This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/WuFVi91PLw1PUGyRssd2Q6yHyks.roa File: WuFVi91PLw1PUGyRssd2Q6yHyks.roa (raw, json) Hash identifier: w4KZzG/sU1/9RMrXZYTWNuUrYY4VCLIF4AOLDV1SBW0= Subject key identifier: 5A:E1:55:8B:DD:4F:2F:0D:4F:50:6C:91:B2:C7:76:43:AC:87:CA:4B Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 019B7A5B060679CC625DD90A33D2C271027A Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/WuFVi91PLw1PUGyRssd2Q6yHyks.roa Signing time: Thu 01 Jan 2026 16:19:04 +0000 ROA not before: Thu 01 Jan 2026 16:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48147 IP address blocks: 2a05:9080:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:06:06:79:cc:62:5d:d9:0a:33:d2:c2:71:02:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Jan 1 16:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ae1558bdd4f2f0d4f506c91b2c77643ac87ca4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f6:53:40:76:65:9c:b9:dc:e3:4e:6a:f5:94: 78:22:e3:55:aa:94:1b:66:97:06:2d:25:7a:6b:a5: a0:55:81:4c:5b:08:02:0f:e6:ce:21:15:6d:2b:a6: 49:19:eb:ac:32:08:57:9b:3a:64:df:c8:f3:a3:05: 9c:67:37:dd:b7:03:f0:1b:d4:3b:50:cc:23:27:2c: ec:9b:da:d8:b1:79:ef:be:f4:ac:58:44:83:bd:40: 2a:d3:13:27:33:50:78:f0:ad:8e:1c:25:f8:35:f3: 8f:0e:89:3d:39:e3:c6:40:64:e9:f4:c5:56:4c:67: ed:78:0f:65:e8:21:a6:3c:06:56:89:39:0d:a2:27: c4:fa:5f:b4:39:f5:05:68:c9:fa:05:51:9a:0d:f0: 02:b4:a5:49:2c:51:76:a3:df:13:e4:f0:a7:f4:02: c9:51:80:50:2c:14:78:19:3a:24:64:c0:0b:78:f9: ab:ec:cf:c7:15:14:41:20:be:25:c2:11:57:89:ff: 66:fb:ba:2e:61:3b:ef:8a:90:d7:af:33:84:7f:57: 09:e8:95:3a:3b:c0:8b:2b:57:0c:06:6d:a7:ec:18: 0e:ab:5b:6c:99:d4:54:bd:d5:03:fb:a8:8f:3b:dc: f5:96:1f:f0:ae:49:0b:e4:98:7d:d5:b7:ae:01:b1: 95:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E1:55:8B:DD:4F:2F:0D:4F:50:6C:91:B2:C7:76:43:AC:87:CA:4B X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/WuFVi91PLw1PUGyRssd2Q6yHyks.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:9080:8::/48 Signature Algorithm: sha256WithRSAEncryption 4e:d2:17:db:ec:e3:18:fe:f6:83:97:f8:6d:2e:02:4f:dc:64: 03:2c:64:a3:d4:23:9f:62:76:ed:a1:8a:aa:b5:dc:0a:12:f5: e5:e4:be:d4:f9:b8:cd:4b:11:ff:96:ce:e3:d5:eb:09:71:f1: d0:1f:28:f9:31:4b:82:48:e0:0c:ab:e7:5a:62:77:57:ee:6b: ca:97:39:c5:18:b6:2e:18:6d:94:ae:20:95:73:2a:aa:b0:82: e4:bc:c5:50:26:eb:b6:a9:ad:52:07:8b:99:1b:54:fe:78:3f: 11:31:6e:2f:b5:87:b9:67:19:3d:4e:31:c6:1c:85:d0:55:0c: b4:aa:aa:c3:32:d0:3e:88:5b:13:b0:8f:84:7f:79:39:3d:e3: 0b:cc:95:69:cf:c9:f8:70:df:7e:fd:0d:4f:42:e2:7b:ed:10: 60:b6:ae:b5:6d:69:52:80:ff:3d:d2:d3:58:78:1d:9a:e5:78: 65:b8:db:b1:28:bf:0f:67:2b:65:8c:7e:dc:10:ee:b1:e1:de: 81:c3:bb:cc:da:d0:ef:58:ac:a7:0c:7d:d3:82:6d:de:74:fe: 19:61:97:6a:32:ed:53:b6:1e:30:b4:6b:54:be:26:02:9e:8d: 5d:16:3f:85:aa:99:92:4a:e8:46:3a:b2:ac:d0:11:4f:1b:42: 1f:13:5b:13 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6WwYGecxiXdkKM9LCcQJ6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjYwMTAxMTYxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YWUxNTU4YmRkNGYyZjBkNGY1MDZjOTFiMmM3NzY0M2FjODdjYTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPZTQHZlnLnc405q9ZR4IuNVqpQb ZpcGLSV6a6WgVYFMWwgCD+bOIRVtK6ZJGeusMghXmzpk38jzowWcZzfdtwPwG9Q7 UMwjJyzsm9rYsXnvvvSsWESDvUAq0xMnM1B48K2OHCX4NfOPDok9OePGQGTp9MVW TGfteA9l6CGmPAZWiTkNoifE+l+0OfUFaMn6BVGaDfACtKVJLFF2o98T5PCn9ALJ UYBQLBR4GTokZMALePmr7M/HFRRBIL4lwhFXif9m+7ouYTvvipDXrzOEf1cJ6JU6 O8CLK1cMBm2n7BgOq1tsmdRUvdUD+6iPO9z1lh/wrkkL5Jh91beuAbGVtwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFrhVYvdTy8NT1BskbLHdkOsh8pLMB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvV3VGVmk5MVBMdzFQVUd5UnNzZDJRNnlIeWtzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgWQgAAI MA0GCSqGSIb3DQEBCwUAA4IBAQBO0hfb7OMY/vaDl/htLgJP3GQDLGSj1COfYnbt oYqqtdwKEvXl5L7U+bjNSxH/ls7j1esJcfHQHyj5MUuCSOAMq+daYndX7mvKlznF GLYuGG2UriCVcyqqsILkvMVQJuu2qa1SB4uZG1T+eD8RMW4vtYe5Zxk9TjHGHIXQ VQy0qqrDMtA+iFsTsI+Ef3k5PeMLzJVpz8n4cN9+/Q1PQuJ77RBgtq61bWlSgP89 0tNYeB2a5XhluNuxKL8PZytljH7cEO6x4d6Bw7vM2tDvWKynDH3Tgm3edP4ZYZdq Mu1Tth4wtGtUviYCno1dFj+FqpmSSuhGOrKs0BFPG0IfE1sT -----END CERTIFICATE-----Generated at Mon Jan 5 13:05:24 2026 by rpki-client