This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/WQR-Dyl5ml38JzgsrWjiLr-jTjE.roa File: WQR-Dyl5ml38JzgsrWjiLr-jTjE.roa (raw, json) Hash identifier: 8pC1xGdRfwbbzKrCgP0LBKBZ1huDVz6z9MO3fLjaue8= Subject key identifier: 59:04:7E:0F:29:79:9A:5D:FC:27:38:2C:AD:68:E2:2E:BF:A3:4E:31 Certificate issuer: /CN=dd2a1217673eb11ca98a35139520407c9768dfc3 Certificate serial: 019C1D81C797690136A2943F01F89CB5F39D Authority key identifier: DD:2A:12:17:67:3E:B1:1C:A9:8A:35:13:95:20:40:7C:97:68:DF:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SoSF2c-sRypijUTlSBAfJdo38M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/WQR-Dyl5ml38JzgsrWjiLr-jTjE.roa Signing time: Mon 02 Feb 2026 08:39:30 +0000 ROA not before: Mon 02 Feb 2026 08:39:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15943 IP address blocks: 2a0b:29c0:1::/48 maxlen: 48 2a0b:29c0:9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.mft rsync://rpki.ripe.net/repository/DEFAULT/3SoSF2c-sRypijUTlSBAfJdo38M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1d:81:c7:97:69:01:36:a2:94:3f:01:f8:9c:b5:f3:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd2a1217673eb11ca98a35139520407c9768dfc3 Validity Not Before: Feb 2 08:39:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=59047e0f29799a5dfc27382cad68e22ebfa34e31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:28:7e:92:5d:60:49:0b:55:b6:f2:1e:4f:a2: 68:d8:7f:17:69:32:5a:ab:d7:54:49:5b:65:45:a4: 9d:8d:75:51:2a:b9:d0:80:60:44:c8:fe:a6:48:c6: 40:a7:f7:47:3f:94:6c:a3:67:32:d7:5c:a4:95:e0: af:2c:18:c5:e2:73:f2:2c:95:ee:76:25:7b:16:80: 08:85:e4:ab:0f:0e:dc:d2:90:27:0a:c0:7b:44:f2: b6:45:24:f5:f5:13:d8:ae:ac:92:e3:5f:47:cf:65: f4:25:7d:ac:0b:8f:94:b1:1a:55:b0:b5:f6:df:61: 23:19:76:23:38:0e:30:f5:c6:3e:cf:f7:54:4a:94: de:4e:fe:79:27:48:49:68:fa:2d:c2:ef:bb:69:e1: 1e:1c:aa:8c:0e:3d:7c:fa:c0:8d:50:59:fb:a3:70: 1d:ed:05:37:d3:17:8a:a2:88:46:7c:e5:c7:e8:c4: 0b:ec:0a:43:12:b6:30:b9:26:69:93:84:3f:34:54: 28:9d:83:e5:63:47:1e:e2:0b:d5:31:c1:f9:47:4c: 26:6e:d7:aa:a3:a2:02:07:fa:d2:29:e3:47:95:f6: 52:b2:eb:e1:60:85:3b:93:a2:ee:21:19:3c:23:8b: be:2c:02:f6:0f:48:86:4d:ab:f3:32:3a:97:cb:8d: b1:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:04:7E:0F:29:79:9A:5D:FC:27:38:2C:AD:68:E2:2E:BF:A3:4E:31 X509v3 Authority Key Identifier: keyid:DD:2A:12:17:67:3E:B1:1C:A9:8A:35:13:95:20:40:7C:97:68:DF:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SoSF2c-sRypijUTlSBAfJdo38M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/WQR-Dyl5ml38JzgsrWjiLr-jTjE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:29c0:1::/48 2a0b:29c0:9::/48 Signature Algorithm: sha256WithRSAEncryption 2c:a5:67:2b:94:c5:4d:3e:ee:6c:1a:7a:f4:b2:c4:aa:33:28: e1:c8:f3:36:22:7d:7e:e9:20:3e:8a:46:fa:40:63:d0:03:9c: 6b:27:69:99:1d:4e:90:d5:35:ad:35:94:f5:59:b1:f2:36:a1: 41:7a:1c:68:23:ee:48:d5:e5:08:94:69:c3:11:de:3b:b9:ba: fa:62:50:f2:29:90:b2:a9:3f:f6:b4:0a:bc:f1:e1:e6:ad:60: 50:89:cb:31:c3:82:85:11:bf:af:54:b4:2c:ea:a4:66:b5:fe: cf:ea:93:91:ab:db:3b:19:35:99:5e:95:28:a9:cc:6d:5e:ae: 84:3f:fe:5d:54:6b:dc:8f:45:67:6d:68:0d:73:c0:e8:8e:a1: ee:9f:1b:d1:b2:f3:f7:42:75:bd:5f:a2:c3:fb:3c:38:65:d7: 73:65:66:0d:da:89:56:e6:b6:ef:1c:72:44:84:85:c7:b4:06: 97:11:0e:a9:82:f8:af:e7:dd:d7:ad:7e:45:d7:4c:eb:cf:6a: a0:6b:4c:dc:6d:eb:44:54:a1:a2:50:73:55:82:16:10:54:2e: 9a:fc:13:fb:8d:84:37:9d:53:03:f3:72:68:c6:18:05:62:67: 99:07:d8:d2:92:d3:24:93:34:11:f5:13:03:e3:ae:2b:25:8b: 3c:2d:7e:d4 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZwdgceXaQE2opQ/AfictfOdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkMmExMjE3NjczZWIxMWNhOThhMzUxMzk1MjA0MDdjOTc2 OGRmYzMwHhcNMjYwMjAyMDgzOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTA0N2UwZjI5Nzk5YTVkZmMyNzM4MmNhZDY4ZTIyZWJmYTM0ZTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSh+kl1gSQtVtvIeT6Jo2H8XaTJa q9dUSVtlRaSdjXVRKrnQgGBEyP6mSMZAp/dHP5Rso2cy11ykleCvLBjF4nPyLJXu diV7FoAIheSrDw7c0pAnCsB7RPK2RST19RPYrqyS419Hz2X0JX2sC4+UsRpVsLX2 32EjGXYjOA4w9cY+z/dUSpTeTv55J0hJaPotwu+7aeEeHKqMDj18+sCNUFn7o3Ad 7QU30xeKoohGfOXH6MQL7ApDErYwuSZpk4Q/NFQonYPlY0ce4gvVMcH5R0wmbteq o6ICB/rSKeNHlfZSsuvhYIU7k6LuIRk8I4u+LAL2D0iGTavzMjqXy42xtwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFkEfg8peZpd/Cc4LK1o4i6/o04xMB8GA1UdIwQY MBaAFN0qEhdnPrEcqYo1E5UgQHyXaN/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1NvU0YyYy1zUnlwaWpVVGxTQkFmSmRvMzhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS80YTkzYzYtMTcwYS00YWEyLThkZmMt NmI5NjQxODIzY2E0LzEvV1FSLUR5bDVtbDM4Snpnc3JXamlMci1qVGpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS80YTkzYzYtMTcwYS00YWEyLThkZmMtNmI5NjQxODIzY2E0 LzEvM1NvU0YyYy1zUnlwaWpVVGxTQkFmSmRvMzhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgspwAAB AwcAKgspwAAJMA0GCSqGSIb3DQEBCwUAA4IBAQAspWcrlMVNPu5sGnr0ssSqMyjh yPM2In1+6SA+ikb6QGPQA5xrJ2mZHU6Q1TWtNZT1WbHyNqFBehxoI+5I1eUIlGnD Ed47ubr6YlDyKZCyqT/2tAq88eHmrWBQicsxw4KFEb+vVLQs6qRmtf7P6pORq9s7 GTWZXpUoqcxtXq6EP/5dVGvcj0VnbWgNc8DojqHunxvRsvP3QnW9X6LD+zw4Zddz ZWYN2olW5rbvHHJEhIXHtAaXEQ6pgviv593XrX5F10zrz2qga0zcbetEVKGiUHNV ghYQVC6a/BP7jYQ3nVMD83JoxhgFYmeZB9jSktMkkzQR9RMD464rJYs8LX7U -----END CERTIFICATE-----Generated at Mon Feb 9 21:25:32 2026 by rpki-client