This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/Wsun9qUEkz7Qte-mPAle0T2WkOc.roa File: Wsun9qUEkz7Qte-mPAle0T2WkOc.roa (raw, json) Hash identifier: 3L85Zuxdwbe+qNboOx36lUzHEqWROzqfxPyAEkPek0w= Subject key identifier: 5A:CB:A7:F6:A5:04:93:3E:D0:B5:EF:A6:3C:09:5E:D1:3D:96:90:E7 Certificate issuer: /CN=b0bfd2c85e6b79d460e660cf9664dee55dccc8cc Certificate serial: 019B7CEE0416F0B97AD9AA70AEF59B5CAF44 Authority key identifier: B0:BF:D2:C8:5E:6B:79:D4:60:E6:60:CF:96:64:DE:E5:5D:CC:C8:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL_SyF5redRg5mDPlmTe5V3MyMw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/Wsun9qUEkz7Qte-mPAle0T2WkOc.roa Signing time: Fri 02 Jan 2026 04:18:51 +0000 ROA not before: Fri 02 Jan 2026 04:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56855 IP address blocks: 91.226.179.0/24 maxlen: 24 185.51.100.0/24 maxlen: 24 185.51.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.crl rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.mft rsync://rpki.ripe.net/repository/DEFAULT/sL_SyF5redRg5mDPlmTe5V3MyMw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:04:16:f0:b9:7a:d9:aa:70:ae:f5:9b:5c:af:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0bfd2c85e6b79d460e660cf9664dee55dccc8cc Validity Not Before: Jan 2 04:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5acba7f6a504933ed0b5efa63c095ed13d9690e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bd:d2:4d:0e:9e:07:0e:9e:a7:55:cf:8b:d4: b9:6e:96:e9:14:31:b4:22:b0:11:f9:b4:fc:a5:2d: 51:7d:ad:e9:77:a0:77:51:97:de:96:aa:e1:0e:bf: 99:b3:1b:7a:58:0e:72:e5:48:67:07:14:b9:b1:05: 59:a0:b4:fc:5d:f9:62:2a:63:e8:f5:8b:c3:da:4c: 28:ac:2a:be:f8:54:97:29:bb:a6:f8:9a:f5:11:c2: 01:d8:59:29:31:72:4f:cb:af:27:12:66:c8:5c:ed: 5c:ac:7c:23:7d:26:eb:45:cf:8c:df:71:9f:9b:d4: 6f:8e:d3:f5:18:96:be:63:cf:be:78:7d:a0:15:e2: bd:70:bc:49:77:3f:fe:b2:db:e7:71:21:52:6b:f3: 94:56:ad:06:9e:97:77:57:49:09:62:49:56:96:3c: a4:22:9a:a5:e6:a6:22:00:4f:17:30:ff:1a:ca:51: 63:a2:36:fd:9b:d3:05:ab:46:27:8c:64:84:66:c5: 23:d1:2e:f3:f3:43:1f:3a:e2:1c:c7:2d:ee:9c:d4: f8:af:35:42:61:99:5c:54:9c:1d:22:cd:37:84:6b: 21:0c:07:52:62:f9:e1:a8:c8:9c:44:ac:a5:be:28: dd:3e:d1:a2:b8:68:84:11:20:d4:20:1f:76:92:82: 76:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:CB:A7:F6:A5:04:93:3E:D0:B5:EF:A6:3C:09:5E:D1:3D:96:90:E7 X509v3 Authority Key Identifier: keyid:B0:BF:D2:C8:5E:6B:79:D4:60:E6:60:CF:96:64:DE:E5:5D:CC:C8:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL_SyF5redRg5mDPlmTe5V3MyMw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/Wsun9qUEkz7Qte-mPAle0T2WkOc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.226.179.0/24 185.51.100.0/23 Signature Algorithm: sha256WithRSAEncryption 4e:35:e2:e0:67:c9:43:df:27:6a:a9:3c:e2:12:5f:6c:92:7b: 7a:80:61:ef:cb:a7:2c:3f:f0:46:27:35:28:1f:01:72:b8:c3: 3d:e3:15:b3:59:4b:2d:fb:ef:69:32:5c:c6:1a:69:36:35:e5: 1f:37:c3:e4:25:7a:af:a9:1a:54:81:0e:fe:66:ea:e6:89:14: fd:68:9a:a2:59:57:7a:88:4d:db:74:8e:88:2a:05:7f:fc:c8: a2:28:fc:06:cd:ff:4e:8d:37:45:2f:29:a1:9e:fd:b0:6e:b8: 81:aa:4f:e5:b5:a0:29:66:c0:c9:90:ec:ae:95:e5:cc:bd:fc: 79:31:d2:d1:37:00:16:34:5d:f2:06:a2:67:6e:da:3b:70:ff: d6:cd:c7:69:01:07:b9:39:dc:9a:8c:dd:2e:76:f1:2c:b5:3a: e0:ce:2e:89:a2:78:39:e0:ac:01:96:82:1b:d6:c4:a2:67:56: 2b:72:16:a5:b2:6c:8f:d0:82:45:e7:79:a7:dd:27:f2:bb:89: 2b:11:83:4a:a2:b2:af:cf:2d:98:5e:50:6f:ea:6f:bd:5f:e2: 31:16:45:ca:43:b1:0e:24:79:cb:ae:81:19:31:6b:a4:f7:b1: 99:66:25:53:fc:ee:e6:ee:ad:bc:15:fb:14:75:ab:cf:e6:22: 92:88:e5:d0 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87gQW8Ll62apwrvWbXK9EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYmZkMmM4NWU2Yjc5ZDQ2MGU2NjBjZjk2NjRkZWU1NWRj Y2M4Y2MwHhcNMjYwMTAyMDQxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YWNiYTdmNmE1MDQ5MzNlZDBiNWVmYTYzYzA5NWVkMTNkOTY5MGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqb3STQ6eBw6ep1XPi9S5bpbpFDG0 IrAR+bT8pS1Rfa3pd6B3UZfelqrhDr+Zsxt6WA5y5UhnBxS5sQVZoLT8XfliKmPo 9YvD2kworCq++FSXKbum+Jr1EcIB2FkpMXJPy68nEmbIXO1crHwjfSbrRc+M33Gf m9RvjtP1GJa+Y8++eH2gFeK9cLxJdz/+stvncSFSa/OUVq0Gnpd3V0kJYklWljyk Ipql5qYiAE8XMP8aylFjojb9m9MFq0YnjGSEZsUj0S7z80MfOuIcxy3unNT4rzVC YZlcVJwdIs03hGshDAdSYvnhqMicRKylvijdPtGiuGiEESDUIB92koJ2zwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFrLp/alBJM+0LXvpjwJXtE9lpDnMB8GA1UdIwQY MBaAFLC/0shea3nUYOZgz5Zk3uVdzMjMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0xfU3lGNXJlZFJnNW1EUGxtVGU1VjNNeU13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8yMDNhNTMtMDU4YS00ZDVkLWE3NjEt ZDM3MTg1NTc1NmMzLzEvV3N1bjlxVUVrejdRdGUtbVBBbGUwVDJXa09jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My8yMDNhNTMtMDU4YS00ZDVkLWE3NjEtZDM3MTg1NTc1NmMz LzEvc0xfU3lGNXJlZFJnNW1EUGxtVGU1VjNNeU13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW+KzAwQB uTNkMA0GCSqGSIb3DQEBCwUAA4IBAQBONeLgZ8lD3ydqqTziEl9sknt6gGHvy6cs P/BGJzUoHwFyuMM94xWzWUst++9pMlzGGmk2NeUfN8PkJXqvqRpUgQ7+ZurmiRT9 aJqiWVd6iE3bdI6IKgV//MiiKPwGzf9OjTdFLymhnv2wbriBqk/ltaApZsDJkOyu leXMvfx5MdLRNwAWNF3yBqJnbto7cP/WzcdpAQe5OdyajN0udvEstTrgzi6Jong5 4KwBloIb1sSiZ1YrchalsmyP0IJF53mn3Sfyu4krEYNKorKvzy2YXlBv6m+9X+Ix FkXKQ7EOJHnLroEZMWuk97GZZiVT/O7m7q28FfsUdavP5iKSiOXQ -----END CERTIFICATE-----Generated at Sun Jan 25 16:54:57 2026 by rpki-client