This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WxDXIXsX_la4BdVan541fwoXdP8.roa File: WxDXIXsX_la4BdVan541fwoXdP8.roa (raw, json) Hash identifier: LHjmuoQAooUlxId6NW1chEj+N7n4T9TTk4aRgICVjd8= Subject key identifier: 5B:10:D7:21:7B:17:FE:56:B8:05:D5:5A:9F:9E:35:7F:0A:17:74:FF Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CCF35CB0AC06ED136871876C4293B Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WxDXIXsX_la4BdVan541fwoXdP8.roa Signing time: Fri 02 Jan 2026 06:19:52 +0000 ROA not before: Fri 02 Jan 2026 06:19:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 142282 IP address blocks: 2a0e:b107:120f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:cf:35:cb:0a:c0:6e:d1:36:87:18:76:c4:29:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b10d7217b17fe56b805d55a9f9e357f0a1774ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:90:32:ac:0d:15:79:24:da:1f:75:29:7c:c2: 41:47:db:cf:f1:46:20:57:c1:87:c1:9a:60:14:e3: 06:2f:b2:e1:4e:6f:c7:3b:d2:7d:e1:63:55:8f:8b: 61:88:2a:ab:22:82:57:6c:a1:55:2f:8e:7d:7c:c1: 5b:3a:97:f3:d9:5b:01:83:ec:1e:5f:cb:97:02:23: a7:fb:17:0c:a4:6d:78:f4:b6:05:6f:97:96:fb:da: c6:96:2c:f3:34:23:df:a8:6c:5c:a3:3d:1b:e5:ee: 9a:3d:54:d4:fe:5d:d6:e1:eb:45:7f:ab:c7:cb:5f: af:26:5c:25:a9:f7:7e:ba:b8:8c:4a:62:9b:d6:e6: 0a:dc:96:ce:d6:a9:fe:72:83:9e:3a:0b:af:39:00: ab:35:9e:81:45:a3:4f:a5:c9:19:43:0d:db:fa:a6: a4:07:40:d6:9c:14:51:09:a5:1c:95:23:7a:50:ce: 77:c1:67:4e:64:2a:c4:f5:ac:e8:89:b4:30:84:14: d7:77:e2:b2:86:b2:e3:0a:af:21:36:2c:2e:0d:6e: e6:6a:c1:3f:5b:2b:62:90:4b:83:c6:e5:28:d1:94: 89:a0:d1:b1:8a:c1:58:f8:d1:35:41:b9:52:d3:49: 3d:a7:94:2d:c6:44:72:3d:27:07:f3:d9:5b:06:9d: e9:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:10:D7:21:7B:17:FE:56:B8:05:D5:5A:9F:9E:35:7F:0A:17:74:FF X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WxDXIXsX_la4BdVan541fwoXdP8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:120f::/48 Signature Algorithm: sha256WithRSAEncryption cc:75:b6:cf:54:fb:b6:e0:13:36:ca:17:be:a5:80:3b:dd:0a: 7f:7a:d1:62:b4:05:37:aa:a2:50:2a:7a:67:16:39:65:78:aa: a9:96:12:79:a1:84:b5:ee:42:30:e5:32:ec:d0:61:12:8b:e8: 52:c6:db:d3:7f:d9:dc:90:1f:d2:cd:e1:a7:54:8e:34:a8:f5: 38:82:88:94:24:5b:73:51:3b:7c:39:1c:11:2c:ad:80:b0:fa: 43:00:42:65:6e:c1:ca:d2:7e:a1:b8:fa:55:d6:42:f9:a6:d7: 69:97:f7:64:65:f9:80:f7:cb:55:19:85:05:fc:17:75:23:20: 31:4a:b9:8e:79:18:f7:c6:58:3c:5b:9e:22:b7:4b:f7:36:52: 17:c0:ce:9f:0e:59:2d:4e:56:96:f7:a4:c0:cb:43:35:30:ac: a4:f6:d4:cb:c4:66:7c:4d:8b:28:b8:ea:ca:44:49:0d:4c:a3: 03:43:5e:5c:80:8a:8d:79:86:68:09:ef:7d:0f:f7:99:57:54: c3:75:9c:24:49:f5:cb:84:6c:a4:b0:da:c0:09:5b:a2:4c:4b: 6e:0e:33:08:3a:76:a0:66:9f:aa:b3:21:b0:2b:16:07:74:df: af:6f:38:04:da:90:d1:d7:d4:89:2e:69:7d:9b:78:81:6a:65: d5:0d:e5:88 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XM81ywrAbtE2hxh2xCk7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjEwZDcyMTdiMTdmZTU2YjgwNWQ1NWE5ZjllMzU3ZjBhMTc3NGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5AyrA0VeSTaH3UpfMJBR9vP8UYg V8GHwZpgFOMGL7LhTm/HO9J94WNVj4thiCqrIoJXbKFVL459fMFbOpfz2VsBg+we X8uXAiOn+xcMpG149LYFb5eW+9rGlizzNCPfqGxcoz0b5e6aPVTU/l3W4etFf6vH y1+vJlwlqfd+uriMSmKb1uYK3JbO1qn+coOeOguvOQCrNZ6BRaNPpckZQw3b+qak B0DWnBRRCaUclSN6UM53wWdOZCrE9azoibQwhBTXd+KyhrLjCq8hNiwuDW7masE/ WytikEuDxuUo0ZSJoNGxisFY+NE1QblS00k9p5QtxkRyPScH89lbBp3pnQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFsQ1yF7F/5WuAXVWp+eNX8KF3T/MB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvV3hEWElYc1hfbGE0QmRWYW41NDFmd29YZFA4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xBxIP MA0GCSqGSIb3DQEBCwUAA4IBAQDMdbbPVPu24BM2yhe+pYA73Qp/etFitAU3qqJQ KnpnFjlleKqplhJ5oYS17kIw5TLs0GESi+hSxtvTf9nckB/SzeGnVI40qPU4goiU JFtzUTt8ORwRLK2AsPpDAEJlbsHK0n6huPpV1kL5ptdpl/dkZfmA98tVGYUF/Bd1 IyAxSrmOeRj3xlg8W54it0v3NlIXwM6fDlktTlaW96TAy0M1MKyk9tTLxGZ8TYso uOrKREkNTKMDQ15cgIqNeYZoCe99D/eZV1TDdZwkSfXLhGyksNrACVuiTEtuDjMI OnagZp+qsyGwKxYHdN+vbzgE2pDR19SJLml9m3iBamXVDeWI -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:54 2026 by rpki-client