This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/wu0Za9NYwFwZJ74bGZJwkuczg9M.roa File: wu0Za9NYwFwZJ74bGZJwkuczg9M.roa (raw, json) Hash identifier: OuqpChsT7UE2Jtn1XWrSxDETJ9LCxhaKUv6QLbhUwuk= Subject key identifier: C2:ED:19:6B:D3:58:C0:5C:19:27:BE:1B:19:92:70:92:E7:33:83:D3 Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA75B920C7CE30153DFE22AA750050A Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/wu0Za9NYwFwZJ74bGZJwkuczg9M.roa Signing time: Fri 02 Jan 2026 12:20:55 +0000 ROA not before: Fri 02 Jan 2026 12:20:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12685 IP address blocks: 212.76.160.0/19 maxlen: 19 2a02:5a60::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:5b:92:0c:7c:e3:01:53:df:e2:2a:a7:50:05:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:20:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c2ed196bd358c05c1927be1b19927092e73383d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9d:48:38:bd:34:e7:78:43:68:64:52:5d:d0: 0a:83:63:d5:c7:1c:66:d9:ee:d5:0e:9d:cc:d3:10: f5:74:d8:e9:08:e2:0b:d7:42:75:c0:1c:c9:ba:ee: 3b:70:7a:7a:57:93:fc:8d:2c:fa:0d:4d:b5:47:51: e7:44:35:9e:37:5d:0a:03:bc:04:eb:f2:bd:2b:bb: de:ef:e5:ca:5d:17:12:d3:c9:3b:ee:f5:ce:6a:54: 7a:d5:41:40:1a:ab:f5:55:f4:30:7f:11:ea:88:e3: 88:cf:39:17:95:a1:ba:b2:5a:d9:e4:50:b5:02:13: 2b:52:df:a3:6c:24:e1:67:20:0a:ea:4b:a1:6a:e2: b4:32:0c:99:91:70:62:74:43:d0:87:93:d7:ec:97: df:f4:d3:39:71:e2:a1:eb:71:fd:cd:30:be:d4:59: db:64:41:4e:d8:e8:d3:29:3c:e3:c2:e5:e5:90:ac: 28:46:94:79:ae:ae:8d:3f:c8:c8:b9:63:df:72:b5: d3:86:b8:4a:14:cd:3c:06:50:56:0f:b9:07:12:31: 31:ff:dc:95:ce:9c:ba:76:29:0a:50:33:a0:93:b8: d3:17:d3:db:4f:44:91:95:89:df:1d:90:b1:9c:25: 7f:07:f3:0e:4e:65:76:38:d5:14:4e:18:d4:b6:0d: ae:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:ED:19:6B:D3:58:C0:5C:19:27:BE:1B:19:92:70:92:E7:33:83:D3 X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/wu0Za9NYwFwZJ74bGZJwkuczg9M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.76.160.0/19 IPv6: 2a02:5a60::/32 Signature Algorithm: sha256WithRSAEncryption 1e:46:fa:4a:fb:0c:d6:1c:7c:cd:19:e2:c6:56:07:25:94:77: 6e:14:fd:1b:f7:45:90:6e:d8:18:17:87:a4:ab:33:1c:0f:72: cf:fd:e4:8b:1b:54:01:d9:7b:4d:94:fd:38:57:e5:53:84:b4: 85:e6:0f:f7:33:29:9d:0b:d0:02:f7:dc:5f:c2:77:8a:1d:08: ce:77:fd:94:90:47:48:71:16:ff:29:a4:8f:52:29:66:28:19: 7a:e1:0e:10:c0:43:5b:a3:45:13:7f:78:f6:e3:df:5f:7a:07: 13:4c:ac:9f:73:59:f4:c8:7c:3d:40:3b:de:2e:49:57:4a:a4: 43:98:09:d7:89:32:56:62:14:62:d4:7a:a7:7e:84:2a:aa:63: 0c:ab:9d:eb:70:61:6a:b1:4f:f1:59:47:cf:33:cd:8b:f8:0f: 03:ed:92:d3:a8:75:1b:c8:be:32:5f:d2:70:82:4c:aa:05:79: ec:e0:91:9b:a6:d0:c4:b3:ea:60:a4:a9:77:11:89:cf:24:dc: 06:4a:35:b0:11:c1:6a:4e:dd:fc:4a:eb:f7:80:26:89:44:cd: 2d:f2:22:15:bc:98:89:30:d4:ee:04:4e:3b:01:16:41:05:a7: 7f:bd:92:aa:21:65:54:c5:a8:12:e9:72:8e:d2:40:96:a3:8e: e8:eb:68:2e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+p1uSDHzjAVPf4iqnUAUKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMmVkMTk2YmQzNThjMDVjMTkyN2JlMWIxOTkyNzA5MmU3MzM4M2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJ1IOL0053hDaGRSXdAKg2PVxxxm 2e7VDp3M0xD1dNjpCOIL10J1wBzJuu47cHp6V5P8jSz6DU21R1HnRDWeN10KA7wE 6/K9K7ve7+XKXRcS08k77vXOalR61UFAGqv1VfQwfxHqiOOIzzkXlaG6slrZ5FC1 AhMrUt+jbCThZyAK6kuhauK0MgyZkXBidEPQh5PX7Jff9NM5ceKh63H9zTC+1Fnb ZEFO2OjTKTzjwuXlkKwoRpR5rq6NP8jIuWPfcrXThrhKFM08BlBWD7kHEjEx/9yV zpy6dikKUDOgk7jTF9PbT0SRlYnfHZCxnCV/B/MOTmV2ONUUThjUtg2uZQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMLtGWvTWMBcGSe+GxmScJLnM4PTMB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvd3UwWmE5Tll3RndaSjc0YkdaSndrdWN6ZzlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQF1EygMA0E AgACMAcDBQAqAlpgMA0GCSqGSIb3DQEBCwUAA4IBAQAeRvpK+wzWHHzNGeLGVgcl lHduFP0b90WQbtgYF4ekqzMcD3LP/eSLG1QB2XtNlP04V+VThLSF5g/3MymdC9AC 99xfwneKHQjOd/2UkEdIcRb/KaSPUilmKBl64Q4QwENbo0UTf3j2499fegcTTKyf c1n0yHw9QDveLklXSqRDmAnXiTJWYhRi1HqnfoQqqmMMq53rcGFqsU/xWUfPM82L +A8D7ZLTqHUbyL4yX9JwgkyqBXns4JGbptDEs+pgpKl3EYnPJNwGSjWwEcFqTt38 Suv3gCaJRM0t8iIVvJiJMNTuBE47ARZBBad/vZKqIWVUxagS6XKO0kCWo47o62gu -----END CERTIFICATE-----Generated at Mon Jan 26 11:27:31 2026 by rpki-client