This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/WGUKVj-vf2RKGeE0tMRbU2IE_NQ.roa File: WGUKVj-vf2RKGeE0tMRbU2IE_NQ.roa (raw, json) Hash identifier: tHeLPtV3EhtYhN1tkXzaqoA9I1M0f8QKiOJp3r6uMxQ= Subject key identifier: 58:65:0A:56:3F:AF:7F:64:4A:19:E1:34:B4:C4:5B:53:62:04:FC:D4 Certificate issuer: /CN=c531b63d11a6cc2d1ce69e1311c87ac1a6a70733 Certificate serial: 019B7834C75BDC135724B1353B8E44474E4D Authority key identifier: C5:31:B6:3D:11:A6:CC:2D:1C:E6:9E:13:11:C8:7A:C1:A6:A7:07:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTG2PRGmzC0c5p4TEch6waanBzM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/WGUKVj-vf2RKGeE0tMRbU2IE_NQ.roa Signing time: Thu 01 Jan 2026 06:18:03 +0000 ROA not before: Thu 01 Jan 2026 06:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210825 IP address blocks: 2001:67c:80c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.mft rsync://rpki.ripe.net/repository/DEFAULT/xTG2PRGmzC0c5p4TEch6waanBzM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:c7:5b:dc:13:57:24:b1:35:3b:8e:44:47:4e:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c531b63d11a6cc2d1ce69e1311c87ac1a6a70733 Validity Not Before: Jan 1 06:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58650a563faf7f644a19e134b4c45b536204fcd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:1f:43:e9:52:62:48:5c:40:ef:f1:1f:99:62: e8:70:d0:aa:46:87:27:81:80:93:83:c5:c3:58:13: d8:2b:e1:ef:3e:c1:5d:13:ae:d6:67:0a:c8:d1:2c: 93:35:14:b8:a4:f1:78:39:e8:6b:76:6a:ee:e8:74: 8c:b1:58:4d:14:05:82:77:97:07:20:85:9e:43:0b: 0d:4a:0b:a8:de:d6:d1:c0:16:b8:cb:f1:1d:4f:46: ed:ab:70:15:0b:a8:4b:a2:58:c4:3d:6a:94:94:15: c3:c1:a6:be:25:55:6a:b1:4b:57:68:81:78:ee:b2: 28:d8:6d:9a:82:64:b3:df:23:7b:35:89:fe:93:6a: 9e:45:bd:09:91:7e:f0:10:a6:3a:89:97:eb:17:91: 8a:97:57:11:2b:14:05:f1:2e:c9:89:53:73:61:3c: a4:7e:3e:22:39:df:6e:ef:97:3c:0a:1d:cf:ad:cb: 8b:fa:12:59:80:79:6f:44:5b:9e:cb:f9:06:fd:2e: 98:e0:ca:70:c9:a8:b5:6b:77:b5:a9:49:64:7b:02: 7c:fb:98:31:86:2d:1c:8f:1d:09:c5:17:dd:ec:ad: 9a:25:cf:23:1f:39:b5:b1:65:9c:a0:b5:06:3f:c2: 21:19:89:c7:a7:c3:78:54:0c:21:37:64:9e:19:e7: 83:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:65:0A:56:3F:AF:7F:64:4A:19:E1:34:B4:C4:5B:53:62:04:FC:D4 X509v3 Authority Key Identifier: keyid:C5:31:B6:3D:11:A6:CC:2D:1C:E6:9E:13:11:C8:7A:C1:A6:A7:07:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTG2PRGmzC0c5p4TEch6waanBzM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/WGUKVj-vf2RKGeE0tMRbU2IE_NQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:80c::/48 Signature Algorithm: sha256WithRSAEncryption 6a:61:23:c3:f1:a0:ba:9b:7d:06:d6:1d:43:42:6d:1f:17:a4: bf:a9:03:83:07:c7:5a:6e:be:9e:29:a7:13:f2:6e:d8:76:34: 29:23:4d:c8:19:2d:15:97:16:8c:21:00:ba:e0:1e:ad:48:69: 39:04:7d:75:4b:27:bd:c6:31:43:04:8b:f5:d8:91:b7:db:c9: a8:6c:55:5c:cb:c6:47:9b:95:84:a5:03:c2:0e:e8:bb:23:75: 0b:c6:0a:5f:47:cb:d0:e0:3d:3b:ba:d7:8d:9c:af:11:7a:16: 37:9d:3f:32:33:d2:cb:c8:a2:11:f2:fa:57:4e:94:1e:b5:5a: e7:f4:d8:45:7c:d0:ad:90:f9:a2:d9:2f:9b:9d:94:93:9b:b3: 60:69:ff:84:5a:fe:44:9c:7b:e7:a2:32:82:b8:d8:a0:e5:52: 3c:ff:16:83:2c:08:fe:11:a0:9e:7a:56:5e:31:42:13:96:2c: cc:bf:0c:0d:0d:74:53:3b:51:2b:a7:0f:07:85:27:04:98:9a: 50:18:b6:f8:76:04:9c:b6:25:99:09:1f:96:a0:38:32:b3:bd: de:c8:70:89:9c:3d:13:2e:f3:97:b5:51:47:1d:9e:a0:4e:4c: bc:b2:07:13:a2:76:08:0b:5e:6b:d1:56:2c:64:00:05:86:ab: 03:87:96:c9 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt4NMdb3BNXJLE1O45ER05NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1MzFiNjNkMTFhNmNjMmQxY2U2OWUxMzExYzg3YWMxYTZh NzA3MzMwHhcNMjYwMTAxMDYxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODY1MGE1NjNmYWY3ZjY0NGExOWUxMzRiNGM0NWI1MzYyMDRmY2Q0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlB9D6VJiSFxA7/EfmWLocNCqRocn gYCTg8XDWBPYK+HvPsFdE67WZwrI0SyTNRS4pPF4Oehrdmru6HSMsVhNFAWCd5cH IIWeQwsNSguo3tbRwBa4y/EdT0btq3AVC6hLoljEPWqUlBXDwaa+JVVqsUtXaIF4 7rIo2G2agmSz3yN7NYn+k2qeRb0JkX7wEKY6iZfrF5GKl1cRKxQF8S7JiVNzYTyk fj4iOd9u75c8Ch3PrcuL+hJZgHlvRFuey/kG/S6Y4Mpwyai1a3e1qUlkewJ8+5gx hi0cjx0JxRfd7K2aJc8jHzm1sWWcoLUGP8IhGYnHp8N4VAwhN2SeGeeD6wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFhlClY/r39kShnhNLTEW1NiBPzUMB8GA1UdIwQY MBaAFMUxtj0RpswtHOaeExHIesGmpwczMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFRHMlBSR216QzBjNXA0VEVjaDZ3YWFuQnpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84Njg5OGUtZTZlNi00Yjg4LTg4MTEt ZGI4Y2FiY2VlMjFlLzEvV0dVS1ZqLXZmMlJLR2VFMHRNUmJVMklFX05RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC84Njg5OGUtZTZlNi00Yjg4LTg4MTEtZGI4Y2FiY2VlMjFl LzEveFRHMlBSR216QzBjNXA0VEVjaDZ3YWFuQnpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAgM MA0GCSqGSIb3DQEBCwUAA4IBAQBqYSPD8aC6m30G1h1DQm0fF6S/qQODB8dabr6e KacT8m7YdjQpI03IGS0VlxaMIQC64B6tSGk5BH11Sye9xjFDBIv12JG328mobFVc y8ZHm5WEpQPCDui7I3ULxgpfR8vQ4D07uteNnK8RehY3nT8yM9LLyKIR8vpXTpQe tVrn9NhFfNCtkPmi2S+bnZSTm7Ngaf+EWv5EnHvnojKCuNig5VI8/xaDLAj+EaCe elZeMUITlizMvwwNDXRTO1Erpw8HhScEmJpQGLb4dgSctiWZCR+WoDgys73eyHCJ nD0TLvOXtVFHHZ6gTky8sgcTonYIC15r0VYsZAAFhqsDh5bJ -----END CERTIFICATE-----Generated at Tue Feb 10 03:02:09 2026 by rpki-client