This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wwNzRzyZune5F_qyzWVWbS3k9Eo.roa File: wwNzRzyZune5F_qyzWVWbS3k9Eo.roa (raw, json) Hash identifier: f9feefb5J9j47CO9/lCrlp0VpTMHnRTCx4uK9ufvtWA= Subject key identifier: C3:03:73:47:3C:99:BA:77:B9:17:FA:B2:CD:65:56:6D:2D:E4:F4:4A Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D2E03C1CFECF0E19507C12E06A378 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wwNzRzyZune5F_qyzWVWbS3k9Eo.roa Signing time: Fri 02 Jan 2026 06:20:17 +0000 ROA not before: Fri 02 Jan 2026 06:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210842 IP address blocks: 2a0e:b107:1600::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:2e:03:c1:cf:ec:f0:e1:95:07:c1:2e:06:a3:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c30373473c99ba77b917fab2cd65566d2de4f44a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d7:82:2d:80:60:60:6b:5e:f0:52:51:cb:31: da:7f:98:4b:f4:f5:a6:be:58:4f:9e:ca:d6:d2:80: 0b:e6:6b:74:06:7b:b2:fe:d9:34:f8:58:d5:e1:0d: d2:c4:0e:fb:5d:ba:bc:0d:2b:33:ce:6a:59:2d:eb: 08:d9:3d:45:dd:6b:c5:43:c5:7b:1b:1c:50:81:d9: dc:41:ee:14:57:0e:eb:c7:be:99:e3:a8:6d:0f:a1: 1b:d3:1c:ae:72:c4:0c:74:87:9b:39:ab:da:95:00: a1:9e:28:ff:3e:b3:7b:e4:ea:71:cd:71:5e:c7:19: 0f:10:4b:db:25:64:9d:14:a5:36:d2:f2:0e:06:aa: 89:7e:08:15:2d:b4:91:e5:ec:b0:54:50:7a:b5:7a: 4a:73:d5:97:e3:b6:60:fe:99:2d:ed:1c:14:59:3b: 96:42:21:32:e5:f7:7f:d7:3e:40:73:32:6b:af:ce: 9d:b1:6c:f2:c8:30:2d:7a:00:2d:6e:3c:a5:c9:95: 52:7e:f7:f0:0e:21:6d:2c:52:32:6e:a5:87:1e:85: 9f:6b:aa:5e:69:66:b1:39:78:e4:09:54:17:f6:66: a6:f5:ae:46:c2:41:94:41:c6:f4:e9:7e:ee:a1:2d: 71:c4:a4:cf:27:45:d6:30:6a:14:b2:a9:f5:e6:54: 16:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:03:73:47:3C:99:BA:77:B9:17:FA:B2:CD:65:56:6D:2D:E4:F4:4A X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wwNzRzyZune5F_qyzWVWbS3k9Eo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:1600::/44 Signature Algorithm: sha256WithRSAEncryption 71:61:93:5f:50:29:ac:0e:e4:08:dd:f2:0d:da:76:fc:de:cb: 89:7b:19:46:e2:29:a6:83:82:5b:d3:cf:8a:6a:68:b9:ce:29: 61:f9:7e:eb:d8:ac:56:d1:8d:7d:a4:a7:b6:ba:f8:fc:e0:bd: b6:c0:b5:77:43:2b:65:2e:cc:f4:41:74:00:a1:59:f5:1c:e2: 1f:42:2b:0d:de:5c:dd:16:e0:23:03:9e:c7:9b:77:6c:69:c7: 28:9e:b8:66:60:42:19:a6:1c:f3:e0:b9:c8:7b:ab:89:03:de: bd:6f:ca:f6:aa:d1:ab:45:26:9c:97:1a:31:2c:94:85:66:7b: 46:fe:65:c5:bf:bf:63:e7:2d:d9:15:e8:69:d9:51:ec:82:7a: 59:aa:c5:07:92:cc:f9:76:a3:0a:64:31:1d:0b:ea:1c:ac:bb: 60:af:8c:c4:61:bf:60:a4:ad:5c:d6:26:c1:e2:fc:80:fd:f7: 93:e5:9a:26:5e:04:b3:ba:62:dd:3d:25:2f:81:67:80:f7:83: 09:37:63:67:30:59:c0:a8:d9:2b:d5:b1:3b:e1:93:30:15:86: ac:f2:f1:b6:06:0d:15:99:08:4d:b2:c3:00:4a:c9:57:48:09: 5b:6e:b9:9f:a1:15:d1:79:58:67:52:7b:4b:8a:b6:27:14:82: 2c:4f:a2:18 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XS4Dwc/s8OGVB8EuBqN4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzAzNzM0NzNjOTliYTc3YjkxN2ZhYjJjZDY1NTY2ZDJkZTRmNDRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuteCLYBgYGte8FJRyzHaf5hL9PWm vlhPnsrW0oAL5mt0Bnuy/tk0+FjV4Q3SxA77Xbq8DSszzmpZLesI2T1F3WvFQ8V7 GxxQgdncQe4UVw7rx76Z46htD6Eb0xyucsQMdIebOavalQChnij/PrN75OpxzXFe xxkPEEvbJWSdFKU20vIOBqqJfggVLbSR5eywVFB6tXpKc9WX47Zg/pkt7RwUWTuW QiEy5fd/1z5AczJrr86dsWzyyDAtegAtbjylyZVSfvfwDiFtLFIybqWHHoWfa6pe aWaxOXjkCVQX9mam9a5GwkGUQcb06X7uoS1xxKTPJ0XWMGoUsqn15lQWoQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMMDc0c8mbp3uRf6ss1lVm0t5PRKMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvd3dOelJ6eVp1bmU1Rl9xeXpXVldiUzNrOUVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBxYA MA0GCSqGSIb3DQEBCwUAA4IBAQBxYZNfUCmsDuQI3fIN2nb83suJexlG4immg4Jb 08+Kami5zilh+X7r2KxW0Y19pKe2uvj84L22wLV3QytlLsz0QXQAoVn1HOIfQisN 3lzdFuAjA57Hm3dsacconrhmYEIZphzz4LnIe6uJA969b8r2qtGrRSaclxoxLJSF ZntG/mXFv79j5y3ZFehp2VHsgnpZqsUHksz5dqMKZDEdC+ocrLtgr4zEYb9gpK1c 1ibB4vyA/feT5ZomXgSzumLdPSUvgWeA94MJN2NnMFnAqNkr1bE74ZMwFYas8vG2 Bg0VmQhNssMASslXSAlbbrmfoRXReVhnUntLirYnFIIsT6IY -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:45 2026 by rpki-client