This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/Wy81KMy0DL_6tpJOi6ANUYyTUv4.roa File: Wy81KMy0DL_6tpJOi6ANUYyTUv4.roa (raw, json) Hash identifier: d27KgsDg+KuUKh7rpBYfZ/yBm4hBx4SDfoftiDo2y/8= Subject key identifier: 5B:2F:35:28:CC:B4:0C:BF:FA:B6:92:4E:8B:A0:0D:51:8C:93:52:FE Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1 Certificate serial: 019B7E380DB551DFFD37BD8C6BF1D70DCB17 Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/Wy81KMy0DL_6tpJOi6ANUYyTUv4.roa Signing time: Fri 02 Jan 2026 10:19:21 +0000 ROA not before: Fri 02 Jan 2026 10:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208861 IP address blocks: 2a05:fb45::/32 maxlen: 32 2a0a:4780::/32 maxlen: 32 2a0a:4781::/32 maxlen: 32 2a0a:4782::/32 maxlen: 32 2a0a:4783::/32 maxlen: 32 2a0d:60c1::/32 maxlen: 32 2a0f:cc82::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 13:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:0d:b5:51:df:fd:37:bd:8c:6b:f1:d7:0d:cb:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1 Validity Not Before: Jan 2 10:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b2f3528ccb40cbffab6924e8ba00d518c9352fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:bd:ad:cd:46:6a:f5:fe:0c:9e:c9:fc:d9:4f: 59:c2:80:c0:bb:ab:65:a0:1c:35:20:df:80:a3:71: 4f:af:a1:f7:55:c0:a6:09:47:44:26:ed:68:4d:ea: f6:78:a7:ff:ff:41:f3:8c:61:cd:60:ec:d0:27:11: 10:89:52:d0:34:13:14:11:a4:d8:52:a7:11:e7:bc: 76:e2:ea:67:3c:ac:c7:d4:f9:b8:d8:6c:d3:c7:68: d3:d0:96:0a:ff:62:36:f7:f8:b2:cc:22:5d:93:5f: e3:26:0b:41:ce:c3:27:8b:65:40:ce:fc:94:c1:d9: d6:b5:46:16:65:1f:d5:ce:08:66:85:38:84:b7:86: 94:06:08:f6:cd:db:89:98:c1:18:5f:97:0e:fc:99: af:c5:82:9c:5a:2e:9d:87:60:28:de:43:03:ee:8e: fe:49:7c:4e:1d:54:68:e3:4e:fe:0c:fb:6b:0f:5f: 79:b6:91:46:c1:db:32:e2:98:3f:a6:39:86:c1:9c: 8e:db:16:ce:bc:d7:8c:be:fc:a0:10:9b:74:47:42: ce:d4:0d:d2:3c:5b:81:fd:60:ce:dc:e0:65:c4:ca: 26:6c:c0:98:f8:f2:57:78:83:16:e1:71:68:3f:96: 69:00:2a:14:b5:9a:21:5b:9d:43:1f:fb:22:d0:6f: b5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:2F:35:28:CC:B4:0C:BF:FA:B6:92:4E:8B:A0:0D:51:8C:93:52:FE X509v3 Authority Key Identifier: keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/Wy81KMy0DL_6tpJOi6ANUYyTUv4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:fb45::/32 2a0a:4780::/30 2a0d:60c1::/32 2a0f:cc82::/32 Signature Algorithm: sha256WithRSAEncryption 35:ed:f3:6d:9f:8b:4e:e2:9c:2f:5c:e5:18:cd:ea:f3:87:19: c7:48:20:19:36:46:a4:5e:f0:c4:2e:4a:49:ff:3d:d5:d5:4d: 8a:b0:2b:3d:d2:e3:05:ac:cd:64:85:e8:da:15:a5:14:cb:dc: 48:00:c4:b4:b2:5f:ff:12:74:e1:ef:da:29:05:ba:7a:88:3f: 7c:a6:d2:f7:13:c6:ab:ce:e4:54:12:dc:0c:0d:5c:ba:2b:75: 6f:19:8f:20:12:6e:9d:73:f2:97:23:ae:4c:3f:73:ed:c5:90: 8e:eb:d4:75:f6:04:47:2a:4e:86:88:66:d3:8f:0b:07:34:82: da:f9:e6:7d:15:be:a5:7f:d4:b8:bb:e1:c3:75:8d:59:b4:dc: 16:5c:c4:90:3b:90:fb:2d:bf:a3:f5:42:ba:1b:d7:c2:29:91: c8:c3:7f:47:eb:90:87:fd:27:16:e2:b1:c9:59:6c:1c:d9:a9: d1:b0:3b:7d:2c:a4:e9:d5:27:d1:3b:a3:9f:24:19:04:42:f5: 71:b1:bc:ae:8b:37:20:6a:1d:e1:89:af:b4:80:23:04:e4:81: ea:1a:43:aa:65:b2:67:fa:1f:23:19:c9:8b:55:80:f2:1c:d6: d8:49:18:19:e7:de:45:c1:c1:72:7b:59:c1:e8:2c:78:d6:67: 9b:cc:78:41 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt+OA21Ud/9N72Ma/HXDcsXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NTllYzJhNWZkNTM5MDljNTIzOWY0Y2M4ZDZkMzI5YTI3 NzliYjEwHhcNMjYwMTAyMTAxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjJmMzUyOGNjYjQwY2JmZmFiNjkyNGU4YmEwMGQ1MThjOTM1MmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsb2tzUZq9f4Mnsn82U9ZwoDAu6tl oBw1IN+Ao3FPr6H3VcCmCUdEJu1oTer2eKf//0HzjGHNYOzQJxEQiVLQNBMUEaTY UqcR57x24upnPKzH1Pm42GzTx2jT0JYK/2I29/iyzCJdk1/jJgtBzsMni2VAzvyU wdnWtUYWZR/VzghmhTiEt4aUBgj2zduJmMEYX5cO/JmvxYKcWi6dh2Ao3kMD7o7+ SXxOHVRo407+DPtrD195tpFGwdsy4pg/pjmGwZyO2xbOvNeMvvygEJt0R0LO1A3S PFuB/WDO3OBlxMombMCY+PJXeIMW4XFoP5ZpACoUtZohW51DH/si0G+1IwIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFFsvNSjMtAy/+raSTougDVGMk1L+MB8GA1UdIwQY MBaAFERZ7Cpf1TkJxSOfTMjW0ymid5uxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTkt NmI0MzcyNjAyMDk2LzEvV3k4MUtNeTBETF82dHBKT2k2QU5VWXlUVXY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTktNmI0MzcyNjAyMDk2 LzEvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAAjAcAwUAKgX7RQMF AioKR4ADBQAqDWDBAwUAKg/MgjANBgkqhkiG9w0BAQsFAAOCAQEANe3zbZ+LTuKc L1zlGM3q84cZx0ggGTZGpF7wxC5KSf891dVNirArPdLjBazNZIXo2hWlFMvcSADE tLJf/xJ04e/aKQW6eog/fKbS9xPGq87kVBLcDA1cuit1bxmPIBJunXPylyOuTD9z 7cWQjuvUdfYERypOhohm048LBzSC2vnmfRW+pX/UuLvhw3WNWbTcFlzEkDuQ+y2/ o/VCuhvXwimRyMN/R+uQh/0nFuKxyVlsHNmp0bA7fSyk6dUn0TujnyQZBEL1cbG8 ros3IGod4YmvtIAjBOSB6hpDqmWyZ/ofIxnJi1WA8hzW2EkYGefeRcHBcntZwegs eNZnm8x4QQ== -----END CERTIFICATE-----Generated at Tue Jan 20 17:19:15 2026 by rpki-client