This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/wOkwYSKo61Flj6OlnF30ahd8nW8.roa File: wOkwYSKo61Flj6OlnF30ahd8nW8.roa (raw, json) Hash identifier: WgGsoRYFSdjHSyBGiJcCIcGq3nxJnFx7v2dIi32zWdI= Subject key identifier: C0:E9:30:61:22:A8:EB:51:65:8F:A3:A5:9C:5D:F4:6A:17:7C:9D:6F Certificate issuer: /CN=e58024b729d99f05133ec6d14390c73eb36db99e Certificate serial: 019B0E046D3B35255922232FCB16AAA51579 Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/wOkwYSKo61Flj6OlnF30ahd8nW8.roa Signing time: Thu 11 Dec 2025 15:25:29 +0000 ROA not before: Thu 11 Dec 2025 15:25:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 151690 IP address blocks: 2001:978:b00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:04:6d:3b:35:25:59:22:23:2f:cb:16:aa:a5:15:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e Validity Not Before: Dec 11 15:25:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c0e9306122a8eb51658fa3a59c5df46a177c9d6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:51:1a:af:95:40:2b:41:22:99:2d:ad:20:f7: 36:61:9e:7f:93:eb:d2:c6:37:64:81:76:b0:b7:20: 25:d3:b0:83:8e:54:05:0d:3d:fb:82:19:57:e2:b9: e3:cb:e5:9d:c7:4c:2a:c9:29:72:32:0f:8f:9b:c5: d0:19:ac:48:ca:d0:70:5e:d9:9d:fb:dd:80:da:4c: 9b:a8:83:1c:01:54:d7:78:f6:e8:6e:df:df:2d:26: 3e:90:2a:2d:a0:d8:82:70:6d:92:64:5d:05:95:75: 78:e1:43:e9:1c:b8:67:e6:fb:a7:91:55:74:31:bd: 57:db:54:f3:47:80:8a:8f:db:a0:22:cc:47:b1:c4: c0:e2:28:8f:dc:f3:98:bb:ea:ad:3f:5d:d5:0d:01: 32:95:c3:93:c6:c7:f6:b0:9e:5b:7d:f2:51:7e:78: 3c:d1:99:64:83:f5:6a:7d:c5:15:0d:3d:65:52:39: 1c:ff:4d:2d:1e:1f:5f:c0:e1:a9:56:05:71:da:87: db:57:7e:92:4f:d2:ee:1e:ab:f9:72:76:b8:01:88: e8:35:01:4b:b9:79:7e:66:e0:79:c0:b7:11:09:5b: d0:f0:4d:d5:f0:30:1d:81:53:f3:8f:19:df:a4:95: 20:c7:a2:94:22:95:ae:54:59:cd:cb:3a:83:91:57: 3a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:E9:30:61:22:A8:EB:51:65:8F:A3:A5:9C:5D:F4:6A:17:7C:9D:6F X509v3 Authority Key Identifier: keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/wOkwYSKo61Flj6OlnF30ahd8nW8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:978:b00::/48 Signature Algorithm: sha256WithRSAEncryption 16:ab:6c:e9:59:61:3f:8c:d6:12:33:77:1b:af:99:96:29:08: ef:a1:b0:58:e3:ca:76:56:b6:4f:f5:d7:af:90:cf:e7:1c:b9: 26:5f:30:7d:c5:75:25:6e:f7:13:52:e2:78:12:39:75:c2:67: 56:5c:1e:30:99:c7:5a:ec:fc:70:ba:b8:ab:cc:a6:09:92:00: 28:5f:d1:82:76:d5:6f:c0:04:e7:19:c3:20:83:3e:f1:e6:62: 62:6c:c7:b1:a3:51:1b:5d:7d:41:49:29:f6:52:1e:8b:e3:e6: 2d:04:12:47:b9:8c:03:2f:a3:e5:8e:c4:e1:eb:e3:7e:27:b1: 55:a2:23:3e:62:a3:fa:d5:7b:31:02:5f:f2:9b:35:a2:e9:a3: f1:30:26:30:12:06:65:5a:6b:d8:b1:85:7d:a5:e1:e6:03:29: 0d:e5:4d:c2:8e:0f:1f:00:02:da:7c:06:40:70:30:35:c4:b9: 38:4c:0c:ea:76:a7:11:c5:c2:c7:0f:e0:c8:25:51:05:4f:1d: ed:c8:3d:ac:ae:fb:c8:de:fc:8c:33:19:5f:99:42:5c:5c:4b: d0:60:f5:84:9d:b5:81:01:c4:5b:16:8f:6c:07:d2:bd:90:9e: da:4d:bc:f8:5b:34:ce:63:b8:1c:5c:6d:e1:60:e6:72:7a:08: 91:dd:68:f0 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZsOBG07NSVZIiMvyxaqpRV5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ODAyNGI3MjlkOTlmMDUxMzNlYzZkMTQzOTBjNzNlYjM2 ZGI5OWUwHhcNMjUxMjExMTUyNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMGU5MzA2MTIyYThlYjUxNjU4ZmEzYTU5YzVkZjQ2YTE3N2M5ZDZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslEar5VAK0EimS2tIPc2YZ5/k+vS xjdkgXawtyAl07CDjlQFDT37ghlX4rnjy+Wdx0wqySlyMg+Pm8XQGaxIytBwXtmd +92A2kybqIMcAVTXePbobt/fLSY+kCotoNiCcG2SZF0FlXV44UPpHLhn5vunkVV0 Mb1X21TzR4CKj9ugIsxHscTA4iiP3POYu+qtP13VDQEylcOTxsf2sJ5bffJRfng8 0Zlkg/VqfcUVDT1lUjkc/00tHh9fwOGpVgVx2ofbV36ST9LuHqv5cna4AYjoNQFL uXl+ZuB5wLcRCVvQ8E3V8DAdgVPzjxnfpJUgx6KUIpWuVFnNyzqDkVc6awIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMDpMGEiqOtRZY+jpZxd9GoXfJ1vMB8GA1UdIwQY MBaAFOWAJLcp2Z8FEz7G0UOQxz6zbbmeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9kNTYyOGEtZDliMS00ZGE5LWE3NDQt OTU2ZjZiNWM2MTcwLzEvd09rd1lTS282MUZsajZPbG5GMzBhaGQ4blc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9kNTYyOGEtZDliMS00ZGE5LWE3NDQtOTU2ZjZiNWM2MTcw LzEvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEJeAsA MA0GCSqGSIb3DQEBCwUAA4IBAQAWq2zpWWE/jNYSM3cbr5mWKQjvobBY48p2VrZP 9devkM/nHLkmXzB9xXUlbvcTUuJ4Ejl1wmdWXB4wmcda7PxwurirzKYJkgAoX9GC dtVvwATnGcMggz7x5mJibMexo1EbXX1BSSn2Uh6L4+YtBBJHuYwDL6PljsTh6+N+ J7FVoiM+YqP61XsxAl/ymzWi6aPxMCYwEgZlWmvYsYV9peHmAykN5U3Cjg8fAALa fAZAcDA1xLk4TAzqdqcRxcLHD+DIJVEFTx3tyD2srvvI3vyMMxlfmUJcXEvQYPWE nbWBAcRbFo9sB9K9kJ7aTbz4WzTOY7gcXG3hYOZyegiR3Wjw -----END CERTIFICATE-----Generated at Thu Dec 11 23:20:11 2025 by rpki-client