This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/W3uvblkeLxKiQmHFvyNEpAVu6aA.roa File: W3uvblkeLxKiQmHFvyNEpAVu6aA.roa (raw, json) Hash identifier: 0luJ58suj1wqyqBjH68N/sdcZED51ZMRtFlcISkt8r8= Subject key identifier: 5B:7B:AF:6E:59:1E:2F:12:A2:42:61:C5:BF:23:44:A4:05:6E:E9:A0 Certificate issuer: /CN=8f4ebe6064aab03f269e22815acd4949a6fb7265 Certificate serial: 019B7EA4AD8AA4E8EE040DF24B8800C00D11 Authority key identifier: 8F:4E:BE:60:64:AA:B0:3F:26:9E:22:81:5A:CD:49:49:A6:FB:72:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j06-YGSqsD8mniKBWs1JSab7cmU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/W3uvblkeLxKiQmHFvyNEpAVu6aA.roa Signing time: Fri 02 Jan 2026 12:18:00 +0000 ROA not before: Fri 02 Jan 2026 12:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12676 IP address blocks: 2a0b:f440:11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.crl rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.mft rsync://rpki.ripe.net/repository/DEFAULT/j06-YGSqsD8mniKBWs1JSab7cmU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:ad:8a:a4:e8:ee:04:0d:f2:4b:88:00:c0:0d:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f4ebe6064aab03f269e22815acd4949a6fb7265 Validity Not Before: Jan 2 12:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b7baf6e591e2f12a24261c5bf2344a4056ee9a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:06:78:e1:e9:27:d0:ba:a1:6e:61:8d:44:82: 8e:57:83:f6:cb:a9:db:0d:26:aa:c5:a0:d5:eb:04: a7:cb:03:40:38:d3:81:8d:9e:91:35:b3:c0:16:29: a9:f3:62:ba:cc:6e:02:f7:86:86:53:32:8b:0d:b9: 38:51:4e:e8:32:c8:46:9c:b7:af:01:16:d4:95:2c: b1:58:2a:04:28:1c:55:a6:f4:2e:64:51:38:f9:56: 4c:c0:70:05:65:d1:81:02:f1:d9:01:ab:b1:7a:70: 2b:97:0f:e3:cd:e2:26:4c:75:ff:07:40:61:53:1b: 3e:16:49:0c:a4:0f:c3:d6:79:f9:51:6a:81:74:73: 6d:63:ef:12:ae:a2:d4:71:40:2b:f7:41:bd:75:18: 34:03:a7:dc:d3:b5:be:fc:3f:c2:04:7b:27:4b:8e: b1:3d:5b:76:1a:a4:48:4d:56:11:13:46:58:00:f9: db:c7:f1:22:4c:77:3f:c4:dc:25:96:e1:c6:da:de: cf:3c:d3:e2:08:d4:a8:e7:15:cf:cd:c8:5f:ab:2f: c0:24:2b:ac:62:91:f7:0e:f0:b6:7e:20:89:27:c6: ac:10:14:a7:dd:fd:0a:88:1b:77:b2:cb:80:49:c1: 19:48:09:ac:74:fc:77:db:6d:29:9f:e7:fa:fb:88: e2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:7B:AF:6E:59:1E:2F:12:A2:42:61:C5:BF:23:44:A4:05:6E:E9:A0 X509v3 Authority Key Identifier: keyid:8F:4E:BE:60:64:AA:B0:3F:26:9E:22:81:5A:CD:49:49:A6:FB:72:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j06-YGSqsD8mniKBWs1JSab7cmU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/W3uvblkeLxKiQmHFvyNEpAVu6aA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:f440:11::/48 Signature Algorithm: sha256WithRSAEncryption 15:21:30:9e:d5:04:d4:97:f6:f3:44:34:b9:54:04:7a:41:68: 1f:44:15:68:e7:12:02:a9:27:10:38:1a:32:80:22:ab:9e:1a: eb:71:20:06:00:b8:b3:9c:96:43:10:0b:7a:8f:38:1c:84:2b: 54:f3:72:7d:27:14:d8:e5:4e:15:63:c3:26:22:36:60:64:2e: f9:8d:8a:e8:a1:55:f5:2b:f2:dc:a5:58:30:c5:8c:cc:d5:cf: 20:0d:f8:71:7b:09:c8:bb:44:e9:71:f4:a2:66:c6:8e:ca:8e: 11:00:5c:a5:44:05:57:e9:2d:08:b5:de:ef:23:48:b8:f3:08: 20:7a:35:b9:8c:af:25:56:da:50:9d:f9:da:84:0f:76:46:85: 94:c3:13:4d:24:6c:da:3f:d2:74:80:2d:d5:bf:d2:b0:9a:19: d5:59:6e:03:9a:5d:2d:18:97:9d:e1:0b:63:b3:ae:86:1f:cd: 7a:9c:83:07:3a:43:80:56:4a:15:2b:6c:71:5a:d3:4f:a6:86: c7:73:10:d3:a6:37:c4:d1:dc:c9:31:2f:5f:1d:ff:a1:f8:b3: 0d:7a:2a:0b:65:63:96:de:85:38:55:97:69:ef:2e:59:fa:0e: cb:16:2d:13:da:ca:88:e3:35:23:de:1b:f6:2f:5e:8e:48:9d: a6:41:4e:5f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pK2KpOjuBA3yS4gAwA0RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmNGViZTYwNjRhYWIwM2YyNjllMjI4MTVhY2Q0OTQ5YTZm YjcyNjUwHhcNMjYwMTAyMTIxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjdiYWY2ZTU5MWUyZjEyYTI0MjYxYzViZjIzNDRhNDA1NmVlOWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQZ44ekn0LqhbmGNRIKOV4P2y6nb DSaqxaDV6wSnywNAONOBjZ6RNbPAFimp82K6zG4C94aGUzKLDbk4UU7oMshGnLev ARbUlSyxWCoEKBxVpvQuZFE4+VZMwHAFZdGBAvHZAauxenArlw/jzeImTHX/B0Bh Uxs+FkkMpA/D1nn5UWqBdHNtY+8SrqLUcUAr90G9dRg0A6fc07W+/D/CBHsnS46x PVt2GqRITVYRE0ZYAPnbx/EiTHc/xNwlluHG2t7PPNPiCNSo5xXPzchfqy/AJCus YpH3DvC2fiCJJ8asEBSn3f0KiBt3ssuAScEZSAmsdPx3220pn+f6+4jitQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFt7r25ZHi8SokJhxb8jRKQFbumgMB8GA1UdIwQY MBaAFI9OvmBkqrA/Jp4igVrNSUmm+3JlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajA2LVlHU3FzRDhtbmlLQldzMUpTYWI3Y21VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9kMjk4N2QtM2RiOS00MGNlLTk1NTQt MTZjMzUwYjdkNzlkLzEvVzN1dmJsa2VMeEtpUW1IRnZ5TkVwQVZ1NmFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni9kMjk4N2QtM2RiOS00MGNlLTk1NTQtMTZjMzUwYjdkNzlk LzEvajA2LVlHU3FzRDhtbmlLQldzMUpTYWI3Y21VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgv0QAAR MA0GCSqGSIb3DQEBCwUAA4IBAQAVITCe1QTUl/bzRDS5VAR6QWgfRBVo5xICqScQ OBoygCKrnhrrcSAGALiznJZDEAt6jzgchCtU83J9JxTY5U4VY8MmIjZgZC75jYro oVX1K/LcpVgwxYzM1c8gDfhxewnIu0TpcfSiZsaOyo4RAFylRAVX6S0Itd7vI0i4 8wggejW5jK8lVtpQnfnahA92RoWUwxNNJGzaP9J0gC3Vv9KwmhnVWW4Dml0tGJed 4Qtjs66GH816nIMHOkOAVkoVK2xxWtNPpobHcxDTpjfE0dzJMS9fHf+h+LMNeioL ZWOW3oU4VZdp7y5Z+g7LFi0T2sqI4zUj3hv2L16OSJ2mQU5f -----END CERTIFICATE-----Generated at Tue Jan 27 00:27:27 2026 by rpki-client