This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WCl1G_rcnzODtlfm8jcmFKdWuNo.roa File: WCl1G_rcnzODtlfm8jcmFKdWuNo.roa (raw, json) Hash identifier: 0/53Euqi+fRxF33+x10vN4JDha8HNqLAsIgKUQmxzjs= Subject key identifier: 58:29:75:1B:FA:DC:9F:33:83:B6:57:E6:F2:37:26:14:A7:56:B8:DA Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D16D99F6101899BF6A0C28264C8C1 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WCl1G_rcnzODtlfm8jcmFKdWuNo.roa Signing time: Fri 02 Jan 2026 06:20:11 +0000 ROA not before: Fri 02 Jan 2026 06:20:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208753 IP address blocks: 2a0e:b107:381::/48 maxlen: 48 2a0e:b107:382::/48 maxlen: 48 2a0e:b107:383::/48 maxlen: 48 2a0e:b107:384::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:16:d9:9f:61:01:89:9b:f6:a0:c2:82:64:c8:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5829751bfadc9f3383b657e6f2372614a756b8da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:03:d6:5f:24:69:d8:f6:a1:36:03:d2:b9:bf: 17:c8:43:49:ca:c1:44:f0:ed:31:aa:da:c4:9f:36: 25:a8:a0:7a:46:0d:6d:e3:c8:b5:cb:b3:54:aa:fd: eb:03:81:c8:9c:ea:2f:08:88:d5:84:75:21:5e:cc: 88:ed:b2:6d:70:48:b4:fa:f8:32:3a:9d:fd:32:96: 30:67:2d:20:a2:0d:b1:e6:67:fd:1b:dd:21:24:38: ce:3e:66:e8:e2:93:0d:d9:cd:b8:e2:dc:a9:6c:35: 6e:41:17:f1:5e:03:cd:2c:2a:73:85:c4:63:e6:67: 96:01:bf:70:24:a2:26:20:8f:24:d3:fe:23:b2:9a: fe:ed:64:b2:cc:9d:44:6c:80:87:f1:dc:da:d1:5e: 7e:b3:ef:9b:cf:c6:2e:66:94:48:ed:61:d9:69:7b: f4:64:2d:1f:3d:80:01:3c:c7:19:ff:31:b1:af:b1: 3b:cc:7f:74:8f:f7:8c:f9:2e:68:34:69:20:c2:39: 27:2d:e2:15:fb:fc:cb:31:a6:17:38:8d:ac:bb:e5: 8b:a2:3b:41:e0:5f:c1:02:70:4b:81:7c:ed:8f:95: 96:51:9a:d2:de:d4:0f:16:6d:69:a8:ca:bb:8b:6f: c6:16:ff:16:29:75:85:76:75:be:18:b5:1d:0d:e1: 8f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:29:75:1B:FA:DC:9F:33:83:B6:57:E6:F2:37:26:14:A7:56:B8:DA X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WCl1G_rcnzODtlfm8jcmFKdWuNo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:381::-2a0e:b107:384:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 89:19:32:69:0b:3f:2b:8f:21:99:64:af:dd:f8:96:31:13:9e: 36:e0:7f:6d:01:06:39:ed:e0:df:26:80:a5:a7:30:17:e8:18: 6a:57:af:6d:19:1b:8a:ca:17:ac:b0:1b:a2:e1:94:9a:37:7e: c9:77:2b:da:44:b9:40:90:05:af:08:2a:23:35:5e:8d:ea:4d: c7:71:ef:d8:1e:60:3a:fa:83:e7:42:93:da:71:ca:f0:6e:3f: 6e:01:b4:be:76:49:b4:f1:77:eb:ed:ab:da:62:d1:d9:2f:2d: 8a:c2:8d:84:18:87:9f:95:17:c5:81:17:f9:0e:ef:07:ca:26: e2:d0:e7:1c:ec:31:87:5e:34:45:29:27:37:e0:6f:c3:67:ac: 38:42:8d:98:a7:63:30:46:56:49:68:69:44:b4:d2:25:f8:3e: ed:b6:f1:0f:f5:c3:c4:90:17:e5:c7:f3:bf:43:ce:f5:a8:fa: a9:94:ba:e8:ab:87:2c:a8:99:77:29:45:ed:8a:11:d4:86:8d: 18:54:3c:33:a7:8a:72:61:8c:1e:a7:53:6c:77:cf:67:69:ee: d7:e3:3d:8e:a1:02:46:8f:fe:6d:9a:e2:19:11:92:b6:07:ff: 39:fe:4c:0b:5f:8b:bc:9f:69:e5:4d:76:89:94:07:1b:20:46: d3:1c:e9:52 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt9XRbZn2EBiZv2oMKCZMjBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODI5NzUxYmZhZGM5ZjMzODNiNjU3ZTZmMjM3MjYxNGE3NTZiOGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6QPWXyRp2PahNgPSub8XyENJysFE 8O0xqtrEnzYlqKB6Rg1t48i1y7NUqv3rA4HInOovCIjVhHUhXsyI7bJtcEi0+vgy Op39MpYwZy0gog2x5mf9G90hJDjOPmbo4pMN2c244typbDVuQRfxXgPNLCpzhcRj 5meWAb9wJKImII8k0/4jspr+7WSyzJ1EbICH8dza0V5+s++bz8YuZpRI7WHZaXv0 ZC0fPYABPMcZ/zGxr7E7zH90j/eM+S5oNGkgwjknLeIV+/zLMaYXOI2su+WLojtB 4F/BAnBLgXztj5WWUZrS3tQPFm1pqMq7i2/GFv8WKXWFdnW+GLUdDeGPJQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFFgpdRv63J8zg7ZX5vI3JhSnVrjaMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvV0NsMUdfcmNuek9EdGxmbThqY21GS2RXdU5vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAqDrEH A4EDBwAqDrEHA4QwDQYJKoZIhvcNAQELBQADggEBAIkZMmkLPyuPIZlkr934ljET njbgf20BBjnt4N8mgKWnMBfoGGpXr20ZG4rKF6ywG6LhlJo3fsl3K9pEuUCQBa8I KiM1Xo3qTcdx79geYDr6g+dCk9pxyvBuP24BtL52SbTxd+vtq9pi0dkvLYrCjYQY h5+VF8WBF/kO7wfKJuLQ5xzsMYdeNEUpJzfgb8NnrDhCjZinYzBGVkloaUS00iX4 Pu228Q/1w8SQF+XH879DzvWo+qmUuuirhyyomXcpRe2KEdSGjRhUPDOninJhjB6n U2x3z2dp7tfjPY6hAkaP/m2a4hkRkrYH/zn+TAtfi7yfaeVNdomUBxsgRtMc6VI= -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:29 2026 by rpki-client