This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/04439f-42e3-4e6c-bd3b-b336f31e4a74/1/W7MYlrRkEep6jX1uiDW1h6QrWPY.roa File: W7MYlrRkEep6jX1uiDW1h6QrWPY.roa (raw, json) Hash identifier: 2G8If5Akk3DoPi0CKo8A3PQxay+dZxlNMAA61OVVxk4= Subject key identifier: 5B:B3:18:96:B4:64:11:EA:7A:8D:7D:6E:88:35:B5:87:A4:2B:58:F6 Certificate issuer: /CN=54deb1d6a377ac9d1f5b888c5cd1d400c7997271 Certificate serial: 019B7DCAF72FEFE5442CFF037838346B78A2 Authority key identifier: 54:DE:B1:D6:A3:77:AC:9D:1F:5B:88:8C:5C:D1:D4:00:C7:99:72:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/04439f-42e3-4e6c-bd3b-b336f31e4a74/1/W7MYlrRkEep6jX1uiDW1h6QrWPY.roa Signing time: Fri 02 Jan 2026 08:20:12 +0000 ROA not before: Fri 02 Jan 2026 08:20:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215812 IP address blocks: 2a01:fec0::/48 maxlen: 48 2a01:fec0:1::/48 maxlen: 48 2a01:fec0:2::/48 maxlen: 48 2a01:fec0:3::/48 maxlen: 48 2a01:fec0:4::/48 maxlen: 48 2a01:fec0:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/04439f-42e3-4e6c-bd3b-b336f31e4a74/1/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/04439f-42e3-4e6c-bd3b-b336f31e4a74/1/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.mft rsync://rpki.ripe.net/repository/DEFAULT/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:f7:2f:ef:e5:44:2c:ff:03:78:38:34:6b:78:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54deb1d6a377ac9d1f5b888c5cd1d400c7997271 Validity Not Before: Jan 2 08:20:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5bb31896b46411ea7a8d7d6e8835b587a42b58f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:18:b3:d4:9b:4a:cd:6e:66:ca:0c:8e:05:8a: ea:95:be:39:f6:2e:bc:96:0d:13:93:3d:23:f5:7f: e4:a2:ba:41:41:9a:00:11:1a:bf:64:26:c0:9f:9f: 0a:e6:d6:60:5e:3c:64:f8:a9:b3:b3:70:4e:2e:76: 7d:45:d8:45:88:5c:b0:a8:2d:87:31:0e:b1:bd:5d: b1:e1:67:dc:0f:16:0d:74:5b:d8:a2:42:aa:e0:da: fe:0f:2d:7d:f5:3c:6e:2d:57:06:4f:9a:a0:c4:26: 80:80:b8:60:13:49:92:40:7e:9f:66:ec:90:1a:57: 60:47:7d:d3:d5:b8:8c:5d:ac:6a:c4:39:f0:8a:da: a0:50:c4:5e:f2:af:a1:64:1b:fe:7a:37:7f:ed:5d: 67:9c:db:1f:ab:bf:fe:e8:db:31:48:67:a3:b9:c3: a2:85:cb:06:d3:38:25:b0:97:1f:3d:94:94:9f:af: 53:64:af:14:e7:c8:89:b0:62:be:6a:6d:0a:17:2c: 4b:fa:8d:7d:5b:1e:42:07:6b:42:02:ef:c0:00:e6: 2a:a1:04:a8:1b:60:d1:d1:95:a4:2e:d4:d2:62:c8: 4d:ed:8d:da:65:be:05:af:8a:af:4c:65:9d:06:fd: 4c:d6:00:79:54:4f:dd:52:96:81:03:a1:f4:98:14: ac:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:B3:18:96:B4:64:11:EA:7A:8D:7D:6E:88:35:B5:87:A4:2B:58:F6 X509v3 Authority Key Identifier: keyid:54:DE:B1:D6:A3:77:AC:9D:1F:5B:88:8C:5C:D1:D4:00:C7:99:72:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/04439f-42e3-4e6c-bd3b-b336f31e4a74/1/W7MYlrRkEep6jX1uiDW1h6QrWPY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/04439f-42e3-4e6c-bd3b-b336f31e4a74/1/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:fec0::-2a01:fec0:5:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption a4:5f:b0:94:0a:9d:aa:82:a9:37:5f:0b:3a:92:4f:cf:b9:a3: ec:f2:a3:95:a8:d9:b3:47:88:8e:c9:0c:ae:fd:f6:22:54:80: bc:57:66:7d:f4:4b:08:c0:30:7b:4e:57:3b:47:a2:77:63:c9: 48:12:04:84:a0:63:e1:d6:f6:6b:76:a2:11:d3:3a:a3:01:54: c1:25:ef:f4:82:51:bb:8e:86:9f:69:82:e0:3d:6c:f5:ad:9a: 37:05:8f:30:97:ad:69:2d:8f:00:49:db:72:70:cb:d3:04:2a: d0:a2:d7:f5:f2:d7:1a:4f:f2:ab:99:07:16:e3:cf:fe:bd:92: c2:81:14:54:34:c6:e0:22:98:b4:e5:0a:2c:67:30:38:af:45: e7:50:30:0f:40:4a:bc:a7:99:b3:8c:da:2a:4d:0b:25:c5:c4: 2d:bd:7a:a8:bc:d9:ab:29:39:15:c7:4e:74:d0:66:c3:05:33: 7e:89:22:5a:00:18:7e:c7:37:d8:f1:fb:2b:0b:16:0e:70:55: 91:81:a9:61:e2:62:c5:98:65:0b:8c:27:0c:2d:0f:cb:c2:00: 2a:5f:06:2a:77:b8:69:9a:18:98:33:5a:00:d4:68:84:31:ee: 30:30:7f:12:7a:31:61:cf:cd:ec:48:a6:0a:fd:d7:c0:e1:89: 78:60:2a:64 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9yvcv7+VELP8DeDg0a3iiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0ZGViMWQ2YTM3N2FjOWQxZjViODg4YzVjZDFkNDAwYzc5 OTcyNzEwHhcNMjYwMTAyMDgyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YmIzMTg5NmI0NjQxMWVhN2E4ZDdkNmU4ODM1YjU4N2E0MmI1OGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Biz1JtKzW5mygyOBYrqlb459i68 lg0Tkz0j9X/korpBQZoAERq/ZCbAn58K5tZgXjxk+Kmzs3BOLnZ9RdhFiFywqC2H MQ6xvV2x4WfcDxYNdFvYokKq4Nr+Dy199TxuLVcGT5qgxCaAgLhgE0mSQH6fZuyQ GldgR33T1biMXaxqxDnwitqgUMRe8q+hZBv+ejd/7V1nnNsfq7/+6NsxSGejucOi hcsG0zglsJcfPZSUn69TZK8U58iJsGK+am0KFyxL+o19Wx5CB2tCAu/AAOYqoQSo G2DR0ZWkLtTSYshN7Y3aZb4Fr4qvTGWdBv1M1gB5VE/dUpaBA6H0mBSsdwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFuzGJa0ZBHqeo19bog1tYekK1j2MB8GA1UdIwQY MBaAFFTesdajd6ydH1uIjFzR1ADHmXJxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVk42eDFxTjNySjBmVzRpTVhOSFVBTWVaY25FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8wNDQzOWYtNDJlMy00ZTZjLWJkM2It YjMzNmYzMWU0YTc0LzEvVzdNWWxyUmtFZXA2algxdWlEVzFoNlFyV1BZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8wNDQzOWYtNDJlMy00ZTZjLWJkM2ItYjMzNmYzMWU0YTc0 LzEvVk42eDFxTjNySjBmVzRpTVhOSFVBTWVaY25FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASMBADBQYqAf7A AwcBKgH+wAAEMA0GCSqGSIb3DQEBCwUAA4IBAQCkX7CUCp2qgqk3Xws6kk/PuaPs 8qOVqNmzR4iOyQyu/fYiVIC8V2Z99EsIwDB7Tlc7R6J3Y8lIEgSEoGPh1vZrdqIR 0zqjAVTBJe/0glG7joafaYLgPWz1rZo3BY8wl61pLY8ASdtycMvTBCrQotf18tca T/KrmQcW48/+vZLCgRRUNMbgIpi05QosZzA4r0XnUDAPQEq8p5mzjNoqTQslxcQt vXqovNmrKTkVx0500GbDBTN+iSJaABh+xzfY8fsrCxYOcFWRgalh4mLFmGULjCcM LQ/LwgAqXwYqd7hpmhiYM1oA1GiEMe4wMH8SejFhz83sSKYK/dfA4Yl4YCpk -----END CERTIFICATE-----Generated at Wed Jan 21 16:14:49 2026 by rpki-client