This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/WthtcWvJR0bnXyUYIIyDtU_Ijpw.roa File: WthtcWvJR0bnXyUYIIyDtU_Ijpw.roa (raw, json) Hash identifier: W4V4VKeFsQZDXA2GLDkXPjJ+JE3asR1EB7QgnFmVGmo= Subject key identifier: 5A:D8:6D:71:6B:C9:47:46:E7:5F:25:18:20:8C:83:B5:4F:C8:8E:9C Certificate issuer: /CN=45e2a9fb777010296f9b8e215ee0db4467174d2d Certificate serial: 019B79111744D0E552D98DF53A3294A7A3F7 Authority key identifier: 45:E2:A9:FB:77:70:10:29:6F:9B:8E:21:5E:E0:DB:44:67:17:4D:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/WthtcWvJR0bnXyUYIIyDtU_Ijpw.roa Signing time: Thu 01 Jan 2026 10:18:41 +0000 ROA not before: Thu 01 Jan 2026 10:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15435 IP address blocks: 91.230.33.0/24 maxlen: 24 91.230.34.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.crl rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:17:44:d0:e5:52:d9:8d:f5:3a:32:94:a7:a3:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45e2a9fb777010296f9b8e215ee0db4467174d2d Validity Not Before: Jan 1 10:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ad86d716bc94746e75f2518208c83b54fc88e9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2d:83:6e:9c:46:67:f7:ff:c0:f2:f9:d2:34: bd:67:be:b0:92:5c:48:77:99:a6:37:7d:bc:3a:dd: 9c:fb:55:5b:07:06:91:bd:4a:87:f6:78:c4:5e:13: e7:bd:6f:27:7b:c2:2f:27:eb:32:23:71:9d:ee:74: 2b:30:f3:dc:90:c0:e0:0a:7d:ef:3a:75:f0:0b:26: 31:a8:7f:dd:9d:fd:58:62:b0:cb:82:b5:a7:41:8b: 44:bc:ea:35:d5:1b:96:7a:98:33:72:5a:a6:12:b4: 72:6f:d3:f7:b1:cd:19:ff:24:d9:22:9a:97:a0:f5: aa:c4:05:78:80:3e:03:87:8c:b6:30:96:f8:22:56: 7a:c5:18:65:6d:51:07:2c:a2:17:e7:93:54:73:b1: ae:15:b7:db:28:53:3d:19:78:d1:31:c4:26:9c:c1: 9f:f0:26:bc:3d:b4:0e:9e:b1:3c:15:bf:ee:f4:83: 77:9d:f5:a6:ce:87:dd:38:9f:bc:3c:66:cb:67:3c: 24:a8:1a:96:0f:56:16:8b:1c:3d:65:4d:e1:52:70: 18:43:cc:b7:2b:2b:2c:66:dd:4b:85:a7:87:21:06: b0:49:60:03:63:59:58:72:ba:50:2d:68:93:c1:99: c8:e2:a9:2c:67:c2:93:f1:02:df:d5:02:d5:a7:09: c8:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:D8:6D:71:6B:C9:47:46:E7:5F:25:18:20:8C:83:B5:4F:C8:8E:9C X509v3 Authority Key Identifier: keyid:45:E2:A9:FB:77:70:10:29:6F:9B:8E:21:5E:E0:DB:44:67:17:4D:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/WthtcWvJR0bnXyUYIIyDtU_Ijpw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.230.33.0-91.230.35.255 Signature Algorithm: sha256WithRSAEncryption 2c:98:aa:62:ac:8e:42:47:f4:83:9d:20:ac:03:a0:90:2e:af: bc:2a:3f:c8:8b:dc:6f:cb:31:fa:78:44:d3:86:f4:62:83:67: ba:6e:90:1f:dd:c7:fc:1a:e3:2c:f3:1e:a6:64:9e:ca:07:a8: 83:06:e7:a3:0a:04:84:6c:df:c6:bd:c7:63:c3:fc:bf:a5:ab: 22:3d:f2:96:b3:b3:df:77:59:2a:78:13:a9:fa:04:46:06:af: de:7a:26:6c:67:37:c8:eb:84:41:50:0b:cb:cf:a3:ac:12:68: 16:0f:f8:dc:29:bb:fc:42:7b:aa:62:dd:ad:ef:de:7c:cf:17: 38:4d:93:2d:e2:93:53:9b:5c:0d:cb:71:06:9a:34:59:64:d4: 15:7a:73:d9:52:50:be:06:f5:62:df:b3:50:2a:86:03:d9:ae: 2f:8e:4e:95:5b:f1:28:73:1e:44:ef:0a:61:f6:c0:68:33:c4: 1a:e7:6c:27:ed:d5:37:a8:e2:98:e1:ff:3a:ef:c2:ba:d6:14: 9a:96:b3:2e:44:b4:60:54:e7:d7:1e:c8:1b:3b:51:61:ff:73: 85:b7:47:4d:d8:5d:2e:58:9d:52:31:10:2d:02:64:99:16:55: d5:e6:e8:af:06:0e:00:80:c5:31:e3:4d:93:58:8d:73:d5:90: 7f:26:bd:03 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt5ERdE0OVS2Y31OjKUp6P3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1ZTJhOWZiNzc3MDEwMjk2ZjliOGUyMTVlZTBkYjQ0Njcx NzRkMmQwHhcNMjYwMTAxMTAxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YWQ4NmQ3MTZiYzk0NzQ2ZTc1ZjI1MTgyMDhjODNiNTRmYzg4ZTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmS2DbpxGZ/f/wPL50jS9Z76wklxI d5mmN328Ot2c+1VbBwaRvUqH9njEXhPnvW8ne8IvJ+syI3Gd7nQrMPPckMDgCn3v OnXwCyYxqH/dnf1YYrDLgrWnQYtEvOo11RuWepgzclqmErRyb9P3sc0Z/yTZIpqX oPWqxAV4gD4Dh4y2MJb4IlZ6xRhlbVEHLKIX55NUc7GuFbfbKFM9GXjRMcQmnMGf 8Ca8PbQOnrE8Fb/u9IN3nfWmzofdOJ+8PGbLZzwkqBqWD1YWixw9ZU3hUnAYQ8y3 KyssZt1LhaeHIQawSWADY1lYcrpQLWiTwZnI4qksZ8KT8QLf1QLVpwnImwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFFrYbXFryUdG518lGCCMg7VPyI6cMB8GA1UdIwQY MBaAFEXiqft3cBApb5uOIV7g20RnF00tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmVLcC0zZHdFQ2x2bTQ0aFh1RGJSR2NYVFMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9kYmYxMDQtMWUyYy00MmU4LWIyOGIt ZWJkMzE0NTQyMmVhLzEvV3RodGNXdkpSMGJuWHlVWUlJeUR0VV9JanB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9kYmYxMDQtMWUyYy00MmU4LWIyOGItZWJkMzE0NTQyMmVh LzEvUmVLcC0zZHdFQ2x2bTQ0aFh1RGJSR2NYVFMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABb5iED BAJb5iAwDQYJKoZIhvcNAQELBQADggEBACyYqmKsjkJH9IOdIKwDoJAur7wqP8iL 3G/LMfp4RNOG9GKDZ7pukB/dx/wa4yzzHqZknsoHqIMG56MKBIRs38a9x2PD/L+l qyI98pazs993WSp4E6n6BEYGr956JmxnN8jrhEFQC8vPo6wSaBYP+Nwpu/xCe6pi 3a3v3nzPFzhNky3ik1ObXA3LcQaaNFlk1BV6c9lSUL4G9WLfs1AqhgPZri+OTpVb 8ShzHkTvCmH2wGgzxBrnbCft1Teo4pjh/zrvwrrWFJqWsy5EtGBU59ceyBs7UWH/ c4W3R03YXS5YnVIxEC0CZJkWVdXm6K8GDgCAxTHjTZNYjXPVkH8mvQM= -----END CERTIFICATE-----Generated at Mon Jan 26 01:01:48 2026 by rpki-client