This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-wwu3PO219ioaQrX3f_cNaFuFyc.roa File: 1-wwu3PO219ioaQrX3f_cNaFuFyc.roa (raw, json) Hash identifier: mezjkP8eMI4deEBtcWDFfjFC7swX9TpssNgCsiCbIWc= Subject key identifier: FB:0C:2E:DC:F3:B6:D7:D8:A8:69:0A:D7:DD:FF:DC:35:A1:6E:17:27 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B08452E96B3504C68E3F786950EE95BBE Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-wwu3PO219ioaQrX3f_cNaFuFyc.roa Signing time: Wed 10 Dec 2025 12:38:30 +0000 ROA not before: Wed 10 Dec 2025 12:38:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 61317 IP address blocks: 2a0f:bc06::/32 maxlen: 32 2a0f:bc07::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:45:2e:96:b3:50:4c:68:e3:f7:86:95:0e:e9:5b:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Dec 10 12:38:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fb0c2edcf3b6d7d8a8690ad7ddffdc35a16e1727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:23:e1:60:80:52:3f:ed:e5:8a:e8:02:7f:2e: b1:7d:0f:ec:93:13:08:bd:2c:8d:05:56:0a:d4:84: fc:ae:80:cf:94:dc:70:24:93:8a:3a:1b:96:33:2b: 89:83:14:4e:9e:17:b4:d9:01:ae:92:a5:dc:94:e8: 6b:b2:6a:70:84:f0:42:6b:49:ad:89:41:d9:95:b5: 0b:0e:bd:b4:9b:f9:04:91:9e:4a:98:c5:78:34:2a: 74:db:d0:93:fd:65:75:b5:a1:fb:46:b7:c3:f1:ce: 9f:ea:cc:31:f1:b3:a7:61:b8:ec:b7:5b:3f:87:2a: 85:5b:49:cb:c2:e9:af:09:4a:ce:77:0d:6b:1d:ed: 9b:e5:bb:a7:c2:f2:e3:2e:f8:c5:b5:16:1d:4d:2f: 1e:f1:9a:b5:3a:f0:13:dc:8e:60:9a:92:a8:55:31: e5:87:ab:4d:07:0b:76:bb:3d:b2:ea:cc:51:37:66: 3a:de:d2:15:5b:e0:b4:f0:f6:50:99:a0:7b:84:12: 6a:48:9a:ee:1b:7d:4c:cc:2c:9e:6d:9c:af:32:1d: 60:7d:59:07:d2:70:4b:e6:e8:4a:31:84:24:a6:dc: f2:db:85:b8:2e:1e:22:ed:11:5f:b6:25:39:14:e0: 5f:ec:ed:d3:51:48:de:77:90:47:e3:45:e2:a2:a2: 37:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:0C:2E:DC:F3:B6:D7:D8:A8:69:0A:D7:DD:FF:DC:35:A1:6E:17:27 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-wwu3PO219ioaQrX3f_cNaFuFyc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:bc06::/31 Signature Algorithm: sha256WithRSAEncryption 3a:a4:05:86:c0:da:80:64:6c:91:ed:6a:24:8a:1f:d5:ba:ff: 12:b9:1d:77:e5:76:7d:70:01:43:ec:52:83:ca:a8:ee:e0:19: 62:76:37:1c:73:0f:e2:24:c1:08:6d:9f:30:fe:5d:5f:81:58: 3d:ef:d8:ba:32:bf:f8:ea:12:d9:0d:7a:80:4b:2d:8b:d6:ba: 63:dd:ad:fd:d9:49:b5:a2:01:c4:6a:d6:57:73:1c:ba:a6:df: ca:a3:f3:17:21:c5:85:2a:4e:aa:58:d7:71:40:b2:37:9a:07: fc:1b:9a:e7:e4:e1:fe:09:b0:fc:b3:cb:22:f7:3d:e4:d0:77: 70:d9:18:79:85:51:d3:80:88:c6:87:90:cf:ae:9a:cd:2f:09: 2e:58:a6:c8:b2:b0:f8:4a:b1:0d:ce:03:ea:6f:b3:4c:8b:c1: c7:af:fe:3f:7e:6e:c8:6b:1f:87:c0:41:8c:71:c6:ba:82:bb: 8c:92:7a:3b:53:4a:07:c0:8c:e4:d5:68:7d:fb:11:d7:11:d0: 52:ae:97:f1:d3:8f:73:4e:da:fb:bd:06:0b:dd:fa:48:65:8c: 34:f1:c3:59:cc:a0:47:55:29:e1:97:f6:40:2b:18:27:3f:4f: 0c:25:d4:87:cc:53:5d:7a:04:0a:a9:58:97:8f:20:d0:6d:ff: 7b:df:c8:1e -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZsIRS6Ws1BMaOP3hpUO6Vu+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjUxMjEwMTIzODMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjBjMmVkY2YzYjZkN2Q4YTg2OTBhZDdkZGZmZGMzNWExNmUxNzI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiPhYIBSP+3liugCfy6xfQ/skxMI vSyNBVYK1IT8roDPlNxwJJOKOhuWMyuJgxROnhe02QGukqXclOhrsmpwhPBCa0mt iUHZlbULDr20m/kEkZ5KmMV4NCp029CT/WV1taH7RrfD8c6f6swx8bOnYbjst1s/ hyqFW0nLwumvCUrOdw1rHe2b5bunwvLjLvjFtRYdTS8e8Zq1OvAT3I5gmpKoVTHl h6tNBwt2uz2y6sxRN2Y63tIVW+C08PZQmaB7hBJqSJruG31MzCyebZyvMh1gfVkH 0nBL5uhKMYQkptzy24W4Lh4i7RFftiU5FOBf7O3TUUjed5BH40XioqI3SQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFPsMLtzzttfYqGkK193/3DWhbhcnMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvMS13d3UzUE8yMTlpb2FRclgzZl9jTmFGdUZ5Yy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYzAvNDlhZGM2LWJhODktNDAzZi1hZGE5LThjNTAwN2MyYTRi Ni8xL2ZWV2FyN19Ba3hKQzRkWTNLWXp4M1NJLVRDWS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFASoPvAYw DQYJKoZIhvcNAQELBQADggEBADqkBYbA2oBkbJHtaiSKH9W6/xK5HXfldn1wAUPs UoPKqO7gGWJ2NxxzD+IkwQhtnzD+XV+BWD3v2Loyv/jqEtkNeoBLLYvWumPdrf3Z SbWiAcRq1ldzHLqm38qj8xchxYUqTqpY13FAsjeaB/wbmufk4f4JsPyzyyL3PeTQ d3DZGHmFUdOAiMaHkM+ums0vCS5YpsiysPhKsQ3OA+pvs0yLwcev/j9+bshrH4fA QYxxxrqCu4ySejtTSgfAjOTVaH37EdcR0FKul/HTj3NO2vu9Bgvd+khljDTxw1nM oEdVKeGX9kArGCc/Twwl1IfMU116BAqpWJePINBt/3vfyB4= -----END CERTIFICATE-----Generated at Fri Dec 19 23:19:39 2025 by rpki-client