This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/w4IJLRrzvyZycTupjOZoPewe-IE.roa File: w4IJLRrzvyZycTupjOZoPewe-IE.roa (raw, json) Hash identifier: kfoqLEMCUfgUuWYtSx6eBO0gIxAfU/qkniiiNox4xjg= Subject key identifier: C3:82:09:2D:1A:F3:BF:26:72:71:3B:A9:8C:E6:68:3D:EC:1E:F8:81 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CA18C5EF37EB7EAFAA17CB8A266BB Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/w4IJLRrzvyZycTupjOZoPewe-IE.roa Signing time: Fri 02 Jan 2026 06:19:41 +0000 ROA not before: Fri 02 Jan 2026 06:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 17160 IP address blocks: 2a10:2f00:168::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:a1:8c:5e:f3:7e:b7:ea:fa:a1:7c:b8:a2:66:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c382092d1af3bf2672713ba98ce6683dec1ef881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3e:7a:fe:ae:f8:c8:f9:43:cd:0b:31:c7:e4: 16:f0:80:75:18:5e:51:c0:86:57:ca:f8:8d:ce:63: d2:19:ce:83:8f:1a:59:d2:ef:a8:2a:d6:44:d0:c0: 7c:f3:24:0f:6a:65:d4:4e:e0:00:0a:4e:fc:24:a0: cf:7f:34:11:0e:bd:bf:77:7a:7d:d7:1c:69:ad:89: 6d:69:4b:88:b3:0d:2d:6b:79:68:c4:c4:38:bb:09: fa:4f:45:02:89:0c:87:bd:7c:92:f8:86:b1:6e:6f: 25:03:5b:65:f6:54:a9:23:d9:16:54:70:5d:2e:4d: ff:83:e1:ea:74:72:85:47:99:7d:21:11:b5:ce:4a: de:43:78:a8:a4:24:dc:f3:8e:6b:98:f7:cf:d1:53: ae:82:65:cb:ed:e2:fd:c7:b3:5c:9c:e3:1d:82:5b: 61:39:2e:67:73:e8:26:51:11:56:44:a6:3c:57:0b: 31:83:ff:2f:96:53:51:ce:8c:dc:28:b6:a9:a3:21: 7d:36:57:1a:d5:63:91:8a:a2:21:fa:2f:ff:b5:77: 88:12:95:a2:e9:89:d6:9f:b4:4f:21:fa:a9:98:47: 44:ac:80:81:d8:34:91:6c:80:e6:5c:b9:36:f6:6e: 03:7a:8e:c6:aa:a2:b1:c2:0e:ef:a7:f4:3f:c7:72: 10:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:82:09:2D:1A:F3:BF:26:72:71:3B:A9:8C:E6:68:3D:EC:1E:F8:81 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/w4IJLRrzvyZycTupjOZoPewe-IE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:2f00:168::/48 Signature Algorithm: sha256WithRSAEncryption bf:c8:fc:d8:e5:19:59:99:37:03:f5:f9:63:85:4b:dc:77:aa: 18:81:02:a5:04:1b:68:40:9d:54:34:17:84:c4:6c:12:17:22: 95:f5:28:63:25:9e:d4:97:e9:e8:c0:0c:17:08:1d:09:a4:95: 95:e7:cc:e0:dd:6c:9b:a6:b5:09:51:74:4b:b9:7e:b3:4e:6f: 47:c2:47:bb:b5:fe:c5:43:c5:09:6c:ea:91:79:c6:df:94:99: 7a:f3:91:82:c3:2c:80:d3:75:99:87:f8:53:a5:c8:51:6c:d9: 1f:f1:d7:97:78:01:e2:84:b3:4a:62:f4:00:bb:2a:e5:c8:6a: a9:d7:22:2e:7b:1e:94:1d:38:a6:02:ea:ec:f3:5b:19:35:7f: 50:84:32:fe:01:51:73:04:b9:44:d8:a4:a6:ea:4d:3d:75:4b: b9:82:d3:dc:15:66:4d:0d:b0:a6:c9:cf:06:45:4a:94:b2:7e: 9f:5a:28:b0:35:97:29:d2:b1:28:e0:3f:19:37:5a:27:9f:85: f5:99:06:7c:d8:25:8b:37:30:46:f7:ad:9b:9e:10:7e:4e:e1: e0:90:9d:ee:51:58:40:b4:7d:e8:ad:ed:f9:e0:47:f5:2b:81: ce:fd:73:e9:fa:34:f1:82:d5:69:d5:cc:92:36:f7:20:36:7c: b3:32:6f:38 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XKGMXvN+t+r6oXy4oma7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzgyMDkyZDFhZjNiZjI2NzI3MTNiYTk4Y2U2NjgzZGVjMWVmODgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqD56/q74yPlDzQsxx+QW8IB1GF5R wIZXyviNzmPSGc6DjxpZ0u+oKtZE0MB88yQPamXUTuAACk78JKDPfzQRDr2/d3p9 1xxprYltaUuIsw0ta3loxMQ4uwn6T0UCiQyHvXyS+Iaxbm8lA1tl9lSpI9kWVHBd Lk3/g+HqdHKFR5l9IRG1zkreQ3iopCTc845rmPfP0VOugmXL7eL9x7NcnOMdglth OS5nc+gmURFWRKY8Vwsxg/8vllNRzozcKLapoyF9Nlca1WORiqIh+i//tXeIEpWi 6YnWn7RPIfqpmEdErICB2DSRbIDmXLk29m4Deo7GqqKxwg7vp/Q/x3IQYQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMOCCS0a878mcnE7qYzmaD3sHviBMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvdzRJSkxScnp2eVp5Y1R1cGpPWm9QZXdlLUlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhAvAAFo MA0GCSqGSIb3DQEBCwUAA4IBAQC/yPzY5RlZmTcD9fljhUvcd6oYgQKlBBtoQJ1U NBeExGwSFyKV9ShjJZ7Ul+nowAwXCB0JpJWV58zg3WybprUJUXRLuX6zTm9Hwke7 tf7FQ8UJbOqRecbflJl685GCwyyA03WZh/hTpchRbNkf8deXeAHihLNKYvQAuyrl yGqp1yIuex6UHTimAurs81sZNX9QhDL+AVFzBLlE2KSm6k09dUu5gtPcFWZNDbCm yc8GRUqUsn6fWiiwNZcp0rEo4D8ZN1onn4X1mQZ82CWLNzBG962bnhB+TuHgkJ3u UVhAtH3ore354Ef1K4HO/XPp+jTxgtVp1cySNvcgNnyzMm84 -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:04 2026 by rpki-client