This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/wI-ypASrJ7m0N79u1RJq_k57AIc.roa File: wI-ypASrJ7m0N79u1RJq_k57AIc.roa (raw, json) Hash identifier: U4IOvrmrguD6t/ZtF0LoNyn+uQVk4Bj7HsVFQCe+6FI= Subject key identifier: C0:8F:B2:A4:04:AB:27:B9:B4:37:BF:6E:D5:12:6A:FE:4E:7B:00:87 Certificate issuer: /CN=58a681c71beb464e01d5b68e19ca566da9930e23 Certificate serial: 019B7EA54497D1C62D845B2752A78AB8A06D Authority key identifier: 58:A6:81:C7:1B:EB:46:4E:01:D5:B6:8E:19:CA:56:6D:A9:93:0E:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKaBxxvrRk4B1baOGcpWbamTDiM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/wI-ypASrJ7m0N79u1RJq_k57AIc.roa Signing time: Fri 02 Jan 2026 12:18:38 +0000 ROA not before: Fri 02 Jan 2026 12:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62563 IP address blocks: 2a14:dc81:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.crl rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft rsync://rpki.ripe.net/repository/DEFAULT/WKaBxxvrRk4B1baOGcpWbamTDiM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:44:97:d1:c6:2d:84:5b:27:52:a7:8a:b8:a0:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58a681c71beb464e01d5b68e19ca566da9930e23 Validity Not Before: Jan 2 12:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c08fb2a404ab27b9b437bf6ed5126afe4e7b0087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:85:51:02:b0:ff:e1:c4:64:f2:9a:17:f1:98: 82:53:3f:96:3f:55:ca:ed:51:7b:56:0c:91:6c:5e: 95:a3:99:4f:a2:2c:b2:df:80:fc:dd:e2:df:76:06: 04:12:a0:eb:18:e7:34:e5:7e:19:82:c6:05:41:86: 68:2d:33:0f:93:c6:ca:f6:7f:39:35:fb:c5:6c:16: ab:77:f8:00:29:6e:b5:4b:2d:59:ec:41:ed:4a:fd: db:a4:d2:ea:13:c2:93:18:96:03:45:de:ea:c0:87: b0:11:25:a1:9c:11:7f:ee:87:ab:c4:d0:e0:88:b4: a2:c4:b5:9e:2c:4e:83:af:dc:e6:ef:e7:52:1e:d0: 27:64:14:06:5f:bd:b8:6b:34:3e:4d:1b:65:0f:2e: 25:b2:80:fb:38:91:1f:d0:74:f7:c5:d2:e2:25:9c: e4:19:dc:72:f3:e2:9e:7a:00:3c:77:97:31:76:ee: 32:bf:d3:3c:7a:bb:e6:ed:e8:89:3c:ef:30:64:5c: bd:e2:2b:05:9a:22:60:a0:cf:e7:0a:f3:b0:3a:51: b8:05:c7:2e:bf:47:b1:78:5d:bc:ad:c9:21:c6:45: be:2d:52:3e:1b:85:63:2b:27:fd:61:a6:98:77:3f: e6:ca:a8:69:45:53:33:ff:eb:0d:7f:74:02:f8:53: 4b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:8F:B2:A4:04:AB:27:B9:B4:37:BF:6E:D5:12:6A:FE:4E:7B:00:87 X509v3 Authority Key Identifier: keyid:58:A6:81:C7:1B:EB:46:4E:01:D5:B6:8E:19:CA:56:6D:A9:93:0E:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKaBxxvrRk4B1baOGcpWbamTDiM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/wI-ypASrJ7m0N79u1RJq_k57AIc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:dc81:2000::/36 Signature Algorithm: sha256WithRSAEncryption 68:e9:de:63:d0:72:23:e6:fb:79:56:31:d9:bf:a3:43:b4:d1: 17:64:7f:99:9a:62:f5:29:a1:43:06:5d:8e:69:44:ee:6d:57: c2:09:45:f3:82:90:e3:fe:44:22:5b:15:a3:38:ed:4d:e2:02: 39:ef:c1:23:08:39:76:76:70:ad:5f:97:45:ef:0c:b7:62:ba: 4d:44:de:49:37:a7:71:2c:bd:6c:72:ea:e0:bd:a2:fa:9a:46: 76:46:01:5a:4e:ee:80:52:f9:bf:96:94:d9:06:17:3e:9a:b0: 41:94:c7:ce:49:f3:b2:53:32:e5:f2:5a:a3:50:26:cd:3d:1f: c9:85:24:02:e8:4f:9e:ad:b6:94:3e:a8:14:9b:8c:e2:e0:8c: b4:ad:af:15:8e:6f:42:0e:56:66:6e:2d:6a:df:2f:4e:74:6f: ee:db:f7:9c:f7:d7:ec:37:4f:74:97:63:58:de:4d:22:6e:cf: 2f:dc:8b:89:48:19:d1:40:19:fe:d1:b9:4a:78:e9:9f:11:80: 45:b7:2c:13:b2:20:aa:89:aa:dd:1d:4b:db:37:69:45:e8:cc: 67:1e:fd:ab:46:4b:a9:75:d1:32:d3:69:c0:f1:13:81:8e:8a: 53:7f:4b:90:a7:53:38:88:e2:d1:80:d9:8a:38:1b:a4:21:8c: 92:ba:71:09 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+pUSX0cYthFsnUqeKuKBtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YTY4MWM3MWJlYjQ2NGUwMWQ1YjY4ZTE5Y2E1NjZkYTk5 MzBlMjMwHhcNMjYwMTAyMTIxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDhmYjJhNDA0YWIyN2I5YjQzN2JmNmVkNTEyNmFmZTRlN2IwMDg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoVRArD/4cRk8poX8ZiCUz+WP1XK 7VF7VgyRbF6Vo5lPoiyy34D83eLfdgYEEqDrGOc05X4ZgsYFQYZoLTMPk8bK9n85 NfvFbBard/gAKW61Sy1Z7EHtSv3bpNLqE8KTGJYDRd7qwIewESWhnBF/7oerxNDg iLSixLWeLE6Dr9zm7+dSHtAnZBQGX724azQ+TRtlDy4lsoD7OJEf0HT3xdLiJZzk Gdxy8+KeegA8d5cxdu4yv9M8ervm7eiJPO8wZFy94isFmiJgoM/nCvOwOlG4Bccu v0exeF28rckhxkW+LVI+G4VjKyf9YaaYdz/myqhpRVMz/+sNf3QC+FNLKQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFMCPsqQEqye5tDe/btUSav5OewCHMB8GA1UdIwQY MBaAFFimgccb60ZOAdW2jhnKVm2pkw4jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0thQnh4dnJSazRCMWJhT0djcFdiYW1URGlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9mNTFkMmUtZDE3NC00ZWY1LTgwYzEt OTdmOTFiYzk3YTQyLzEvd0kteXBBU3JKN20wTjc5dTFSSnFfazU3QUljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9mNTFkMmUtZDE3NC00ZWY1LTgwYzEtOTdmOTFiYzk3YTQy LzEvV0thQnh4dnJSazRCMWJhT0djcFdiYW1URGlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKhTcgSAw DQYJKoZIhvcNAQELBQADggEBAGjp3mPQciPm+3lWMdm/o0O00Rdkf5maYvUpoUMG XY5pRO5tV8IJRfOCkOP+RCJbFaM47U3iAjnvwSMIOXZ2cK1fl0XvDLdiuk1E3kk3 p3EsvWxy6uC9ovqaRnZGAVpO7oBS+b+WlNkGFz6asEGUx85J87JTMuXyWqNQJs09 H8mFJALoT56ttpQ+qBSbjOLgjLStrxWOb0IOVmZuLWrfL050b+7b95z31+w3T3SX Y1jeTSJuzy/ci4lIGdFAGf7RuUp46Z8RgEW3LBOyIKqJqt0dS9s3aUXozGce/atG S6l10TLTacDxE4GOilN/S5CnUziI4tGA2Yo4G6QhjJK6cQk= -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:28 2026 by rpki-client