This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/wUc3S_D16XdipknJCTPDOkYeAwY.roa File: wUc3S_D16XdipknJCTPDOkYeAwY.roa (raw, json) Hash identifier: 0ohTvuZNcLXWt6aaBFxx4qj0TlX4E91Ut4sGjwIPaz4= Subject key identifier: C1:47:37:4B:F0:F5:E9:77:62:A6:49:C9:09:33:C3:3A:46:1E:03:06 Certificate issuer: /CN=c3743c89df34ec770a65973f1005146bfb32b0f2 Certificate serial: 019B79105EC12CBB91EC62B9FB9B9B861541 Authority key identifier: C3:74:3C:89:DF:34:EC:77:0A:65:97:3F:10:05:14:6B:FB:32:B0:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3Q8id807HcKZZc_EAUUa_sysPI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/wUc3S_D16XdipknJCTPDOkYeAwY.roa Signing time: Thu 01 Jan 2026 10:17:54 +0000 ROA not before: Thu 01 Jan 2026 10:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197942 IP address blocks: 2001:67c:1904::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.crl rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.mft rsync://rpki.ripe.net/repository/DEFAULT/w3Q8id807HcKZZc_EAUUa_sysPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:5e:c1:2c:bb:91:ec:62:b9:fb:9b:9b:86:15:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3743c89df34ec770a65973f1005146bfb32b0f2 Validity Not Before: Jan 1 10:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c147374bf0f5e97762a649c90933c33a461e0306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:09:59:be:fd:44:8d:66:72:f4:83:22:49:40: 08:ef:17:3e:c9:1d:b5:a1:0c:35:73:7a:4b:1d:4e: 98:64:02:f8:d7:53:73:45:ff:de:7e:45:7e:4d:34: b5:d4:f0:10:ff:87:52:0c:a8:e9:36:bf:d1:0e:11: e9:19:21:e4:75:f3:45:39:97:ba:30:05:b7:e7:8c: 0a:3b:99:4b:a2:b6:64:d1:10:95:a7:91:69:d0:e1: a6:67:56:d8:7f:aa:d4:c7:55:53:d6:0c:01:3e:f9: 33:7a:6c:14:ff:4f:64:25:ae:b9:48:28:7f:03:fc: ee:3c:40:26:bf:3e:d6:17:40:32:45:4a:48:ba:01: 0f:42:e1:00:5d:e4:4c:14:da:de:df:08:82:74:f9: 7f:ce:11:e5:52:cf:e9:ef:05:2a:a4:57:8c:a1:75: 39:35:9e:55:32:e3:8a:6b:f7:b9:68:87:83:31:ef: ac:59:bf:e0:61:b6:0c:b1:52:2d:bc:4b:08:dd:52: 1e:6d:40:5f:2d:83:6d:ba:f5:02:9f:64:99:ea:a2: 9c:cb:85:79:2c:55:66:7f:b2:c1:04:f2:94:25:97: d3:f6:ac:52:d1:2c:05:e9:bf:6f:dc:21:1d:d4:2a: 93:50:3a:aa:87:5d:5b:a6:68:9f:47:8b:d0:40:5e: bf:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:47:37:4B:F0:F5:E9:77:62:A6:49:C9:09:33:C3:3A:46:1E:03:06 X509v3 Authority Key Identifier: keyid:C3:74:3C:89:DF:34:EC:77:0A:65:97:3F:10:05:14:6B:FB:32:B0:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3Q8id807HcKZZc_EAUUa_sysPI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/wUc3S_D16XdipknJCTPDOkYeAwY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:1904::/48 Signature Algorithm: sha256WithRSAEncryption 0d:b6:90:18:0b:24:83:d9:6b:35:f0:41:4e:e2:aa:8a:00:1f: 21:8f:ff:d4:2a:64:f5:a5:03:2b:4b:68:55:8d:55:65:41:15: 78:b8:36:f6:32:ff:72:07:ed:3e:b9:0c:0d:54:b7:a8:01:dd: 2c:e5:cd:bf:a2:e1:12:9b:85:44:c3:85:5b:e5:c8:a7:a7:ab: c6:eb:2d:27:92:4e:d2:26:59:06:fd:eb:13:10:61:5d:e0:b7: fb:ce:ef:d5:0a:4d:33:b5:94:50:c9:cc:bb:1d:7a:14:31:5d: 76:6c:be:e8:87:e9:c9:8c:d6:b1:64:2f:c8:33:64:38:4c:7d: eb:9b:9a:a3:eb:c2:ac:50:1a:2a:e7:e8:6d:1b:6c:a7:02:c6: cf:5c:c8:3c:70:9f:00:4b:5f:c9:f6:ee:f9:73:7a:7c:c6:62: 7c:82:80:52:ca:33:46:57:20:f5:2b:c6:de:d3:ae:d5:be:49: 02:60:62:ef:f0:77:77:d2:05:43:d0:b3:0f:96:21:2b:40:00: 2d:74:60:d9:fe:22:ee:36:3d:66:48:ad:77:45:52:1a:6c:f8: 87:09:f9:96:e4:9e:4f:17:13:ce:9f:f8:59:37:2d:d0:94:ed: 74:74:c2:3f:2b:b5:58:54:e2:33:56:0b:1c:63:50:69:ed:a2: b4:50:14:9d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EF7BLLuR7GK5+5ubhhVBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNzQzYzg5ZGYzNGVjNzcwYTY1OTczZjEwMDUxNDZiZmIz MmIwZjIwHhcNMjYwMTAxMTAxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTQ3Mzc0YmYwZjVlOTc3NjJhNjQ5YzkwOTMzYzMzYTQ2MWUwMzA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyglZvv1EjWZy9IMiSUAI7xc+yR21 oQw1c3pLHU6YZAL411NzRf/efkV+TTS11PAQ/4dSDKjpNr/RDhHpGSHkdfNFOZe6 MAW354wKO5lLorZk0RCVp5Fp0OGmZ1bYf6rUx1VT1gwBPvkzemwU/09kJa65SCh/ A/zuPEAmvz7WF0AyRUpIugEPQuEAXeRMFNre3wiCdPl/zhHlUs/p7wUqpFeMoXU5 NZ5VMuOKa/e5aIeDMe+sWb/gYbYMsVItvEsI3VIebUBfLYNtuvUCn2SZ6qKcy4V5 LFVmf7LBBPKUJZfT9qxS0SwF6b9v3CEd1CqTUDqqh11bpmifR4vQQF6/8wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMFHN0vw9el3YqZJyQkzwzpGHgMGMB8GA1UdIwQY MBaAFMN0PInfNOx3CmWXPxAFFGv7MrDyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzNROGlkODA3SGNLWlpjX0VBVVVhX3N5c1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mOTlkYjQtOTg3ZS00M2IxLWEwY2Et MjBmMjdlODcwZDAxLzEvd1VjM1NfRDE2WGRpcGtuSkNUUERPa1llQXdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9mOTlkYjQtOTg3ZS00M2IxLWEwY2EtMjBmMjdlODcwZDAx LzEvdzNROGlkODA3SGNLWlpjX0VBVVVhX3N5c1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBkE MA0GCSqGSIb3DQEBCwUAA4IBAQANtpAYCySD2Ws18EFO4qqKAB8hj//UKmT1pQMr S2hVjVVlQRV4uDb2Mv9yB+0+uQwNVLeoAd0s5c2/ouESm4VEw4Vb5cinp6vG6y0n kk7SJlkG/esTEGFd4Lf7zu/VCk0ztZRQycy7HXoUMV12bL7oh+nJjNaxZC/IM2Q4 TH3rm5qj68KsUBoq5+htG2ynAsbPXMg8cJ8AS1/J9u75c3p8xmJ8goBSyjNGVyD1 K8be067VvkkCYGLv8Hd30gVD0LMPliErQAAtdGDZ/iLuNj1mSK13RVIabPiHCfmW 5J5PFxPOn/hZNy3QlO10dMI/K7VYVOIzVgscY1Bp7aK0UBSd -----END CERTIFICATE-----Generated at Mon Feb 2 07:54:49 2026 by rpki-client