This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/winPsxerfHGMkrLr9l0fOmV2KSs.roa File: winPsxerfHGMkrLr9l0fOmV2KSs.roa (raw, json) Hash identifier: arn2Fc0z0hyb7bzwb+vfTUpY+WA5EJjzLxDCgG/O35E= Subject key identifier: C2:29:CF:B3:17:AB:7C:71:8C:92:B2:EB:F6:5D:1F:3A:65:76:29:2B Certificate issuer: /CN=962bd76a5cac283ece0a0f8eab2c97021401fb89 Certificate serial: 019B7B369CE2216BDCD6CCE4485234B54B42 Authority key identifier: 96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/winPsxerfHGMkrLr9l0fOmV2KSs.roa Signing time: Thu 01 Jan 2026 20:18:55 +0000 ROA not before: Thu 01 Jan 2026 20:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60703 IP address blocks: 2a02:a10::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:9c:e2:21:6b:dc:d6:cc:e4:48:52:34:b5:4b:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=962bd76a5cac283ece0a0f8eab2c97021401fb89 Validity Not Before: Jan 1 20:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c229cfb317ab7c718c92b2ebf65d1f3a6576292b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:72:f8:9c:6b:c7:96:f9:3b:80:ef:a0:46:9c: a4:75:32:04:7f:78:88:ff:47:33:c2:b9:b8:7b:1c: 9a:11:69:23:c5:13:9b:ed:52:69:da:04:95:06:d3: a2:63:7f:24:f2:cd:7e:74:93:4a:9b:d1:33:24:63: b9:03:15:7a:dd:ae:e5:8b:6a:88:9f:e3:b7:3f:d1: b7:37:9a:ec:f6:96:88:69:2d:cd:10:c7:7b:bc:f9: dc:17:e2:dd:ce:96:91:26:ff:71:13:44:a3:4b:6c: 01:c7:9f:ec:c8:e9:ff:3d:1b:ab:42:a7:a9:e4:d6: e5:54:ce:78:30:e6:87:b5:d6:b8:60:91:59:c0:b3: ed:2a:44:1c:2c:bf:d9:fb:25:2d:c3:f5:ff:86:b8: 6d:3e:dc:53:5c:db:a7:49:5d:04:aa:d4:2e:93:60: c8:a2:c4:06:1a:45:41:02:44:f7:52:a3:d8:8f:a8: 15:74:c9:07:5e:b5:2e:ec:c0:ac:3f:8f:32:eb:0a: 29:a8:78:bd:98:a1:db:b5:41:31:4b:f7:51:4c:24: 82:de:4c:d4:b5:9a:d3:27:af:00:b7:a7:f5:57:1c: 28:5a:c6:6b:f5:dd:b9:31:9a:9d:e7:c1:e7:07:5a: 44:a8:59:05:31:ab:ce:fc:89:01:53:90:c7:26:cb: a8:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:29:CF:B3:17:AB:7C:71:8C:92:B2:EB:F6:5D:1F:3A:65:76:29:2B X509v3 Authority Key Identifier: keyid:96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/winPsxerfHGMkrLr9l0fOmV2KSs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:a10::/32 Signature Algorithm: sha256WithRSAEncryption 1d:df:de:41:e8:ac:fc:a7:af:15:1e:a3:11:d9:33:45:43:e9: 77:50:04:30:95:2f:01:3a:c3:08:19:ef:49:fd:68:73:2a:28: 8c:b8:47:3a:2f:5a:f9:c6:f1:69:4f:da:5d:1f:79:86:db:79: c0:32:6a:54:cf:a1:01:f5:b3:d8:42:ad:91:49:d8:0c:eb:72: 03:6a:5f:2e:2d:83:b8:72:b8:90:3c:5e:9a:2b:3c:7e:d1:e8: 27:44:b0:07:39:5e:ff:c8:73:b5:89:cd:ba:43:db:c1:2e:fa: a8:72:d2:4f:f9:dc:a0:01:00:e7:64:b6:d3:9f:0d:32:a9:08: c9:2c:c9:3c:f2:1c:48:73:56:d8:49:ac:20:a6:ce:5c:22:42: 5e:25:bd:f7:b6:c5:5b:81:31:86:aa:de:e8:1b:f4:7a:da:98: 02:20:d7:52:00:c2:ae:97:07:1b:4f:11:12:8d:97:8b:49:95: fd:ba:26:ef:c1:f3:50:c4:00:bd:d6:c5:4c:a1:d3:b0:75:46: f3:c4:e9:53:f1:28:c9:e9:7f:6b:b2:ce:d1:df:44:bc:b6:18: 10:29:f2:ad:27:c7:e4:8d:1b:ac:47:a0:8c:18:8d:a9:de:37: 18:18:c2:e1:fd:7d:6d:15:e6:df:26:57:a3:72:54:0e:38:54: bd:7b:f9:96 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt7NpziIWvc1szkSFI0tUtCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MmJkNzZhNWNhYzI4M2VjZTBhMGY4ZWFiMmM5NzAyMTQw MWZiODkwHhcNMjYwMTAxMjAxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjI5Y2ZiMzE3YWI3YzcxOGM5MmIyZWJmNjVkMWYzYTY1NzYyOTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXL4nGvHlvk7gO+gRpykdTIEf3iI /0czwrm4exyaEWkjxROb7VJp2gSVBtOiY38k8s1+dJNKm9EzJGO5AxV63a7li2qI n+O3P9G3N5rs9paIaS3NEMd7vPncF+LdzpaRJv9xE0SjS2wBx5/syOn/PRurQqep 5NblVM54MOaHtda4YJFZwLPtKkQcLL/Z+yUtw/X/hrhtPtxTXNunSV0EqtQuk2DI osQGGkVBAkT3UqPYj6gVdMkHXrUu7MCsP48y6wopqHi9mKHbtUExS/dRTCSC3kzU tZrTJ68At6f1VxwoWsZr9d25MZqd58HnB1pEqFkFMavO/IkBU5DHJsuoKQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFMIpz7MXq3xxjJKy6/ZdHzpldikrMB8GA1UdIwQY MBaAFJYr12pcrCg+zgoPjqsslwIUAfuJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGl2WGFseXNLRDdPQ2ctT3F5eVhBaFFCLTRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8wNDY0NjAtMTAyYy00OTMwLTg0MmMt NmFiMTExNTVmNmZiLzEvd2luUHN4ZXJmSEdNa3JMcjlsMGZPbVYyS1NzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC8wNDY0NjAtMTAyYy00OTMwLTg0MmMtNmFiMTExNTVmNmZi LzEvbGl2WGFseXNLRDdPQ2ctT3F5eVhBaFFCLTRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgIKEDAN BgkqhkiG9w0BAQsFAAOCAQEAHd/eQeis/KevFR6jEdkzRUPpd1AEMJUvATrDCBnv Sf1ocyoojLhHOi9a+cbxaU/aXR95htt5wDJqVM+hAfWz2EKtkUnYDOtyA2pfLi2D uHK4kDxemis8ftHoJ0SwBzle/8hztYnNukPbwS76qHLST/ncoAEA52S2058NMqkI ySzJPPIcSHNW2EmsIKbOXCJCXiW997bFW4Exhqre6Bv0etqYAiDXUgDCrpcHG08R Eo2Xi0mV/bom78HzUMQAvdbFTKHTsHVG88TpU/Eoyel/a7LO0d9EvLYYECnyrSfH 5I0brEegjBiNqd43GBjC4f19bRXm3yZXo3JUDjhUvXv5lg== -----END CERTIFICATE-----Generated at Wed Jan 21 02:49:04 2026 by rpki-client