This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/lWRN_vpnN3jdO53Qf_s9sKGgAYI.roa File: lWRN_vpnN3jdO53Qf_s9sKGgAYI.roa (raw, json) Hash identifier: DSGrSvYMDlk724DBlB7/WGTLaoZcHPiH4iyTmdQidKM= Subject key identifier: 95:64:4D:FE:FA:67:37:78:DD:3B:9D:D0:7F:FB:3D:B0:A1:A0:01:82 Certificate issuer: /CN=b91464767773f1239b646bb66bdcf4f7fb1206ce Certificate serial: 019B7DCA1397ED916FEEED3A000FF8F22EEE Authority key identifier: B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/lWRN_vpnN3jdO53Qf_s9sKGgAYI.roa Signing time: Fri 02 Jan 2026 08:19:13 +0000 ROA not before: Fri 02 Jan 2026 08:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202651 IP address blocks: 91.192.4.0/24 maxlen: 24 91.192.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.crl rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:13:97:ed:91:6f:ee:ed:3a:00:0f:f8:f2:2e:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b91464767773f1239b646bb66bdcf4f7fb1206ce Validity Not Before: Jan 2 08:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=95644dfefa673778dd3b9dd07ffb3db0a1a00182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ec:97:06:57:67:6f:2e:c7:78:b8:db:ad:f7: 54:6e:31:75:16:d2:09:77:39:65:2e:22:de:b1:31: fd:d1:a0:3c:9e:a5:4e:a2:05:64:f2:e6:60:2c:f4: a9:0f:db:c4:d9:b3:96:df:32:bc:d8:66:3e:61:ad: e1:81:76:26:70:2a:65:69:ed:f3:d3:3e:0c:03:21: ee:d5:37:9a:13:5c:fd:a0:01:38:cf:cf:a9:b4:d9: 82:ff:40:f7:37:68:6c:82:8a:58:64:a7:0e:b3:b4: a4:4b:f2:f9:43:80:5c:47:b4:f9:f2:78:0b:e3:c5: e2:d7:98:cb:d9:40:25:9e:b8:9b:44:61:f5:84:ba: 9b:17:69:84:e7:95:38:44:d7:b1:9f:70:a9:32:5c: 73:c2:c9:1e:7a:b5:b8:72:01:30:96:5d:3c:31:3e: 34:39:71:00:d5:23:60:a9:c8:5c:30:f2:b2:a4:bb: 97:7c:49:8e:a1:5b:1a:47:58:4d:2f:b4:24:e2:0e: 90:f6:01:51:76:01:87:b8:31:fa:92:20:78:72:0d: 8c:11:0e:8c:11:ab:b3:f5:f3:fc:e5:95:9d:a9:2e: 71:04:ef:5c:5b:2c:fb:e7:3b:a9:c7:c0:6f:51:86: 35:93:a3:00:81:b7:53:6b:fc:5a:8b:c1:af:91:16: 17:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:64:4D:FE:FA:67:37:78:DD:3B:9D:D0:7F:FB:3D:B0:A1:A0:01:82 X509v3 Authority Key Identifier: keyid:B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/lWRN_vpnN3jdO53Qf_s9sKGgAYI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.192.4.0/24 91.192.6.0/24 Signature Algorithm: sha256WithRSAEncryption d4:53:de:29:80:36:3b:ba:a9:24:e4:de:4b:8e:91:aa:fd:00: 9a:b8:42:7c:19:7c:bf:ae:09:ed:f3:d8:e9:e6:7e:1d:b0:db: 0d:be:76:8e:c2:3f:00:60:49:96:13:8d:01:23:d7:ca:bb:f2: d8:c2:a6:f4:58:e7:1a:0e:41:1d:de:d4:97:99:ed:e8:01:68: bf:5a:b1:e4:d6:3d:4e:98:d6:e1:39:ce:da:40:a6:24:1a:b9: 0b:01:f8:33:e0:be:6e:12:ef:34:c5:3a:19:22:2e:58:68:b4: 7d:6b:bf:d9:28:52:15:1d:2d:3f:93:33:09:8b:74:fe:5b:a6: 92:a1:14:d6:25:e7:d4:c7:d4:47:fb:0a:5f:85:77:6d:82:e8: c7:a9:59:6f:10:75:e2:92:9a:07:95:d4:91:9b:c2:22:61:9d: 2f:f0:2b:0f:30:f0:93:0d:ff:3f:07:45:35:ba:76:14:2e:ca: 8c:1a:27:f0:4e:9a:3c:73:61:c1:c1:a3:12:d2:e1:b8:db:46: 93:11:55:15:a3:6b:56:a0:ee:a9:11:27:a2:a9:23:44:7f:5c: 52:94:b4:70:92:9c:e1:8b:8e:e6:36:17:b3:57:e7:de:79:de: 1f:c0:56:c2:e2:22:be:09:3a:30:02:d8:a7:79:a7:47:6b:41: 8f:6e:91:85 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9yhOX7ZFv7u06AA/48i7uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MTQ2NDc2Nzc3M2YxMjM5YjY0NmJiNjZiZGNmNGY3ZmIx MjA2Y2UwHhcNMjYwMTAyMDgxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTY0NGRmZWZhNjczNzc4ZGQzYjlkZDA3ZmZiM2RiMGExYTAwMTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuyXBldnby7HeLjbrfdUbjF1FtIJ dzllLiLesTH90aA8nqVOogVk8uZgLPSpD9vE2bOW3zK82GY+Ya3hgXYmcCplae3z 0z4MAyHu1TeaE1z9oAE4z8+ptNmC/0D3N2hsgopYZKcOs7SkS/L5Q4BcR7T58ngL 48Xi15jL2UAlnribRGH1hLqbF2mE55U4RNexn3CpMlxzwskeerW4cgEwll08MT40 OXEA1SNgqchcMPKypLuXfEmOoVsaR1hNL7Qk4g6Q9gFRdgGHuDH6kiB4cg2MEQ6M Eauz9fP85ZWdqS5xBO9cWyz75zupx8BvUYY1k6MAgbdTa/xai8GvkRYXaQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJVkTf76Zzd43Tud0H/7PbChoAGCMB8GA1UdIwQY MBaAFLkUZHZ3c/Ejm2Rrtmvc9Pf7EgbOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJSa2RuZHo4U09iWkd1MmE5ejA5X3NTQnM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8xM2ZjZDEtZDgwNi00ZTU2LTg1MzMt NDc1ZGJiYjBjMDhjLzEvbFdSTl92cG5OM2pkTzUzUWZfczlzS0dnQVlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8xM2ZjZDEtZDgwNi00ZTU2LTg1MzMtNDc1ZGJiYjBjMDhj LzEvdVJSa2RuZHo4U09iWkd1MmE5ejA5X3NTQnM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW8AEAwQA W8AGMA0GCSqGSIb3DQEBCwUAA4IBAQDUU94pgDY7uqkk5N5LjpGq/QCauEJ8GXy/ rgnt89jp5n4dsNsNvnaOwj8AYEmWE40BI9fKu/LYwqb0WOcaDkEd3tSXme3oAWi/ WrHk1j1OmNbhOc7aQKYkGrkLAfgz4L5uEu80xToZIi5YaLR9a7/ZKFIVHS0/kzMJ i3T+W6aSoRTWJefUx9RH+wpfhXdtgujHqVlvEHXikpoHldSRm8IiYZ0v8CsPMPCT Df8/B0U1unYULsqMGifwTpo8c2HBwaMS0uG420aTEVUVo2tWoO6pESeiqSNEf1xS lLRwkpzhi47mNhezV+feed4fwFbC4iK+CTowAtineadHa0GPbpGF -----END CERTIFICATE-----Generated at Sun Jan 25 16:36:17 2026 by rpki-client