This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/wLZ0om1eYNLk8iWLT7545pgbjxE.roa File: wLZ0om1eYNLk8iWLT7545pgbjxE.roa (raw, json) Hash identifier: TXnCxZRiHoJiBAQHrsXiscr2ci35Zx8pHJgDDr7XC4o= Subject key identifier: C0:B6:74:A2:6D:5E:60:D2:E4:F2:25:8B:4F:BE:78:E6:98:1B:8F:11 Certificate issuer: /CN=c6baf8e3088217e4b7c0c231718fab909b1881e4 Certificate serial: 019B48D8D9E8DF5F693CA52666624F3EFAF3 Authority key identifier: C6:BA:F8:E3:08:82:17:E4:B7:C0:C2:31:71:8F:AB:90:9B:18:81:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrr44wiCF-S3wMIxcY-rkJsYgeQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/wLZ0om1eYNLk8iWLT7545pgbjxE.roa Signing time: Tue 23 Dec 2025 01:35:29 +0000 ROA not before: Tue 23 Dec 2025 01:35:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215737 IP address blocks: 2001:67c:2924::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.mft rsync://rpki.ripe.net/repository/DEFAULT/xrr44wiCF-S3wMIxcY-rkJsYgeQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:d8:d9:e8:df:5f:69:3c:a5:26:66:62:4f:3e:fa:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6baf8e3088217e4b7c0c231718fab909b1881e4 Validity Not Before: Dec 23 01:35:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c0b674a26d5e60d2e4f2258b4fbe78e6981b8f11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e7:b0:f3:4f:65:fd:28:ff:f0:63:64:73:6c: be:28:83:52:43:c5:e1:44:2b:85:07:82:5d:00:77: 1e:53:68:c2:50:79:44:d5:e9:8a:0a:a2:0c:0e:5b: d1:5b:7d:25:da:50:8b:0f:16:f2:f6:58:f2:92:c5: a4:18:f5:0a:15:c7:6e:36:99:72:2a:07:46:0f:e8: ab:6a:f6:5a:f6:5f:d8:17:13:1c:13:6b:f3:d5:3b: e1:bb:83:e7:00:38:72:ee:6f:2f:5f:e6:3e:be:5d: 5d:7d:64:b8:e3:7d:12:52:b0:35:c3:8d:f5:a6:6d: a6:8c:0d:d3:94:85:4d:cf:82:9a:0f:14:b8:2a:4d: 56:6d:5e:98:28:9c:0e:31:e3:de:80:df:60:9f:24: f1:95:67:76:55:d0:3a:58:ba:a1:92:2f:e6:d0:48: 93:e0:91:0a:61:7d:ce:61:fa:50:3c:cf:d1:c0:43: 91:0c:d6:9f:bf:36:ed:2d:6a:f2:69:f8:df:c8:f5: c2:89:66:96:ea:15:84:83:06:dd:9f:0f:d7:63:44: 57:25:b1:0e:ef:9d:bf:ec:f8:0b:72:de:45:b1:66: 9d:25:e1:bc:2e:60:3a:4c:5d:52:17:6d:4e:db:6f: 84:82:ed:0e:f2:bc:ce:59:af:4a:7e:7f:40:4d:73: c1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:B6:74:A2:6D:5E:60:D2:E4:F2:25:8B:4F:BE:78:E6:98:1B:8F:11 X509v3 Authority Key Identifier: keyid:C6:BA:F8:E3:08:82:17:E4:B7:C0:C2:31:71:8F:AB:90:9B:18:81:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrr44wiCF-S3wMIxcY-rkJsYgeQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/wLZ0om1eYNLk8iWLT7545pgbjxE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2924::/48 Signature Algorithm: sha256WithRSAEncryption 3b:f7:f7:e4:52:55:75:e5:c0:7f:bc:f2:27:58:00:1b:e2:13: 6a:c0:3e:87:f5:8f:de:f9:bf:34:37:53:89:68:c2:81:4c:26: c5:a2:29:21:64:83:d8:a2:04:ef:42:55:60:8a:4c:25:a5:30: 49:4a:a5:ea:f7:2e:f9:d1:8d:65:56:db:d8:87:de:05:b4:ce: b3:75:b5:9e:16:38:b5:66:34:db:f3:e0:21:57:62:c9:3c:70: ef:b1:c7:93:ce:73:4c:39:5d:b6:91:16:36:10:b2:0d:98:21: 95:30:e5:e7:20:66:ce:59:c0:83:59:d6:99:e4:1f:9a:bd:f2: 5f:59:50:12:e2:cd:0b:11:53:05:ec:66:d6:fd:93:4c:36:32: 54:3b:f0:ae:ec:bf:a2:69:8d:a7:28:5c:28:89:f1:65:2a:e7: d4:8c:99:57:7b:17:99:ee:e4:ae:ef:aa:25:56:45:53:32:df: 54:70:a4:17:7b:64:42:e9:6f:16:42:fb:71:c1:86:42:dc:ab: 05:0b:fb:ab:19:8a:fd:ac:35:5f:69:ff:f7:c0:ac:c6:ae:ee: d6:9e:1e:5b:62:fb:31:c0:6d:dd:87:f4:08:52:3d:83:d7:72: 9e:01:7d:32:5e:df:d7:22:b4:84:32:d5:17:cf:71:ae:3e:b8: 9f:ef:bf:70 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZtI2Nno319pPKUmZmJPPvrzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YmFmOGUzMDg4MjE3ZTRiN2MwYzIzMTcxOGZhYjkwOWIx ODgxZTQwHhcNMjUxMjIzMDEzNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMGI2NzRhMjZkNWU2MGQyZTRmMjI1OGI0ZmJlNzhlNjk4MWI4ZjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruew809l/Sj/8GNkc2y+KINSQ8Xh RCuFB4JdAHceU2jCUHlE1emKCqIMDlvRW30l2lCLDxby9ljyksWkGPUKFcduNply KgdGD+iravZa9l/YFxMcE2vz1Tvhu4PnADhy7m8vX+Y+vl1dfWS4430SUrA1w431 pm2mjA3TlIVNz4KaDxS4Kk1WbV6YKJwOMePegN9gnyTxlWd2VdA6WLqhki/m0EiT 4JEKYX3OYfpQPM/RwEORDNafvzbtLWryafjfyPXCiWaW6hWEgwbdnw/XY0RXJbEO 752/7PgLct5FsWadJeG8LmA6TF1SF21O22+Egu0O8rzOWa9Kfn9ATXPBPwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMC2dKJtXmDS5PIli0++eOaYG48RMB8GA1UdIwQY MBaAFMa6+OMIghfkt8DCMXGPq5CbGIHkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHJyNDR3aUNGLVMzd01JeGNZLXJrSnNZZ2VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS84NzNkZDAtYWY4OC00YmU1LTk4NjEt ZmVhNWVmZjM3NzI0LzEvd0xaMG9tMWVZTkxrOGlXTFQ3NTQ1cGdianhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS84NzNkZDAtYWY4OC00YmU1LTk4NjEtZmVhNWVmZjM3NzI0 LzEveHJyNDR3aUNGLVMzd01JeGNZLXJrSnNZZ2VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCkk MA0GCSqGSIb3DQEBCwUAA4IBAQA79/fkUlV15cB/vPInWAAb4hNqwD6H9Y/e+b80 N1OJaMKBTCbFoikhZIPYogTvQlVgikwlpTBJSqXq9y750Y1lVtvYh94FtM6zdbWe Fji1ZjTb8+AhV2LJPHDvsceTznNMOV22kRY2ELINmCGVMOXnIGbOWcCDWdaZ5B+a vfJfWVAS4s0LEVMF7GbW/ZNMNjJUO/Cu7L+iaY2nKFwoifFlKufUjJlXexeZ7uSu 76olVkVTMt9UcKQXe2RC6W8WQvtxwYZC3KsFC/urGYr9rDVfaf/3wKzGru7Wnh5b YvsxwG3dh/QIUj2D13KeAX0yXt/XIrSEMtUXz3GuPrif779w -----END CERTIFICATE-----Generated at Fri Dec 26 17:20:08 2025 by rpki-client