This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/biWMyLPxPMl5FtQJTRrTfAxg-wg.roa File: biWMyLPxPMl5FtQJTRrTfAxg-wg.roa (raw, json) Hash identifier: pNDoD30C6cU3KpMd8R/7fMFpHc25Pe1LLUHjt0eH4ZA= Subject key identifier: 6E:25:8C:C8:B3:F1:3C:C9:79:16:D4:09:4D:1A:D3:7C:0C:60:FB:08 Certificate issuer: /CN=776fae43f73da35fe1a2e429662ae0b91751e3fb Certificate serial: 019B7B36A44B645CED484CF60AB21B1B67BA Authority key identifier: 77:6F:AE:43:F7:3D:A3:5F:E1:A2:E4:29:66:2A:E0:B9:17:51:E3:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/biWMyLPxPMl5FtQJTRrTfAxg-wg.roa Signing time: Thu 01 Jan 2026 20:18:57 +0000 ROA not before: Thu 01 Jan 2026 20:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30860 IP address blocks: 91.230.121.0/24 maxlen: 24 91.235.142.0/23 maxlen: 23 91.235.142.0/24 maxlen: 24 91.235.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.crl rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:a4:4b:64:5c:ed:48:4c:f6:0a:b2:1b:1b:67:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=776fae43f73da35fe1a2e429662ae0b91751e3fb Validity Not Before: Jan 1 20:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6e258cc8b3f13cc97916d4094d1ad37c0c60fb08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:cb:89:bc:d6:77:9a:e4:ed:eb:de:5e:92:1a: 3e:38:29:84:34:69:e1:12:3a:4f:76:bc:01:75:c0: 4b:24:c0:72:19:5d:5d:a8:95:14:bb:8c:bf:3e:e0: 7b:b7:36:87:46:22:06:50:da:9c:61:ef:31:4b:88: 04:32:b4:c6:b8:83:99:69:43:bd:90:05:79:71:f5: f4:a3:f2:26:d3:1d:be:ab:12:93:7d:70:3c:5e:dd: 4d:28:34:54:6b:25:23:f0:33:85:96:0c:a6:e7:54: f5:2f:25:df:01:87:39:14:07:82:e7:b1:03:ec:5e: 40:49:76:56:17:2f:ff:65:60:54:cc:81:92:85:4e: 0a:32:3f:0f:a9:a8:f5:74:d8:0b:86:79:3e:61:03: 0e:01:f6:26:38:93:52:17:6b:96:00:02:8f:77:71: 35:36:e3:38:de:b1:bc:aa:a4:e8:75:98:87:6d:9f: 33:ba:8e:10:28:5e:f7:a5:f5:71:f1:a6:ad:b0:0c: e7:10:62:11:2c:e2:7c:b9:cf:79:6a:84:3f:db:a0: a1:c6:05:19:7f:16:f7:89:61:98:15:9d:77:86:08: 3d:d9:99:7f:3c:4e:a6:1e:09:90:a7:46:5f:ea:48: b9:4a:87:9a:4d:a0:d5:87:84:5c:2e:26:49:5c:6b: 91:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:25:8C:C8:B3:F1:3C:C9:79:16:D4:09:4D:1A:D3:7C:0C:60:FB:08 X509v3 Authority Key Identifier: keyid:77:6F:AE:43:F7:3D:A3:5F:E1:A2:E4:29:66:2A:E0:B9:17:51:E3:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/biWMyLPxPMl5FtQJTRrTfAxg-wg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.230.121.0/24 91.235.142.0/23 Signature Algorithm: sha256WithRSAEncryption 43:22:2b:ed:f1:e7:f9:0c:82:0b:66:a5:18:9e:20:0e:13:30: 8f:c1:8e:0a:ba:e9:06:b8:db:67:a7:a6:7f:f6:9e:d7:d0:8d: fc:2a:23:b4:39:d0:b0:4f:f3:09:89:5f:87:22:38:9d:01:7d: d5:e8:42:12:1a:c5:f6:f2:0e:73:fe:98:74:0c:68:09:2a:46: 60:d4:b7:f5:ae:9e:86:ab:d7:e3:62:00:09:2c:1d:34:8b:99: 54:31:fd:8d:a5:1c:48:ec:c5:18:6e:bf:ca:34:30:1c:28:d5: 54:68:8e:7e:2c:0a:01:b9:51:b0:c6:df:41:5f:70:24:42:e1: 19:f7:d0:12:b2:0a:27:a6:1d:c0:7e:30:dc:bd:71:8f:73:56: a8:81:85:90:85:29:12:3f:7a:51:4e:d1:7e:07:96:f5:6e:9d: c9:11:32:24:0a:25:fc:d8:57:75:9a:d2:4f:66:ce:52:82:0a: a9:cc:07:d7:6f:a7:df:dc:73:9e:98:06:ba:bd:62:30:02:bc: d0:83:32:77:a3:3e:52:ed:26:7b:4f:30:2b:77:5d:bc:a6:39: 51:09:b4:eb:af:85:7e:84:db:54:1a:cf:70:fa:e5:c0:00:14: e6:f0:9c:c0:d7:45:5c:cf:38:82:1e:5d:03:db:0a:f8:71:eb: da:a4:8a:e1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NqRLZFztSEz2CrIbG2e6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3NmZhZTQzZjczZGEzNWZlMWEyZTQyOTY2MmFlMGI5MTc1 MWUzZmIwHhcNMjYwMTAxMjAxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZTI1OGNjOGIzZjEzY2M5NzkxNmQ0MDk0ZDFhZDM3YzBjNjBmYjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsuJvNZ3muTt695ekho+OCmENGnh EjpPdrwBdcBLJMByGV1dqJUUu4y/PuB7tzaHRiIGUNqcYe8xS4gEMrTGuIOZaUO9 kAV5cfX0o/Im0x2+qxKTfXA8Xt1NKDRUayUj8DOFlgym51T1LyXfAYc5FAeC57ED 7F5ASXZWFy//ZWBUzIGShU4KMj8Pqaj1dNgLhnk+YQMOAfYmOJNSF2uWAAKPd3E1 NuM43rG8qqTodZiHbZ8zuo4QKF73pfVx8aatsAznEGIRLOJ8uc95aoQ/26ChxgUZ fxb3iWGYFZ13hgg92Zl/PE6mHgmQp0Zf6ki5SoeaTaDVh4RcLiZJXGuRwwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFG4ljMiz8TzJeRbUCU0a03wMYPsIMB8GA1UdIwQY MBaAFHdvrkP3PaNf4aLkKWYq4LkXUeP7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDItdVFfYzlvMV9ob3VRcFppcmd1UmRSNF9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8wYWNmMmQtNWQ2Mi00M2YzLThkMTQt NGUwY2M1ODE2M2IwLzEvYmlXTXlMUHhQTWw1RnRRSlRSclRmQXhnLXdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi8wYWNmMmQtNWQ2Mi00M2YzLThkMTQtNGUwY2M1ODE2M2Iw LzEvZDItdVFfYzlvMV9ob3VRcFppcmd1UmRSNF9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW+Z5AwQB W+uOMA0GCSqGSIb3DQEBCwUAA4IBAQBDIivt8ef5DIILZqUYniAOEzCPwY4KuukG uNtnp6Z/9p7X0I38KiO0OdCwT/MJiV+HIjidAX3V6EISGsX28g5z/ph0DGgJKkZg 1Lf1rp6Gq9fjYgAJLB00i5lUMf2NpRxI7MUYbr/KNDAcKNVUaI5+LAoBuVGwxt9B X3AkQuEZ99ASsgonph3AfjDcvXGPc1aogYWQhSkSP3pRTtF+B5b1bp3JETIkCiX8 2Fd1mtJPZs5SggqpzAfXb6ff3HOemAa6vWIwArzQgzJ3oz5S7SZ7TzArd128pjlR CbTrr4V+hNtUGs9w+uXAABTm8JzA10VczziCHl0D2wr4cevapIrh -----END CERTIFICATE-----Generated at Sun Jan 25 15:11:27 2026 by rpki-client