This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/mWewCUp-0PzdpDuj9hmcgLnBbgc.roa File: mWewCUp-0PzdpDuj9hmcgLnBbgc.roa (raw, json) Hash identifier: XhpTiIi64vpRmF49lnPkzv88wmmlrtfLDdl2REHf3Fo= Subject key identifier: 99:67:B0:09:4A:7E:D0:FC:DD:A4:3B:A3:F6:19:9C:80:B9:C1:6E:07 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D39187377449671F46ADA4E861D97 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/mWewCUp-0PzdpDuj9hmcgLnBbgc.roa Signing time: Fri 02 Jan 2026 06:20:19 +0000 ROA not before: Fri 02 Jan 2026 06:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211242 IP address blocks: 2a0e:b107:13c0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:39:18:73:77:44:96:71:f4:6a:da:4e:86:1d:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9967b0094a7ed0fcdda43ba3f6199c80b9c16e07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:78:81:72:2c:5d:c1:72:5a:79:7a:75:f8:d6: ac:d4:20:1a:0d:e3:a3:89:70:66:6e:fa:0c:ac:a4: a5:5a:d6:c8:dd:16:e5:3c:08:15:52:0e:b8:15:2c: 5d:73:1a:cf:35:01:63:f4:7d:35:63:07:c1:15:70: bb:21:8b:36:12:33:23:f7:b4:4c:34:4a:fd:41:ac: 6e:5d:d7:53:cd:a8:63:67:8c:8f:0c:90:9b:7d:f4: fc:e3:2b:54:8b:dd:de:68:02:aa:d3:0d:b2:e4:8e: 2e:c6:d7:49:da:8f:ee:a0:77:a1:01:1a:83:4e:b3: 56:97:42:c6:86:f2:44:c4:e7:ae:fc:75:63:a0:44: 4a:a4:86:a7:cc:fd:e9:45:e9:0e:86:ab:f6:b8:3e: 8e:ae:ee:bb:5a:41:84:10:48:77:34:4a:99:c9:81: 45:b7:26:09:df:c7:aa:72:4a:24:b4:dd:42:9c:1d: 58:d3:b0:a0:a4:c9:f0:38:b9:96:9f:dc:af:2e:bd: 95:22:c5:6b:82:fd:e3:da:42:e6:8d:b9:8c:27:ae: cf:35:99:3b:89:8a:b9:8a:d7:3f:f6:69:3f:c7:a7: 9a:f2:3e:bd:f0:ff:a8:8d:d8:06:5f:26:c4:ba:91: 11:82:cf:8d:cf:85:2d:29:9f:63:b2:de:2b:de:8d: 79:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:67:B0:09:4A:7E:D0:FC:DD:A4:3B:A3:F6:19:9C:80:B9:C1:6E:07 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/mWewCUp-0PzdpDuj9hmcgLnBbgc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:13c0::/44 Signature Algorithm: sha256WithRSAEncryption 10:fc:4d:df:89:24:e8:2d:af:d4:e2:56:19:65:e3:a5:5e:0e: 43:c7:9f:36:45:26:d4:81:26:b2:05:57:30:e5:ac:1b:6c:04: 5a:0f:3f:02:00:47:89:9e:db:32:48:3f:2e:06:b0:dc:e1:f9: 20:b0:a9:6d:0e:fb:bd:b5:c7:ad:39:d1:55:6e:80:96:87:89: 4d:39:1a:6f:77:83:3e:13:3d:ef:28:52:a4:21:96:9f:68:2e: 3c:de:11:40:b8:7d:93:41:12:fc:91:a0:52:27:9b:96:fa:3e: 65:24:c3:3c:81:b7:8c:e3:28:5c:b9:5c:a7:65:51:73:bc:37: 55:50:f0:a7:74:5c:5a:64:d3:76:5d:cb:d6:f8:4f:26:ba:74: 61:80:30:3f:35:a1:80:b6:dd:67:69:82:94:0b:50:7e:91:0c: 76:72:31:53:dd:bc:a0:6b:4f:9b:2b:83:6a:4b:14:ff:5e:76: ec:62:ef:41:28:8c:da:b9:3b:ab:bd:6a:72:84:44:7d:8a:f7: dd:2b:69:c1:58:50:25:5c:72:99:cb:b2:16:e3:b2:d1:29:04: ac:97:6e:0b:27:41:e0:f0:13:87:c9:24:39:dd:55:e5:f2:28: e0:f2:55:f0:0f:68:13:55:9a:bb:7f:bf:4a:2f:c7:41:8a:a7: 49:cd:a2:52 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XTkYc3dElnH0atpOhh2XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTY3YjAwOTRhN2VkMGZjZGRhNDNiYTNmNjE5OWM4MGI5YzE2ZTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHiBcixdwXJaeXp1+Nas1CAaDeOj iXBmbvoMrKSlWtbI3RblPAgVUg64FSxdcxrPNQFj9H01YwfBFXC7IYs2EjMj97RM NEr9QaxuXddTzahjZ4yPDJCbffT84ytUi93eaAKq0w2y5I4uxtdJ2o/uoHehARqD TrNWl0LGhvJExOeu/HVjoERKpIanzP3pRekOhqv2uD6Oru67WkGEEEh3NEqZyYFF tyYJ38eqckoktN1CnB1Y07CgpMnwOLmWn9yvLr2VIsVrgv3j2kLmjbmMJ67PNZk7 iYq5itc/9mk/x6ea8j698P+ojdgGXybEupERgs+Nz4UtKZ9jst4r3o15zwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJlnsAlKftD83aQ7o/YZnIC5wW4HMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvbVdld0NVcC0wUHpkcER1ajlobWNnTG5CYmdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBxPA MA0GCSqGSIb3DQEBCwUAA4IBAQAQ/E3fiSToLa/U4lYZZeOlXg5Dx582RSbUgSay BVcw5awbbARaDz8CAEeJntsySD8uBrDc4fkgsKltDvu9tcetOdFVboCWh4lNORpv d4M+Ez3vKFKkIZafaC483hFAuH2TQRL8kaBSJ5uW+j5lJMM8gbeM4yhcuVynZVFz vDdVUPCndFxaZNN2XcvW+E8munRhgDA/NaGAtt1naYKUC1B+kQx2cjFT3byga0+b K4NqSxT/XnbsYu9BKIzauTurvWpyhER9ivfdK2nBWFAlXHKZy7IW47LRKQSsl24L J0Hg8BOHySQ53VXl8ijg8lXwD2gTVZq7f79KL8dBiqdJzaJS -----END CERTIFICATE-----Generated at Fri Jan 9 13:12:07 2026 by rpki-client