This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/wrOqy5HuCTVkCe5fRVTajU3ehvY.roa File: wrOqy5HuCTVkCe5fRVTajU3ehvY.roa (raw, json) Hash identifier: Fl62VKf9eEMW25X6taoDhAVNcBPYuEGUkuBrbI0k5Pc= Subject key identifier: C2:B3:AA:CB:91:EE:09:35:64:09:EE:5F:45:54:DA:8D:4D:DE:86:F6 Certificate issuer: /CN=6821c8ff0437f7edd829166fde03446f86109d80 Certificate serial: 019B7834B8BF77F0C2426E7F783845CC6644 Authority key identifier: 68:21:C8:FF:04:37:F7:ED:D8:29:16:6F:DE:03:44:6F:86:10:9D:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aCHI_wQ39-3YKRZv3gNEb4YQnYA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/wrOqy5HuCTVkCe5fRVTajU3ehvY.roa Signing time: Thu 01 Jan 2026 06:17:59 +0000 ROA not before: Thu 01 Jan 2026 06:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212761 IP address blocks: 91.227.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft rsync://rpki.ripe.net/repository/DEFAULT/aCHI_wQ39-3YKRZv3gNEb4YQnYA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:b8:bf:77:f0:c2:42:6e:7f:78:38:45:cc:66:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6821c8ff0437f7edd829166fde03446f86109d80 Validity Not Before: Jan 1 06:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c2b3aacb91ee09356409ee5f4554da8d4dde86f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:bd:50:1d:1a:f8:71:1a:73:91:13:19:7c:7c: 18:ec:d9:00:19:75:43:52:f1:ae:b9:34:2d:e7:f2: a3:dd:a6:60:39:69:d7:9b:5c:f1:fe:21:78:b3:a2: b7:27:19:9d:4d:f2:08:61:fe:77:a2:b0:c9:f6:a9: 55:bd:ca:c1:42:58:23:b5:de:d8:09:a7:c0:94:54: 25:f6:f0:19:53:e7:ca:43:c0:12:4d:c9:0f:ed:2d: 32:d1:d2:ea:1f:26:3d:04:61:a4:40:f3:40:d4:6c: ba:b7:da:aa:bd:ba:03:1c:7b:1d:b5:40:36:f4:5b: 89:2c:9b:a7:60:5c:1a:48:eb:7a:b1:21:6e:e2:d1: 8d:3e:86:cf:1e:8e:db:40:07:8e:24:34:40:27:ca: 3e:4a:9f:c6:71:bd:98:c7:35:d3:c9:77:9c:70:3f: a7:12:5f:57:cd:c4:65:25:53:87:27:cb:6a:0f:37: 4f:3e:de:b2:fa:27:63:b3:ee:98:05:8d:9e:62:36: 70:96:95:93:ab:5f:ae:37:93:c7:77:94:33:71:08: 37:45:6c:d8:2b:e9:c6:ca:18:bc:f4:ff:bc:c5:ed: 06:01:be:b9:77:09:ae:9e:67:e7:76:e3:94:46:fb: fd:ad:33:11:b3:1b:69:ca:4f:92:9a:70:ae:9a:1a: 28:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:B3:AA:CB:91:EE:09:35:64:09:EE:5F:45:54:DA:8D:4D:DE:86:F6 X509v3 Authority Key Identifier: keyid:68:21:C8:FF:04:37:F7:ED:D8:29:16:6F:DE:03:44:6F:86:10:9D:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCHI_wQ39-3YKRZv3gNEb4YQnYA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/wrOqy5HuCTVkCe5fRVTajU3ehvY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.227.42.0/24 Signature Algorithm: sha256WithRSAEncryption 72:af:61:f9:0a:6f:10:e4:b9:2d:89:fa:89:c1:d1:31:ee:b0: a9:79:6c:0f:92:d7:1e:8c:1e:e3:b0:ab:f8:6d:45:45:40:2b: d0:3c:43:bf:4f:77:ef:5b:3c:2f:00:52:96:9f:37:e4:b1:61: 4d:74:0b:94:38:67:18:e2:e4:b5:dd:73:70:b4:06:d1:cc:80: f4:80:17:9f:bd:df:5e:36:12:2b:ff:fe:6b:ba:98:45:ec:28: fe:da:d0:13:b6:d3:83:18:1f:0a:89:af:cc:f9:bf:f8:c5:d6: bb:5c:b9:1e:6a:c7:7c:1a:64:39:4b:37:99:ce:d4:4d:49:90: 5b:36:ac:7e:07:c1:53:a6:f5:12:b8:be:44:d3:41:6c:fd:e7: 1e:84:3a:39:cb:d0:5d:76:2f:2a:49:7c:83:ca:44:ab:2d:a2: 2c:2d:30:45:05:41:17:79:2c:d1:04:f2:6a:8c:dd:79:68:2c: ad:de:0a:a9:64:c3:87:76:ed:2d:6e:1a:a8:c8:cc:1e:3a:77: cb:d6:74:b4:74:bb:59:6d:1c:eb:4c:5f:29:12:b5:dc:d9:6f: 1b:25:12:67:73:b9:fc:36:38:e1:db:14:d5:0e:82:82:8e:93: 49:28:7c:47:9d:5a:58:01:67:89:6a:9b:89:54:da:eb:6a:d8: e2:95:39:90 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NLi/d/DCQm5/eDhFzGZEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4MjFjOGZmMDQzN2Y3ZWRkODI5MTY2ZmRlMDM0NDZmODYx MDlkODAwHhcNMjYwMTAxMDYxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMmIzYWFjYjkxZWUwOTM1NjQwOWVlNWY0NTU0ZGE4ZDRkZGU4NmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsL1QHRr4cRpzkRMZfHwY7NkAGXVD UvGuuTQt5/Kj3aZgOWnXm1zx/iF4s6K3JxmdTfIIYf53orDJ9qlVvcrBQlgjtd7Y CafAlFQl9vAZU+fKQ8ASTckP7S0y0dLqHyY9BGGkQPNA1Gy6t9qqvboDHHsdtUA2 9FuJLJunYFwaSOt6sSFu4tGNPobPHo7bQAeOJDRAJ8o+Sp/Gcb2YxzXTyXeccD+n El9XzcRlJVOHJ8tqDzdPPt6y+idjs+6YBY2eYjZwlpWTq1+uN5PHd5QzcQg3RWzY K+nGyhi89P+8xe0GAb65dwmunmfnduOURvv9rTMRsxtpyk+SmnCumhooJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMKzqsuR7gk1ZAnuX0VU2o1N3ob2MB8GA1UdIwQY MBaAFGghyP8EN/ft2CkWb94DRG+GEJ2AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUNISV93UTM5LTNZS1JadjNnTkViNFlRbllBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8xM2IxNDQtYmUxNi00OTIyLWE5ODMt MjVhZTkyOTNmNmI0LzEvd3JPcXk1SHVDVFZrQ2U1ZlJWVGFqVTNlaHZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy8xM2IxNDQtYmUxNi00OTIyLWE5ODMtMjVhZTkyOTNmNmI0 LzEvYUNISV93UTM5LTNZS1JadjNnTkViNFlRbllBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+MqMA0G CSqGSIb3DQEBCwUAA4IBAQByr2H5Cm8Q5LktifqJwdEx7rCpeWwPktcejB7jsKv4 bUVFQCvQPEO/T3fvWzwvAFKWnzfksWFNdAuUOGcY4uS13XNwtAbRzID0gBefvd9e NhIr//5ruphF7Cj+2tATttODGB8Kia/M+b/4xda7XLkeasd8GmQ5SzeZztRNSZBb Nqx+B8FTpvUSuL5E00Fs/ecehDo5y9Bddi8qSXyDykSrLaIsLTBFBUEXeSzRBPJq jN15aCyt3gqpZMOHdu0tbhqoyMweOnfL1nS0dLtZbRzrTF8pErXc2W8bJRJnc7n8 Njjh2xTVDoKCjpNJKHxHnVpYAWeJapuJVNrratjilTmQ -----END CERTIFICATE-----Generated at Mon Jan 26 06:03:24 2026 by rpki-client