This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/WWRZ9diR4Y_TtknGY8A8Ry8zZbc.roa File: WWRZ9diR4Y_TtknGY8A8Ry8zZbc.roa (raw, json) Hash identifier: JOrEqwG5z4J+ko4JNs0Q6WmhhujipJ/KfAKG7xVvcSk= Subject key identifier: 59:64:59:F5:D8:91:E1:8F:D3:B6:49:C6:63:C0:3C:47:2F:33:65:B7 Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797EB6497902FE18E36F644B612665DF Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/WWRZ9diR4Y_TtknGY8A8Ry8zZbc.roa Signing time: Thu 01 Jan 2026 12:18:25 +0000 ROA not before: Thu 01 Jan 2026 12:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211323 IP address blocks: 2a0e:aa07:e01e::/48 maxlen: 48 2a0e:aa07:f080::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:b6:49:79:02:fe:18:e3:6f:64:4b:61:26:65:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=596459f5d891e18fd3b649c663c03c472f3365b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2c:97:94:d3:94:77:f9:ce:10:b7:f2:4a:cf: d8:5a:ad:78:89:81:c5:cc:f2:1e:72:56:14:d5:5c: 18:02:69:93:0b:e0:f5:c5:85:0d:c4:93:7f:33:e3: d1:6d:24:53:0a:e1:19:cd:1b:f3:d0:0e:36:0c:5f: 51:05:5e:b1:19:fb:93:de:f8:01:3a:e2:6e:78:79: 1e:d9:f9:b0:e0:7d:fa:cf:ab:39:d2:7a:ca:57:37: b7:e8:53:3f:45:48:dd:62:93:eb:b4:71:2b:e9:a0: 5e:da:2b:20:26:f8:a8:2f:9e:06:40:f8:21:ed:72: d3:69:a9:4d:92:ae:63:63:4c:48:d8:a8:aa:29:fa: 33:97:8e:2f:c7:0b:e6:05:bf:20:98:7e:2f:60:26: b6:03:4d:f6:38:b1:2b:e3:72:e5:19:6c:6d:1a:a9: b2:d2:44:91:4c:aa:55:03:f6:e9:1d:df:7a:2a:16: 80:62:9b:e0:42:90:5f:6a:41:00:72:5c:94:5c:76: 71:c8:a4:bd:76:4e:de:33:0d:bd:f3:f3:e3:44:d5: e8:ac:54:d4:e6:4e:98:47:ab:1c:fa:f0:bf:8f:62: 34:6f:34:33:a2:aa:d6:db:b0:b9:c0:8d:ee:32:40: 45:80:6a:3d:6a:f9:62:20:46:60:46:d2:34:c6:36: 0b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:64:59:F5:D8:91:E1:8F:D3:B6:49:C6:63:C0:3C:47:2F:33:65:B7 X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/WWRZ9diR4Y_TtknGY8A8Ry8zZbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa07:e01e::/48 2a0e:aa07:f080::/44 Signature Algorithm: sha256WithRSAEncryption ae:a9:44:2a:41:0d:f8:2f:18:34:e5:75:89:f9:97:28:10:93: 7e:48:f5:c5:40:c1:26:01:2b:a2:21:d6:44:85:b2:05:9c:bf: 79:40:d1:04:17:b6:b8:82:55:51:2d:26:11:a4:1f:62:72:fe: 8f:4d:52:dd:f6:64:1f:77:34:7a:1c:f4:3a:c4:0c:92:c7:28: 53:70:e4:54:d6:5b:45:3c:14:39:56:62:ea:2f:da:f4:a6:45: bc:01:51:d0:e0:fc:0e:60:ff:07:a6:cc:74:d7:d7:e8:77:d7: 28:65:8a:0a:5c:a2:03:5c:f1:41:7e:1a:0a:4b:01:a7:ee:e9: 09:be:18:44:16:49:ef:e7:95:73:c4:2e:cb:d4:6a:1b:b6:32: 6a:f9:30:a3:10:b8:bd:32:36:cd:47:c8:b8:da:48:fe:d9:29: 4b:f4:87:19:8c:6f:ae:9e:82:a9:10:05:b1:80:1d:b5:62:2f: f6:c5:b5:25:84:ca:7c:a1:7c:76:0f:58:3e:ff:93:ee:9b:9c: 89:43:8b:1b:ea:c4:88:b2:e1:05:b5:d9:0f:e2:c1:80:c1:26: 6e:12:d1:ce:a8:21:5d:67:56:d5:9a:db:bb:59:78:70:ae:9a: 29:db:a7:b6:d2:3d:ec:81:f5:95:f9:3b:81:90:50:84:b6:56: 71:31:0d:9e -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5frZJeQL+GONvZEthJmXfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTY0NTlmNWQ4OTFlMThmZDNiNjQ5YzY2M2MwM2M0NzJmMzM2NWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiyXlNOUd/nOELfySs/YWq14iYHF zPIeclYU1VwYAmmTC+D1xYUNxJN/M+PRbSRTCuEZzRvz0A42DF9RBV6xGfuT3vgB OuJueHke2fmw4H36z6s50nrKVze36FM/RUjdYpPrtHEr6aBe2isgJvioL54GQPgh 7XLTaalNkq5jY0xI2KiqKfozl44vxwvmBb8gmH4vYCa2A032OLEr43LlGWxtGqmy 0kSRTKpVA/bpHd96KhaAYpvgQpBfakEAclyUXHZxyKS9dk7eMw298/PjRNXorFTU 5k6YR6sc+vC/j2I0bzQzoqrW27C5wI3uMkBFgGo9avliIEZgRtI0xjYLUwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFlkWfXYkeGP07ZJxmPAPEcvM2W3MB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvV1dSWjlkaVI0WV9UdGtuR1k4QThSeTh6WmJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKg6qB+Ae AwcEKg6qB/CAMA0GCSqGSIb3DQEBCwUAA4IBAQCuqUQqQQ34Lxg05XWJ+ZcoEJN+ SPXFQMEmASuiIdZEhbIFnL95QNEEF7a4glVRLSYRpB9icv6PTVLd9mQfdzR6HPQ6 xAySxyhTcORU1ltFPBQ5VmLqL9r0pkW8AVHQ4PwOYP8Hpsx019fod9coZYoKXKID XPFBfhoKSwGn7ukJvhhEFknv55VzxC7L1GobtjJq+TCjELi9MjbNR8i42kj+2SlL 9IcZjG+unoKpEAWxgB21Yi/2xbUlhMp8oXx2D1g+/5Pum5yJQ4sb6sSIsuEFtdkP 4sGAwSZuEtHOqCFdZ1bVmtu7WXhwrpop26e20j3sgfWV+TuBkFCEtlZxMQ2e -----END CERTIFICATE-----Generated at Tue Jan 6 21:31:59 2026 by rpki-client