This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/1Waoar8xJafvNKM98KbPPpZpO10.roa File: 1Waoar8xJafvNKM98KbPPpZpO10.roa (raw, json) Hash identifier: FVUFHFwDvFIi/NS+ywIKrLhu+WhKWGoQsTo08Z+OPm0= Subject key identifier: D5:66:A8:6A:BF:31:25:A7:EF:34:A3:3D:F0:A6:CF:3E:96:69:3B:5D Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Certificate serial: 019B7D5CC599E4B19955356D97CC22CEEC91 Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/1Waoar8xJafvNKM98KbPPpZpO10.roa Signing time: Fri 02 Jan 2026 06:19:50 +0000 ROA not before: Fri 02 Jan 2026 06:19:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25159 IP address blocks: 2a13:93c1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:c5:99:e4:b1:99:55:35:6d:97:cc:22:ce:ec:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Validity Not Before: Jan 2 06:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d566a86abf3125a7ef34a33df0a6cf3e96693b5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a0:e8:73:53:d4:d4:b5:88:55:7b:d3:b7:d5: 44:f9:d2:92:46:3d:e8:17:1b:dd:94:4a:14:6e:a5: 75:98:f0:2c:32:04:7b:f8:d2:dc:6d:a9:76:0d:e1: 6f:1c:05:be:71:ae:35:35:23:19:f7:3a:f3:f6:71: 3e:9f:38:fb:97:38:79:53:4a:a3:a7:96:5a:8a:e4: c6:d9:bd:50:86:ea:b6:f3:8b:58:9e:b1:f8:b8:00: b8:4d:2a:3f:e9:9e:4c:70:23:aa:92:e1:c5:6f:3d: e8:1d:1d:18:ea:2b:2b:62:d2:5b:65:b2:d8:ed:a3: c0:43:e1:36:bd:3f:90:52:cc:20:31:0e:c1:27:68: 51:dc:98:67:21:7e:23:85:8a:68:c0:05:77:30:9a: a1:b8:4a:50:2c:d7:24:20:95:77:71:08:27:d4:ca: 69:20:83:9f:fc:dc:3f:c3:7e:0f:59:92:26:1b:7e: f8:05:51:14:a6:30:af:5a:c5:e9:ac:b3:4e:c2:ed: 23:d2:2b:ed:a8:34:f5:9f:e1:f0:5b:60:5d:66:27: 92:3b:8c:b5:26:03:b1:1a:ec:0c:73:0a:91:ab:70: 87:d6:00:42:3c:e4:4c:26:f0:87:a5:65:91:80:2d: 00:ee:28:d9:b5:dd:a8:48:ec:00:08:89:05:5e:c6: 33:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:66:A8:6A:BF:31:25:A7:EF:34:A3:3D:F0:A6:CF:3E:96:69:3B:5D X509v3 Authority Key Identifier: keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/1Waoar8xJafvNKM98KbPPpZpO10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:93c1::/32 Signature Algorithm: sha256WithRSAEncryption 78:ae:f8:9c:20:18:09:36:c9:f4:78:2c:27:8e:12:f8:6d:23: 29:04:6d:06:59:51:f8:15:b4:9d:84:2b:a5:fc:77:93:c8:56: 7e:b0:99:1e:b3:d2:c0:aa:9f:38:ec:8e:ed:dc:6e:e4:a5:ce: cf:f5:f4:70:66:eb:20:c2:69:6f:08:39:b8:93:43:3a:9b:a8: de:e4:23:18:ee:6d:de:48:c9:3f:f3:3c:0c:6f:bb:83:2d:cb: 58:91:2a:d2:3e:b2:d9:b9:b9:ad:45:3a:9e:0c:5e:e6:5d:f0: 18:23:59:3c:3b:47:e5:a4:8f:07:94:84:7c:e1:8a:ec:a9:11: dc:2a:1e:e0:2c:f2:2b:13:21:84:0c:e7:e8:1b:8c:fe:7e:a6: d0:b6:20:10:fc:87:9e:c7:32:c8:b2:72:7b:d4:6e:a6:1f:b9: db:04:7b:a2:47:cb:ff:29:2d:5a:ea:d7:2b:88:84:95:d2:36: 47:16:d4:db:12:fc:ed:96:d5:43:a1:c5:1d:d6:c5:e2:93:80: 69:42:0e:49:8b:81:0e:6e:e0:d7:a6:e6:bb:46:d1:0b:ac:e1: ce:5b:e8:4c:b7:d3:8e:bf:fe:91:89:e9:e3:ca:e0:2d:f0:8d: 08:f0:8c:ca:ce:98:1d:85:4e:38:2a:60:da:86:e8:f4:02:ba: 2b:5c:d2:89 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt9XMWZ5LGZVTVtl8wizuyRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl NWVjZjIwHhcNMjYwMTAyMDYxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTY2YTg2YWJmMzEyNWE3ZWYzNGEzM2RmMGE2Y2YzZTk2NjkzYjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16Doc1PU1LWIVXvTt9VE+dKSRj3o FxvdlEoUbqV1mPAsMgR7+NLcbal2DeFvHAW+ca41NSMZ9zrz9nE+nzj7lzh5U0qj p5ZaiuTG2b1Qhuq284tYnrH4uAC4TSo/6Z5McCOqkuHFbz3oHR0Y6isrYtJbZbLY 7aPAQ+E2vT+QUswgMQ7BJ2hR3JhnIX4jhYpowAV3MJqhuEpQLNckIJV3cQgn1Mpp IIOf/Nw/w34PWZImG374BVEUpjCvWsXprLNOwu0j0ivtqDT1n+HwW2BdZieSO4y1 JgOxGuwMcwqRq3CH1gBCPORMJvCHpWWRgC0A7ijZtd2oSOwACIkFXsYzDwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFNVmqGq/MSWn7zSjPfCmzz6WaTtdMB8GA1UdIwQY MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt MTcxYzM2N2JlNzgyLzEvMVdhb2FyOHhKYWZ2TktNOThLYlBQcFpwTzEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhOTwTAN BgkqhkiG9w0BAQsFAAOCAQEAeK74nCAYCTbJ9HgsJ44S+G0jKQRtBllR+BW0nYQr pfx3k8hWfrCZHrPSwKqfOOyO7dxu5KXOz/X0cGbrIMJpbwg5uJNDOpuo3uQjGO5t 3kjJP/M8DG+7gy3LWJEq0j6y2bm5rUU6ngxe5l3wGCNZPDtH5aSPB5SEfOGK7KkR 3Coe4CzyKxMhhAzn6BuM/n6m0LYgEPyHnscyyLJye9Ruph+52wR7okfL/yktWurX K4iEldI2RxbU2xL87ZbVQ6HFHdbF4pOAaUIOSYuBDm7g16bmu0bRC6zhzlvoTLfT jr/+kYnp48rgLfCNCPCMys6YHYVOOCpg2obo9AK6K1zSiQ== -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:03 2026 by rpki-client