This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/wSoD-Yyuw9oe0PzcTbDZo2JGCUk.roa File: wSoD-Yyuw9oe0PzcTbDZo2JGCUk.roa (raw, json) Hash identifier: Jy2GHX21npd0zGLUhRjI0tTL90Zy1A+Gk3cU0DE8+Os= Subject key identifier: C1:2A:03:F9:8C:AE:C3:DA:1E:D0:FC:DC:4D:B0:D9:A3:62:46:09:49 Certificate issuer: /CN=40cd5a5038d5e12fe1c9d9f5c8664074c3dd0ac7 Certificate serial: 019B7CED883EB53254C05D96C1579DFD830C Authority key identifier: 40:CD:5A:50:38:D5:E1:2F:E1:C9:D9:F5:C8:66:40:74:C3:DD:0A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QM1aUDjV4S_hydn1yGZAdMPdCsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/wSoD-Yyuw9oe0PzcTbDZo2JGCUk.roa Signing time: Fri 02 Jan 2026 04:18:20 +0000 ROA not before: Fri 02 Jan 2026 04:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35039 IP address blocks: 2a10:afc1:1000::/36 maxlen: 36 2a10:afc1:2000::/36 maxlen: 36 2a10:afc1:3000::/36 maxlen: 36 2a10:afc1:4000::/36 maxlen: 36 2a10:afc1:5000::/36 maxlen: 36 2a10:afc1:6000::/36 maxlen: 36 2a10:afc1:7000::/36 maxlen: 36 2a10:afc1:e000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.crl rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.mft rsync://rpki.ripe.net/repository/DEFAULT/QM1aUDjV4S_hydn1yGZAdMPdCsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 07:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:88:3e:b5:32:54:c0:5d:96:c1:57:9d:fd:83:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40cd5a5038d5e12fe1c9d9f5c8664074c3dd0ac7 Validity Not Before: Jan 2 04:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c12a03f98caec3da1ed0fcdc4db0d9a362460949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:22:ba:df:2f:fb:ac:ec:6a:82:60:57:4e:25: 3b:f0:c7:fe:b2:73:73:ce:98:b9:83:0b:d0:1a:83: b9:f1:8e:fe:7e:cb:f1:29:ec:65:8a:73:94:cf:66: 14:c6:63:86:f8:f8:4d:74:dd:8c:e0:0f:27:c0:27: a3:25:3e:9d:f5:af:b4:b9:b5:ea:eb:ac:30:8e:fb: 27:6e:b8:f4:c0:19:bb:67:0f:cd:6c:1e:b8:49:50: e3:7e:48:8e:7d:85:21:40:a1:ff:6e:7a:53:74:b5: 40:72:5b:3f:92:e4:39:2f:bc:3e:6d:aa:aa:b0:9f: 5e:95:f9:66:5c:72:a5:ea:77:05:5a:19:bf:0d:2f: d6:1c:07:7d:79:0b:0d:cd:c5:14:d3:0b:ff:ec:8f: 17:e4:3b:1b:23:7f:71:91:e3:4b:d7:2e:16:3d:f3: e8:73:c2:b7:f6:6a:38:fe:23:6a:21:c5:68:bd:8b: 28:10:ff:b3:2b:2c:fd:ea:78:a7:12:64:73:e5:24: 35:ca:95:60:3a:06:b1:f6:28:cb:85:11:ae:56:e4: 1b:a2:e7:59:2b:49:bd:ea:7b:36:48:7b:51:a5:1f: fc:7c:e1:47:e6:66:62:c6:af:ee:8f:16:11:b2:1b: b3:f0:be:84:33:80:0c:30:d6:f7:1a:f1:40:c3:56: 1a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:2A:03:F9:8C:AE:C3:DA:1E:D0:FC:DC:4D:B0:D9:A3:62:46:09:49 X509v3 Authority Key Identifier: keyid:40:CD:5A:50:38:D5:E1:2F:E1:C9:D9:F5:C8:66:40:74:C3:DD:0A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QM1aUDjV4S_hydn1yGZAdMPdCsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/wSoD-Yyuw9oe0PzcTbDZo2JGCUk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:afc1:1000::-2a10:afc1:7fff:ffff:ffff:ffff:ffff:ffff 2a10:afc1:e000::/36 Signature Algorithm: sha256WithRSAEncryption 50:da:58:8c:e7:41:43:70:06:e5:e7:7e:4c:86:4c:10:29:39: 90:18:2c:5a:da:7d:f3:34:9a:94:78:57:70:9c:00:ac:2a:96: 8a:a7:a5:cb:f0:2e:f4:58:ec:b1:cc:5d:91:24:47:f6:75:08: ff:41:f0:c9:0c:7a:ec:09:0f:9e:fa:59:39:b8:bd:6d:fb:ab: db:f1:62:ac:52:73:c4:54:fd:d8:35:ed:8a:4f:b2:ea:9c:fb: 57:13:a3:73:fd:b7:10:6f:62:72:88:16:49:0d:e9:ec:ce:2f: bc:3e:bb:52:10:52:dc:34:38:ef:62:1a:9d:b9:89:7d:2f:2f: 3d:09:a3:91:f7:b7:05:5f:f9:1a:17:17:29:82:ee:13:dc:d1: 0c:67:89:52:e1:69:a8:56:e1:64:91:e6:2c:a0:7b:5f:ed:ac: 5a:b2:a5:4e:2e:8a:f8:91:3a:35:4d:39:0a:ee:3b:3d:2e:00: 4b:c6:7f:15:7a:78:3d:ee:98:0b:55:a6:ce:14:f8:f0:7e:81: 64:fa:23:30:95:5a:81:79:e1:8c:21:e0:f6:bf:b5:de:8f:e7: c7:fb:c1:b5:ba:51:e6:2f:04:10:79:da:a6:ef:cd:f6:31:06: 42:96:01:73:95:64:48:80:a6:1e:b0:7f:07:39:d5:c6:3a:44: 8a:4c:57:a9 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt87Yg+tTJUwF2WwVed/YMMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwY2Q1YTUwMzhkNWUxMmZlMWM5ZDlmNWM4NjY0MDc0YzNk ZDBhYzcwHhcNMjYwMTAyMDQxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTJhMDNmOThjYWVjM2RhMWVkMGZjZGM0ZGIwZDlhMzYyNDYwOTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiK63y/7rOxqgmBXTiU78Mf+snNz zpi5gwvQGoO58Y7+fsvxKexlinOUz2YUxmOG+PhNdN2M4A8nwCejJT6d9a+0ubXq 66wwjvsnbrj0wBm7Zw/NbB64SVDjfkiOfYUhQKH/bnpTdLVAcls/kuQ5L7w+baqq sJ9elflmXHKl6ncFWhm/DS/WHAd9eQsNzcUU0wv/7I8X5DsbI39xkeNL1y4WPfPo c8K39mo4/iNqIcVovYsoEP+zKyz96ninEmRz5SQ1ypVgOgax9ijLhRGuVuQboudZ K0m96ns2SHtRpR/8fOFH5mZixq/ujxYRshuz8L6EM4AMMNb3GvFAw1Ya7wIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFMEqA/mMrsPaHtD83E2w2aNiRglJMB8GA1UdIwQY MBaAFEDNWlA41eEv4cnZ9chmQHTD3QrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU0xYVVEalY0U19oeWRuMXlHWkFkTVBkQ3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9jZWMxMTktNGM5OS00MTU4LTk5ZjEt NjU5YzY3MTkxMWYxLzEvd1NvRC1ZeXV3OW9lMFB6Y1RiRFpvMkpHQ1VrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9jZWMxMTktNGM5OS00MTU4LTk5ZjEtNjU5YzY3MTkxMWYx LzEvUU0xYVVEalY0U19oeWRuMXlHWkFkTVBkQ3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAAjAaMBADBgQqEK/B EAMGByoQr8EAAwYEKhCvweAwDQYJKoZIhvcNAQELBQADggEBAFDaWIznQUNwBuXn fkyGTBApOZAYLFraffM0mpR4V3CcAKwqloqnpcvwLvRY7LHMXZEkR/Z1CP9B8MkM euwJD576WTm4vW37q9vxYqxSc8RU/dg17YpPsuqc+1cTo3P9txBvYnKIFkkN6ezO L7w+u1IQUtw0OO9iGp25iX0vLz0Jo5H3twVf+RoXFymC7hPc0QxniVLhaahW4WSR 5iyge1/trFqypU4uiviROjVNOQruOz0uAEvGfxV6eD3umAtVps4U+PB+gWT6IzCV WoF54Ywh4Pa/td6P58f7wbW6UeYvBBB52qbvzfYxBkKWAXOVZEiAph6wfwc51cY6 RIpMV6k= -----END CERTIFICATE-----Generated at Fri Jan 9 17:49:32 2026 by rpki-client