This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/wA59sXSCzQX_lnDI9OMnkp5P6yQ.roa File: wA59sXSCzQX_lnDI9OMnkp5P6yQ.roa (raw, json) Hash identifier: 3unU8/VgG8FeuLF+n9dZ02OE5LTcBxSZEPgG5bjCfR0= Subject key identifier: C0:0E:7D:B1:74:82:CD:05:FF:96:70:C8:F4:E3:27:92:9E:4F:EB:24 Certificate issuer: /CN=b0ef19bcb23a2f04c586ac1311a91bc7ca2a9765 Certificate serial: 019B79EC23E19487DE9155C7E72106B9D895 Authority key identifier: B0:EF:19:BC:B2:3A:2F:04:C5:86:AC:13:11:A9:1B:C7:CA:2A:97:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/wA59sXSCzQX_lnDI9OMnkp5P6yQ.roa Signing time: Thu 01 Jan 2026 14:17:57 +0000 ROA not before: Thu 01 Jan 2026 14:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6730 IP address blocks: 91.213.4.0/24 maxlen: 24 91.214.168.0/22 maxlen: 22 91.214.168.0/24 maxlen: 24 91.214.169.0/24 maxlen: 24 91.214.170.0/24 maxlen: 24 91.214.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:23:e1:94:87:de:91:55:c7:e7:21:06:b9:d8:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0ef19bcb23a2f04c586ac1311a91bc7ca2a9765 Validity Not Before: Jan 1 14:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c00e7db17482cd05ff9670c8f4e327929e4feb24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ff:73:ca:20:55:2e:5d:76:cd:22:8b:58:a1: 30:00:a7:56:88:05:a6:96:dc:94:b6:96:4f:30:65: 1f:0d:64:8e:13:76:24:37:05:8a:0a:70:17:7c:5e: 29:8f:e7:93:e2:49:ec:46:35:01:89:a1:84:f3:2c: 34:7f:02:fe:fb:0a:f9:9d:6e:ae:54:6f:25:d0:45: c0:69:84:70:ed:53:21:46:b8:29:57:3d:ca:ce:0e: 88:66:e1:fa:f1:d9:01:8d:24:dd:d6:81:9d:14:57: 33:50:d2:a6:c9:52:ee:ee:64:2e:17:0a:ca:7f:af: 6f:57:45:ee:0e:77:c4:e7:19:ea:45:3e:b2:70:65: e4:de:7b:33:79:df:f0:52:c8:6d:43:d8:68:b1:80: 62:49:63:fa:d4:db:4d:a7:ac:dd:a2:1d:9f:9a:75: 39:cd:2b:17:26:da:93:09:e0:f6:07:1c:56:f4:ee: 44:a3:f8:ba:5c:b3:92:87:32:40:b8:60:ea:ff:53: 7e:11:03:9f:bc:8a:96:7b:4b:56:50:bc:cb:19:0b: c7:b9:58:9a:6d:4e:d0:a4:45:9c:14:ab:85:6c:97: 16:0d:2d:54:78:14:a0:af:f0:ba:87:55:ed:e6:bc: af:24:d8:1f:08:1e:a7:0c:9c:20:0c:01:a7:cb:d5: 46:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:0E:7D:B1:74:82:CD:05:FF:96:70:C8:F4:E3:27:92:9E:4F:EB:24 X509v3 Authority Key Identifier: keyid:B0:EF:19:BC:B2:3A:2F:04:C5:86:AC:13:11:A9:1B:C7:CA:2A:97:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/wA59sXSCzQX_lnDI9OMnkp5P6yQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.213.4.0/24 91.214.168.0/22 Signature Algorithm: sha256WithRSAEncryption 77:34:0b:fa:77:ef:00:61:ce:de:41:85:0a:8a:a2:99:cc:54: bb:32:5e:81:b6:2b:c6:55:41:19:cd:1e:20:56:f5:8e:46:57: 5e:72:3e:de:03:65:7d:3c:66:1a:09:a9:c9:61:07:75:74:ef: ca:68:8b:e0:9c:f1:b4:dc:f1:9b:c1:7f:5d:9b:b3:fd:0a:54: 69:a9:88:d1:f9:48:c8:9e:d0:63:b8:07:8a:6f:5f:23:b0:e5: cf:6e:ce:69:06:d1:96:25:d7:13:5e:40:0a:16:03:7b:69:dd: ef:90:b1:9d:2f:ad:73:b5:78:e7:2e:b2:5c:26:e0:ca:81:b5: 5a:8a:92:53:7a:8a:c1:ab:19:f2:f8:91:d1:b5:bb:97:3d:e5: d6:12:d3:a3:41:a1:77:bb:92:7d:8a:83:2f:b8:da:66:19:06: 4a:8c:83:71:3f:bf:ae:0e:b7:6d:dd:bb:3d:10:ef:ac:61:b8: b1:98:75:e5:c4:11:d9:ba:b5:ce:00:14:0e:95:cf:95:b8:da: c6:2c:ff:7e:5c:ea:56:f0:b8:fd:d8:4b:79:3d:93:ee:13:38: 1d:d1:f0:b6:43:5f:e9:fb:e9:03:58:b8:f9:d1:72:ea:bc:a2: ae:5e:f0:19:02:24:c1:9b:6b:a7:f5:38:44:8c:ba:11:5b:b5: 50:c7:6e:4a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57CPhlIfekVXH5yEGudiVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwZWYxOWJjYjIzYTJmMDRjNTg2YWMxMzExYTkxYmM3Y2Ey YTk3NjUwHhcNMjYwMTAxMTQxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDBlN2RiMTc0ODJjZDA1ZmY5NjcwYzhmNGUzMjc5MjllNGZlYjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/9zyiBVLl12zSKLWKEwAKdWiAWm ltyUtpZPMGUfDWSOE3YkNwWKCnAXfF4pj+eT4knsRjUBiaGE8yw0fwL++wr5nW6u VG8l0EXAaYRw7VMhRrgpVz3Kzg6IZuH68dkBjSTd1oGdFFczUNKmyVLu7mQuFwrK f69vV0XuDnfE5xnqRT6ycGXk3nszed/wUshtQ9hosYBiSWP61NtNp6zdoh2fmnU5 zSsXJtqTCeD2BxxW9O5Eo/i6XLOShzJAuGDq/1N+EQOfvIqWe0tWULzLGQvHuVia bU7QpEWcFKuFbJcWDS1UeBSgr/C6h1Xt5ryvJNgfCB6nDJwgDAGny9VGdQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMAOfbF0gs0F/5ZwyPTjJ5KeT+skMB8GA1UdIwQY MBaAFLDvGbyyOi8ExYasExGpG8fKKpdlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc084WnZMSTZMd1RGaHF3VEVha2J4OG9xbDJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9hZjNlNTEtNzlkNi00MDc4LWE1Njkt ZDAwMDNhNmI1MjI0LzEvd0E1OXNYU0N6UVhfbG5ESTlPTW5rcDVQNnlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9hZjNlNTEtNzlkNi00MDc4LWE1NjktZDAwMDNhNmI1MjI0 LzEvc084WnZMSTZMd1RGaHF3VEVha2J4OG9xbDJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9UEAwQC W9aoMA0GCSqGSIb3DQEBCwUAA4IBAQB3NAv6d+8AYc7eQYUKiqKZzFS7Ml6BtivG VUEZzR4gVvWORldecj7eA2V9PGYaCanJYQd1dO/KaIvgnPG03PGbwX9dm7P9ClRp qYjR+UjIntBjuAeKb18jsOXPbs5pBtGWJdcTXkAKFgN7ad3vkLGdL61ztXjnLrJc JuDKgbVaipJTeorBqxny+JHRtbuXPeXWEtOjQaF3u5J9ioMvuNpmGQZKjINxP7+u Drdt3bs9EO+sYbixmHXlxBHZurXOABQOlc+VuNrGLP9+XOpW8Lj92Et5PZPuEzgd 0fC2Q1/p++kDWLj50XLqvKKuXvAZAiTBm2un9ThEjLoRW7VQx25K -----END CERTIFICATE-----Generated at Sun Jan 25 21:28:28 2026 by rpki-client