This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/W9QORcGeUP3iLWU0X9nRIs0WJkY.roa File: W9QORcGeUP3iLWU0X9nRIs0WJkY.roa (raw, json) Hash identifier: hIl0UXb0kykXac0sKp+S7Vm2Hm+hm3Ey7N0z0BeyVKw= Subject key identifier: 5B:D4:0E:45:C1:9E:50:FD:E2:2D:65:34:5F:D9:D1:22:CD:16:26:46 Certificate issuer: /CN=8c7b6e183c8d52cc4605ba8b5daddc66326293ec Certificate serial: 019B7759347EA23483F8D7267E4340A01989 Authority key identifier: 8C:7B:6E:18:3C:8D:52:CC:46:05:BA:8B:5D:AD:DC:66:32:62:93:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHtuGDyNUsxGBbqLXa3cZjJik-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/W9QORcGeUP3iLWU0X9nRIs0WJkY.roa Signing time: Thu 01 Jan 2026 02:18:13 +0000 ROA not before: Thu 01 Jan 2026 02:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48152 IP address blocks: 91.198.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/jHtuGDyNUsxGBbqLXa3cZjJik-w.crl rsync://rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/jHtuGDyNUsxGBbqLXa3cZjJik-w.mft rsync://rpki.ripe.net/repository/DEFAULT/jHtuGDyNUsxGBbqLXa3cZjJik-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:34:7e:a2:34:83:f8:d7:26:7e:43:40:a0:19:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c7b6e183c8d52cc4605ba8b5daddc66326293ec Validity Not Before: Jan 1 02:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5bd40e45c19e50fde22d65345fd9d122cd162646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:81:63:0f:15:ff:e5:fd:c2:54:7e:01:69:7e: 8d:28:28:90:b0:27:98:ca:c5:1e:76:b7:31:15:3c: 37:0e:6d:d9:ea:d2:a3:c3:f7:fa:6a:8f:3b:4b:fb: 9a:fc:1c:8c:ee:a5:62:5f:a9:07:95:2b:8a:36:da: d4:f6:da:bc:ef:a3:ad:52:eb:40:4d:4d:78:ca:8a: d6:e0:e0:8e:67:9b:b4:ac:58:95:a7:c4:55:1f:0b: b8:e5:cf:e4:f8:d6:03:0e:8a:e1:99:7f:ae:7d:b4: c7:fd:50:1f:32:4a:92:73:db:69:48:aa:85:94:0f: 24:83:be:ca:ca:75:76:1b:9b:ac:5a:43:20:21:ac: b7:5a:81:0c:af:a2:2c:78:b5:ca:4e:37:58:c7:fa: 3c:67:57:a3:24:e6:88:03:2c:6e:7d:01:6a:c5:53: 48:57:83:1e:4c:f9:dc:6d:cb:55:2a:9b:d3:01:40: ac:af:eb:7a:5a:41:a3:2e:82:34:0d:47:d2:3e:0c: 9d:d3:ed:8f:5a:92:b5:42:9a:34:af:99:21:61:7e: 5e:cc:cf:2c:42:64:e2:10:ee:45:7f:7e:1f:2e:5e: 39:d0:b7:6d:b0:32:20:7c:34:bf:b9:49:61:86:81: 0f:bd:15:9d:36:9e:c5:28:2e:4b:5a:80:3d:7d:cb: 44:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D4:0E:45:C1:9E:50:FD:E2:2D:65:34:5F:D9:D1:22:CD:16:26:46 X509v3 Authority Key Identifier: keyid:8C:7B:6E:18:3C:8D:52:CC:46:05:BA:8B:5D:AD:DC:66:32:62:93:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHtuGDyNUsxGBbqLXa3cZjJik-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/W9QORcGeUP3iLWU0X9nRIs0WJkY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/jHtuGDyNUsxGBbqLXa3cZjJik-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.43.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:06:22:c8:06:7b:0c:91:49:a2:62:7d:31:24:7d:4c:99:b2: ea:2c:fa:59:63:2a:7f:cc:50:3a:e3:d0:32:ac:e3:b0:6d:90: 9f:19:5a:7a:a7:92:bc:d2:3f:32:63:ec:ca:84:4e:fa:7a:09: 96:3d:36:2b:da:05:d0:bb:56:1b:6b:de:8f:7c:82:15:12:bd: e6:f4:1c:f7:d7:13:1e:fc:f4:06:ea:19:3b:76:c0:ca:01:27: 95:2e:34:fc:69:a7:80:27:c5:38:4d:e8:82:f1:78:9d:ad:1b: d3:e4:03:5b:bd:75:0c:6b:26:54:e6:2a:25:d2:ca:4e:9a:75: 78:17:a6:d3:28:b5:12:13:c6:16:58:5b:5a:47:97:21:cf:f8: cf:32:4d:e9:f4:07:26:74:0a:a5:a4:9f:be:53:5d:75:10:14: 71:43:1c:a5:97:d8:ec:df:bd:ef:dd:90:79:f1:99:9c:4b:9d: 2b:e6:a9:0f:35:ff:5f:50:a8:e1:f4:22:e4:03:e6:8c:d6:3e: d2:ac:01:79:72:b7:3f:3d:ec:80:09:a7:ab:e6:61:28:20:d8: 5a:a1:45:bd:32:0a:2b:e7:ab:0b:0b:ff:a1:25:b3:6e:00:b1: c3:78:bb:72:10:0f:b8:c4:b1:1a:e1:cb:e5:f7:09:9b:95:12: cd:8b:38:97 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WTR+ojSD+NcmfkNAoBmJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjN2I2ZTE4M2M4ZDUyY2M0NjA1YmE4YjVkYWRkYzY2MzI2 MjkzZWMwHhcNMjYwMTAxMDIxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YmQ0MGU0NWMxOWU1MGZkZTIyZDY1MzQ1ZmQ5ZDEyMmNkMTYyNjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IFjDxX/5f3CVH4BaX6NKCiQsCeY ysUedrcxFTw3Dm3Z6tKjw/f6ao87S/ua/ByM7qViX6kHlSuKNtrU9tq876OtUutA TU14yorW4OCOZ5u0rFiVp8RVHwu45c/k+NYDDorhmX+ufbTH/VAfMkqSc9tpSKqF lA8kg77KynV2G5usWkMgIay3WoEMr6IseLXKTjdYx/o8Z1ejJOaIAyxufQFqxVNI V4MeTPncbctVKpvTAUCsr+t6WkGjLoI0DUfSPgyd0+2PWpK1Qpo0r5khYX5ezM8s QmTiEO5Ff34fLl450LdtsDIgfDS/uUlhhoEPvRWdNp7FKC5LWoA9fctEpwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFvUDkXBnlD94i1lNF/Z0SLNFiZGMB8GA1UdIwQY MBaAFIx7bhg8jVLMRgW6i12t3GYyYpPsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakh0dUdEeU5Vc3hHQmJxTFhhM2Naakppay13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9lMjJmMTUtODVhOC00MzE4LWFiNzUt YjZlODY3OTQxZjdlLzEvVzlRT1JjR2VVUDNpTFdVMFg5blJJczBXSmtZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9lMjJmMTUtODVhOC00MzE4LWFiNzUtYjZlODY3OTQxZjdl LzEvakh0dUdEeU5Vc3hHQmJxTFhhM2Naakppay13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8YrMA0G CSqGSIb3DQEBCwUAA4IBAQCMBiLIBnsMkUmiYn0xJH1MmbLqLPpZYyp/zFA649Ay rOOwbZCfGVp6p5K80j8yY+zKhE76egmWPTYr2gXQu1Yba96PfIIVEr3m9Bz31xMe /PQG6hk7dsDKASeVLjT8aaeAJ8U4TeiC8XidrRvT5ANbvXUMayZU5iol0spOmnV4 F6bTKLUSE8YWWFtaR5chz/jPMk3p9AcmdAqlpJ++U111EBRxQxyll9js373v3ZB5 8ZmcS50r5qkPNf9fUKjh9CLkA+aM1j7SrAF5crc/PeyACaer5mEoINhaoUW9Mgor 56sLC/+hJbNuALHDeLtyEA+4xLEa4cvl9wmblRLNiziX -----END CERTIFICATE-----Generated at Mon Jan 26 16:22:10 2026 by rpki-client