This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/wSRzYr55-4ZeS-gPCPrQ29jB9iw.roa File: wSRzYr55-4ZeS-gPCPrQ29jB9iw.roa (raw, json) Hash identifier: NbvG7X6vkEtFD9/ZukAk8NJl9uOur/Cl3YOKKjQ2YLY= Subject key identifier: C1:24:73:62:BE:79:FB:86:5E:4B:E8:0F:08:FA:D0:DB:D8:C1:F6:2C Certificate issuer: /CN=9be4717112fec119f6cfcace7cc4434fb47df8f5 Certificate serial: 019B7EA6983F4110B17BCC4C9A4755CA9FC8 Authority key identifier: 9B:E4:71:71:12:FE:C1:19:F6:CF:CA:CE:7C:C4:43:4F:B4:7D:F8:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-RxcRL-wRn2z8rOfMRDT7R9-PU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/wSRzYr55-4ZeS-gPCPrQ29jB9iw.roa Signing time: Fri 02 Jan 2026 12:20:05 +0000 ROA not before: Fri 02 Jan 2026 12:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60509 IP address blocks: 91.240.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.mft rsync://rpki.ripe.net/repository/DEFAULT/m-RxcRL-wRn2z8rOfMRDT7R9-PU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:98:3f:41:10:b1:7b:cc:4c:9a:47:55:ca:9f:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9be4717112fec119f6cfcace7cc4434fb47df8f5 Validity Not Before: Jan 2 12:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1247362be79fb865e4be80f08fad0dbd8c1f62c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:67:34:f3:26:a1:3a:d2:a4:35:a2:6e:5b:60: 9e:f8:2a:bc:f2:f5:a6:2b:9b:8d:eb:c4:b8:62:15: 63:87:93:29:55:0b:de:dc:56:63:cc:5f:00:94:64: 40:55:f9:ac:46:a8:00:50:7f:69:7a:6a:cd:60:b2: 0c:01:f4:bf:fc:25:f3:bf:d5:4c:00:9b:52:96:e7: b3:83:51:2a:e3:75:7a:17:cf:80:80:34:ab:0d:16: 09:ef:07:8c:2c:ea:a3:dc:ba:2f:f9:36:a9:9c:93: 4f:d5:e5:fd:43:e1:1c:c6:67:b1:d2:55:59:e0:e0: e7:84:b3:df:23:33:4c:c1:db:60:b4:0f:b2:b0:4c: 84:91:8c:22:71:f8:04:6f:1b:1b:46:b7:e3:99:45: 32:69:3b:8f:87:a0:99:54:9f:5c:70:77:e4:cd:1d: d5:cd:e2:32:85:a3:4f:cb:e0:1e:28:ba:98:a5:27: dd:cc:31:2b:7a:96:68:d4:52:83:ce:d5:30:1d:f0: 93:9a:9f:4d:40:15:e5:58:74:56:56:72:d3:fc:be: fc:8d:7e:5b:9f:b9:c4:d8:4d:e3:03:10:73:ff:37: 1c:dd:64:d7:0c:2f:78:d0:51:61:c5:b8:84:45:80: 1a:a8:f4:d1:86:01:ed:95:17:c1:9b:ff:2d:9f:e3: db:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:24:73:62:BE:79:FB:86:5E:4B:E8:0F:08:FA:D0:DB:D8:C1:F6:2C X509v3 Authority Key Identifier: keyid:9B:E4:71:71:12:FE:C1:19:F6:CF:CA:CE:7C:C4:43:4F:B4:7D:F8:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-RxcRL-wRn2z8rOfMRDT7R9-PU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/wSRzYr55-4ZeS-gPCPrQ29jB9iw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.240.4.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:13:58:6b:88:a6:87:84:d4:03:13:58:64:8c:2c:82:7f:6b: aa:bf:19:05:0b:97:01:84:39:d1:d1:74:21:72:4f:25:2d:18: 7d:39:d1:18:5a:50:e0:95:5d:1b:ca:2c:f6:03:44:e9:7f:30: 7a:46:91:ab:66:f6:91:8d:2d:df:ea:91:b0:2b:55:bf:66:76: 33:bd:5f:47:df:28:57:d7:1e:e8:60:13:9c:ae:1c:35:f2:00: 91:ac:be:be:0b:cf:30:31:02:ae:e3:78:84:9a:f6:7b:fe:64: 5c:83:9a:07:ac:85:b6:b7:1c:ed:66:07:9d:75:0b:04:12:53: 0e:f7:6b:8d:a3:45:64:2c:2d:85:79:74:58:f8:66:23:92:7c: 60:06:7a:7f:80:43:5d:7b:c8:4f:cc:6b:dd:c9:18:ce:3a:63: 55:ff:47:83:aa:f6:bf:17:ce:f9:a4:36:2f:0e:28:f2:f0:61: 95:d1:c5:3f:fa:4a:b0:5b:48:52:a1:b4:b1:bd:fd:2a:d3:c8: 57:20:72:75:d5:41:f8:4d:86:c2:e9:7c:e7:f5:68:b9:97:94: 1a:2f:76:37:9b:5e:b3:97:f0:9c:8d:14:26:9c:cb:c8:bd:63: 46:23:47:a2:dc:2a:ce:41:1d:39:0d:e9:f4:eb:63:43:1f:96: c0:41:4a:ed -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ppg/QRCxe8xMmkdVyp/IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliZTQ3MTcxMTJmZWMxMTlmNmNmY2FjZTdjYzQ0MzRmYjQ3 ZGY4ZjUwHhcNMjYwMTAyMTIyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTI0NzM2MmJlNzlmYjg2NWU0YmU4MGYwOGZhZDBkYmQ4YzFmNjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2c08yahOtKkNaJuW2Ce+Cq88vWm K5uN68S4YhVjh5MpVQve3FZjzF8AlGRAVfmsRqgAUH9pemrNYLIMAfS//CXzv9VM AJtSluezg1Eq43V6F8+AgDSrDRYJ7weMLOqj3Lov+TapnJNP1eX9Q+Ecxmex0lVZ 4ODnhLPfIzNMwdtgtA+ysEyEkYwicfgEbxsbRrfjmUUyaTuPh6CZVJ9ccHfkzR3V zeIyhaNPy+AeKLqYpSfdzDErepZo1FKDztUwHfCTmp9NQBXlWHRWVnLT/L78jX5b n7nE2E3jAxBz/zcc3WTXDC940FFhxbiERYAaqPTRhgHtlRfBm/8tn+PbmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMEkc2K+efuGXkvoDwj60NvYwfYsMB8GA1UdIwQY MBaAFJvkcXES/sEZ9s/KznzEQ0+0ffj1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbS1SeGNSTC13Um4yejhyT2ZNUkRUN1I5LVBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS85NjA2ZjYtZGEwMi00YmI4LWIzZTQt ZjAzYWM1OWI1YTk3LzEvd1NSellyNTUtNFplUy1nUENQclEyOWpCOWl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS85NjA2ZjYtZGEwMi00YmI4LWIzZTQtZjAzYWM1OWI1YTk3 LzEvbS1SeGNSTC13Um4yejhyT2ZNUkRUN1I5LVBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/AEMA0G CSqGSIb3DQEBCwUAA4IBAQA+E1hriKaHhNQDE1hkjCyCf2uqvxkFC5cBhDnR0XQh ck8lLRh9OdEYWlDglV0byiz2A0TpfzB6RpGrZvaRjS3f6pGwK1W/ZnYzvV9H3yhX 1x7oYBOcrhw18gCRrL6+C88wMQKu43iEmvZ7/mRcg5oHrIW2txztZgeddQsEElMO 92uNo0VkLC2FeXRY+GYjknxgBnp/gENde8hPzGvdyRjOOmNV/0eDqva/F875pDYv Dijy8GGV0cU/+kqwW0hSobSxvf0q08hXIHJ11UH4TYbC6Xzn9Wi5l5QaL3Y3m16z l/CcjRQmnMvIvWNGI0ei3CrOQR05Den062NDH5bAQUrt -----END CERTIFICATE-----Generated at Mon Jan 26 02:23:16 2026 by rpki-client