This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wCs2bo9XGrx64cppYaHx5VTMyzQ.roa File: wCs2bo9XGrx64cppYaHx5VTMyzQ.roa (raw, json) Hash identifier: 7nHBZKw1/9ZTjxOY8ll2TJc2XIOTCx3nNcfjZ8Yg9zA= Subject key identifier: C0:2B:36:6E:8F:57:1A:BC:7A:E1:CA:69:61:A1:F1:E5:54:CC:CB:34 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D2BCA66301D54BEC918EC279C5EFF Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wCs2bo9XGrx64cppYaHx5VTMyzQ.roa Signing time: Fri 02 Jan 2026 06:20:16 +0000 ROA not before: Fri 02 Jan 2026 06:20:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210667 IP address blocks: 2a0e:97c0:a40::/44 maxlen: 48 2a0e:97c0:a44::/48 maxlen: 48 2a0e:b107:1788::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:2b:ca:66:30:1d:54:be:c9:18:ec:27:9c:5e:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c02b366e8f571abc7ae1ca6961a1f1e554cccb34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a6:32:b8:e0:59:1c:96:63:e1:58:f7:e8:ef: 0a:22:4f:2a:d0:c1:ca:af:31:39:f3:3f:46:a0:4c: 8f:42:4a:b6:2f:ba:5d:74:57:6d:57:84:a1:76:c5: 06:9e:ea:f6:55:9c:98:b1:5c:37:e0:4a:e3:ca:18: 50:b6:6a:53:94:a8:e2:94:8d:cb:37:c3:85:5c:ff: d6:20:3c:e5:79:5a:ff:e6:9f:9c:55:36:bb:7d:a3: 1f:b0:50:8d:b8:a6:be:ea:2e:6e:93:5c:19:53:f5: e1:5d:05:fa:49:9b:87:5b:99:50:bd:73:88:11:f7: ef:c5:da:43:4f:e3:f5:4d:67:81:9c:6d:af:97:74: c3:cf:27:49:22:84:b8:b3:02:de:d6:9e:3a:f2:4b: cd:fa:39:d5:bd:e5:13:29:5b:01:69:c4:86:c9:26: c8:31:80:1f:24:d1:6b:5c:db:e5:d5:37:1f:96:01: 54:03:e6:11:ae:1d:7a:b2:4a:f0:23:19:77:a5:44: 2f:36:dd:2e:9c:a4:09:a5:97:e9:3d:42:bb:e3:4d: 81:ed:d0:93:38:2c:96:7f:25:82:83:6e:bb:8e:5a: 59:b8:0c:6d:03:53:9a:51:42:59:40:b8:95:5e:2f: 8a:40:e5:cd:31:9c:11:25:cc:b6:7e:4f:45:3b:61: 20:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:2B:36:6E:8F:57:1A:BC:7A:E1:CA:69:61:A1:F1:E5:54:CC:CB:34 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wCs2bo9XGrx64cppYaHx5VTMyzQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:a40::/44 2a0e:b107:1788::/48 Signature Algorithm: sha256WithRSAEncryption 2c:16:ac:af:ec:6b:a2:e1:1f:9a:e2:dd:56:ab:fd:4c:c3:44: 5a:c0:e6:86:3f:68:a3:85:e3:3f:10:2a:eb:93:9f:c7:75:41: 75:c1:5a:fc:bd:12:90:31:a8:03:cc:12:43:55:28:86:92:1a: e8:52:44:76:b0:6c:67:60:0b:e0:27:af:14:bb:ea:e8:fc:cb: a1:66:c1:de:32:45:7c:dd:1a:f0:b0:e3:6f:7d:25:82:c2:c1: 6d:3c:fe:86:47:c3:8c:97:8c:a0:a8:b5:86:6c:cc:35:81:0d: 6d:49:7c:0b:b3:a9:06:4d:81:0c:ea:18:51:fc:f9:95:9c:2e: 48:4a:bf:3c:17:3e:f0:c9:82:3f:63:e2:6c:a9:0c:12:57:c9: 9b:59:d7:f9:99:bb:58:91:58:0a:b5:9f:23:54:a6:9d:8d:75: 9b:e2:fb:43:95:9c:88:81:e0:ea:2c:eb:21:fa:16:3f:73:75: 03:53:a3:5f:81:e2:27:8a:f0:5d:08:7e:2b:cf:4d:c8:bb:26: 90:7d:ba:2c:2a:b5:80:69:ac:30:68:11:ed:5b:7a:79:3e:18: 12:53:6d:0b:0a:85:38:21:21:09:b3:0c:b2:59:b5:a4:3b:04: 8c:09:d0:f5:eb:79:9c:18:ff:c9:9c:11:a9:a9:3d:1a:40:76: df:41:d7:e6 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XSvKZjAdVL7JGOwnnF7/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDJiMzY2ZThmNTcxYWJjN2FlMWNhNjk2MWExZjFlNTU0Y2NjYjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqYyuOBZHJZj4Vj36O8KIk8q0MHK rzE58z9GoEyPQkq2L7pddFdtV4ShdsUGnur2VZyYsVw34ErjyhhQtmpTlKjilI3L N8OFXP/WIDzleVr/5p+cVTa7faMfsFCNuKa+6i5uk1wZU/XhXQX6SZuHW5lQvXOI EffvxdpDT+P1TWeBnG2vl3TDzydJIoS4swLe1p468kvN+jnVveUTKVsBacSGySbI MYAfJNFrXNvl1TcflgFUA+YRrh16skrwIxl3pUQvNt0unKQJpZfpPUK7402B7dCT OCyWfyWCg267jlpZuAxtA1OaUUJZQLiVXi+KQOXNMZwRJcy2fk9FO2EgBwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMArNm6PVxq8euHKaWGh8eVUzMs0MB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvd0NzMmJvOVhHcng2NGNwcFlhSHg1VlRNeXpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKg6XwApA AwcAKg6xBxeIMA0GCSqGSIb3DQEBCwUAA4IBAQAsFqyv7Gui4R+a4t1Wq/1Mw0Ra wOaGP2ijheM/ECrrk5/HdUF1wVr8vRKQMagDzBJDVSiGkhroUkR2sGxnYAvgJ68U u+ro/MuhZsHeMkV83RrwsONvfSWCwsFtPP6GR8OMl4ygqLWGbMw1gQ1tSXwLs6kG TYEM6hhR/PmVnC5ISr88Fz7wyYI/Y+JsqQwSV8mbWdf5mbtYkVgKtZ8jVKadjXWb 4vtDlZyIgeDqLOsh+hY/c3UDU6NfgeInivBdCH4rz03IuyaQfbosKrWAaawwaBHt W3p5PhgSU20LCoU4ISEJswyyWbWkOwSMCdD163mcGP/JnBGpqT0aQHbfQdfm -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:58 2026 by rpki-client