This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/W-LfzjkBmc4oTKnPhjs0kfHNJ6Q.roa File: W-LfzjkBmc4oTKnPhjs0kfHNJ6Q.roa (raw, json) Hash identifier: ftW/H5OGOvc73tGHyq9jUHDKeB+UWHSYf4rvMWEvpmQ= Subject key identifier: 5B:E2:DF:CE:39:01:99:CE:28:4C:A9:CF:86:3B:34:91:F1:CD:27:A4 Certificate issuer: /CN=aeac1b2129abbac6539f80da6550c49721d0a8c4 Certificate serial: 019B7CEE38BEE34229624014A3D46881089D Authority key identifier: AE:AC:1B:21:29:AB:BA:C6:53:9F:80:DA:65:50:C4:97:21:D0:A8:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/W-LfzjkBmc4oTKnPhjs0kfHNJ6Q.roa Signing time: Fri 02 Jan 2026 04:19:05 +0000 ROA not before: Fri 02 Jan 2026 04:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197895 IP address blocks: 2a02:7a00:6::/48 maxlen: 48 2a02:7a01::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 03:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:38:be:e3:42:29:62:40:14:a3:d4:68:81:08:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aeac1b2129abbac6539f80da6550c49721d0a8c4 Validity Not Before: Jan 2 04:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5be2dfce390199ce284ca9cf863b3491f1cd27a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:79:45:64:d2:f7:86:74:ed:4f:02:5e:ad:5f: 99:e3:6c:84:61:aa:7b:2f:4c:5a:50:46:f6:70:95: 42:6c:5e:58:1a:f2:40:55:3a:9a:af:fc:4d:5c:04: a2:af:2d:cb:17:a8:f0:16:f1:e9:a9:53:49:76:18: 17:75:7a:fb:be:63:f8:04:d1:2d:f1:25:98:d8:4e: c2:24:e6:46:44:a6:46:42:10:5e:6f:12:a2:4d:d8: 62:b3:8e:ff:0c:fb:43:26:ec:7b:bf:ae:9d:13:de: 5f:d7:e5:c5:47:97:5a:35:68:ca:0d:fa:53:7c:28: fa:1c:91:d8:bf:ee:30:17:c9:3d:47:9c:b1:f5:e1: 20:e5:cd:6d:89:55:8f:ff:df:09:62:c1:1d:02:1d: 28:cf:46:1c:95:8b:bf:f1:47:fb:02:4f:64:e0:82: 7c:02:a3:d7:52:c7:c1:e9:36:1a:24:0b:9f:1d:15: 39:83:15:80:df:5c:bb:1b:25:e2:80:80:c6:5f:2a: b2:bf:99:b9:d8:dc:23:d8:20:b0:fc:fc:e0:8f:cd: ad:26:e6:c8:c5:9e:9d:86:7e:ae:ef:ce:25:88:e2: b4:63:5f:57:b8:89:91:42:40:65:a9:b6:be:af:34: 90:db:b6:06:2e:16:7a:bb:92:dd:84:0d:3d:62:65: 85:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:E2:DF:CE:39:01:99:CE:28:4C:A9:CF:86:3B:34:91:F1:CD:27:A4 X509v3 Authority Key Identifier: keyid:AE:AC:1B:21:29:AB:BA:C6:53:9F:80:DA:65:50:C4:97:21:D0:A8:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/W-LfzjkBmc4oTKnPhjs0kfHNJ6Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:7a00:6::/48 2a02:7a01::/32 Signature Algorithm: sha256WithRSAEncryption 78:de:aa:e8:17:16:89:fe:5f:5c:e9:93:65:30:7a:9e:48:2b: e1:b1:6f:98:f8:2c:0a:01:44:33:79:e8:0f:69:d7:3b:4d:6a: b5:42:e2:2f:2b:ff:39:d8:ff:50:1d:d7:71:6c:33:bf:df:8f: 21:97:5d:a6:e1:3a:06:24:4a:48:dc:aa:54:fb:2b:59:96:eb: fe:f4:ff:59:64:ca:f9:db:b5:64:c7:a7:75:4d:7b:75:27:04: 3a:7f:b0:e4:db:90:d9:f9:2d:f3:55:25:21:ab:31:74:32:a7: ed:45:f9:53:3d:b4:bf:bb:8d:cf:10:47:cb:9c:e7:a9:26:c1: 52:7c:d4:06:ab:2b:24:da:b9:7c:a7:32:f4:26:17:bf:fa:86: fc:3c:e0:02:26:28:27:8f:7f:55:90:03:3f:33:2d:fb:59:c9: c7:fb:52:a6:12:92:bc:ce:e4:46:80:83:0e:9d:eb:c4:73:4a: c7:9f:b5:4c:ce:99:ef:74:56:64:7a:3f:68:d6:ed:87:fa:0c: f9:e7:35:e6:1f:6b:8f:fc:1e:fe:c6:b0:5e:97:82:a8:85:d4: 67:72:13:99:f1:ee:ad:d5:f8:1c:5e:98:c2:c4:2d:56:11:a9: 5a:5b:54:7c:02:94:6d:ee:33:39:21:d8:e8:f2:e4:3d:e5:72: b2:9a:be:78 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgISAZt87ji+40IpYkAUo9RogQidMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYWMxYjIxMjlhYmJhYzY1MzlmODBkYTY1NTBjNDk3MjFk MGE4YzQwHhcNMjYwMTAyMDQxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YmUyZGZjZTM5MDE5OWNlMjg0Y2E5Y2Y4NjNiMzQ5MWYxY2QyN2E0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnlFZNL3hnTtTwJerV+Z42yEYap7 L0xaUEb2cJVCbF5YGvJAVTqar/xNXASiry3LF6jwFvHpqVNJdhgXdXr7vmP4BNEt 8SWY2E7CJOZGRKZGQhBebxKiTdhis47/DPtDJux7v66dE95f1+XFR5daNWjKDfpT fCj6HJHYv+4wF8k9R5yx9eEg5c1tiVWP/98JYsEdAh0oz0YclYu/8Uf7Ak9k4IJ8 AqPXUsfB6TYaJAufHRU5gxWA31y7GyXigIDGXyqyv5m52Nwj2CCw/Pzgj82tJubI xZ6dhn6u784liOK0Y19XuImRQkBlqba+rzSQ27YGLhZ6u5LdhA09YmWF/wIDAQAB o4ICEzCCAg8wHQYDVR0OBBYEFFvi3845AZnOKEypz4Y7NJHxzSekMB8GA1UdIwQY MBaAFK6sGyEpq7rGU5+A2mVQxJch0KjEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnF3YklTbXJ1c1pUbjREYVpWREVseUhRcU1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9iOWJiN2YtMTY2ZC00MWFmLWExZGIt ODY2YjJiMDIxZmM1LzEvVy1MZnpqa0JtYzRvVEtuUGhqczBrZkhOSjZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9iOWJiN2YtMTY2ZC00MWFmLWExZGItODY2YjJiMDIxZmM1 LzEvcnF3YklTbXJ1c1pUbjREYVpWREVseUhRcU1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQAwcAKgJ6AAAG AwUAKgJ6ATANBgkqhkiG9w0BAQsFAAOCAQEAeN6q6BcWif5fXOmTZTB6nkgr4bFv mPgsCgFEM3noD2nXO01qtULiLyv/Odj/UB3XcWwzv9+PIZddpuE6BiRKSNyqVPsr WZbr/vT/WWTK+du1ZMendU17dScEOn+w5NuQ2fkt81UlIasxdDKn7UX5Uz20v7uN zxBHy5znqSbBUnzUBqsrJNq5fKcy9CYXv/qG/DzgAiYoJ49/VZADPzMt+1nJx/tS phKSvM7kRoCDDp3rxHNKx5+1TM6Z73RWZHo/aNbth/oM+ec15h9rj/we/sawXpeC qIXUZ3ITmfHurdX4HF6YwsQtVhGpWltUfAKUbe4zOSHY6PLkPeVyspq+eA== -----END CERTIFICATE-----Generated at Thu Jan 29 13:05:46 2026 by rpki-client