This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/wTA4ZoIz75kHn1WMirNEgMY65FE.roa File: wTA4ZoIz75kHn1WMirNEgMY65FE.roa (raw, json) Hash identifier: ashXJm/A/tacrnrBady83etVIast6DpVJH2Dt/iNOM0= Subject key identifier: C1:30:38:66:82:33:EF:99:07:9F:55:8C:8A:B3:44:80:C6:3A:E4:51 Certificate issuer: /CN=f510c7b9dcc925983e59b586cd59ab554be25982 Certificate serial: 019B76EB020F3D54E696957BAD963665A60C Authority key identifier: F5:10:C7:B9:DC:C9:25:98:3E:59:B5:86:CD:59:AB:55:4B:E2:59:82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RDHudzJJZg-WbWGzVmrVUviWYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/wTA4ZoIz75kHn1WMirNEgMY65FE.roa Signing time: Thu 01 Jan 2026 00:17:51 +0000 ROA not before: Thu 01 Jan 2026 00:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35819 IP address blocks: 2001:3c80:4000::/48 maxlen: 48 2001:3c80:8000::/48 maxlen: 48 2001:3c80:b041::/48 maxlen: 48 2001:3c80:b042::/48 maxlen: 48 2001:3c80:b043::/48 maxlen: 48 2001:3c80:b044::/48 maxlen: 48 2001:3c80:b045::/48 maxlen: 48 2001:3c80:b046::/48 maxlen: 48 2001:3c80:b047::/48 maxlen: 48 2001:3c80:b048::/48 maxlen: 48 2001:3c80:b049::/48 maxlen: 48 2001:3c80:b04a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.mft rsync://rpki.ripe.net/repository/DEFAULT/9RDHudzJJZg-WbWGzVmrVUviWYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 15:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:02:0f:3d:54:e6:96:95:7b:ad:96:36:65:a6:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f510c7b9dcc925983e59b586cd59ab554be25982 Validity Not Before: Jan 1 00:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c13038668233ef99079f558c8ab34480c63ae451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4f:15:f1:ec:11:35:27:b7:bc:55:a6:2e:e5: b9:df:c5:c2:6e:2f:f6:3c:ca:08:58:42:23:6c:8b: 7c:dd:cb:93:ff:40:dd:1c:06:04:79:1f:23:b2:78: 11:5d:fb:eb:92:ce:60:6e:64:87:08:5e:8c:c9:84: e1:2d:ee:52:68:b5:c5:a8:fd:1e:70:a7:d0:51:72: 27:93:59:48:3a:d9:d8:e4:bd:5a:39:66:7a:47:eb: 4c:4f:44:c3:ae:c2:db:ce:be:21:ae:b7:48:10:a8: bc:c0:d2:f6:ab:55:9b:57:b2:a4:34:de:a5:df:73: b1:a0:2e:2e:23:2d:fb:ae:b5:8e:c4:24:da:ac:6a: b1:0d:83:3d:b6:d7:5e:fa:7f:23:fa:6b:7f:7a:d9: b2:13:26:4a:8a:f1:48:24:21:0d:d1:fc:09:b2:b2: a6:75:04:2a:1a:3a:33:3b:29:d0:90:b1:b4:1b:f5: 82:4f:b8:20:e4:22:6f:89:eb:a6:7d:ce:9f:8c:1d: 47:e8:6c:66:4d:6a:5d:5a:ff:55:1a:3b:6e:19:d8: b2:7c:c6:6e:4c:1d:c9:83:91:9b:81:18:76:dd:6b: 9f:3f:9e:d0:08:5f:31:dc:1b:08:d3:a6:ad:cf:d8: ed:33:e2:83:f8:14:65:73:36:6b:e1:4b:d4:b3:47: 3e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:30:38:66:82:33:EF:99:07:9F:55:8C:8A:B3:44:80:C6:3A:E4:51 X509v3 Authority Key Identifier: keyid:F5:10:C7:B9:DC:C9:25:98:3E:59:B5:86:CD:59:AB:55:4B:E2:59:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RDHudzJJZg-WbWGzVmrVUviWYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/wTA4ZoIz75kHn1WMirNEgMY65FE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:3c80:4000::/48 2001:3c80:8000::/48 2001:3c80:b041::-2001:3c80:b04a:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 12:23:6d:e3:83:21:e7:03:18:12:6c:95:03:b6:5f:88:29:fb: 26:5a:db:90:c3:c5:ab:be:09:b6:e1:d0:06:41:69:ea:ee:08: c9:8a:f3:0b:90:e1:63:16:77:24:80:bf:93:ed:34:8a:a9:5c: 45:0e:65:d6:71:60:6e:22:d9:79:af:91:dc:22:5c:68:0d:a4: 7c:04:75:d3:c0:20:99:13:f1:2b:b8:25:72:7c:d2:6b:ec:38: e7:ff:f8:eb:7b:44:53:c2:77:c6:1e:57:0c:a8:73:c1:a2:b9: ed:24:56:25:41:17:bd:36:35:ba:86:ea:06:80:53:80:1d:28: 1f:1d:ec:d0:8f:63:bf:b5:7f:8a:25:db:bf:49:4f:44:51:bf: fd:c7:70:53:df:99:d9:3e:0c:a3:83:aa:c1:6b:a5:64:b1:7d: 70:3a:58:9d:e4:cb:8e:53:43:4a:46:26:0b:49:77:0c:c3:71: 99:f1:34:f0:e5:14:c8:17:0c:00:6f:f7:c1:20:32:ce:af:9b: ad:3f:94:dd:d2:06:54:39:fe:67:d8:ac:2d:77:e2:0b:52:14: a5:0c:68:5a:22:df:80:10:b0:68:06:7d:5c:6e:a7:12:c6:c4: a7:16:f5:90:92:37:88:5b:65:3c:7a:ea:e4:e6:e8:ff:08:92: 26:c5:b5:5e -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt26wIPPVTmlpV7rZY2ZaYMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1MTBjN2I5ZGNjOTI1OTgzZTU5YjU4NmNkNTlhYjU1NGJl MjU5ODIwHhcNMjYwMTAxMDAxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTMwMzg2NjgyMzNlZjk5MDc5ZjU1OGM4YWIzNDQ4MGM2M2FlNDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt08V8ewRNSe3vFWmLuW538XCbi/2 PMoIWEIjbIt83cuT/0DdHAYEeR8jsngRXfvrks5gbmSHCF6MyYThLe5SaLXFqP0e cKfQUXInk1lIOtnY5L1aOWZ6R+tMT0TDrsLbzr4hrrdIEKi8wNL2q1WbV7KkNN6l 33OxoC4uIy37rrWOxCTarGqxDYM9ttde+n8j+mt/etmyEyZKivFIJCEN0fwJsrKm dQQqGjozOynQkLG0G/WCT7gg5CJvieumfc6fjB1H6GxmTWpdWv9VGjtuGdiyfMZu TB3Jg5GbgRh23WufP57QCF8x3BsI06atz9jtM+KD+BRlczZr4UvUs0c+4wIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFMEwOGaCM++ZB59VjIqzRIDGOuRRMB8GA1UdIwQY MBaAFPUQx7ncySWYPlm1hs1Zq1VL4lmCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVJESHVkekpKWmctV2JXR3pWbXJWVXZpV1lJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9hMGI1OGMtMzcxOS00NzczLTkyMDYt YTFiMmI2YTcwMjcyLzEvd1RBNFpvSXo3NWtIbjFXTWlyTkVnTVk2NUZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9hMGI1OGMtMzcxOS00NzczLTkyMDYtYTFiMmI2YTcwMjcy LzEvOVJESHVkekpKWmctV2JXR3pWbXJWVXZpV1lJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAAjAmAwcAIAE8gEAA AwcAIAE8gIAAMBIDBwAgATyAsEEDBwAgATyAsEowDQYJKoZIhvcNAQELBQADggEB ABIjbeODIecDGBJslQO2X4gp+yZa25DDxau+Cbbh0AZBaeruCMmK8wuQ4WMWdySA v5PtNIqpXEUOZdZxYG4i2XmvkdwiXGgNpHwEddPAIJkT8Su4JXJ80mvsOOf/+Ot7 RFPCd8YeVwyoc8Giue0kViVBF702NbqG6gaAU4AdKB8d7NCPY7+1f4ol279JT0RR v/3HcFPfmdk+DKODqsFrpWSxfXA6WJ3ky45TQ0pGJgtJdwzDcZnxNPDlFMgXDABv 98EgMs6vm60/lN3SBlQ5/mfYrC134gtSFKUMaFoi34AQsGgGfVxupxLGxKcW9ZCS N4hbZTx66uTm6P8IkibFtV4= -----END CERTIFICATE-----Generated at Fri Jan 30 18:26:25 2026 by rpki-client