This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Wi9MfCSLidQqLJ34je0_NyUWcFU.roa File: Wi9MfCSLidQqLJ34je0_NyUWcFU.roa (raw, json) Hash identifier: OQi+gOG3hirQ5ap7MJBO3wAEpWVY6KFLcQgejKmL7Jk= Subject key identifier: 5A:2F:4C:7C:24:8B:89:D4:2A:2C:9D:F8:8D:ED:3F:37:25:16:70:55 Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B7910C04749F5732E84A620BFD24CB78C Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Wi9MfCSLidQqLJ34je0_NyUWcFU.roa Signing time: Thu 01 Jan 2026 10:18:19 +0000 ROA not before: Thu 01 Jan 2026 10:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215752 IP address blocks: 2a12:bec0:640::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:c0:47:49:f5:73:2e:84:a6:20:bf:d2:4c:b7:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 10:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a2f4c7c248b89d42a2c9df88ded3f3725167055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:36:6d:65:a1:b3:6a:c1:a5:18:b2:78:c0:09: cf:3d:f2:82:a5:e9:20:11:ff:13:07:c5:47:45:99: cb:2b:8e:d8:2b:2e:48:e6:3e:cb:65:17:09:09:31: de:8b:ae:e7:c9:3a:d5:96:d1:28:93:8b:31:70:e3: 75:4d:02:cd:ed:e3:a8:74:6b:2f:3b:04:8d:61:71: 86:4e:63:77:01:e2:3c:a3:65:a6:db:63:04:00:0c: 28:f6:d9:fa:a1:3b:2e:0f:27:d1:76:9c:f0:6c:6e: 24:ae:74:97:07:8a:d8:e1:df:1b:4f:c0:ef:21:a5: b4:ce:31:90:31:74:96:23:95:f2:e9:9b:88:72:50: ea:7a:92:f9:cc:cd:9e:f6:18:7f:c6:e6:82:09:ab: dc:32:70:60:ec:52:3c:8d:6a:4d:75:fd:01:61:24: 03:c2:dd:4d:a5:57:1a:9d:93:82:43:8c:73:d0:15: 0d:f9:12:61:75:98:35:cd:2f:51:1c:a2:fe:38:6a: 7c:86:8a:57:d2:e8:d9:18:ce:9c:2d:e4:70:e5:62: ef:ac:bb:e5:05:37:54:40:b3:5e:8f:52:70:7e:b9: 56:ba:bf:6c:f3:c6:5a:90:0e:8b:27:81:8c:8b:99: a7:f3:87:88:bd:f5:b3:8b:1d:bc:3d:49:8c:45:9b: b5:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:2F:4C:7C:24:8B:89:D4:2A:2C:9D:F8:8D:ED:3F:37:25:16:70:55 X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Wi9MfCSLidQqLJ34je0_NyUWcFU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec0:640::/44 Signature Algorithm: sha256WithRSAEncryption 5f:e2:70:2a:14:2e:e2:ad:94:1d:ec:76:9d:17:7d:ca:e6:0c: a5:e6:55:d8:e5:be:ba:62:f6:17:65:44:c4:31:ae:4c:79:a0: b8:25:84:00:d6:3b:53:69:1c:69:db:cf:b2:ae:f6:fa:d1:1c: f0:d5:8b:b5:40:99:ff:ed:fe:6c:a0:25:36:e9:30:00:e2:13: 3a:60:d0:1f:95:e1:aa:b8:c2:d7:87:e3:f0:8d:04:0e:0f:95: 19:46:a1:4d:58:26:73:bd:cf:f5:65:65:53:f1:c2:f6:58:e9: 00:c2:73:95:fa:be:94:97:c4:f5:23:1e:d0:47:7b:9a:eb:f8: 44:10:9b:f2:25:ce:54:6a:77:19:6d:37:97:45:48:37:52:86: 79:47:79:c4:02:51:7c:2c:dc:5a:60:b9:49:54:d9:59:e3:18: b5:31:df:2f:ce:40:84:12:b6:71:1f:cf:12:11:f0:69:a3:c9: 17:49:52:83:27:63:80:4c:aa:b2:f6:c5:5a:52:24:62:70:0e: 41:43:b9:b8:b7:31:ae:7e:a2:13:3c:10:4d:e7:6c:ec:f0:7f: 3c:67:c7:38:e1:28:85:b6:58:92:e6:84:fe:58:99:1a:84:2b: ab:10:9d:dc:e7:01:42:2e:14:bd:fe:f2:8b:b4:fc:11:73:e0: c3:1a:5c:f2 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EMBHSfVzLoSmIL/STLeMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAxMTAxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTJmNGM3YzI0OGI4OWQ0MmEyYzlkZjg4ZGVkM2YzNzI1MTY3MDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5TZtZaGzasGlGLJ4wAnPPfKCpekg Ef8TB8VHRZnLK47YKy5I5j7LZRcJCTHei67nyTrVltEok4sxcON1TQLN7eOodGsv OwSNYXGGTmN3AeI8o2Wm22MEAAwo9tn6oTsuDyfRdpzwbG4krnSXB4rY4d8bT8Dv IaW0zjGQMXSWI5Xy6ZuIclDqepL5zM2e9hh/xuaCCavcMnBg7FI8jWpNdf0BYSQD wt1NpVcanZOCQ4xz0BUN+RJhdZg1zS9RHKL+OGp8hopX0ujZGM6cLeRw5WLvrLvl BTdUQLNej1JwfrlWur9s88ZakA6LJ4GMi5mn84eIvfWzix28PUmMRZu12wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFovTHwki4nUKiyd+I3tPzclFnBVMB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvV2k5TWZDU0xpZFFxTEozNGplMF9OeVVXY0ZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+wAZA MA0GCSqGSIb3DQEBCwUAA4IBAQBf4nAqFC7irZQd7HadF33K5gyl5lXY5b66YvYX ZUTEMa5MeaC4JYQA1jtTaRxp28+yrvb60Rzw1Yu1QJn/7f5soCU26TAA4hM6YNAf leGquMLXh+PwjQQOD5UZRqFNWCZzvc/1ZWVT8cL2WOkAwnOV+r6Ul8T1Ix7QR3ua 6/hEEJvyJc5UancZbTeXRUg3UoZ5R3nEAlF8LNxaYLlJVNlZ4xi1Md8vzkCEErZx H88SEfBpo8kXSVKDJ2OATKqy9sVaUiRicA5BQ7m4tzGufqITPBBN52zs8H88Z8c4 4SiFtliS5oT+WJkahCurEJ3c5wFCLhS9/vKLtPwRc+DDGlzy -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:22 2026 by rpki-client