This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/1wuNBnqeJxWF4tydni2tfZrN4_g.roa File: 1wuNBnqeJxWF4tydni2tfZrN4_g.roa (raw, json) Hash identifier: 0bjTloCQz/KlMtuKrsDQIPbFUjqF+xJACTr4jGYsuf4= Subject key identifier: D7:0B:8D:06:7A:9E:27:15:85:E2:DC:9D:9E:2D:AD:7D:9A:CD:E3:F8 Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B7910C0DBD7DA3EEE381160527BEC22A2 Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/1wuNBnqeJxWF4tydni2tfZrN4_g.roa Signing time: Thu 01 Jan 2026 10:18:19 +0000 ROA not before: Thu 01 Jan 2026 10:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215791 IP address blocks: 2a12:bec0:630::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 10:19:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:c0:db:d7:da:3e:ee:38:11:60:52:7b:ec:22:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 10:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d70b8d067a9e271585e2dc9d9e2dad7d9acde3f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:81:73:bb:71:06:f2:df:7f:c5:06:9a:44:7f: 52:64:1f:99:c9:c7:9e:c0:d2:cd:45:0b:aa:8d:b5: 42:ba:ee:25:76:f3:1d:86:6b:12:e4:01:ca:e4:27: f7:ac:51:59:8d:c5:26:34:68:0b:71:65:d2:40:2d: 03:25:51:0e:77:6e:32:56:d4:ae:1e:a3:b8:c1:e7: 92:24:8b:4d:3e:e1:ed:9e:cc:b9:c1:a1:10:f1:35: 55:c9:0b:94:1c:a1:57:8a:2d:bd:f8:cb:b7:1e:75: 57:6f:76:2f:4e:95:f2:a5:03:83:98:cd:8e:2b:f6: e0:39:8d:19:c3:60:45:75:95:6b:0f:6d:7e:c7:17: 42:22:7b:e4:f5:90:e9:14:14:1b:9b:61:28:28:86: b9:03:88:b1:b4:f8:e0:73:db:5d:14:c4:42:11:53: a3:f1:a4:7c:26:f1:cd:f8:2f:32:6b:47:f2:bb:f2: d3:9a:e6:90:3a:ef:22:36:fd:99:92:6e:a6:3b:eb: fc:69:58:7f:81:dd:8e:51:2d:93:45:e5:c3:fc:6b: a2:f6:b9:2d:94:04:f0:36:b2:ce:dc:2e:63:36:01: 73:7e:df:4d:f9:2b:85:40:a3:f0:ff:3f:a0:d7:74: 93:01:4c:51:e2:5b:b5:16:fa:02:de:03:ea:26:6a: 87:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:0B:8D:06:7A:9E:27:15:85:E2:DC:9D:9E:2D:AD:7D:9A:CD:E3:F8 X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/1wuNBnqeJxWF4tydni2tfZrN4_g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec0:630::/44 Signature Algorithm: sha256WithRSAEncryption 35:d9:1e:c0:1c:88:35:66:57:0f:62:ec:13:22:97:72:81:dd: cb:c5:89:96:63:6e:59:38:9b:e5:9f:de:de:8f:5b:a9:9e:83: ab:15:2c:de:74:2c:03:db:ec:54:a7:6b:cd:07:d0:e8:40:97: 76:96:5d:42:9e:7d:e1:e5:7e:eb:b3:0a:b1:6f:b1:08:fe:80: 4b:ff:74:a8:e6:78:c5:05:ce:5e:de:58:bd:1e:48:85:8e:d2: de:db:0f:60:41:ad:bc:72:41:25:42:a7:a0:3c:67:06:ae:2d: ca:af:a4:76:5c:bd:49:65:09:1c:1d:20:4f:d9:30:1c:0c:48: f2:cf:d9:ae:0c:77:51:ae:62:1e:19:8c:ed:4f:cd:69:fd:f2: 31:74:10:8e:15:4f:1e:59:8a:de:b7:e8:5f:c9:81:cb:71:f5: 56:bd:74:5c:31:6a:6c:66:82:4b:7f:44:7a:a4:df:cc:f2:6d: 1c:19:c7:64:82:55:7f:19:1d:7c:d0:30:0a:e8:12:05:e5:2b: 66:fa:29:f7:c7:fc:42:0d:63:aa:a6:2c:11:22:4e:d2:ed:9a: 76:23:1c:54:c3:09:70:9b:77:5b:cb:81:39:d4:1e:e3:61:d0: 32:54:5a:52:46:79:30:9c:2a:06:90:ba:64:ca:56:04:64:9e: 88:3c:28:e2 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EMDb19o+7jgRYFJ77CKiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAxMTAxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzBiOGQwNjdhOWUyNzE1ODVlMmRjOWQ5ZTJkYWQ3ZDlhY2RlM2Y4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIFzu3EG8t9/xQaaRH9SZB+Zycee wNLNRQuqjbVCuu4ldvMdhmsS5AHK5Cf3rFFZjcUmNGgLcWXSQC0DJVEOd24yVtSu HqO4weeSJItNPuHtnsy5waEQ8TVVyQuUHKFXii29+Mu3HnVXb3YvTpXypQODmM2O K/bgOY0Zw2BFdZVrD21+xxdCInvk9ZDpFBQbm2EoKIa5A4ixtPjgc9tdFMRCEVOj 8aR8JvHN+C8ya0fyu/LTmuaQOu8iNv2Zkm6mO+v8aVh/gd2OUS2TReXD/Gui9rkt lATwNrLO3C5jNgFzft9N+SuFQKPw/z+g13STAUxR4lu1FvoC3gPqJmqHTwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNcLjQZ6nicVheLcnZ4trX2azeP4MB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvMXd1TkJucWVKeFdGNHR5ZG5pMnRmWnJONF9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+wAYw MA0GCSqGSIb3DQEBCwUAA4IBAQA12R7AHIg1ZlcPYuwTIpdygd3LxYmWY25ZOJvl n97ej1upnoOrFSzedCwD2+xUp2vNB9DoQJd2ll1Cnn3h5X7rswqxb7EI/oBL/3So 5njFBc5e3li9HkiFjtLe2w9gQa28ckElQqegPGcGri3Kr6R2XL1JZQkcHSBP2TAc DEjyz9muDHdRrmIeGYztT81p/fIxdBCOFU8eWYret+hfyYHLcfVWvXRcMWpsZoJL f0R6pN/M8m0cGcdkglV/GR180DAK6BIF5Stm+in3x/xCDWOqpiwRIk7S7Zp2IxxU wwlwm3dby4E51B7jYdAyVFpSRnkwnCoGkLpkylYEZJ6IPCji -----END CERTIFICATE-----Generated at Thu Jan 1 20:40:02 2026 by rpki-client