This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/wPPjKlvYbr9Tx8asKBLXQQGdfZo.roa File: wPPjKlvYbr9Tx8asKBLXQQGdfZo.roa (raw, json) Hash identifier: +r3Zs6/Afd1SxkBIaZWS41RkuDiTdwmVwCgbFKdVylQ= Subject key identifier: C0:F3:E3:2A:5B:D8:6E:BF:53:C7:C6:AC:28:12:D7:41:01:9D:7D:9A Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B79109FF940054E0B9ABAC5ADAD3373DF Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/wPPjKlvYbr9Tx8asKBLXQQGdfZo.roa Signing time: Thu 01 Jan 2026 10:18:11 +0000 ROA not before: Thu 01 Jan 2026 10:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205901 IP address blocks: 2a12:bec4:1e10::/48 maxlen: 48 2a12:bec4:1e11::/48 maxlen: 48 2a12:bec4:1e12::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:9f:f9:40:05:4e:0b:9a:ba:c5:ad:ad:33:73:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 10:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c0f3e32a5bd86ebf53c7c6ac2812d741019d7d9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d6:5f:a7:c2:45:bf:47:eb:f6:bd:e8:c0:62: 00:17:4b:5f:2d:2d:68:bb:3b:43:d9:1e:be:4b:74: 7c:dc:0d:b6:21:b8:6d:db:8f:76:02:b6:78:93:90: 81:94:62:4d:f7:33:19:e8:4e:60:a4:37:ec:4b:d0: fb:64:2a:50:f9:bb:f8:a3:f7:a3:c4:0a:83:1f:31: 78:d7:ef:64:ee:d2:c5:e1:45:a2:3a:e3:ef:b4:9f: ff:91:3a:34:67:88:2c:14:58:e5:ba:84:78:89:9e: 06:d6:fa:1b:9e:a6:71:3c:7a:3b:26:10:a2:2f:db: 57:10:a0:0f:8d:2c:85:e7:d2:ce:b1:fd:61:8d:bb: f9:41:eb:f3:3b:e9:a5:4f:b9:34:5b:b8:65:b0:e8: e1:a0:32:ca:e2:83:0e:9a:41:a8:47:fc:a2:dd:25: 93:39:00:c5:d7:e8:44:b2:20:51:95:5b:c9:6a:ed: a7:fc:1b:65:b5:f4:8d:af:a4:9c:a4:2e:38:3b:50: 6d:46:05:ba:7e:ad:a8:03:52:42:54:1a:e4:7b:7e: 92:7b:c5:86:25:83:0b:24:ae:61:00:38:2f:e6:b9: 49:8f:1c:95:29:b8:36:b5:55:9d:7e:ed:9e:d4:31: 24:de:92:a0:29:25:6d:e3:e9:f8:ed:b0:12:aa:6b: 99:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:F3:E3:2A:5B:D8:6E:BF:53:C7:C6:AC:28:12:D7:41:01:9D:7D:9A X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/wPPjKlvYbr9Tx8asKBLXQQGdfZo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec4:1e10::-2a12:bec4:1e12:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 82:b7:ff:8d:1a:14:6e:62:f8:f0:c9:9d:7a:44:65:8a:7b:38: 72:60:31:d3:d0:12:96:0d:22:7b:26:0e:b8:b5:58:14:d2:cc: 84:80:38:0a:59:4b:57:e4:60:a1:27:b8:71:ce:0d:44:56:c7: d9:c1:96:d2:1d:e0:f8:52:d0:bc:e9:45:ed:56:77:26:35:6c: 9b:ce:b8:92:22:e1:f9:75:e2:99:b9:37:27:7b:c9:71:45:ab: 26:2b:7b:2b:80:40:f1:b4:1c:23:61:c6:67:db:65:21:e6:23: ad:d6:b2:d7:6e:6d:07:a0:52:4d:b9:56:a1:25:98:4c:09:19: bc:4f:26:78:ee:c3:ff:aa:99:98:81:70:a3:e3:86:3e:57:c8: 91:9f:11:d3:03:55:08:1a:5f:89:c1:84:33:9a:40:3d:06:d5: b2:89:4e:5f:a0:b2:13:fe:71:e9:4a:21:c0:17:64:e5:f5:3b: 90:d6:4c:cb:48:fb:62:a2:e2:01:e2:25:c5:e5:e8:c9:60:3b: f9:28:84:87:4b:d9:3a:2b:d5:cd:04:39:05:94:6a:79:4d:74: cd:85:f5:91:0c:31:72:50:30:c4:1d:2c:d9:7d:69:a7:a8:1b: 4b:70:5b:8b:a9:0f:38:6c:e8:a2:67:1d:1b:dc:28:ec:cd:d3: af:ec:e3:31 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt5EJ/5QAVOC5q6xa2tM3PfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAxMTAxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMGYzZTMyYTViZDg2ZWJmNTNjN2M2YWMyODEyZDc0MTAxOWQ3ZDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdZfp8JFv0fr9r3owGIAF0tfLS1o uztD2R6+S3R83A22Ibht2492ArZ4k5CBlGJN9zMZ6E5gpDfsS9D7ZCpQ+bv4o/ej xAqDHzF41+9k7tLF4UWiOuPvtJ//kTo0Z4gsFFjluoR4iZ4G1vobnqZxPHo7JhCi L9tXEKAPjSyF59LOsf1hjbv5QevzO+mlT7k0W7hlsOjhoDLK4oMOmkGoR/yi3SWT OQDF1+hEsiBRlVvJau2n/BtltfSNr6ScpC44O1BtRgW6fq2oA1JCVBrke36Se8WG JYMLJK5hADgv5rlJjxyVKbg2tVWdfu2e1DEk3pKgKSVt4+n47bASqmuZFwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFMDz4ypb2G6/U8fGrCgS10EBnX2aMB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvd1BQaktsdllicjlUeDhhc0tCTFhRUUdkZlpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwQqEr7E HhADBwAqEr7EHhIwDQYJKoZIhvcNAQELBQADggEBAIK3/40aFG5i+PDJnXpEZYp7 OHJgMdPQEpYNInsmDri1WBTSzISAOApZS1fkYKEnuHHODURWx9nBltId4PhS0Lzp Re1WdyY1bJvOuJIi4fl14pm5Nyd7yXFFqyYreyuAQPG0HCNhxmfbZSHmI63Wstdu bQegUk25VqElmEwJGbxPJnjuw/+qmZiBcKPjhj5XyJGfEdMDVQgaX4nBhDOaQD0G 1bKJTl+gshP+celKIcAXZOX1O5DWTMtI+2Ki4gHiJcXl6MlgO/kohIdL2Tor1c0E OQWUanlNdM2F9ZEMMXJQMMQdLNl9aaeoG0twW4upDzhs6KJnHRvcKOzN06/s4zE= -----END CERTIFICATE-----Generated at Tue Jan 20 02:49:01 2026 by rpki-client