This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/wZnB7Qjfda0ITgQ2HWutXpolCjU.roa File: wZnB7Qjfda0ITgQ2HWutXpolCjU.roa (raw, json) Hash identifier: MXsdTNO05d6fpADf9FEXYgiPgEmRVXldtdKNkmYeKJU= Subject key identifier: C1:99:C1:ED:08:DF:75:AD:08:4E:04:36:1D:6B:AD:5E:9A:25:0A:35 Certificate issuer: /CN=a7a4e23482268475c1b935637d0002c2fd2993b8 Certificate serial: 019B7CEE721F91CAD1373B14121D2E86883B Authority key identifier: A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/wZnB7Qjfda0ITgQ2HWutXpolCjU.roa Signing time: Fri 02 Jan 2026 04:19:19 +0000 ROA not before: Fri 02 Jan 2026 04:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214456 IP address blocks: 2a14:ae00:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:72:1f:91:ca:d1:37:3b:14:12:1d:2e:86:88:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7a4e23482268475c1b935637d0002c2fd2993b8 Validity Not Before: Jan 2 04:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c199c1ed08df75ad084e04361d6bad5e9a250a35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5e:ad:1c:37:e5:26:03:5a:0f:9e:11:da:e0: f5:35:73:31:94:b0:6e:e5:e2:ec:29:08:5f:7a:4a: 0a:f2:b3:cb:93:94:24:b7:f2:22:1b:5d:93:46:02: 49:ac:05:40:ac:90:68:53:64:2e:ba:0f:c2:13:7d: 56:a9:87:be:ec:63:42:77:9b:4f:ff:13:a9:af:7b: 07:1a:2a:1d:19:81:f5:6f:84:59:25:95:e5:ef:40: 80:9f:ea:fa:6e:48:96:88:ce:83:b1:06:35:b4:0c: 44:1a:2a:99:0f:ef:81:b1:90:a4:1f:71:b2:19:7a: 21:13:f2:21:6a:1c:0c:5d:5e:56:79:dd:0f:ba:d3: a2:36:e9:09:c1:63:97:7c:fc:b4:ef:66:d4:a3:f1: 7a:f7:23:24:13:fa:00:b7:5a:07:dc:f3:22:65:8a: 33:b4:31:35:c5:ea:ec:53:a4:23:ce:51:c6:87:58: f2:e6:d5:28:75:7d:8f:d9:15:b1:c2:85:87:66:31: 5e:b2:72:cd:44:ef:e0:b3:c6:a1:ea:4d:bb:ac:b4: 6f:de:c3:d6:7b:62:95:7f:c3:da:c8:34:e3:fa:21: fa:22:76:80:35:e2:78:7d:7a:9e:2c:b0:66:e1:44: 57:01:04:5a:fa:38:90:97:5c:25:62:91:41:09:63: 1c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:99:C1:ED:08:DF:75:AD:08:4E:04:36:1D:6B:AD:5E:9A:25:0A:35 X509v3 Authority Key Identifier: keyid:A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/wZnB7Qjfda0ITgQ2HWutXpolCjU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:ae00:4::/48 Signature Algorithm: sha256WithRSAEncryption 11:70:e6:47:51:5e:30:38:8e:9f:19:96:5d:06:48:14:dd:72: b0:f9:7e:1d:67:65:04:2a:d3:82:6c:25:e3:fc:63:bd:55:ab: 50:c1:8b:4c:3b:25:83:fe:45:47:55:a3:16:af:0e:aa:25:da: 8d:b1:84:46:f6:fa:ea:8e:e8:25:e8:20:b3:f7:3b:92:10:11: 75:8c:0f:f9:dc:aa:c5:55:5f:0c:d0:bd:fd:a0:b1:4b:7e:1e: 0f:33:1d:bb:5b:2e:f7:8e:e1:70:10:bf:df:78:e6:0b:f7:1b: 34:f5:c9:a6:17:6b:65:4a:8a:b3:0c:82:ad:cf:66:ab:bd:f7: 6d:a2:05:6b:19:50:ff:95:cd:8c:07:2a:b6:e4:ae:07:86:b4: 20:78:22:2e:d1:19:46:06:71:df:0c:37:92:22:68:48:57:f6: f6:bb:75:ae:aa:ab:e0:e6:eb:e9:4c:e7:32:f0:54:cd:de:f0: 93:63:4b:4f:cf:a0:d7:8e:19:37:2f:a2:49:13:96:47:c1:74: ed:2c:ae:02:3d:64:29:58:e4:ca:30:53:5c:b8:32:2b:d6:4b: a4:d8:59:9c:10:d7:08:17:04:30:84:c4:1c:6c:9f:eb:2d:d7: 53:5e:2b:8c:4a:71:5b:45:51:d9:73:df:54:e4:f3:97:13:ef: 06:2d:92:8b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt87nIfkcrRNzsUEh0uhog7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3YTRlMjM0ODIyNjg0NzVjMWI5MzU2MzdkMDAwMmMyZmQy OTkzYjgwHhcNMjYwMTAyMDQxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTk5YzFlZDA4ZGY3NWFkMDg0ZTA0MzYxZDZiYWQ1ZTlhMjUwYTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApV6tHDflJgNaD54R2uD1NXMxlLBu 5eLsKQhfekoK8rPLk5Qkt/IiG12TRgJJrAVArJBoU2Quug/CE31WqYe+7GNCd5tP /xOpr3sHGiodGYH1b4RZJZXl70CAn+r6bkiWiM6DsQY1tAxEGiqZD++BsZCkH3Gy GXohE/IhahwMXV5Wed0PutOiNukJwWOXfPy072bUo/F69yMkE/oAt1oH3PMiZYoz tDE1xersU6QjzlHGh1jy5tUodX2P2RWxwoWHZjFesnLNRO/gs8ah6k27rLRv3sPW e2KVf8PayDTj+iH6InaANeJ4fXqeLLBm4URXAQRa+jiQl1wlYpFBCWMcrwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMGZwe0I33WtCE4ENh1rrV6aJQo1MB8GA1UdIwQY MBaAFKek4jSCJoR1wbk1Y30AAsL9KZO4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDZUaU5JSW1oSFhCdVRWamZRQUN3djBwazdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wN2Y2MjMtMTRmYi00YTgwLTlmNDYt MjMzMzFiNjQ5MTZjLzEvd1puQjdRamZkYTBJVGdRMkhXdXRYcG9sQ2pVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wN2Y2MjMtMTRmYi00YTgwLTlmNDYtMjMzMzFiNjQ5MTZj LzEvcDZUaU5JSW1oSFhCdVRWamZRQUN3djBwazdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhSuAAAE MA0GCSqGSIb3DQEBCwUAA4IBAQARcOZHUV4wOI6fGZZdBkgU3XKw+X4dZ2UEKtOC bCXj/GO9VatQwYtMOyWD/kVHVaMWrw6qJdqNsYRG9vrqjugl6CCz9zuSEBF1jA/5 3KrFVV8M0L39oLFLfh4PMx27Wy73juFwEL/feOYL9xs09cmmF2tlSoqzDIKtz2ar vfdtogVrGVD/lc2MByq25K4HhrQgeCIu0RlGBnHfDDeSImhIV/b2u3Wuqqvg5uvp TOcy8FTN3vCTY0tPz6DXjhk3L6JJE5ZHwXTtLK4CPWQpWOTKMFNcuDIr1kuk2Fmc ENcIFwQwhMQcbJ/rLddTXiuMSnFbRVHZc99U5POXE+8GLZKL -----END CERTIFICATE-----Generated at Sat Jan 10 22:07:02 2026 by rpki-client