This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Wj_qItvZ8nCv6IAqTKi7edGF_J0.roa File: Wj_qItvZ8nCv6IAqTKi7edGF_J0.roa (raw, json) Hash identifier: g40LtFFYkGRLTg/R02uueeyuMPwHWbYTIxLpfiRgOHk= Subject key identifier: 5A:3F:EA:22:DB:D9:F2:70:AF:E8:80:2A:4C:A8:BB:79:D1:85:FC:9D Certificate issuer: /CN=439ced9805a3c5d934e2c521a17a8ab94f11aec5 Certificate serial: 019B7EA4BF677562BAC228DE7234448CFCA4 Authority key identifier: 43:9C:ED:98:05:A3:C5:D9:34:E2:C5:21:A1:7A:8A:B9:4F:11:AE:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Wj_qItvZ8nCv6IAqTKi7edGF_J0.roa Signing time: Fri 02 Jan 2026 12:18:04 +0000 ROA not before: Fri 02 Jan 2026 12:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12731 IP address blocks: 91.216.90.0/24 maxlen: 24 2001:678:2c4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.crl rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft rsync://rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:bf:67:75:62:ba:c2:28:de:72:34:44:8c:fc:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=439ced9805a3c5d934e2c521a17a8ab94f11aec5 Validity Not Before: Jan 2 12:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a3fea22dbd9f270afe8802a4ca8bb79d185fc9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d5:1b:dd:35:3d:9a:d9:9c:35:0b:9a:26:47: 95:8b:c7:2d:ca:aa:75:ed:44:5f:92:11:cd:77:a6: 96:bd:58:f5:8c:42:5a:ab:dd:08:84:15:15:07:2d: d5:2e:cd:3a:c8:fa:a1:f1:e4:7b:86:7d:34:a9:98: 86:46:24:5f:0e:04:56:bf:f5:27:bd:16:4a:21:98: df:92:79:3e:8d:95:d2:e3:16:dd:d7:9b:4f:c3:6c: b6:33:45:0f:7c:0c:b7:d9:10:18:a8:02:75:a5:3c: 91:03:49:f3:a0:38:08:4b:73:17:d6:c7:be:6b:0a: f6:8a:81:f1:13:31:e3:46:8a:bb:c7:d8:44:21:d4: 37:4a:7f:cd:10:42:ae:31:c0:54:85:dc:a9:cf:e1: 22:4b:83:e6:89:87:8d:4f:1d:e6:65:65:cc:b2:44: fa:ff:d4:b9:51:c3:60:c3:fa:cd:d5:d5:12:35:bb: 61:cf:17:a3:95:6a:74:9f:07:57:13:07:e1:0c:55: 37:9c:f8:85:08:23:b7:82:8b:fe:47:5e:a9:4f:bf: 3d:9a:7b:79:53:b4:81:32:6d:5f:77:a1:5d:b0:58: b7:59:f0:81:b0:66:51:d5:3d:15:29:31:47:0f:57: b0:4d:f2:02:a6:8d:9e:ea:61:67:be:81:3f:a6:89: 5a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:3F:EA:22:DB:D9:F2:70:AF:E8:80:2A:4C:A8:BB:79:D1:85:FC:9D X509v3 Authority Key Identifier: keyid:43:9C:ED:98:05:A3:C5:D9:34:E2:C5:21:A1:7A:8A:B9:4F:11:AE:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Wj_qItvZ8nCv6IAqTKi7edGF_J0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.90.0/24 IPv6: 2001:678:2c4::/48 Signature Algorithm: sha256WithRSAEncryption 4f:fc:ef:ec:58:9e:20:d6:b0:1c:4a:37:5d:d0:8f:a7:a2:88: 6c:73:a5:0c:08:d9:4f:77:5c:36:e8:27:a1:4d:8a:a2:5c:62: e3:b1:7e:3f:64:30:59:b2:30:d9:57:cf:99:11:95:9d:87:78: 93:ac:19:84:76:78:a2:8c:1c:84:7a:f8:d8:45:be:9c:69:0a: 36:c8:99:be:c4:f5:09:69:77:e4:95:e6:8c:f8:0c:a1:8e:6f: a8:09:d2:c0:38:bd:57:04:1d:07:71:74:67:5c:1e:8c:9b:c5: b7:55:c1:32:95:32:6f:a1:c2:b5:41:e3:4a:b6:11:5e:b4:c4: ab:5a:e9:6b:e2:15:58:e0:5d:01:8a:5b:8b:48:7a:96:44:9d: d8:be:ac:b9:e6:66:3f:d3:73:03:57:31:e1:0c:86:c2:13:3a: 1b:30:71:40:b3:65:b7:23:4d:f0:31:a1:26:f5:a4:8d:02:de: 48:f1:44:75:a2:f7:ad:71:92:0e:c5:72:cc:91:39:1c:e1:18: 84:c3:b7:74:7c:af:7f:c6:2b:7b:f3:64:d2:ec:f3:11:66:4c: 0b:ed:f3:69:47:71:8b:54:1b:66:33:ac:f8:75:b8:2b:b5:49: 7a:75:bc:79:ff:a4:7c:e0:df:57:55:b7:a8:f1:7f:7a:3c:19: 0d:80:db:dc -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt+pL9ndWK6wijecjREjPykMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzOWNlZDk4MDVhM2M1ZDkzNGUyYzUyMWExN2E4YWI5NGYx MWFlYzUwHhcNMjYwMTAyMTIxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTNmZWEyMmRiZDlmMjcwYWZlODgwMmE0Y2E4YmI3OWQxODVmYzlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9Ub3TU9mtmcNQuaJkeVi8ctyqp1 7URfkhHNd6aWvVj1jEJaq90IhBUVBy3VLs06yPqh8eR7hn00qZiGRiRfDgRWv/Un vRZKIZjfknk+jZXS4xbd15tPw2y2M0UPfAy32RAYqAJ1pTyRA0nzoDgIS3MX1se+ awr2ioHxEzHjRoq7x9hEIdQ3Sn/NEEKuMcBUhdypz+EiS4PmiYeNTx3mZWXMskT6 /9S5UcNgw/rN1dUSNbthzxejlWp0nwdXEwfhDFU3nPiFCCO3gov+R16pT789mnt5 U7SBMm1fd6FdsFi3WfCBsGZR1T0VKTFHD1ewTfICpo2e6mFnvoE/pola1wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFFo/6iLb2fJwr+iAKkyou3nRhfydMB8GA1UdIwQY MBaAFEOc7ZgFo8XZNOLFIaF6irlPEa7FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTV6dG1BV2p4ZGswNHNVaG9YcUt1VThScnNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC83YjUwN2EtZmVjZC00YWUzLTgwNWQt YTc3ODM0NWFlZDg4LzEvV2pfcUl0dlo4bkN2NklBcVRLaTdlZEdGX0owLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC83YjUwN2EtZmVjZC00YWUzLTgwNWQtYTc3ODM0NWFlZDg4 LzEvUTV6dG1BV2p4ZGswNHNVaG9YcUt1VThScnNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW9haMA8E AgACMAkDBwAgAQZ4AsQwDQYJKoZIhvcNAQELBQADggEBAE/87+xYniDWsBxKN13Q j6eiiGxzpQwI2U93XDboJ6FNiqJcYuOxfj9kMFmyMNlXz5kRlZ2HeJOsGYR2eKKM HIR6+NhFvpxpCjbImb7E9Qlpd+SV5oz4DKGOb6gJ0sA4vVcEHQdxdGdcHoybxbdV wTKVMm+hwrVB40q2EV60xKta6WviFVjgXQGKW4tIepZEndi+rLnmZj/TcwNXMeEM hsITOhswcUCzZbcjTfAxoSb1pI0C3kjxRHWi961xkg7FcsyRORzhGITDt3R8r3/G K3vzZNLs8xFmTAvt82lHcYtUG2YzrPh1uCu1SXp1vHn/pHzg31dVt6jxf3o8GQ2A 29w= -----END CERTIFICATE-----Generated at Sun Jan 25 18:09:40 2026 by rpki-client