This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/WLrUFqaouuBYr55KP1XMt3miU3M.roa File: WLrUFqaouuBYr55KP1XMt3miU3M.roa (raw, json) Hash identifier: n6YiC8BVT2Tf0iKkkDqIzK0wCk5ku9pGxqUDshzUmWM= Subject key identifier: 58:BA:D4:16:A6:A8:BA:E0:58:AF:9E:4A:3F:55:CC:B7:79:A2:53:73 Certificate issuer: /CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be Certificate serial: 019BCD136612422637D000EA3B6372CB2150 Authority key identifier: 1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/WLrUFqaouuBYr55KP1XMt3miU3M.roa Signing time: Sat 17 Jan 2026 17:49:18 +0000 ROA not before: Sat 17 Jan 2026 17:49:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49418 IP address blocks: 2a01:ecc0:3::/48 maxlen: 48 2a01:ecc0:4::/48 maxlen: 48 2a01:ecc0:280::/42 maxlen: 42 2a01:ecc0:640::/42 maxlen: 42 2a01:ecc0:740::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:cd:13:66:12:42:26:37:d0:00:ea:3b:63:72:cb:21:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be Validity Not Before: Jan 17 17:49:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58bad416a6a8bae058af9e4a3f55ccb779a25373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:56:03:9b:15:a8:8f:95:44:32:99:e4:71:1a: 7e:c9:56:50:27:a2:5b:8e:7b:ff:59:74:cf:ff:ee: 08:00:0e:f4:97:63:24:9c:95:85:6f:6c:f6:94:7c: 4a:8d:ca:a7:af:46:42:45:9f:57:28:74:11:d2:67: fd:f5:f3:1f:42:15:e8:8b:73:a2:ee:b1:86:91:b8: 6e:9c:6c:8b:1f:7c:e7:96:b4:8b:69:61:04:88:17: ae:64:09:0e:c2:a9:f1:73:90:8c:d7:79:ab:ac:3f: 7e:45:82:13:f8:4e:a4:cd:a5:64:4a:c3:2b:09:55: 77:4a:af:3e:8b:0b:11:ef:63:d2:e4:ee:2f:3e:8a: c7:69:79:0c:9f:ce:8c:ae:bf:b0:af:f7:fc:81:3f: 65:2f:21:e9:aa:5e:04:bb:c3:13:81:c2:1c:9d:7c: 0f:6b:00:bf:e0:62:f9:8e:a6:4e:0c:63:3e:ab:ac: 49:fc:cd:f5:24:04:c7:7d:db:53:ed:8f:7d:a6:fc: 4a:31:d0:d4:04:07:8a:cb:88:55:8a:bd:d3:60:43: 17:18:b3:7e:20:23:83:98:27:a0:83:5e:8a:46:0e: 0c:5b:56:f3:51:48:49:06:29:49:8c:44:fa:9b:ea: c0:19:7e:93:af:60:e9:76:a9:7b:b7:54:59:b0:d1: 2f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:BA:D4:16:A6:A8:BA:E0:58:AF:9E:4A:3F:55:CC:B7:79:A2:53:73 X509v3 Authority Key Identifier: keyid:1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/WLrUFqaouuBYr55KP1XMt3miU3M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:ecc0:3::-2a01:ecc0:4:ffff:ffff:ffff:ffff:ffff 2a01:ecc0:280::/42 2a01:ecc0:640::/42 2a01:ecc0:740::/42 Signature Algorithm: sha256WithRSAEncryption a1:b3:be:e8:51:86:30:2e:e7:71:7d:64:79:5c:22:74:ec:47: ea:dd:f6:5d:d9:52:5b:df:44:73:f1:a4:6b:33:cd:8a:7a:90: 60:4e:30:a6:8f:be:39:1c:37:28:70:81:50:7c:4b:f7:14:df: 10:6f:be:09:f1:9a:94:2e:64:9d:8f:07:b6:2f:bf:02:23:be: 1a:0c:44:f3:15:e6:2a:4a:56:3f:13:42:ef:9b:4c:f9:82:13: fe:f3:90:41:60:e7:32:44:fe:be:de:a1:14:ce:1e:c8:22:5c: 37:1d:73:53:07:9f:ee:fa:58:64:97:2d:13:99:31:bb:63:8b: f9:ac:99:c9:d2:e4:a1:6d:bf:ad:34:4e:f2:f4:3c:0f:3a:d0: 2e:87:16:4e:33:48:66:e2:0f:e8:5d:a7:e2:84:82:75:c6:e5: 99:6d:29:d6:66:11:90:19:6e:6e:b0:d9:7b:34:09:1f:56:dc: 23:f9:6e:b2:cd:3b:c2:13:bb:84:fd:54:a9:09:ba:ae:01:51: 59:3a:6e:a4:97:f9:2e:24:c3:48:58:fb:40:21:73:f7:11:93: 27:10:29:d1:1c:5f:c4:02:39:5f:66:ba:c3:a6:d9:b8:72:0e: 38:bb:c5:33:e0:da:53:07:c8:56:c8:f5:fb:6e:a9:e4:e1:30: 54:0b:ef:ea -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgISAZvNE2YSQiY30ADqO2NyyyFQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkNDNhMjQ4NDU2OWQyMGUzZjUzYzE3YmU3YjlmYjI5YzM0 ZWU1YmUwHhcNMjYwMTE3MTc0OTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OGJhZDQxNmE2YThiYWUwNThhZjllNGEzZjU1Y2NiNzc5YTI1MzczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlYDmxWoj5VEMpnkcRp+yVZQJ6Jb jnv/WXTP/+4IAA70l2MknJWFb2z2lHxKjcqnr0ZCRZ9XKHQR0mf99fMfQhXoi3Oi 7rGGkbhunGyLH3znlrSLaWEEiBeuZAkOwqnxc5CM13mrrD9+RYIT+E6kzaVkSsMr CVV3Sq8+iwsR72PS5O4vPorHaXkMn86Mrr+wr/f8gT9lLyHpql4Eu8MTgcIcnXwP awC/4GL5jqZODGM+q6xJ/M31JATHfdtT7Y99pvxKMdDUBAeKy4hVir3TYEMXGLN+ ICODmCegg16KRg4MW1bzUUhJBilJjET6m+rAGX6Tr2Dpdql7t1RZsNEvFwIDAQAB o4ICMjCCAi4wHQYDVR0OBBYEFFi61BamqLrgWK+eSj9VzLd5olNzMB8GA1UdIwQY MBaAFB1DokhFadIOP1PBe+e5+ynDTuW+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFVPaVNFVnAwZzRfVThGNzU3bjdLY05PNWI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9jOTNkODctMzJlMC00NmYxLTlmYjkt NjM0NTE1NDg5NzlkLzEvV0xyVUZxYW91dUJZcjU1S1AxWE10M21pVTNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9jOTNkODctMzJlMC00NmYxLTlmYjktNjM0NTE1NDg5Nzlk LzEvSFVPaVNFVnAwZzRfVThGNzU3bjdLY05PNWI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzA1BAIAAjAvMBIDBwAqAezA AAMDBwAqAezAAAQDBwYqAezAAoADBwYqAezABkADBwYqAezAB0AwDQYJKoZIhvcN AQELBQADggEBAKGzvuhRhjAu53F9ZHlcInTsR+rd9l3ZUlvfRHPxpGszzYp6kGBO MKaPvjkcNyhwgVB8S/cU3xBvvgnxmpQuZJ2PB7YvvwIjvhoMRPMV5ipKVj8TQu+b TPmCE/7zkEFg5zJE/r7eoRTOHsgiXDcdc1MHn+76WGSXLROZMbtji/msmcnS5KFt v600TvL0PA860C6HFk4zSGbiD+hdp+KEgnXG5ZltKdZmEZAZbm6w2Xs0CR9W3CP5 brLNO8ITu4T9VKkJuq4BUVk6bqSX+S4kw0hY+0Ahc/cRkycQKdEcX8QCOV9musOm 2bhyDji7xTPg2lMHyFbI9ftuqeThMFQL7+o= -----END CERTIFICATE-----Generated at Sun Jan 25 16:37:06 2026 by rpki-client