This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/wVU65YFNMO8Ep4zr--w9w3jHWZs.roa File: wVU65YFNMO8Ep4zr--w9w3jHWZs.roa (raw, json) Hash identifier: JFMbeTIXPuRVVHgvcSxnXPOuYpUsPsT7/VM/0sAVCh8= Subject key identifier: C1:55:3A:E5:81:4D:30:EF:04:A7:8C:EB:FB:EC:3D:C3:78:C7:59:9B Certificate issuer: /CN=090e592a2e0d427a09aa2de1b9baf08ccd14f0a0 Certificate serial: 019B7C7FF5A015B2AEF863F41BBA7D48A18A Authority key identifier: 09:0E:59:2A:2E:0D:42:7A:09:AA:2D:E1:B9:BA:F0:8C:CD:14:F0:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/wVU65YFNMO8Ep4zr--w9w3jHWZs.roa Signing time: Fri 02 Jan 2026 02:18:39 +0000 ROA not before: Fri 02 Jan 2026 02:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21949 IP address blocks: 199.244.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:f5:a0:15:b2:ae:f8:63:f4:1b:ba:7d:48:a1:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=090e592a2e0d427a09aa2de1b9baf08ccd14f0a0 Validity Not Before: Jan 2 02:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1553ae5814d30ef04a78cebfbec3dc378c7599b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:95:24:7c:c6:15:f3:cc:be:d9:e6:e5:6d:a9: 8c:3f:13:70:e4:79:3c:71:20:4a:ad:80:26:23:95: dd:0b:85:4b:46:86:85:49:8d:8b:c7:ce:f0:c6:59: 6a:84:94:e3:cd:80:4a:e7:11:69:f0:f2:f2:bd:cd: 38:9b:4a:89:0d:63:5b:04:24:12:e2:17:be:02:2d: 4a:6f:f7:06:0b:a1:93:f6:7b:4b:be:34:16:53:20: 4c:85:a2:3e:59:58:d4:2a:1a:96:83:21:cd:ad:c6: 32:cc:85:c1:f8:fb:e7:36:23:63:63:82:c0:1c:47: ba:58:b9:81:a6:fa:dc:a1:d9:c3:f8:b2:0a:8f:b3: 87:81:41:65:e4:a3:75:23:02:d6:98:24:4e:20:68: 23:1f:8a:d0:01:2b:43:68:7b:75:3d:8f:8d:63:3a: 31:0f:04:db:c7:8b:f5:30:db:3d:3a:d5:b6:98:bd: 3d:29:74:05:18:c8:07:fa:d9:58:2e:48:52:26:22: d7:1a:50:e1:94:0b:e7:5c:a8:82:54:e1:9e:8d:9e: 04:de:e2:3b:8b:87:5a:a4:16:dc:9a:c3:35:cf:bb: f6:63:da:9e:24:cd:8d:e1:60:81:3c:b5:21:75:2b: e4:7d:c0:f6:76:6e:6a:0b:11:f3:a1:37:0a:0b:2b: b7:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:55:3A:E5:81:4D:30:EF:04:A7:8C:EB:FB:EC:3D:C3:78:C7:59:9B X509v3 Authority Key Identifier: keyid:09:0E:59:2A:2E:0D:42:7A:09:AA:2D:E1:B9:BA:F0:8C:CD:14:F0:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/wVU65YFNMO8Ep4zr--w9w3jHWZs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 199.244.102.0/24 Signature Algorithm: sha256WithRSAEncryption b2:3e:6c:92:5d:22:76:57:76:fa:d2:2c:2f:fd:7c:8e:c3:17: 27:64:f9:4c:fa:aa:7a:e6:0e:65:1e:7c:f2:0c:56:d2:cd:1f: 50:3f:d1:4b:57:55:58:e8:77:bd:55:90:71:18:cb:bb:c1:e7: 47:89:3a:b8:1f:91:33:e6:c5:89:77:82:4e:fb:ed:7c:1a:00: 1d:cd:d6:6d:56:67:18:e3:b2:82:ec:b2:4a:02:32:95:d8:90: 45:d2:05:4a:f5:39:6f:4c:13:99:b0:f3:86:f5:cf:d4:21:4f: 7a:87:61:60:c7:fc:36:07:f5:7b:56:87:55:79:10:ad:60:88: 11:66:04:73:f6:f6:26:a8:5b:51:0f:e2:d5:9f:a3:66:d1:56: d8:84:14:19:68:5f:14:c9:2a:a3:52:9b:57:de:ee:6f:b3:e1: 6d:e9:57:c7:7a:49:6e:61:39:8d:66:01:a3:a2:1f:66:4d:76: 23:39:25:bf:c2:22:02:4c:56:1a:8a:df:30:cd:e6:c7:02:d6: 28:a6:75:8f:da:4f:a6:05:08:ef:09:bd:61:fa:43:cb:4c:22: da:ef:e5:3a:da:3d:03:59:e3:a3:87:0d:18:d3:7d:c8:93:83: 59:d7:2f:d8:b2:0d:93:b4:e7:9c:2a:8e:10:3a:4f:e2:f4:6a: f4:f4:a8:cc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f/WgFbKu+GP0G7p9SKGKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MGU1OTJhMmUwZDQyN2EwOWFhMmRlMWI5YmFmMDhjY2Qx NGYwYTAwHhcNMjYwMTAyMDIxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTU1M2FlNTgxNGQzMGVmMDRhNzhjZWJmYmVjM2RjMzc4Yzc1OTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJUkfMYV88y+2eblbamMPxNw5Hk8 cSBKrYAmI5XdC4VLRoaFSY2Lx87wxllqhJTjzYBK5xFp8PLyvc04m0qJDWNbBCQS 4he+Ai1Kb/cGC6GT9ntLvjQWUyBMhaI+WVjUKhqWgyHNrcYyzIXB+PvnNiNjY4LA HEe6WLmBpvrcodnD+LIKj7OHgUFl5KN1IwLWmCROIGgjH4rQAStDaHt1PY+NYzox DwTbx4v1MNs9OtW2mL09KXQFGMgH+tlYLkhSJiLXGlDhlAvnXKiCVOGejZ4E3uI7 i4dapBbcmsM1z7v2Y9qeJM2N4WCBPLUhdSvkfcD2dm5qCxHzoTcKCyu3wwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMFVOuWBTTDvBKeM6/vsPcN4x1mbMB8GA1UdIwQY MBaAFAkOWSouDUJ6Caot4bm68IzNFPCgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1E1WktpNE5Rbm9KcWkzaHVicndqTTBVOEtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8xNWY2OTAtNWFkZC00NzBkLWEyODYt MzNiZGM3M2VkMGVhLzEvd1ZVNjVZRk5NTzhFcDR6ci0tdzl3M2pIV1pzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8xNWY2OTAtNWFkZC00NzBkLWEyODYtMzNiZGM3M2VkMGVh LzEvQ1E1WktpNE5Rbm9KcWkzaHVicndqTTBVOEtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/RmMA0G CSqGSIb3DQEBCwUAA4IBAQCyPmySXSJ2V3b60iwv/XyOwxcnZPlM+qp65g5lHnzy DFbSzR9QP9FLV1VY6He9VZBxGMu7wedHiTq4H5Ez5sWJd4JO++18GgAdzdZtVmcY 47KC7LJKAjKV2JBF0gVK9TlvTBOZsPOG9c/UIU96h2Fgx/w2B/V7VodVeRCtYIgR ZgRz9vYmqFtRD+LVn6Nm0VbYhBQZaF8UySqjUptX3u5vs+Ft6VfHekluYTmNZgGj oh9mTXYjOSW/wiICTFYait8wzebHAtYopnWP2k+mBQjvCb1h+kPLTCLa7+U62j0D WeOjhw0Y033Ik4NZ1y/Ysg2TtOecKo4QOk/i9Gr09KjM -----END CERTIFICATE-----Generated at Sun Jan 25 22:31:23 2026 by rpki-client