This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/wP1EW3zLL6AI1GO630axqWKQ_DE.roa File: wP1EW3zLL6AI1GO630axqWKQ_DE.roa (raw, json) Hash identifier: EcMwDQIjt0aJ6/wmw4SKz+LKf/Rl6tv5Nhp+3KRGA5k= Subject key identifier: C0:FD:44:5B:7C:CB:2F:A0:08:D4:63:BA:DF:46:B1:A9:62:90:FC:31 Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797EBE86CF44515C1DE5DA02A5A71B6F Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/wP1EW3zLL6AI1GO630axqWKQ_DE.roa Signing time: Thu 01 Jan 2026 12:18:28 +0000 ROA not before: Thu 01 Jan 2026 12:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214772 IP address blocks: 2a0e:aa07:e1d0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:be:86:cf:44:51:5c:1d:e5:da:02:a5:a7:1b:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c0fd445b7ccb2fa008d463badf46b1a96290fc31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1d:5c:29:ad:33:9f:11:c7:da:d4:ea:b5:fe: f8:4b:63:07:9d:3b:b7:59:ed:f6:70:02:c5:5f:ea: 92:d5:38:7b:92:78:ca:a3:9d:67:65:a8:92:50:2a: 69:9c:67:85:7a:9c:e5:5d:56:bb:ea:60:63:e3:51: 85:bb:76:b2:22:a5:04:c6:12:35:36:0d:2d:98:01: 1d:62:32:97:aa:18:f8:65:c7:33:55:ee:a5:52:f3: c4:33:0c:03:b7:31:f3:30:c4:96:b3:b0:f2:59:cd: a5:f3:ee:d2:5f:d5:df:7a:a3:02:59:f2:8b:94:de: 20:20:94:9c:6d:55:d0:67:a4:71:cd:ec:e3:f6:2e: 9f:2d:cd:e9:13:6f:6c:0b:2c:64:78:c3:ed:78:cf: f0:7f:15:f6:07:ec:be:f3:03:3b:ae:d3:a9:c0:1b: f7:9e:4c:c7:d2:35:d9:a6:18:34:88:90:98:9c:47: 7a:c8:20:69:6f:bd:d6:39:a1:a2:fe:bb:6e:12:17: 78:d0:d7:4f:7a:6a:47:13:da:e4:9e:78:c9:1d:7b: 68:12:54:18:3a:ae:88:67:bc:95:b5:b9:5a:3b:24: 9f:36:1e:dd:60:5d:a9:26:d2:f4:48:f5:f5:60:d1: 05:f1:bd:30:aa:4e:2b:1b:ef:b9:99:a0:39:55:3c: d8:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:FD:44:5B:7C:CB:2F:A0:08:D4:63:BA:DF:46:B1:A9:62:90:FC:31 X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/wP1EW3zLL6AI1GO630axqWKQ_DE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa07:e1d0::/44 Signature Algorithm: sha256WithRSAEncryption b7:94:7d:88:1e:ff:61:4c:b4:d4:02:0c:aa:1d:9b:fc:8c:63: 3d:17:3e:b7:51:db:bb:dd:df:ed:e3:b9:68:5c:13:0c:4c:14: 65:a7:13:e7:fe:2f:49:b6:53:46:4e:77:51:c9:dd:9d:9e:7c: e8:c7:12:06:69:bc:f0:09:59:15:20:6b:b3:1a:e4:e1:d7:91: c7:07:67:e4:f9:af:9c:d0:6a:b5:3f:a0:77:d1:b0:f0:f6:36: df:40:86:fb:28:94:4c:6c:d0:4d:5b:ed:ee:7f:79:a7:12:61: 13:e6:37:2b:99:d2:a2:55:f9:97:16:32:8d:2a:c9:6d:b1:d0: 59:b7:85:ee:00:59:b5:eb:73:6c:a7:69:27:0c:1f:fe:e6:29: 12:2f:1e:87:c0:81:bf:e2:1c:11:cb:cc:fa:4d:07:93:b1:4e: 5d:bf:6f:ae:27:54:67:9a:d7:3d:93:c4:05:82:a4:c7:5e:4b: b8:93:85:66:da:e2:31:47:c7:3d:83:b7:a1:d0:57:50:b5:87: 4b:cf:eb:25:23:27:4a:13:1b:e5:11:4f:aa:f5:2e:38:3c:c4: 33:3d:66:f9:62:52:be:28:4b:27:9a:f6:16:7d:45:33:9c:db: ce:84:f6:e4:2a:64:81:2e:ea:25:4a:02:11:e4:fc:23:a2:77: 8d:a3:6b:1f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5fr6Gz0RRXB3l2gKlpxtvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMGZkNDQ1YjdjY2IyZmEwMDhkNDYzYmFkZjQ2YjFhOTYyOTBmYzMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxR1cKa0znxHH2tTqtf74S2MHnTu3 We32cALFX+qS1Th7knjKo51nZaiSUCppnGeFepzlXVa76mBj41GFu3ayIqUExhI1 Ng0tmAEdYjKXqhj4ZcczVe6lUvPEMwwDtzHzMMSWs7DyWc2l8+7SX9XfeqMCWfKL lN4gIJScbVXQZ6Rxzezj9i6fLc3pE29sCyxkeMPteM/wfxX2B+y+8wM7rtOpwBv3 nkzH0jXZphg0iJCYnEd6yCBpb73WOaGi/rtuEhd40NdPempHE9rknnjJHXtoElQY Oq6IZ7yVtblaOySfNh7dYF2pJtL0SPX1YNEF8b0wqk4rG++5maA5VTzY7QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMD9RFt8yy+gCNRjut9GsalikPwxMB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvd1AxRVczekxMNkFJMUdPNjMwYXhxV0tRX0RFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6qB+HQ MA0GCSqGSIb3DQEBCwUAA4IBAQC3lH2IHv9hTLTUAgyqHZv8jGM9Fz63Udu73d/t 47loXBMMTBRlpxPn/i9JtlNGTndRyd2dnnzoxxIGabzwCVkVIGuzGuTh15HHB2fk +a+c0Gq1P6B30bDw9jbfQIb7KJRMbNBNW+3uf3mnEmET5jcrmdKiVfmXFjKNKslt sdBZt4XuAFm163Nsp2knDB/+5ikSLx6HwIG/4hwRy8z6TQeTsU5dv2+uJ1Rnmtc9 k8QFgqTHXku4k4Vm2uIxR8c9g7eh0FdQtYdLz+slIydKExvlEU+q9S44PMQzPWb5 YlK+KEsnmvYWfUUznNvOhPbkKmSBLuolSgIR5PwjoneNo2sf -----END CERTIFICATE-----Generated at Tue Jan 6 21:31:19 2026 by rpki-client