This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/wacZuckwg3obD7kOhqmb-7TCOkg.roa File: wacZuckwg3obD7kOhqmb-7TCOkg.roa (raw, json) Hash identifier: LCSRk8giH6DkuM0OiP1B2AXj3cogEeGQRNRQFeBcK6M= Subject key identifier: C1:A7:19:B9:C9:30:83:7A:1B:0F:B9:0E:86:A9:9B:FB:B4:C2:3A:48 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B51288A977E1AE6BA8467D1DC08C6FCC9 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/wacZuckwg3obD7kOhqmb-7TCOkg.roa Signing time: Wed 24 Dec 2025 16:19:30 +0000 ROA not before: Wed 24 Dec 2025 16:19:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 49505 IP address blocks: 2a0f:e7c2::/32 maxlen: 32 2a0f:e840::/32 maxlen: 32 2a10:3240::/29 maxlen: 29 2a11:3f80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:28:8a:97:7e:1a:e6:ba:84:67:d1:dc:08:c6:fc:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Dec 24 16:19:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c1a719b9c930837a1b0fb90e86a99bfbb4c23a48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2b:9a:7a:8d:77:5c:e5:a9:86:1a:54:41:94: 2c:f5:15:c9:4b:e9:0c:65:d2:45:64:1d:03:3e:75: f8:78:fe:6d:a3:f4:9e:5b:05:8e:68:98:c1:9b:26: 4c:49:11:de:82:d6:c7:5c:64:6c:b8:a2:e6:56:38: 5c:a7:b0:9e:60:01:24:16:0d:d5:ce:ed:b0:d0:45: 2f:25:48:95:3e:de:15:01:01:4b:84:1e:b5:7c:5a: 8c:d3:cd:83:2e:76:62:5c:a5:f6:75:cd:41:6a:ad: b9:e5:60:86:40:e1:4c:af:23:17:27:6b:1c:a8:47: 5e:6b:8f:67:3b:8e:8c:a1:4f:76:89:a3:63:f5:a1: 97:a3:d8:e2:90:db:5e:f4:72:aa:12:58:b1:00:41: 9a:d6:2e:78:01:5a:40:58:2e:15:ea:57:1a:f9:0c: f2:ef:27:eb:2f:31:9a:b1:5a:c4:f5:42:dd:51:43: 3b:7b:b2:ae:76:65:d4:f7:9a:45:6b:84:fc:e3:ea: 08:36:d4:9e:b4:f2:33:1f:ea:af:1a:48:c3:52:94: 33:b2:09:bc:1d:74:fc:e3:15:3b:53:d0:57:dd:36: 8a:5c:e0:8f:c9:d2:92:fa:f1:61:39:64:83:5c:28: 6a:21:d7:6e:a3:dd:81:da:1f:92:9c:fd:3d:90:95: 49:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:A7:19:B9:C9:30:83:7A:1B:0F:B9:0E:86:A9:9B:FB:B4:C2:3A:48 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/wacZuckwg3obD7kOhqmb-7TCOkg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:e7c2::/32 2a0f:e840::/32 2a10:3240::/29 2a11:3f80::/29 Signature Algorithm: sha256WithRSAEncryption 75:1a:be:48:d0:df:ac:78:43:b5:fd:2e:ae:a4:20:e1:e8:4c: 1d:f6:d0:60:af:c5:57:f4:02:72:95:07:0a:e3:50:ab:80:0e: d1:1a:a7:88:d8:d7:04:07:f6:6c:5b:f0:39:79:2c:ef:47:67: 33:fa:14:c8:70:85:68:31:43:5d:70:97:b9:8b:ad:61:c0:e6: 5a:41:9e:8e:ab:74:c7:c8:cd:8b:9a:1c:40:5b:22:1d:5e:88: 1f:11:b6:74:61:67:9d:70:cb:3d:9a:f5:ab:e8:4a:ee:66:21: 42:4b:5c:43:e2:80:c4:c5:91:6e:bc:c5:ee:6b:c5:d7:f8:50: cf:a1:4d:87:b3:4f:ac:13:d0:06:da:a5:2a:4e:8c:c9:e8:9a: df:17:9a:4a:6a:c9:e1:84:bb:02:ad:af:b1:11:62:35:79:58: dc:2e:47:d3:13:27:8e:4e:f1:bd:4e:18:3f:81:54:4e:39:c3: 65:c3:29:73:0a:6e:d7:6b:3b:56:67:83:d4:9c:2d:83:56:6a: 1c:9a:c1:ef:a0:ad:89:00:64:bc:0e:67:05:48:27:bd:5e:69: 31:05:8b:3a:17:ca:e5:cf:32:f2:f3:57:a3:f8:b0:fc:df:1d: d2:38:e8:88:bd:52:19:ef:af:44:6c:33:54:34:d4:88:7f:b6: 94:53:b6:47 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZtRKIqXfhrmuoRn0dwIxvzJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjUxMjI0MTYxOTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMWE3MTliOWM5MzA4MzdhMWIwZmI5MGU4NmE5OWJmYmI0YzIzYTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyuaeo13XOWphhpUQZQs9RXJS+kM ZdJFZB0DPnX4eP5to/SeWwWOaJjBmyZMSRHegtbHXGRsuKLmVjhcp7CeYAEkFg3V zu2w0EUvJUiVPt4VAQFLhB61fFqM082DLnZiXKX2dc1Baq255WCGQOFMryMXJ2sc qEdea49nO46MoU92iaNj9aGXo9jikNte9HKqElixAEGa1i54AVpAWC4V6lca+Qzy 7yfrLzGasVrE9ULdUUM7e7KudmXU95pFa4T84+oINtSetPIzH+qvGkjDUpQzsgm8 HXT84xU7U9BX3TaKXOCPydKS+vFhOWSDXChqIdduo92B2h+SnP09kJVJMQIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFMGnGbnJMIN6Gw+5Doapm/u0wjpIMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvd2FjWnVja3dnM29iRDdrT2hxbWItN1RDT2tnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAAjAcAwUAKg/nwgMF ACoP6EADBQMqEDJAAwUDKhE/gDANBgkqhkiG9w0BAQsFAAOCAQEAdRq+SNDfrHhD tf0urqQg4ehMHfbQYK/FV/QCcpUHCuNQq4AO0RqniNjXBAf2bFvwOXks70dnM/oU yHCFaDFDXXCXuYutYcDmWkGejqt0x8jNi5ocQFsiHV6IHxG2dGFnnXDLPZr1q+hK 7mYhQktcQ+KAxMWRbrzF7mvF1/hQz6FNh7NPrBPQBtqlKk6Myeia3xeaSmrJ4YS7 Aq2vsRFiNXlY3C5H0xMnjk7xvU4YP4FUTjnDZcMpcwpu12s7VmeD1Jwtg1ZqHJrB 76CtiQBkvA5nBUgnvV5pMQWLOhfK5c8y8vNXo/iw/N8d0jjoiL1SGe+vRGwzVDTU iH+2lFO2Rw== -----END CERTIFICATE-----Generated at Sun Dec 28 09:39:47 2025 by rpki-client