This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/wdvsRd-9U3U70IlrtYtovCpNc9Q.roa File: wdvsRd-9U3U70IlrtYtovCpNc9Q.roa (raw, json) Hash identifier: mNCf1xUlHvOl8DHTeIC9Lu7yoWxnq5Pbtc8Q/1XsN4g= Subject key identifier: C1:DB:EC:45:DF:BD:53:75:3B:D0:89:6B:B5:8B:68:BC:2A:4D:73:D4 Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Certificate serial: 019B7F85ACF3342E8074048A93A37CAB8C4C Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/wdvsRd-9U3U70IlrtYtovCpNc9Q.roa Signing time: Fri 02 Jan 2026 16:23:45 +0000 ROA not before: Fri 02 Jan 2026 16:23:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401903 IP address blocks: 2a0f:b240:6d00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 12:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:ac:f3:34:2e:80:74:04:8a:93:a3:7c:ab:8c:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Validity Not Before: Jan 2 16:23:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1dbec45dfbd53753bd0896bb58b68bc2a4d73d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:63:62:a2:c7:7a:97:bf:a1:e2:54:08:bd:1f: 5a:29:61:d0:bf:52:c6:b7:4e:5e:34:9b:ae:23:02: 88:29:16:cb:cb:f4:8c:f8:61:fb:6f:33:32:1c:5a: 9a:48:b7:88:d2:f4:a5:13:3b:a2:af:a5:9f:7d:11: 03:1e:51:63:f2:7a:c4:3d:ea:6a:d8:e2:94:54:f6: 23:82:56:bd:30:d7:54:35:5e:8f:6a:fd:8f:42:34: 41:21:29:6f:44:f4:72:dc:3d:86:e5:58:3c:5f:35: bb:86:fc:5d:cd:ff:a5:ef:84:5b:5b:00:95:d0:3d: 6e:19:22:98:5b:49:7a:d3:f7:50:cc:99:cb:68:0c: 0a:42:55:7c:f6:f6:b6:40:28:7c:68:59:a1:5d:0d: b1:72:b1:b7:21:b2:4c:96:62:31:cb:50:f7:c9:7c: bd:ca:7c:d1:c1:d2:c3:aa:9f:81:63:7a:b6:40:74: 96:9a:da:16:2e:33:5b:16:59:0d:b0:a4:c0:84:f4: d0:68:e6:f5:00:ae:7e:f5:c5:f9:3f:3f:fe:1a:ff: 65:66:3f:ed:83:4b:b7:66:3a:81:5a:76:5a:71:d2: 23:c8:72:9b:f7:a3:bc:09:4c:86:3d:6f:79:cf:a5: 75:bf:5d:9d:c6:d1:f6:6d:d1:f6:dc:a4:a8:5d:43: bf:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:DB:EC:45:DF:BD:53:75:3B:D0:89:6B:B5:8B:68:BC:2A:4D:73:D4 X509v3 Authority Key Identifier: keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/wdvsRd-9U3U70IlrtYtovCpNc9Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:b240:6d00::/40 Signature Algorithm: sha256WithRSAEncryption 8a:04:b8:21:92:2c:35:1f:51:ed:d1:19:31:3f:0f:86:29:05: 31:17:45:62:54:bc:69:5d:84:7e:e0:02:04:ff:35:d8:04:8a: 3a:53:f6:3f:58:00:3b:d0:f3:da:d5:e0:5e:56:de:7d:d7:31: a3:61:6e:10:a2:7b:ee:bf:b2:81:42:04:c6:2d:0d:03:2e:55: a8:e5:45:c7:db:21:22:84:e3:90:8b:89:da:57:69:53:39:ad: b4:08:de:33:87:8f:b7:66:10:7b:5b:c8:cb:e6:01:ab:50:60: a1:a8:53:1b:16:73:0f:77:d7:d3:1c:2f:c8:71:25:d1:00:c3: d9:84:92:99:e7:4b:83:80:6d:d6:1c:65:fb:a5:a1:d5:89:cf: 02:e1:1d:23:ac:c8:ed:63:6f:45:fa:68:c2:9d:57:4e:97:4b: e2:b8:2f:2b:0f:c2:94:68:03:0b:95:21:24:37:9d:25:04:24: 64:06:b1:a5:83:66:e0:e7:2f:21:b3:b0:5e:38:32:8a:f4:fe: 27:af:46:6e:cd:75:bd:38:60:ff:02:ad:73:70:48:ca:65:07: e5:41:65:f0:bd:e2:ce:32:45:56:ff:91:af:95:68:08:aa:36: 05:9d:63:1a:47:6b:15:29:b6:06:bf:66:ad:f6:8e:cc:92:9f: 8c:7f:e2:e3 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt/hazzNC6AdASKk6N8q4xMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk ZmUyMGYwHhcNMjYwMTAyMTYyMzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMWRiZWM0NWRmYmQ1Mzc1M2JkMDg5NmJiNThiNjhiYzJhNGQ3M2Q0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmNiosd6l7+h4lQIvR9aKWHQv1LG t05eNJuuIwKIKRbLy/SM+GH7bzMyHFqaSLeI0vSlEzuir6WffREDHlFj8nrEPepq 2OKUVPYjgla9MNdUNV6Pav2PQjRBISlvRPRy3D2G5Vg8XzW7hvxdzf+l74RbWwCV 0D1uGSKYW0l60/dQzJnLaAwKQlV89va2QCh8aFmhXQ2xcrG3IbJMlmIxy1D3yXy9 ynzRwdLDqp+BY3q2QHSWmtoWLjNbFlkNsKTAhPTQaOb1AK5+9cX5Pz/+Gv9lZj/t g0u3ZjqBWnZacdIjyHKb96O8CUyGPW95z6V1v12dxtH2bdH23KSoXUO/OwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFMHb7EXfvVN1O9CJa7WLaLwqTXPUMB8GA1UdIwQY MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct YjcxNzk4MGU0YWQ2LzEvd2R2c1JkLTlVM1U3MElscnRZdG92Q3BOYzlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2 LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg+yQG0w DQYJKoZIhvcNAQELBQADggEBAIoEuCGSLDUfUe3RGTE/D4YpBTEXRWJUvGldhH7g AgT/NdgEijpT9j9YADvQ89rV4F5W3n3XMaNhbhCie+6/soFCBMYtDQMuVajlRcfb ISKE45CLidpXaVM5rbQI3jOHj7dmEHtbyMvmAatQYKGoUxsWcw9319McL8hxJdEA w9mEkpnnS4OAbdYcZfulodWJzwLhHSOsyO1jb0X6aMKdV06XS+K4LysPwpRoAwuV ISQ3nSUEJGQGsaWDZuDnLyGzsF44Mor0/ievRm7Ndb04YP8CrXNwSMplB+VBZfC9 4s4yRVb/ka+VaAiqNgWdYxpHaxUptga/Zq32jsySn4x/4uM= -----END CERTIFICATE-----Generated at Sat Jan 10 21:11:11 2026 by rpki-client