This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/WrWBzTjMV8uY49iEsZzDrHnOc2Q.roa File: WrWBzTjMV8uY49iEsZzDrHnOc2Q.roa (raw, json) Hash identifier: TafmGVewjoUyvD+1TRSWrWYhvrjNRF0jON6ox57CRkw= Subject key identifier: 5A:B5:81:CD:38:CC:57:CB:98:E3:D8:84:B1:9C:C3:AC:79:CE:73:64 Certificate issuer: /CN=8986e25683302c38270d0f90c4aad1519393d545 Certificate serial: 019B7A5B7B3239D314A3A6CD9FBCC1749252 Authority key identifier: 89:86:E2:56:83:30:2C:38:27:0D:0F:90:C4:AA:D1:51:93:93:D5:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/WrWBzTjMV8uY49iEsZzDrHnOc2Q.roa Signing time: Thu 01 Jan 2026 16:19:34 +0000 ROA not before: Thu 01 Jan 2026 16:19:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48854 IP address blocks: 91.239.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.crl rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:7b:32:39:d3:14:a3:a6:cd:9f:bc:c1:74:92:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8986e25683302c38270d0f90c4aad1519393d545 Validity Not Before: Jan 1 16:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ab581cd38cc57cb98e3d884b19cc3ac79ce7364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:55:2a:e7:76:50:b0:ad:da:2a:e6:13:30:4f: ca:8a:e1:ad:c5:3d:a9:15:ac:87:c4:90:1b:c0:a5: 4a:e0:b3:e0:87:d8:f4:0b:c8:7c:e0:92:d3:ae:53: 2f:5c:fa:3e:ce:09:d3:97:3d:e3:fc:e0:15:40:c8: bc:17:38:3a:8f:81:2f:ad:e7:00:af:78:fb:d4:c4: 9c:ab:bb:6a:d3:03:63:bd:45:5a:e2:e7:49:d7:0a: 39:6d:27:da:95:7d:72:05:29:77:6e:c7:80:52:8d: b7:3b:7c:20:10:47:dc:3a:6c:c9:d3:36:f2:17:d2: 0a:92:32:db:8c:1c:1f:eb:0e:a1:d1:38:a8:83:e5: b5:46:12:0d:d1:61:2d:90:66:4f:dc:18:e9:97:2c: 53:8f:d9:e1:b3:05:fe:59:23:25:42:9d:41:81:b9: 43:60:13:9c:6c:37:0e:69:f7:60:ee:0f:94:2a:34: d8:e2:da:64:9e:d1:58:fd:92:13:fa:7a:88:80:2c: c4:a1:48:04:f6:14:cc:ab:f7:76:9f:d8:3f:d8:5b: 23:1a:0a:ca:25:48:e3:77:d6:2a:2a:ad:18:c4:20: f6:5e:03:e4:87:77:b3:75:f0:71:a3:94:ab:c1:bb: c4:64:bb:4e:a6:78:ca:17:07:b5:3f:c8:01:9a:b5: fc:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:B5:81:CD:38:CC:57:CB:98:E3:D8:84:B1:9C:C3:AC:79:CE:73:64 X509v3 Authority Key Identifier: keyid:89:86:E2:56:83:30:2C:38:27:0D:0F:90:C4:AA:D1:51:93:93:D5:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/WrWBzTjMV8uY49iEsZzDrHnOc2Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.239.122.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:73:18:bd:9a:48:b3:08:93:40:bb:d0:c3:4b:e1:f5:2f:a9: 1a:25:c1:6b:98:6a:0e:99:5b:96:ee:de:7e:ef:0e:71:56:20: c6:ee:0f:6f:71:e7:ad:f6:94:1f:37:5b:ca:a1:33:1b:b1:19: 44:ae:a4:29:8e:e3:28:c3:4e:bb:36:ca:52:90:28:c7:5e:7d: 64:39:29:f9:47:89:1a:6a:66:49:1e:af:e2:1a:44:69:92:2e: 6d:aa:6f:5e:45:2e:75:18:97:b9:61:3d:55:39:0f:bb:b6:0e: 03:02:17:2e:1e:12:75:0d:3a:bf:c0:a2:66:8c:c0:47:bf:d2: f0:b8:98:0e:54:fc:81:14:81:00:bc:63:13:1b:e7:2b:16:e6: 83:14:62:1a:b3:c1:17:81:14:86:27:17:e9:64:6d:7d:1b:25: 32:7d:21:df:8c:59:2d:ab:30:7d:38:77:89:1b:4a:dc:75:59: 0f:5f:24:21:0e:f3:da:8d:0f:7b:df:e5:35:ff:74:b4:21:2d: e3:b5:72:fd:2d:72:18:c0:33:41:67:8d:99:c5:29:79:19:fd: 1b:95:2d:f7:6e:09:40:fc:c5:8e:f8:28:a3:8e:65:b1:8c:e0: 94:ef:48:e0:8a:68:c9:50:0e:c0:37:9f:d9:6a:0c:95:c9:2a: aa:9a:9f:4b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W3syOdMUo6bNn7zBdJJSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5ODZlMjU2ODMzMDJjMzgyNzBkMGY5MGM0YWFkMTUxOTM5 M2Q1NDUwHhcNMjYwMTAxMTYxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YWI1ODFjZDM4Y2M1N2NiOThlM2Q4ODRiMTljYzNhYzc5Y2U3MzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFUq53ZQsK3aKuYTME/KiuGtxT2p FayHxJAbwKVK4LPgh9j0C8h84JLTrlMvXPo+zgnTlz3j/OAVQMi8Fzg6j4EvrecA r3j71MScq7tq0wNjvUVa4udJ1wo5bSfalX1yBSl3bseAUo23O3wgEEfcOmzJ0zby F9IKkjLbjBwf6w6h0Tiog+W1RhIN0WEtkGZP3BjplyxTj9nhswX+WSMlQp1BgblD YBOcbDcOafdg7g+UKjTY4tpkntFY/ZIT+nqIgCzEoUgE9hTMq/d2n9g/2FsjGgrK JUjjd9YqKq0YxCD2XgPkh3ezdfBxo5SrwbvEZLtOpnjKFwe1P8gBmrX8TwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFq1gc04zFfLmOPYhLGcw6x5znNkMB8GA1UdIwQY MBaAFImG4laDMCw4Jw0PkMSq0VGTk9VFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVliaVZvTXdMRGduRFEtUXhLclJVWk9UMVVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9kY2Y1NTktYWZiNC00NmI5LWIyZDUt OTM3ZGNmZjUxZTJkLzEvV3JXQnpUak1WOHVZNDlpRXNaekRySG5PYzJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9kY2Y1NTktYWZiNC00NmI5LWIyZDUtOTM3ZGNmZjUxZTJk LzEvaVliaVZvTXdMRGduRFEtUXhLclJVWk9UMVVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+96MA0G CSqGSIb3DQEBCwUAA4IBAQBtcxi9mkizCJNAu9DDS+H1L6kaJcFrmGoOmVuW7t5+ 7w5xViDG7g9vceet9pQfN1vKoTMbsRlErqQpjuMow067NspSkCjHXn1kOSn5R4ka amZJHq/iGkRpki5tqm9eRS51GJe5YT1VOQ+7tg4DAhcuHhJ1DTq/wKJmjMBHv9Lw uJgOVPyBFIEAvGMTG+crFuaDFGIas8EXgRSGJxfpZG19GyUyfSHfjFktqzB9OHeJ G0rcdVkPXyQhDvPajQ973+U1/3S0IS3jtXL9LXIYwDNBZ42ZxSl5Gf0blS33bglA /MWO+CijjmWxjOCU70jgimjJUA7AN5/ZagyVySqqmp9L -----END CERTIFICATE-----Generated at Mon Jan 26 03:28:27 2026 by rpki-client