This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wGevuddbrzKEHp3nogG1mpGIMhY.roa File: wGevuddbrzKEHp3nogG1mpGIMhY.roa (raw, json) Hash identifier: OjrFrbOdubxLnbnuOc5vRgttWeFpOjVUQq7tGKcD0W8= Subject key identifier: C0:67:AF:B9:D7:5B:AF:32:84:1E:9D:E7:A2:01:B5:9A:91:88:32:16 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D2969E537EE280CC30120AD822165 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wGevuddbrzKEHp3nogG1mpGIMhY.roa Signing time: Fri 02 Jan 2026 06:20:16 +0000 ROA not before: Fri 02 Jan 2026 06:20:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210633 IP address blocks: 2a0e:b107:1960::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:29:69:e5:37:ee:28:0c:c3:01:20:ad:82:21:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c067afb9d75baf32841e9de7a201b59a91883216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:18:ac:f0:4b:78:70:e1:cb:0b:28:84:81:68: f1:4c:ba:ca:e2:b0:72:50:2d:e6:cf:b3:95:2c:a7: c9:b3:b3:3e:0a:4a:cc:88:b4:52:97:9d:91:0d:36: 62:ff:72:33:2f:ad:a3:39:75:ad:0c:ce:6a:7c:02: c5:fe:b9:5c:99:ec:64:83:55:fc:2a:26:fc:80:5b: 5b:e2:5e:6c:43:07:95:b2:4e:b7:e5:0d:50:ae:82: ab:4b:2f:6f:f2:68:24:91:1f:fe:57:38:4a:c4:1c: 39:ed:35:b2:8c:23:fe:a2:16:89:89:23:c4:79:b4: 42:92:49:73:6a:64:4e:92:c3:0c:76:0e:9b:ce:df: cc:92:8a:a3:a1:67:e1:a2:27:ca:83:b2:57:0b:a2: 05:37:f6:22:d7:cd:ba:ab:a9:70:3b:0b:03:84:90: e3:c2:42:00:cc:56:db:0a:2d:c3:b1:66:03:7c:5e: 03:0e:a2:a9:9b:19:7a:aa:9e:d5:2c:42:eb:d0:8c: 86:bf:c8:3b:c7:19:2a:8c:2d:13:a3:af:fb:02:61: a8:fc:61:a6:e1:2f:10:ee:7a:36:d0:6e:c1:b7:f1: f8:03:ac:10:85:8c:e4:de:c1:0a:09:b6:30:08:0e: cf:19:a9:19:12:8a:79:5c:a8:cf:29:54:33:be:26: ce:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:67:AF:B9:D7:5B:AF:32:84:1E:9D:E7:A2:01:B5:9A:91:88:32:16 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wGevuddbrzKEHp3nogG1mpGIMhY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:1960::/44 Signature Algorithm: sha256WithRSAEncryption 34:8b:ed:5f:31:0d:ff:44:79:43:8e:2c:ef:34:92:09:13:09: 42:4d:2d:24:8b:35:c0:3b:b9:dd:c9:b3:af:01:4a:a6:16:a0: c3:4f:3c:c4:68:29:33:09:d8:58:8b:bc:0d:c4:44:3f:dd:a6: b3:6f:9f:b6:25:d3:10:5c:ad:a4:08:52:8d:75:d6:48:3c:53: ac:9b:92:11:af:4d:22:6f:0d:b8:12:21:3d:4f:9c:fe:40:b2: 27:64:bc:66:74:00:62:c7:7e:ac:d4:69:7f:fd:34:2d:13:3b: 1a:80:72:5a:c3:11:68:ae:1c:90:66:a2:b2:bd:84:94:9c:8a: 2f:39:26:ef:73:db:28:94:73:83:b3:b0:10:84:0f:10:8b:7a: a8:a1:bf:db:99:88:22:21:91:57:4a:b2:df:43:cb:ec:38:05: 8f:1d:ae:73:97:4c:83:96:4f:74:58:e5:0b:94:d1:93:dd:df: ae:3e:0c:ad:a2:d8:ef:c0:96:fd:0c:c9:23:e4:2c:9d:90:8f: bf:c1:9d:fa:c8:9f:e3:4d:9b:40:41:a4:2c:20:f0:9d:17:6c: 32:5f:88:c3:a5:9a:09:1b:ff:d7:bb:14:e4:59:72:32:a3:96: 39:02:9c:17:bd:5a:bc:44:9e:7e:67:68:4c:fb:85:66:c3:51: f0:62:b8:ab -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XSlp5TfuKAzDASCtgiFlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDY3YWZiOWQ3NWJhZjMyODQxZTlkZTdhMjAxYjU5YTkxODgzMjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBis8Et4cOHLCyiEgWjxTLrK4rBy UC3mz7OVLKfJs7M+CkrMiLRSl52RDTZi/3IzL62jOXWtDM5qfALF/rlcmexkg1X8 Kib8gFtb4l5sQweVsk635Q1QroKrSy9v8mgkkR/+VzhKxBw57TWyjCP+ohaJiSPE ebRCkklzamROksMMdg6bzt/MkoqjoWfhoifKg7JXC6IFN/Yi1826q6lwOwsDhJDj wkIAzFbbCi3DsWYDfF4DDqKpmxl6qp7VLELr0IyGv8g7xxkqjC0To6/7AmGo/GGm 4S8Q7no20G7Bt/H4A6wQhYzk3sEKCbYwCA7PGakZEop5XKjPKVQzvibOuQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMBnr7nXW68yhB6d56IBtZqRiDIWMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvd0dldnVkZGJyektFSHAzbm9nRzFtcEdJTWhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBxlg MA0GCSqGSIb3DQEBCwUAA4IBAQA0i+1fMQ3/RHlDjizvNJIJEwlCTS0kizXAO7nd ybOvAUqmFqDDTzzEaCkzCdhYi7wNxEQ/3aazb5+2JdMQXK2kCFKNddZIPFOsm5IR r00ibw24EiE9T5z+QLInZLxmdABix36s1Gl//TQtEzsagHJawxForhyQZqKyvYSU nIovOSbvc9solHODs7AQhA8Qi3qoob/bmYgiIZFXSrLfQ8vsOAWPHa5zl0yDlk90 WOULlNGT3d+uPgytotjvwJb9DMkj5CydkI+/wZ36yJ/jTZtAQaQsIPCdF2wyX4jD pZoJG//XuxTkWXIyo5Y5ApwXvVq8RJ5+Z2hM+4Vmw1HwYrir -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:09 2026 by rpki-client