This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/WxSDa4JqSx4FrvIxuNYHP4ySZGo.roa File: WxSDa4JqSx4FrvIxuNYHP4ySZGo.roa (raw, json) Hash identifier: 2C+PhM+Hehi57ftXaYF01ego8iKfienxInrHrNd0Flo= Subject key identifier: 5B:14:83:6B:82:6A:4B:1E:05:AE:F2:31:B8:D6:07:3F:8C:92:64:6A Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797EAABFFE0CD5766F451DA737285A35 Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/WxSDa4JqSx4FrvIxuNYHP4ySZGo.roa Signing time: Thu 01 Jan 2026 12:18:22 +0000 ROA not before: Thu 01 Jan 2026 12:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205794 IP address blocks: 2a0e:aa07:e039::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:aa:bf:fe:0c:d5:76:6f:45:1d:a7:37:28:5a:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b14836b826a4b1e05aef231b8d6073f8c92646a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:6a:82:a4:c0:72:92:d1:a7:97:76:20:f8:1b: ef:24:57:9a:e7:3a:7e:8d:25:77:92:22:35:47:49: 6b:89:bf:4c:8e:cb:f0:e4:87:e8:71:8f:e8:58:5d: 6a:ba:25:b7:5e:9f:b0:92:31:30:97:71:d6:c1:d9: f6:09:02:46:0c:54:58:29:12:71:af:39:4e:44:d9: c4:44:0d:1f:cd:af:22:2a:72:50:18:cd:01:47:91: 96:75:70:26:07:dc:dc:74:0f:bf:23:07:af:d7:6e: 45:5c:34:3d:ea:f3:b5:1b:8d:15:d4:da:74:48:8e: bb:19:e5:d8:fb:87:0c:4d:ea:e3:63:f3:aa:aa:5a: 76:6c:03:a5:fe:68:5b:6c:00:52:d6:00:81:0a:fc: 94:02:fa:ad:2b:b6:51:e3:31:be:30:c1:8e:65:ee: 89:fb:b4:60:a7:8c:2e:a9:a0:7d:73:d7:8f:dc:46: 37:82:b1:af:f6:48:60:cd:b1:f8:a2:38:46:50:03: e6:e4:6a:be:9f:0c:e0:9b:81:70:50:43:b7:af:6e: 9a:88:3e:95:aa:48:a1:f2:5e:f5:0a:9b:3c:18:e2: 97:e9:c8:e1:df:06:8b:b9:30:59:ad:43:fe:6f:c9: 69:23:95:20:8e:de:8b:f5:e3:67:42:99:83:3a:37: 1b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:14:83:6B:82:6A:4B:1E:05:AE:F2:31:B8:D6:07:3F:8C:92:64:6A X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/WxSDa4JqSx4FrvIxuNYHP4ySZGo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa07:e039::/48 Signature Algorithm: sha256WithRSAEncryption 70:1d:e2:72:b5:a5:5e:25:ed:ae:f7:bc:fe:15:cc:8d:b9:b2: fe:34:60:b9:5b:15:27:6f:b6:f1:33:8a:6c:0f:7e:2b:84:61: 0f:02:78:f7:56:c4:4b:d1:b7:ce:66:ae:19:15:ef:8f:61:12: 74:a5:71:bf:82:8e:1d:b3:e0:10:3d:85:1f:1d:77:69:75:30: 79:d3:5a:a8:10:33:8c:00:f6:49:55:25:f4:a6:58:0e:57:19: d1:65:61:9e:6b:bc:e0:26:bf:7a:31:a6:c4:d0:dd:b0:4a:c9: a6:b1:3e:89:1d:aa:21:b5:34:c0:f1:08:86:cb:b6:4d:8a:24: 0d:c8:9e:fd:86:0f:b6:ea:a9:24:03:21:8e:08:d1:1a:29:4c: 04:43:c2:70:44:b9:3f:26:aa:f0:a3:17:89:c9:a9:1b:53:36: df:b7:cf:b4:2e:7e:cf:5d:d1:7b:84:d3:41:9f:63:0d:ba:1f: 34:70:1e:40:04:35:f5:37:18:26:6f:55:3e:da:2d:d2:5c:41: 4e:7b:62:76:43:bb:b1:06:92:9a:46:74:8a:5a:7f:bc:63:24: 30:14:60:09:f6:79:64:97:a1:b4:eb:f3:9f:a8:c2:f0:c1:f7: bc:a5:83:0d:8c:68:7e:37:14:b0:83:cf:bc:82:15:38:c2:3b: 34:29:ca:24 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5fqq//gzVdm9FHac3KFo1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjE0ODM2YjgyNmE0YjFlMDVhZWYyMzFiOGQ2MDczZjhjOTI2NDZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mqCpMByktGnl3Yg+BvvJFea5zp+ jSV3kiI1R0lrib9Mjsvw5IfocY/oWF1quiW3Xp+wkjEwl3HWwdn2CQJGDFRYKRJx rzlORNnERA0fza8iKnJQGM0BR5GWdXAmB9zcdA+/Iwev125FXDQ96vO1G40V1Np0 SI67GeXY+4cMTerjY/Oqqlp2bAOl/mhbbABS1gCBCvyUAvqtK7ZR4zG+MMGOZe6J +7Rgp4wuqaB9c9eP3EY3grGv9khgzbH4ojhGUAPm5Gq+nwzgm4FwUEO3r26aiD6V qkih8l71Cps8GOKX6cjh3waLuTBZrUP+b8lpI5Ugjt6L9eNnQpmDOjcbZQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFsUg2uCakseBa7yMbjWBz+MkmRqMB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvV3hTRGE0SnFTeDRGcnZJeHVOWUhQNHlTWkdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6qB+A5 MA0GCSqGSIb3DQEBCwUAA4IBAQBwHeJytaVeJe2u97z+FcyNubL+NGC5WxUnb7bx M4psD34rhGEPAnj3VsRL0bfOZq4ZFe+PYRJ0pXG/go4ds+AQPYUfHXdpdTB501qo EDOMAPZJVSX0plgOVxnRZWGea7zgJr96MabE0N2wSsmmsT6JHaohtTTA8QiGy7ZN iiQNyJ79hg+26qkkAyGOCNEaKUwEQ8JwRLk/JqrwoxeJyakbUzbft8+0Ln7PXdF7 hNNBn2MNuh80cB5ABDX1Nxgmb1U+2i3SXEFOe2J2Q7uxBpKaRnSKWn+8YyQwFGAJ 9nlkl6G06/OfqMLwwfe8pYMNjGh+NxSwg8+8ghU4wjs0Kcok -----END CERTIFICATE-----Generated at Tue Jan 6 21:30:59 2026 by rpki-client