1b:92:ba:4b:ba:7b: ab:49:29:59:21:d5:da:ae:27:0a:6e:83:a8:5e:62: 8d:15:f1:60:cb:92:3d:c0:60:da:d4:08:8a:36:93: 4a:1b:79:c4:03:d5:bf:97:41:95:7d:27:65:b1:47: 63:35:bf:bf:6f:bc:33:05:a9:31:b3:40:89:f9:ec: 72:ff:75:ab:d9:43:2a:19:d7:e5:54:9a:7e:be:6f: 5e:12:60:a9:e6:c1:aa:f7:89:f7:e8:c6:7f:34:2c: 78:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:19:DC:40:77:0C:9E:D4:61:5B:5F:9F:84:8F:E2:31:D4:AB:2B:A4 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WxncQHcMntRhW1-fhI_iMdSrK6Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:388::/48 2a0e:97c0:38f::/48 Signature Algorithm: sha256WithRSAEncryption 5b:33:1b:4b:3e:49:a9:6c:2a:f1:e9:2f:3d:e8:d0:ad:66:d0: bd:7b:5f:af:10:07:cc:b2:0d:e2:8d:26:8a:f5:1b:f6:ea:0f: d0:3e:5e:a7:8c:eb:25:4f:ff:8e:f8:87:cb:c6:93:7b:b4:15: 14:9a:be:8b:00:77:67:49:ee:a4:f5:85:f8:91:68:8a:23:60: ad:86:fe:2a:6d:3c:3e:04:b8:42:74:72:58:11:35:d8:6b:cd: 09:11:73:99:09:10:83:15:d6:cb:8a:b1:da:d3:97:7e:2b:c4: f4:38:c7:7d:f8:3b:77:09:2c:9f:64:87:94:14:fc:cf:15:4f: ad:94:b8:4f:8b:92:a9:7f:2d:c9:44:3a:22:5b:c4:d1:02:53: c8:88:f5:67:aa:50:05:cd:c6:3c:db:5f:e2:63:96:bb:eb:83: c5:96:28:7c:a9:9b:30:f7:32:91:9c:e2:1b:4f:43:0a:82:82: 90:6f:b1:a6:7e:99:fb:40:62:a2:3a:05:59:c6:eb:ae:7b:9b: 4c:88:c4:7c:40:f6:4e:e5:8c:38:7b:b0:e4:0d:a4:87:bf:55: 5a:28:24:38:94:2a:35:c9:41:cb:5b:00:b1:47:ee:67:f5:03: d8:d1:0a:bc:1d:7f:7b:53:3d:42:56:e1:93:28:ec:20:ae:f0: 83:3a:2f:f0 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XNvcHtYRA0u+MRWN8Y4CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjE5ZGM0MDc3MGM5ZWQ0NjE1YjVmOWY4NDhmZTIzMWQ0YWIyYmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NXvAauGLW00cE8T4PI2Rew/QdTY su9e1zJei40Y9HDaGnYr2y/QzI5LelKY4MchoYthlhix9wYMmdvdUYTozEtI8pNy R08o2nkFdLcxYEae2J+ogsyTtXsdCbCq9dijM3G/svvXTuIw84+uxT8q64RA+JCL ppoPNNeOAYeM895xjbqnkszU5grWwWsMsd2t9TMClKcIUYDm68TSbiobkrpLunur SSlZIdXaricKboOoXmKNFfFgy5I9wGDa1AiKNpNKG3nEA9W/l0GVfSdlsUdjNb+/ b7wzBakxs0CJ+exy/3Wr2UMqGdflVJp+vm9eEmCp5sGq94n36MZ/NCx44wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFsZ3EB3DJ7UYVtfn4SP4jHUqyukMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvV3huY1FIY01udFJoVzEtZmhJX2lNZFNySzZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKg6XwAOI AwcAKg6XwAOPMA0GCSqGSIb3DQEBCwUAA4IBAQBbMxtLPkmpbCrx6S896NCtZtC9 e1+vEAfMsg3ijSaK9Rv26g/QPl6njOslT/+O+IfLxpN7tBUUmr6LAHdnSe6k9YX4 kWiKI2Cthv4qbTw+BLhCdHJYETXYa80JEXOZCRCDFdbLirHa05d+K8T0OMd9+Dt3 CSyfZIeUFPzPFU+tlLhPi5Kpfy3JRDoiW8TRAlPIiPVnqlAFzcY821/iY5a764PF lih8qZsw9zKRnOIbT0MKgoKQb7Gmfpn7QGKiOgVZxuuue5tMiMR8QPZO5Yw4e7Dk DaSHv1VaKCQ4lCo1yUHLWwCxR+5n9QPY0Qq8HX97Uz1CVuGTKOwgrvCDOi/w -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:49 2026 by rpki-client