This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/wRvPE_LWNx2kIT2wAO2XbZUAglY.roa File: wRvPE_LWNx2kIT2wAO2XbZUAglY.roa (raw, json) Hash identifier: MxpajBbFFulzyH8dwfNbDFeDhL15/nETBO2IKZQO1kU= Subject key identifier: C1:1B:CF:13:F2:D6:37:1D:A4:21:3D:B0:00:ED:97:6D:95:00:82:56 Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1 Certificate serial: 019B7E380DE443265F32F23EBCAADD050234 Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/wRvPE_LWNx2kIT2wAO2XbZUAglY.roa Signing time: Fri 02 Jan 2026 10:19:21 +0000 ROA not before: Fri 02 Jan 2026 10:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210625 IP address blocks: 2a09:4e06::/32 maxlen: 32 2a09:4e07:7000::/36 maxlen: 36 2a09:4e07:9000::/36 maxlen: 36 2a0d:60c5::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 13:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:0d:e4:43:26:5f:32:f2:3e:bc:aa:dd:05:02:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1 Validity Not Before: Jan 2 10:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c11bcf13f2d6371da4213db000ed976d95008256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4b:91:ed:f9:21:91:7f:bd:b0:61:a5:91:65: 2e:85:12:75:4a:43:0e:db:d9:9e:a4:c1:b3:11:0e: 7d:1b:7e:c9:ba:00:fa:fd:de:8c:d2:6d:90:4d:ca: 74:79:b1:ca:01:b5:c3:ed:50:70:e8:1b:bf:5a:b2: ef:2f:ac:71:ba:8e:f3:37:fc:a1:7e:2f:c8:5d:b9: b1:3c:f9:ab:b2:c7:33:c4:3a:75:e9:4a:f4:7d:88: 08:f2:4b:fc:d3:ec:cb:8b:47:7e:6e:10:0c:3e:19: 5c:6d:dd:4d:c4:31:53:0b:fe:33:58:7c:be:63:c4: 98:bd:c8:af:bd:17:63:1d:52:05:b5:1d:32:80:4b: f2:6a:6c:bf:f1:3d:8c:4f:e6:ec:c8:cc:fc:b4:fa: ee:33:c7:d5:69:0d:84:ae:c1:e6:87:23:fb:40:98: ea:94:7d:34:e2:17:8b:e1:d3:c3:db:ba:4e:01:ba: 0d:12:80:f3:b1:aa:72:9b:39:d2:70:3a:b2:d8:33: 76:40:3c:d9:68:55:79:69:72:7e:5d:c3:b3:2c:fb: 4d:b4:6d:a9:b1:35:5e:b1:0a:ad:af:13:07:3f:d2: 6c:4e:20:84:a3:71:fd:50:b3:c3:c8:e9:f4:10:1b: ea:78:61:6f:4b:99:6f:ef:12:9a:0f:89:6e:70:f9: 46:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:1B:CF:13:F2:D6:37:1D:A4:21:3D:B0:00:ED:97:6D:95:00:82:56 X509v3 Authority Key Identifier: keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/wRvPE_LWNx2kIT2wAO2XbZUAglY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:4e06::/32 2a09:4e07:7000::/36 2a09:4e07:9000::/36 2a0d:60c5::/32 Signature Algorithm: sha256WithRSAEncryption 07:03:d6:90:7d:2b:1b:f5:c7:18:ae:e9:a8:68:65:2f:8c:b4: d0:ab:d4:76:05:c0:dd:f8:96:1a:bc:cd:ad:3d:e5:7b:95:7f: dd:1b:45:52:8a:a1:1f:1b:71:21:f9:01:bf:50:fe:37:70:11: a6:92:a2:8e:72:81:30:4f:b3:79:80:54:7d:d6:58:b8:84:23: 66:69:cf:ee:dd:a9:3f:3c:84:e3:2c:aa:09:fa:45:aa:33:93: f0:f5:41:f0:22:92:ae:30:a4:57:c7:60:6d:cd:b6:14:10:82: 87:81:08:48:ba:d9:0b:62:8b:83:10:58:05:5d:69:0e:19:c1: 0f:3c:9b:b5:61:53:80:b1:f8:2a:57:d2:33:23:c5:d7:75:a1: 33:b3:00:f9:00:5c:51:d9:eb:78:1c:d4:d9:54:09:23:02:70: fe:9d:e8:3a:12:52:d1:2e:b0:6f:bd:55:84:b0:4f:ca:80:94: 90:05:db:b9:39:da:05:7d:9a:65:0f:85:fb:99:b8:18:b1:7c: 70:ed:c4:53:06:61:64:c2:81:bf:56:e7:bb:39:79:68:84:60: 41:7b:08:11:96:c5:ea:b6:72:c4:dd:49:12:68:39:e1:07:21: 48:2f:fd:aa:b4:d0:a4:be:3c:43:da:76:96:38:35:d3:1a:47: 02:a3:b5:41 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt+OA3kQyZfMvI+vKrdBQI0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NTllYzJhNWZkNTM5MDljNTIzOWY0Y2M4ZDZkMzI5YTI3 NzliYjEwHhcNMjYwMTAyMTAxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTFiY2YxM2YyZDYzNzFkYTQyMTNkYjAwMGVkOTc2ZDk1MDA4MjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUuR7fkhkX+9sGGlkWUuhRJ1SkMO 29mepMGzEQ59G37JugD6/d6M0m2QTcp0ebHKAbXD7VBw6Bu/WrLvL6xxuo7zN/yh fi/IXbmxPPmrssczxDp16Ur0fYgI8kv80+zLi0d+bhAMPhlcbd1NxDFTC/4zWHy+ Y8SYvcivvRdjHVIFtR0ygEvyamy/8T2MT+bsyMz8tPruM8fVaQ2ErsHmhyP7QJjq lH004heL4dPD27pOAboNEoDzsapymznScDqy2DN2QDzZaFV5aXJ+XcOzLPtNtG2p sTVesQqtrxMHP9JsTiCEo3H9ULPDyOn0EBvqeGFvS5lv7xKaD4lucPlGqwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFMEbzxPy1jcdpCE9sADtl22VAIJWMB8GA1UdIwQY MBaAFERZ7Cpf1TkJxSOfTMjW0ymid5uxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTkt NmI0MzcyNjAyMDk2LzEvd1J2UEVfTFdOeDJrSVQyd0FPMlhiWlVBZ2xZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTktNmI0MzcyNjAyMDk2 LzEvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAAjAeAwUAKglOBgMG BCoJTgdwAwYEKglOB5ADBQAqDWDFMA0GCSqGSIb3DQEBCwUAA4IBAQAHA9aQfSsb 9ccYrumoaGUvjLTQq9R2BcDd+JYavM2tPeV7lX/dG0VSiqEfG3Eh+QG/UP43cBGm kqKOcoEwT7N5gFR91li4hCNmac/u3ak/PITjLKoJ+kWqM5Pw9UHwIpKuMKRXx2Bt zbYUEIKHgQhIutkLYouDEFgFXWkOGcEPPJu1YVOAsfgqV9IzI8XXdaEzswD5AFxR 2et4HNTZVAkjAnD+neg6ElLRLrBvvVWEsE/KgJSQBdu5OdoFfZplD4X7mbgYsXxw 7cRTBmFkwoG/Vue7OXlohGBBewgRlsXqtnLE3UkSaDnhByFIL/2qtNCkvjxD2naW ODXTGkcCo7VB -----END CERTIFICATE-----Generated at Tue Jan 20 19:51:23 2026 by rpki-client