This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/w9C2YEP1w5Y_JbXVYJuueL5--a4.roa File: w9C2YEP1w5Y_JbXVYJuueL5--a4.roa (raw, json) Hash identifier: +XN99efnsnCoGzlf+tUbIokhlmEnZBGkv0fp+mcWEF0= Subject key identifier: C3:D0:B6:60:43:F5:C3:96:3F:25:B5:D5:60:9B:AE:78:BE:7E:F9:AE Certificate issuer: /CN=96f1977cf17fe4e1de2f16293c669f44d5bd7433 Certificate serial: 019B7E37F90D4800DEA56102F574F3019A0A Authority key identifier: 96:F1:97:7C:F1:7F:E4:E1:DE:2F:16:29:3C:66:9F:44:D5:BD:74:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/w9C2YEP1w5Y_JbXVYJuueL5--a4.roa Signing time: Fri 02 Jan 2026 10:19:16 +0000 ROA not before: Fri 02 Jan 2026 10:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58347 IP address blocks: 91.103.142.0/24 maxlen: 24 130.49.144.0/23 maxlen: 23 130.49.144.0/24 maxlen: 24 130.49.145.0/24 maxlen: 24 193.135.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.crl rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:f9:0d:48:00:de:a5:61:02:f5:74:f3:01:9a:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96f1977cf17fe4e1de2f16293c669f44d5bd7433 Validity Not Before: Jan 2 10:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c3d0b66043f5c3963f25b5d5609bae78be7ef9ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8a:fb:c3:bd:0f:d8:60:a1:d4:66:10:37:4e: 61:c5:3a:0d:ec:85:c9:79:cb:4f:0d:63:59:1f:9d: 0a:77:8b:2e:6a:f5:70:3c:80:27:3e:fa:78:22:56: 85:d9:dd:b1:cd:23:d7:4b:4b:7c:e6:e1:e6:1e:24: 12:16:3b:e5:bf:18:8d:ea:93:ef:45:5d:af:d4:75: 40:10:51:1a:50:b3:5c:41:39:1a:ca:7d:5c:fd:ee: f4:fa:eb:73:5b:75:c3:ed:51:31:de:f7:31:55:41: 8f:6a:34:08:a3:d2:9f:2c:cc:4d:d0:70:a6:d9:14: ff:a9:1d:83:2b:15:bf:e2:bf:d7:c3:90:30:28:f5: dd:24:6c:88:8b:43:b2:e4:e9:90:12:0b:32:bf:19: 19:ec:f8:c4:e6:1c:1a:49:8d:a7:0a:67:c9:60:ed: 7e:3a:a7:b6:77:86:54:f3:cc:a4:aa:f5:4d:65:8e: d2:47:60:02:00:17:8b:42:c5:90:ab:43:e2:30:6a: 9d:ff:fe:6b:b4:18:81:8c:f3:ad:b8:86:62:88:37: bf:70:dc:00:62:b0:c8:1e:82:99:c6:6f:a5:9f:aa: 54:7a:df:38:07:84:2a:06:e6:dc:ba:16:7e:21:cb: 11:95:64:70:bb:c1:c5:6f:bd:56:b3:ee:f6:56:38: 20:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:D0:B6:60:43:F5:C3:96:3F:25:B5:D5:60:9B:AE:78:BE:7E:F9:AE X509v3 Authority Key Identifier: keyid:96:F1:97:7C:F1:7F:E4:E1:DE:2F:16:29:3C:66:9F:44:D5:BD:74:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/w9C2YEP1w5Y_JbXVYJuueL5--a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.103.142.0/24 130.49.144.0/23 193.135.12.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:76:7b:fb:fc:fb:28:dc:f8:61:79:92:2e:f4:26:b2:4b:77: ca:67:f9:4a:57:bc:a0:0e:62:ee:91:1f:bb:22:f6:82:63:9c: f0:e5:04:fa:7b:06:80:85:e9:c0:3d:01:ca:c5:e0:cb:75:09: 3a:19:50:59:75:30:5a:4d:80:52:2c:fa:d0:9f:e8:24:8d:97: fe:67:fb:62:11:bc:53:a3:bc:84:6d:67:cf:fd:e7:ca:30:6e: 78:93:d2:e1:9d:be:53:1d:11:7e:96:27:5a:b1:5a:90:26:98: f8:04:c3:dd:a7:fb:d7:e1:47:ed:18:9a:a3:c5:71:f5:fd:94: 5b:4c:47:07:33:6a:93:58:0c:5f:76:2c:96:9a:36:74:59:be: 58:9e:31:dc:0e:91:83:d8:be:40:f0:5f:02:ab:42:14:82:87: a3:eb:1e:be:e3:2f:a3:66:4e:3b:1f:5c:0d:79:6a:25:c4:94: ed:cd:7d:79:4c:50:51:71:0f:6c:a9:e1:dd:e0:b2:fc:64:e9: c7:8f:53:f3:95:6d:a1:b4:69:9b:84:4d:bb:0a:e2:05:18:0a: 2a:f4:68:3b:7f:5c:fd:d8:2e:33:a4:ec:b1:8c:da:13:71:d9: 68:92:07:17:ac:e0:74:8e:73:5b:36:f6:00:d4:64:70:08:ed: b6:08:22:b5 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+N/kNSADepWEC9XTzAZoKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZjE5NzdjZjE3ZmU0ZTFkZTJmMTYyOTNjNjY5ZjQ0ZDVi ZDc0MzMwHhcNMjYwMTAyMTAxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjM2QwYjY2MDQzZjVjMzk2M2YyNWI1ZDU2MDliYWU3OGJlN2VmOWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIr7w70P2GCh1GYQN05hxToN7IXJ ectPDWNZH50Kd4suavVwPIAnPvp4IlaF2d2xzSPXS0t85uHmHiQSFjvlvxiN6pPv RV2v1HVAEFEaULNcQTkayn1c/e70+utzW3XD7VEx3vcxVUGPajQIo9KfLMxN0HCm 2RT/qR2DKxW/4r/Xw5AwKPXdJGyIi0Oy5OmQEgsyvxkZ7PjE5hwaSY2nCmfJYO1+ Oqe2d4ZU88ykqvVNZY7SR2ACABeLQsWQq0PiMGqd//5rtBiBjPOtuIZiiDe/cNwA YrDIHoKZxm+ln6pUet84B4QqBubcuhZ+IcsRlWRwu8HFb71Ws+72VjggZwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMPQtmBD9cOWPyW11WCbrni+fvmuMB8GA1UdIwQY MBaAFJbxl3zxf+Th3i8WKTxmn0TVvXQzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHZHWGZQRl81T0hlTHhZcFBHYWZSTlc5ZERNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yNGE0N2QtNmE0ZC00ZTE1LWEyMzgt Nzc0MGIzZDY5MDVlLzEvdzlDMllFUDF3NVlfSmJYVllKdXVlTDUtLWE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8yNGE0N2QtNmE0ZC00ZTE1LWEyMzgtNzc0MGIzZDY5MDVl LzEvbHZHWGZQRl81T0hlTHhZcFBHYWZSTlc5ZERNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW2eOAwQB gjGQAwQAwYcMMA0GCSqGSIb3DQEBCwUAA4IBAQB7dnv7/Pso3PhheZIu9CayS3fK Z/lKV7ygDmLukR+7IvaCY5zw5QT6ewaAhenAPQHKxeDLdQk6GVBZdTBaTYBSLPrQ n+gkjZf+Z/tiEbxTo7yEbWfP/efKMG54k9Lhnb5THRF+lidasVqQJpj4BMPdp/vX 4UftGJqjxXH1/ZRbTEcHM2qTWAxfdiyWmjZ0Wb5YnjHcDpGD2L5A8F8Cq0IUgoej 6x6+4y+jZk47H1wNeWolxJTtzX15TFBRcQ9sqeHd4LL8ZOnHj1PzlW2htGmbhE27 CuIFGAoq9Gg7f1z92C4zpOyxjNoTcdlokgcXrOB0jnNbNvYA1GRwCO22CCK1 -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:32 2026 by rpki-client