This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/WQuMbPyiig5Qtm-3Wd_r0499jiI.roa File: WQuMbPyiig5Qtm-3Wd_r0499jiI.roa (raw, json) Hash identifier: SJ1kpwutRiHkGqftgEiBKDH1xJT5gIqoCVa8uM/gzgk= Subject key identifier: 59:0B:8C:6C:FC:A2:8A:0E:50:B6:6F:B7:59:DF:EB:D3:8F:7D:8E:22 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B46F2B74BB71F44422E36FFC027303332 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/WQuMbPyiig5Qtm-3Wd_r0499jiI.roa Signing time: Mon 22 Dec 2025 16:44:30 +0000 ROA not before: Mon 22 Dec 2025 16:44:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213392 IP address blocks: 2a0c:9a40:8040::/43 maxlen: 48 2a0e:46c3:800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:f2:b7:4b:b7:1f:44:42:2e:36:ff:c0:27:30:33:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Dec 22 16:44:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=590b8c6cfca28a0e50b66fb759dfebd38f7d8e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:7c:f4:e9:f8:83:0d:7a:28:a7:0c:38:80:0b: 6d:9b:7c:d8:63:ed:c9:a5:0b:05:c6:0a:d4:f6:9b: 32:d6:94:0d:22:88:92:75:45:50:d2:09:57:1b:3d: 57:9d:68:ea:11:8f:97:09:df:0e:a8:88:e0:f6:59: 78:30:23:7f:60:1a:91:d5:ce:85:8b:57:ab:18:7b: c6:3b:99:5d:8f:55:ab:c8:d0:07:b3:4f:dc:40:dc: dd:92:02:4b:3d:1c:b4:08:95:1f:53:c5:38:28:50: d5:8c:ea:8d:61:b3:36:05:5d:85:d9:55:bc:9c:f1: e9:a4:5b:ac:64:89:f0:51:5d:7d:0e:24:3e:4b:a5: 9b:88:d7:af:e5:2c:c6:04:c8:cd:f8:4c:32:3d:c7: af:8c:60:47:fc:17:60:83:a6:63:7e:2b:38:bc:d0: ac:9d:8c:9f:ce:44:db:9b:c1:de:d5:66:4f:e7:4a: 74:5e:4a:19:7b:6d:ee:b6:3c:1c:bc:c7:6e:9e:cd: ef:fe:af:38:8a:f5:35:d9:1a:89:2d:ef:94:f0:72: 9b:ff:d2:15:02:d0:57:2e:2c:83:b0:2e:e2:f2:2b: 24:3f:3e:d4:41:03:06:9a:78:0b:da:29:f5:ef:f3: f6:09:1a:a2:61:3c:fd:e7:67:4f:b9:60:94:cc:08: 76:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:0B:8C:6C:FC:A2:8A:0E:50:B6:6F:B7:59:DF:EB:D3:8F:7D:8E:22 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/WQuMbPyiig5Qtm-3Wd_r0499jiI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8040::/43 2a0e:46c3:800::/40 Signature Algorithm: sha256WithRSAEncryption 62:73:f7:6c:2d:e1:f6:b8:e3:92:33:8a:50:d0:91:c4:1a:45: e6:50:88:8d:9d:06:2a:a4:ac:5b:e1:c6:ed:be:d7:74:40:d6: 6c:a9:12:df:2a:d8:2f:7d:08:8a:f4:17:14:c0:2c:79:8a:dd: 54:35:69:af:46:c1:69:0f:cf:57:aa:b2:bb:26:6c:b6:2c:2c: 8d:88:65:87:7c:b0:fe:40:73:af:67:13:0f:85:2d:64:5a:b3: 8e:d1:d7:6e:1a:25:c2:8e:f2:b9:eb:f6:d8:d8:db:d1:7f:3f: 62:35:61:fc:1c:91:29:49:32:80:9b:89:4d:5b:c5:8e:16:24: 34:fc:f3:a4:2a:75:f4:c4:73:04:d3:c9:77:01:ae:55:1b:c7: fa:3c:a5:82:2f:2e:02:ac:75:8b:1b:6a:16:92:a2:fe:f7:7b: 42:03:7c:f3:16:d9:11:5e:f6:0c:c4:24:de:1b:79:60:d8:89: f0:fa:40:68:3a:39:0b:69:ec:8c:ac:4b:19:4d:49:4f:03:28: 93:f1:a5:62:38:6f:d0:f6:0b:55:59:4a:3d:62:90:a4:d3:23: bc:b1:6b:d5:47:c6:39:6a:15:59:cd:cf:bd:73:70:10:2b:c9: 11:1d:c8:22:48:23:63:b4:a9:52:30:bf:7d:16:b5:d7:5f:9f: 30:f2:7a:13 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgISAZtG8rdLtx9EQi42/8AnMDMyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjUxMjIyMTY0NDMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTBiOGM2Y2ZjYTI4YTBlNTBiNjZmYjc1OWRmZWJkMzhmN2Q4ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13z06fiDDXoopww4gAttm3zYY+3J pQsFxgrU9psy1pQNIoiSdUVQ0glXGz1XnWjqEY+XCd8OqIjg9ll4MCN/YBqR1c6F i1erGHvGO5ldj1WryNAHs0/cQNzdkgJLPRy0CJUfU8U4KFDVjOqNYbM2BV2F2VW8 nPHppFusZInwUV19DiQ+S6WbiNev5SzGBMjN+EwyPcevjGBH/Bdgg6Zjfis4vNCs nYyfzkTbm8He1WZP50p0XkoZe23utjwcvMduns3v/q84ivU12RqJLe+U8HKb/9IV AtBXLiyDsC7i8iskPz7UQQMGmngL2in17/P2CRqiYTz952dPuWCUzAh27wIDAQAB o4ICFDCCAhAwHQYDVR0OBBYEFFkLjGz8oooOULZvt1nf69OPfY4iMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvV1F1TWJQeWlpZzVRdG0tM1dkX3IwNDk5amlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwcFKgyaQIBA AwYAKg5GwwgwDQYJKoZIhvcNAQELBQADggEBAGJz92wt4fa445IzilDQkcQaReZQ iI2dBiqkrFvhxu2+13RA1mypEt8q2C99CIr0FxTALHmK3VQ1aa9GwWkPz1eqsrsm bLYsLI2IZYd8sP5Ac69nEw+FLWRas47R124aJcKO8rnr9tjY29F/P2I1YfwckSlJ MoCbiU1bxY4WJDT886QqdfTEcwTTyXcBrlUbx/o8pYIvLgKsdYsbahaSov73e0ID fPMW2RFe9gzEJN4beWDYifD6QGg6OQtp7IysSxlNSU8DKJPxpWI4b9D2C1VZSj1i kKTTI7yxa9VHxjlqFVnNz71zcBAryREdyCJII2O0qVIwv30WtddfnzDyehM= -----END CERTIFICATE-----Generated at Tue Dec 23 00:41:25 2025 by rpki-client