This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wdCAPG5lLwiNU3alj_BicUCWb1A.roa File: wdCAPG5lLwiNU3alj_BicUCWb1A.roa (raw, json) Hash identifier: CqCHF2TUoRoQvU+wRxQUbzDMXNbdQmLsEnJ/E/H2Zco= Subject key identifier: C1:D0:80:3C:6E:65:2F:08:8D:53:76:A5:8F:F0:62:71:40:96:6F:50 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D504903D5FCA153AB0998396D6CF0 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wdCAPG5lLwiNU3alj_BicUCWb1A.roa Signing time: Fri 02 Jan 2026 06:20:25 +0000 ROA not before: Fri 02 Jan 2026 06:20:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212359 IP address blocks: 2a0e:b107:1340::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 17:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:50:49:03:d5:fc:a1:53:ab:09:98:39:6d:6c:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1d0803c6e652f088d5376a58ff0627140966f50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:fa:3a:8c:8c:7e:9f:d6:55:14:8e:c6:82:ea: d2:49:25:5a:b4:2f:ad:2b:15:ae:7e:fa:8d:1c:4f: 24:f5:a1:0d:a7:d8:6f:7a:5e:f7:5c:fb:82:c2:14: 62:0e:2b:35:63:79:b3:af:11:14:74:0b:36:40:ad: c0:cf:52:61:94:1e:42:ff:1e:89:93:76:26:49:ed: 96:f2:1f:3a:ed:e1:63:ca:db:28:17:fc:7b:20:4f: e3:92:a4:b6:cf:cf:4d:d5:83:4a:70:d8:b2:fb:98: e8:40:48:8e:02:98:af:3d:ac:e0:ab:cd:4f:14:bd: 83:6b:e0:58:02:e7:99:e3:54:f3:ed:f5:f6:e5:34: 4a:81:9f:69:c6:5f:4a:ee:82:bc:77:fd:0b:d5:bd: 9e:4c:e1:90:4d:01:03:45:fa:21:eb:ba:20:a1:b9: cb:b8:d6:bf:74:ba:2f:04:fd:2a:3a:79:c0:ac:07: c1:26:b1:90:0c:8e:fb:5e:ed:df:a8:7f:3f:ef:18: ca:61:63:87:6d:9a:6f:eb:7a:d9:46:64:e4:25:f3: 6d:38:c6:65:88:61:fd:c4:72:e6:74:c1:79:28:b0: 53:35:6f:ef:b5:ff:4f:b6:ea:d4:67:92:9c:5e:1b: e9:56:58:8b:2c:1d:bb:28:14:fd:5b:bd:56:6a:f4: 3f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:D0:80:3C:6E:65:2F:08:8D:53:76:A5:8F:F0:62:71:40:96:6F:50 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wdCAPG5lLwiNU3alj_BicUCWb1A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:1340::/44 Signature Algorithm: sha256WithRSAEncryption 17:df:11:6a:af:7a:06:c4:4f:1b:78:ae:92:4b:c4:79:f5:2e: a3:82:a7:ff:43:d3:a3:47:4a:85:7e:f5:a5:24:67:f3:8a:9e: 49:48:8c:81:c8:96:95:13:00:9b:9f:69:77:fe:cf:34:dc:35: 33:fe:8e:13:cd:91:47:10:85:cb:d1:6a:f5:4a:92:ca:37:c6: ae:e6:67:b5:b1:cf:b8:fe:ef:a0:de:6e:4d:2c:6d:65:01:a2: c6:5c:b6:bb:fe:0e:93:56:20:a1:77:e2:b4:49:23:5d:65:a3: 62:51:61:d0:4d:eb:ce:60:e2:67:cc:fd:9b:04:ee:2b:08:59: 15:47:76:09:01:ea:77:16:21:0e:87:36:28:6d:df:2a:af:8c: d9:75:1e:b7:d1:ca:07:76:67:ff:bb:dd:66:64:0d:e5:bd:1b: a5:a2:29:c4:43:0a:7b:6b:95:50:ba:80:fc:17:dc:f5:9d:bb: 72:c9:9d:c3:c1:45:63:03:43:a6:a2:c0:84:6a:f7:6d:ab:19: 0b:86:ba:79:4f:f2:e6:91:7f:c6:7f:24:69:5a:73:11:45:80: 78:da:ca:f9:62:97:24:9c:19:35:cd:6a:c7:95:ba:87:cc:9e: a7:2d:d4:14:9b:0c:71:db:22:12:ce:27:40:de:c3:5e:0a:8a: 04:80:cf:14 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XVBJA9X8oVOrCZg5bWzwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMWQwODAzYzZlNjUyZjA4OGQ1Mzc2YTU4ZmYwNjI3MTQwOTY2ZjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfo6jIx+n9ZVFI7GgurSSSVatC+t KxWufvqNHE8k9aENp9hvel73XPuCwhRiDis1Y3mzrxEUdAs2QK3Az1JhlB5C/x6J k3YmSe2W8h867eFjytsoF/x7IE/jkqS2z89N1YNKcNiy+5joQEiOApivPazgq81P FL2Da+BYAueZ41Tz7fX25TRKgZ9pxl9K7oK8d/0L1b2eTOGQTQEDRfoh67ogobnL uNa/dLovBP0qOnnArAfBJrGQDI77Xu3fqH8/7xjKYWOHbZpv63rZRmTkJfNtOMZl iGH9xHLmdMF5KLBTNW/vtf9PturUZ5KcXhvpVliLLB27KBT9W71WavQ/IwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMHQgDxuZS8IjVN2pY/wYnFAlm9QMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvd2RDQVBHNWxMd2lOVTNhbGpfQmljVUNXYjFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBxNA MA0GCSqGSIb3DQEBCwUAA4IBAQAX3xFqr3oGxE8beK6SS8R59S6jgqf/Q9OjR0qF fvWlJGfzip5JSIyByJaVEwCbn2l3/s803DUz/o4TzZFHEIXL0Wr1SpLKN8au5me1 sc+4/u+g3m5NLG1lAaLGXLa7/g6TViChd+K0SSNdZaNiUWHQTevOYOJnzP2bBO4r CFkVR3YJAep3FiEOhzYobd8qr4zZdR630coHdmf/u91mZA3lvRuloinEQwp7a5VQ uoD8F9z1nbtyyZ3DwUVjA0OmosCEavdtqxkLhrp5T/LmkX/GfyRpWnMRRYB42sr5 YpcknBk1zWrHlbqHzJ6nLdQUmwxx2yISzidA3sNeCooEgM8U -----END CERTIFICATE-----Generated at Sat Jan 10 02:19:30 2026 by rpki-client