This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/WYd4FngiyPvwOCF4MHu9edNzBbE.roa File: WYd4FngiyPvwOCF4MHu9edNzBbE.roa (raw, json) Hash identifier: 0XbYqroAqzM7rgiJX5PGGwG8zSGtxAutxNMT5mAMC74= Subject key identifier: 59:87:78:16:78:22:C8:FB:F0:38:21:78:30:7B:BD:79:D3:73:05:B1 Certificate issuer: /CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984 Certificate serial: 019B775918179357326A487F4B01BC2D212C Authority key identifier: 95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/WYd4FngiyPvwOCF4MHu9edNzBbE.roa Signing time: Thu 01 Jan 2026 02:18:06 +0000 ROA not before: Thu 01 Jan 2026 02:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 22781 IP address blocks: 2a03:efc0:4500::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:18:17:93:57:32:6a:48:7f:4b:01:bc:2d:21:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984 Validity Not Before: Jan 1 02:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=598778167822c8fbf0382178307bbd79d37305b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b7:f9:59:8c:9f:97:a4:58:47:29:ff:09:27: aa:99:82:05:52:ae:87:a9:15:c3:02:e9:a8:45:d9: 3f:8b:a7:30:48:f1:e2:ec:c0:f2:60:f9:20:38:4c: 4a:ff:49:ca:75:61:23:be:1c:db:c5:fa:df:43:90: 6f:29:89:d6:0d:24:98:45:09:d1:68:cc:ac:65:05: a2:41:82:a7:cf:fa:4a:39:cf:61:18:54:d0:5c:cf: 74:5b:27:fe:40:c8:fb:75:a9:21:6d:d7:b6:21:6e: ea:ac:aa:80:cd:28:aa:b6:d1:19:4b:e4:6d:7c:68: 26:e2:75:6f:e6:09:1f:19:91:8d:fa:ca:26:a1:07: 51:48:63:27:4b:9a:f8:c6:d3:ce:cd:e2:d7:23:ff: dd:da:ea:80:9f:ab:c2:69:0c:f9:bc:9b:6a:f6:ce: 0e:c2:93:55:1c:43:99:7f:bf:21:ec:d1:3e:50:a4: 5d:63:8a:61:56:ba:05:17:16:30:c6:36:24:15:1f: 53:c6:3d:02:6c:d8:63:f4:5c:b0:23:c9:c3:61:46: f2:5b:8e:1c:2a:c5:d1:94:1e:6a:5e:15:da:ba:4d: 77:9a:c9:b1:e7:ca:25:c8:77:d8:9f:fc:c1:cc:ee: c3:05:9d:3a:93:18:5b:f8:99:d8:a2:49:48:15:3a: b6:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:87:78:16:78:22:C8:FB:F0:38:21:78:30:7B:BD:79:D3:73:05:B1 X509v3 Authority Key Identifier: keyid:95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/WYd4FngiyPvwOCF4MHu9edNzBbE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:efc0:4500::/40 Signature Algorithm: sha256WithRSAEncryption 36:0e:6d:0c:f8:51:cd:14:5d:f3:3d:7f:fe:d6:68:74:04:c6: 5c:88:9c:5f:f0:fc:a4:1c:e6:b6:02:0a:f1:c0:88:75:d2:73: 86:40:33:c4:25:2f:68:27:9c:78:16:17:79:84:d8:ac:23:7b: ea:11:2e:07:ea:6d:c4:ec:17:98:f4:77:a1:64:1e:b5:3a:da: fd:a3:03:f0:5d:53:1c:b0:4b:b5:d5:25:09:a0:aa:ab:4b:96: f1:28:01:a7:cd:78:55:a0:08:f4:da:99:1a:26:0b:d1:8b:14: e8:88:bd:67:bb:46:78:47:1c:c8:40:31:15:f9:67:92:29:97: e2:fb:f3:78:97:36:2a:a1:b0:b2:c8:ad:60:0a:1a:0f:d8:00: 4b:04:2b:86:d3:ae:c0:fc:ea:14:2b:3b:5c:77:ae:a9:a9:d7: fe:1d:cc:4e:57:a4:87:3e:b7:88:05:da:49:fd:b1:22:e5:c2: 8c:2e:17:18:aa:81:57:6e:e2:17:8e:89:1c:c9:6f:2d:88:12: 7a:0a:a0:7a:e8:c7:75:3e:6b:a3:35:db:d1:2d:ea:3b:fc:d8: 01:52:ed:cd:c6:e0:0d:0a:56:6f:01:a1:e9:b3:3c:e8:54:9b: 0a:88:38:72:4c:27:40:3b:f2:37:b0:5d:2f:19:ef:0c:93:3a: 45:34:78:ea -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3WRgXk1cyakh/SwG8LSEsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MDJkOGI4MjY5YzZiMDdmODE0YWNmMGM3ZWQ3MjliM2Y0 YjU5ODQwHhcNMjYwMTAxMDIxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTg3NzgxNjc4MjJjOGZiZjAzODIxNzgzMDdiYmQ3OWQzNzMwNWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurf5WYyfl6RYRyn/CSeqmYIFUq6H qRXDAumoRdk/i6cwSPHi7MDyYPkgOExK/0nKdWEjvhzbxfrfQ5BvKYnWDSSYRQnR aMysZQWiQYKnz/pKOc9hGFTQXM90Wyf+QMj7dakhbde2IW7qrKqAzSiqttEZS+Rt fGgm4nVv5gkfGZGN+somoQdRSGMnS5r4xtPOzeLXI//d2uqAn6vCaQz5vJtq9s4O wpNVHEOZf78h7NE+UKRdY4phVroFFxYwxjYkFR9Txj0CbNhj9FywI8nDYUbyW44c KsXRlB5qXhXauk13msmx58olyHfYn/zBzO7DBZ06kxhb+JnYoklIFTq2WwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFFmHeBZ4Isj78DgheDB7vXnTcwWxMB8GA1UdIwQY MBaAFJUC2LgmnGsH+BSs8Mftcps/S1mEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFFMWXVDYWNhd2Y0Rkt6d3gtMXltejlMV1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS85ZGVjYWYtNDdlYi00MzQ5LTllODYt MDFiOGJiNmFkOTBhLzEvV1lkNEZuZ2l5UHZ3T0NGNE1IdTllZE56QmJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS85ZGVjYWYtNDdlYi00MzQ5LTllODYtMDFiOGJiNmFkOTBh LzEvbFFMWXVDYWNhd2Y0Rkt6d3gtMXltejlMV1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgPvwEUw DQYJKoZIhvcNAQELBQADggEBADYObQz4Uc0UXfM9f/7WaHQExlyInF/w/KQc5rYC CvHAiHXSc4ZAM8QlL2gnnHgWF3mE2Kwje+oRLgfqbcTsF5j0d6FkHrU62v2jA/Bd UxywS7XVJQmgqqtLlvEoAafNeFWgCPTamRomC9GLFOiIvWe7RnhHHMhAMRX5Z5Ip l+L783iXNiqhsLLIrWAKGg/YAEsEK4bTrsD86hQrO1x3rqmp1/4dzE5XpIc+t4gF 2kn9sSLlwowuFxiqgVdu4heOiRzJby2IEnoKoHrox3U+a6M129Et6jv82AFS7c3G 4A0KVm8BoemzPOhUmwqIOHJMJ0A78jewXS8Z7wyTOkU0eOo= -----END CERTIFICATE-----Generated at Wed Jan 21 11:56:05 2026 by rpki-client