This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/aWKrXSKRTbkQytu8szvkITDtcp4.roa File: aWKrXSKRTbkQytu8szvkITDtcp4.roa (raw, json) Hash identifier: hhwa0DjXVtPqCH54yXa/mlgbjkeHbKaRGcO0Cx4Gy3o= Subject key identifier: 69:62:AB:5D:22:91:4D:B9:10:CA:DB:BC:B3:3B:E4:21:30:ED:72:9E Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512 Certificate serial: 019B7F150D2F111C355DC880429A0A1F870F Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/aWKrXSKRTbkQytu8szvkITDtcp4.roa Signing time: Fri 02 Jan 2026 14:20:44 +0000 ROA not before: Fri 02 Jan 2026 14:20:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55201 IP address blocks: 2a14:c380:800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 07:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:0d:2f:11:1c:35:5d:c8:80:42:9a:0a:1f:87:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512 Validity Not Before: Jan 2 14:20:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6962ab5d22914db910cadbbcb33be42130ed729e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:13:8b:15:9a:29:3e:45:73:00:5e:2a:a5:a8: 6f:b0:81:cf:5a:22:39:a4:e5:f2:85:72:8e:27:19: 6b:d9:ca:49:45:c2:b8:6f:87:e2:ba:75:34:9e:6c: 35:1c:7a:0e:5c:f0:98:92:87:ab:44:93:05:ab:bc: 6b:dd:a5:1b:74:a7:55:4f:eb:36:74:6b:00:ff:ab: 7c:24:95:47:a8:d7:27:6b:9f:17:c7:dc:a8:79:fb: 04:a4:91:cb:b4:8f:6a:a6:30:d3:a2:db:0b:bc:30: 94:4c:14:49:7b:c5:d0:13:bf:dc:0d:05:26:1d:6a: 3b:2d:bc:93:cd:f5:09:51:a0:4b:23:51:44:38:cf: a4:8f:91:b8:52:c0:cd:58:1c:57:dc:35:c3:35:de: 93:68:ac:1b:d6:21:7f:d7:b1:0f:33:a7:14:31:1f: da:3c:62:05:f7:44:34:f3:a9:e4:99:d4:61:0b:7a: 0c:ae:09:af:24:55:7c:bb:3e:09:0a:7a:56:3c:e3: 4e:1d:2c:26:08:79:7c:a2:6f:f5:29:86:1b:87:9b: 15:a7:7d:70:26:b8:d6:76:27:e2:be:37:85:72:98: ff:37:07:19:75:20:3f:65:ff:44:99:c1:28:4a:62: 3b:9f:e9:bc:7f:12:d4:f1:93:b2:f4:a4:5c:7d:cf: 9d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:62:AB:5D:22:91:4D:B9:10:CA:DB:BC:B3:3B:E4:21:30:ED:72:9E X509v3 Authority Key Identifier: keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/aWKrXSKRTbkQytu8szvkITDtcp4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:c380:800::/40 Signature Algorithm: sha256WithRSAEncryption 74:33:ea:e6:d2:14:2a:79:af:a1:50:c4:c3:c9:42:d0:3d:a9: dd:04:91:12:28:95:04:09:6e:e4:20:9d:97:75:0d:e7:0c:c0: c9:7a:7c:ec:76:7e:55:5c:65:d4:62:2f:4e:77:89:d2:32:3f: 46:96:c5:5e:60:61:35:29:4c:1f:4f:1b:ce:57:9f:ae:61:c3: 43:dd:ff:69:77:f5:d1:95:66:23:9a:f5:aa:14:50:18:80:e9: 33:1f:4c:34:ab:50:c0:81:c0:30:72:c6:75:f3:a9:b7:b2:3c: 0e:d1:0e:53:25:cc:dc:73:49:90:b7:b7:35:10:24:71:d2:82: a4:13:77:be:60:66:a3:2f:64:c6:c8:b9:3a:7b:94:69:84:1c: 6e:54:a5:2d:63:ed:ab:30:f2:f6:e6:0d:6c:b6:86:66:3b:ae: 4f:1a:e0:bc:d7:3f:50:7e:aa:07:6b:35:28:5b:23:30:8f:c9: e2:5c:50:52:bc:0c:91:4b:73:e8:aa:bf:4f:46:78:d4:9a:27: c8:01:be:bc:02:ba:57:d4:b2:61:6e:3e:af:f4:7b:e8:e4:89: cf:08:3c:ad:ed:12:78:d3:07:5d:7c:e1:ea:9a:cd:25:df:89: db:2d:63:90:b4:51:be:15:50:3f:5d:85:38:72:68:1d:e8:d4: b6:1b:5e:86 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt/FQ0vERw1XciAQpoKH4cPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YjNkZTVmOWFkYjUwZmU0MWY2ZGM3OGZmZDBhMmM5MDg2 ZDI1MTIwHhcNMjYwMTAyMTQyMDQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTYyYWI1ZDIyOTE0ZGI5MTBjYWRiYmNiMzNiZTQyMTMwZWQ3MjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxOLFZopPkVzAF4qpahvsIHPWiI5 pOXyhXKOJxlr2cpJRcK4b4fiunU0nmw1HHoOXPCYkoerRJMFq7xr3aUbdKdVT+s2 dGsA/6t8JJVHqNcna58Xx9yoefsEpJHLtI9qpjDTotsLvDCUTBRJe8XQE7/cDQUm HWo7LbyTzfUJUaBLI1FEOM+kj5G4UsDNWBxX3DXDNd6TaKwb1iF/17EPM6cUMR/a PGIF90Q086nkmdRhC3oMrgmvJFV8uz4JCnpWPONOHSwmCHl8om/1KYYbh5sVp31w JrjWdifivjeFcpj/NwcZdSA/Zf9EmcEoSmI7n+m8fxLU8ZOy9KRcfc+dNQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFGliq10ikU25EMrbvLM75CEw7XKeMB8GA1UdIwQY MBaAFFiz3l+a21D+QfbceP/QoskIbSUSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUt NTMyMWQ2OWQ5NzlkLzEvYVdLclhTS1JUYmtReXR1OHN6dmtJVER0Y3A0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUtNTMyMWQ2OWQ5Nzlk LzEvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhTDgAgw DQYJKoZIhvcNAQELBQADggEBAHQz6ubSFCp5r6FQxMPJQtA9qd0EkRIolQQJbuQg nZd1DecMwMl6fOx2flVcZdRiL053idIyP0aWxV5gYTUpTB9PG85Xn65hw0Pd/2l3 9dGVZiOa9aoUUBiA6TMfTDSrUMCBwDByxnXzqbeyPA7RDlMlzNxzSZC3tzUQJHHS gqQTd75gZqMvZMbIuTp7lGmEHG5UpS1j7asw8vbmDWy2hmY7rk8a4LzXP1B+qgdr NShbIzCPyeJcUFK8DJFLc+iqv09GeNSaJ8gBvrwCulfUsmFuPq/0e+jkic8IPK3t EnjTB1184eqazSXfidstY5C0Ub4VUD9dhThyaB3o1LYbXoY= -----END CERTIFICATE-----Generated at Wed Jan 21 11:13:33 2026 by rpki-client