This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/WDXooXTX5evFv-qSOJ4_CUJsvNw.roa File: WDXooXTX5evFv-qSOJ4_CUJsvNw.roa (raw, json) Hash identifier: rQCcKZbJ5fL2qkWHEBf14Q9IDREzYfT7an22tNPoM6s= Subject key identifier: 58:35:E8:A1:74:D7:E5:EB:C5:BF:EA:92:38:9E:3F:09:42:6C:BC:DC Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B7FF1B67685A96EEA6EC1EF8B1EE91A8A Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/WDXooXTX5evFv-qSOJ4_CUJsvNw.roa Signing time: Fri 02 Jan 2026 18:21:45 +0000 ROA not before: Fri 02 Jan 2026 18:21:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 53667 IP address blocks: 2a09:7500::/29 maxlen: 29 2a0f:3044::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:b6:76:85:a9:6e:ea:6e:c1:ef:8b:1e:e9:1a:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Jan 2 18:21:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5835e8a174d7e5ebc5bfea92389e3f09426cbcdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a3:83:c7:fd:4b:9e:fc:ef:9d:d2:2d:1e:1e: 01:3c:12:7e:23:47:96:26:9d:47:85:68:d8:12:f3: 66:30:33:99:e7:b3:e7:82:57:47:ed:36:08:54:67: 81:24:2e:56:64:58:cc:38:82:29:df:d5:f9:c0:14: 79:23:22:cf:21:76:ea:03:17:ff:a7:94:b8:61:10: 61:e6:0f:a9:7b:8d:dd:d0:bf:52:81:b5:a5:9e:aa: e9:84:e7:8d:c5:a4:69:d7:68:cc:d3:38:17:32:4c: 62:ab:f0:42:25:7a:3c:52:07:01:55:0e:d4:ef:c9: 05:25:ba:5d:31:31:69:1d:ed:bf:3b:ab:f1:6c:50: 5b:e1:8d:c8:fe:2a:4c:51:36:dd:52:36:0e:ce:d3: af:4d:7c:0d:2c:5f:b4:76:3f:1b:2e:17:66:ac:1c: a9:54:3f:ed:08:01:9d:5f:be:02:2b:d7:32:2e:18: 0e:f2:83:d4:25:ad:1c:db:11:b1:db:ce:c0:a2:3f: b1:97:09:e1:bb:94:c9:c0:41:de:1f:b7:c2:c3:42: 2c:9e:58:9d:fb:fa:96:a6:11:e3:ce:1d:80:5e:a8: 1e:66:cc:f9:ab:88:26:7d:af:9d:c3:44:15:ab:e5: b8:93:d5:1f:5a:cc:0d:6c:b8:b3:4d:62:74:15:9a: 82:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:35:E8:A1:74:D7:E5:EB:C5:BF:EA:92:38:9E:3F:09:42:6C:BC:DC X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/WDXooXTX5evFv-qSOJ4_CUJsvNw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:7500::/29 2a0f:3044::/32 Signature Algorithm: sha256WithRSAEncryption aa:cf:f5:b5:d4:88:c2:b1:b5:e7:8e:de:7f:e1:ff:38:4b:b3: 1e:41:ac:a1:e4:c0:83:d6:d3:e1:71:46:fa:2f:8a:19:9d:ee: a6:03:77:6d:73:02:57:9d:17:80:2b:ce:3d:27:3f:27:b8:e9: d0:bf:32:f5:71:33:84:28:46:85:c3:bd:69:00:b1:0d:70:83: 2e:c8:23:c7:f3:69:e0:6c:ab:90:63:1f:45:f6:7b:26:87:ca: e3:ce:e6:10:72:8b:34:7a:ff:e6:c8:96:8a:c3:f0:76:b2:8f: 98:3b:d5:be:a7:05:5f:85:78:96:43:08:cf:e5:37:7f:9a:59: 2c:a1:18:60:cb:ab:c5:09:c2:48:ad:c6:68:d7:99:a6:e6:a8: 93:57:a7:4f:93:58:cf:8f:79:8c:09:80:d0:6b:f3:6e:ff:f8: 68:92:6b:9c:d4:66:9e:a0:b7:26:49:0d:35:26:34:fe:68:be: f0:f5:65:46:ae:ba:c6:1c:b3:33:fa:bf:87:77:de:9a:70:ab: 1c:8d:11:ce:35:db:a2:e7:d2:c2:bb:4f:9c:35:66:b2:fa:41: 72:62:70:2a:94:e2:46:af:c3:34:f5:da:da:8b:44:0a:b8:1e: a5:61:15:21:17:41:0c:41:9c:95:3a:72:69:ed:1a:b3:64:94: b3:d6:f9:dc -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt/8bZ2halu6m7B74se6RqKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjYwMTAyMTgyMTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODM1ZThhMTc0ZDdlNWViYzViZmVhOTIzODllM2YwOTQyNmNiY2RjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6ODx/1LnvzvndItHh4BPBJ+I0eW Jp1HhWjYEvNmMDOZ57PngldH7TYIVGeBJC5WZFjMOIIp39X5wBR5IyLPIXbqAxf/ p5S4YRBh5g+pe43d0L9SgbWlnqrphOeNxaRp12jM0zgXMkxiq/BCJXo8UgcBVQ7U 78kFJbpdMTFpHe2/O6vxbFBb4Y3I/ipMUTbdUjYOztOvTXwNLF+0dj8bLhdmrByp VD/tCAGdX74CK9cyLhgO8oPUJa0c2xGx287Aoj+xlwnhu5TJwEHeH7fCw0Isnlid +/qWphHjzh2AXqgeZsz5q4gmfa+dw0QVq+W4k9UfWswNbLizTWJ0FZqCRwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFFg16KF01+Xrxb/qkjiePwlCbLzcMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvV0RYb29YVFg1ZXZGdi1xU09KNF9DVUpzdk53LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUDKgl1AAMF ACoPMEQwDQYJKoZIhvcNAQELBQADggEBAKrP9bXUiMKxteeO3n/h/zhLsx5BrKHk wIPW0+FxRvovihmd7qYDd21zAledF4Arzj0nPye46dC/MvVxM4QoRoXDvWkAsQ1w gy7II8fzaeBsq5BjH0X2eyaHyuPO5hByizR6/+bIlorD8Hayj5g71b6nBV+FeJZD CM/lN3+aWSyhGGDLq8UJwkitxmjXmabmqJNXp0+TWM+PeYwJgNBr827/+GiSa5zU Zp6gtyZJDTUmNP5ovvD1ZUauusYcszP6v4d33ppwqxyNEc4126Ln0sK7T5w1ZrL6 QXJicCqU4kavwzT12tqLRAq4HqVhFSEXQQxBnJU6cmntGrNklLPW+dw= -----END CERTIFICATE-----Generated at Tue Jan 20 09:03:14 2026 by rpki-client