This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/wRc3Z7cAWkuH8qIX0DCtlZppJxw.roa File: wRc3Z7cAWkuH8qIX0DCtlZppJxw.roa (raw, json) Hash identifier: LxXQG3jteUBxRZiT3TEKB78O1uWlhGbpoLQr0jkRBdQ= Subject key identifier: C1:17:37:67:B7:00:5A:4B:87:F2:A2:17:D0:30:AD:95:9A:69:27:1C Certificate issuer: /CN=52302a45d0568486051a7ec466f03108c320b4c4 Certificate serial: 019B76EAB02847C06F66B18D033D6948F6F2 Authority key identifier: 52:30:2A:45:D0:56:84:86:05:1A:7E:C4:66:F0:31:08:C3:20:B4:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/wRc3Z7cAWkuH8qIX0DCtlZppJxw.roa Signing time: Thu 01 Jan 2026 00:17:30 +0000 ROA not before: Thu 01 Jan 2026 00:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 94.124.112.0/24 maxlen: 24 2a0c:b280::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:b0:28:47:c0:6f:66:b1:8d:03:3d:69:48:f6:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52302a45d0568486051a7ec466f03108c320b4c4 Validity Not Before: Jan 1 00:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1173767b7005a4b87f2a217d030ad959a69271c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:35:7d:a0:30:2b:90:b5:d8:12:8b:48:a2:14: 99:51:b4:dd:5e:ff:90:c8:b1:b0:7d:0a:1e:be:42: cc:4e:bb:57:2c:8a:ab:43:63:12:6b:39:6e:be:7c: cc:a9:fd:51:84:e2:0d:6c:a1:99:aa:e7:7f:e0:30: da:59:f2:19:fa:4e:ca:54:e6:58:9e:d0:de:e1:ae: 37:a1:53:2a:15:31:70:92:7d:d4:6e:f2:35:2b:c3: 61:57:79:ce:55:7b:d8:7c:c1:07:09:64:26:25:e6: d0:7b:7e:7b:10:33:9d:38:1a:31:5a:1b:05:62:c8: ca:cc:da:69:ea:14:a4:73:2a:a8:56:d2:07:d4:31: 6b:6e:95:09:59:e3:e0:a8:db:01:10:56:6f:73:5b: 24:7e:d6:10:8c:28:5b:32:31:da:20:46:df:08:6d: 31:d4:20:8f:77:ce:97:a9:44:71:41:2f:31:58:79: 21:b0:4c:7a:81:02:0a:20:c9:65:f6:13:d4:b7:18: ca:16:f4:3c:2b:98:fe:83:06:9d:96:18:ac:00:14: 77:84:17:a0:24:b7:b1:48:ad:7d:cb:98:e6:bb:69: 28:c3:05:de:1b:c7:7d:04:82:81:bb:47:16:64:0d: b4:55:63:08:30:6b:cc:f8:b6:d3:0e:07:6c:ca:87: 12:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:17:37:67:B7:00:5A:4B:87:F2:A2:17:D0:30:AD:95:9A:69:27:1C X509v3 Authority Key Identifier: keyid:52:30:2A:45:D0:56:84:86:05:1A:7E:C4:66:F0:31:08:C3:20:B4:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/wRc3Z7cAWkuH8qIX0DCtlZppJxw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.124.112.0/24 IPv6: 2a0c:b280::/48 Signature Algorithm: sha256WithRSAEncryption 4b:69:31:f5:be:58:7e:69:80:ee:5f:c9:dc:32:81:fb:9d:02: 94:01:1d:52:b6:53:86:de:17:36:1e:cf:07:f8:ca:76:32:7e: 6e:15:56:49:20:24:92:5c:b1:92:ff:a0:ea:de:34:ac:c6:04: dd:31:e2:5e:b8:36:7b:5e:60:08:1d:70:2f:06:65:16:9b:fa: e5:44:cc:96:c5:91:0f:06:8f:b3:62:5b:d2:48:1e:43:92:c2: 66:29:7f:b2:2c:24:32:cd:60:15:72:40:c2:b1:ce:83:3b:65: 5c:a3:04:63:b5:b9:bd:b8:61:30:01:07:e0:4e:7f:09:40:22: 2e:8f:ea:dd:13:3d:5e:40:cb:19:11:a3:f1:b6:86:55:c6:b6: 94:4c:92:3d:a8:e5:87:59:8f:c8:77:fb:ca:b2:6d:0a:35:16: c8:8f:b0:57:87:83:2f:24:70:47:00:cc:35:c6:85:6a:9e:09: 8b:48:e7:5e:6f:78:25:05:3c:56:49:fa:37:2a:79:79:ee:03: 7c:fa:6a:66:df:4c:51:e2:8b:95:2a:2c:64:14:19:30:52:f2: 06:e8:ac:f8:00:12:ae:76:85:d8:29:51:00:93:24:3b:84:f9: e0:17:6d:61:e3:19:89:e8:93:a9:05:69:f8:c6:fc:34:06:97: 30:3c:df:36 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt26rAoR8BvZrGNAz1pSPbyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMzAyYTQ1ZDA1Njg0ODYwNTFhN2VjNDY2ZjAzMTA4YzMy MGI0YzQwHhcNMjYwMTAxMDAxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTE3Mzc2N2I3MDA1YTRiODdmMmEyMTdkMDMwYWQ5NTlhNjkyNzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDV9oDArkLXYEotIohSZUbTdXv+Q yLGwfQoevkLMTrtXLIqrQ2MSazluvnzMqf1RhOINbKGZqud/4DDaWfIZ+k7KVOZY ntDe4a43oVMqFTFwkn3UbvI1K8NhV3nOVXvYfMEHCWQmJebQe357EDOdOBoxWhsF YsjKzNpp6hSkcyqoVtIH1DFrbpUJWePgqNsBEFZvc1skftYQjChbMjHaIEbfCG0x 1CCPd86XqURxQS8xWHkhsEx6gQIKIMll9hPUtxjKFvQ8K5j+gwadlhisABR3hBeg JLexSK19y5jmu2kowwXeG8d9BIKBu0cWZA20VWMIMGvM+LbTDgdsyocSzQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFMEXN2e3AFpLh/KiF9AwrZWaaSccMB8GA1UdIwQY MBaAFFIwKkXQVoSGBRp+xGbwMQjDILTEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWpBcVJkQldoSVlGR243RVp2QXhDTU1ndE1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS83NWJhNzItZDdiMi00MjgzLTlmMGIt ZTNlNWZhMzZiYjJmLzEvd1JjM1o3Y0FXa3VIOHFJWDBEQ3RsWnBwSnh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS83NWJhNzItZDdiMi00MjgzLTlmMGItZTNlNWZhMzZiYjJm LzEvVWpBcVJkQldoSVlGR243RVp2QXhDTU1ndE1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAXnxwMA8E AgACMAkDBwAqDLKAAAAwDQYJKoZIhvcNAQELBQADggEBAEtpMfW+WH5pgO5fydwy gfudApQBHVK2U4beFzYezwf4ynYyfm4VVkkgJJJcsZL/oOreNKzGBN0x4l64Nnte YAgdcC8GZRab+uVEzJbFkQ8Gj7NiW9JIHkOSwmYpf7IsJDLNYBVyQMKxzoM7ZVyj BGO1ub24YTABB+BOfwlAIi6P6t0TPV5AyxkRo/G2hlXGtpRMkj2o5YdZj8h3+8qy bQo1FsiPsFeHgy8kcEcAzDXGhWqeCYtI515veCUFPFZJ+jcqeXnuA3z6ambfTFHi i5UqLGQUGTBS8gborPgAEq52hdgpUQCTJDuE+eAXbWHjGYnok6kFafjG/DQGlzA8 3zY= -----END CERTIFICATE-----Generated at Fri Jan 2 09:30:18 2026 by rpki-client