This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/rtWFes-25RLRJLlkWAnOV9y_VDU.roa File: rtWFes-25RLRJLlkWAnOV9y_VDU.roa (raw, json) Hash identifier: 3+EOMEdyyzgBn+xA9/R2u/F7BqlZVKKsbvRyIH5W+Bg= Subject key identifier: AE:D5:85:7A:CF:B6:E5:12:D1:24:B9:64:58:09:CE:57:DC:BF:54:35 Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9 Certificate serial: 019B7A5AADEB7B64F4BEDA386DEE74FDD280 Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/rtWFes-25RLRJLlkWAnOV9y_VDU.roa Signing time: Thu 01 Jan 2026 16:18:41 +0000 ROA not before: Thu 01 Jan 2026 16:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214111 IP address blocks: 91.208.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:ad:eb:7b:64:f4:be:da:38:6d:ee:74:fd:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9 Validity Not Before: Jan 1 16:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aed5857acfb6e512d124b9645809ce57dcbf5435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a4:3c:9c:dd:f5:3a:4d:ca:30:12:1b:ae:ff: 0d:25:06:fc:04:ae:b2:9a:0b:e2:b5:76:8c:20:02: 1a:9d:2f:a1:d1:e2:cd:60:0a:41:c1:1a:29:88:b1: e8:a0:1e:da:de:34:5f:36:7c:5b:5f:c0:2e:13:5a: 6f:74:ce:64:c4:6b:f0:1c:1d:22:2d:6c:44:7f:aa: d4:54:2d:45:dc:0c:4d:52:90:d6:84:05:b2:44:0b: 47:a9:cf:ab:7d:0d:24:4e:3d:af:b0:ac:2f:d4:40: ae:5f:1c:80:c9:1d:d3:65:23:14:57:e2:51:c3:08: d6:6f:a4:4d:b1:a7:9b:f7:b1:fb:fe:c8:d7:28:dc: fc:8a:b8:57:85:f0:9e:e6:07:f8:a8:46:3c:74:df: ca:08:e4:b3:41:33:b3:b3:fb:9f:37:5f:f9:a8:08: 9f:d9:b9:e6:f9:58:6d:e6:ed:59:d9:7f:ff:bc:63: 83:46:d4:86:9d:38:2e:f4:c1:e7:34:81:4d:b2:8d: c6:62:84:f7:48:0f:d8:c7:c8:b9:43:6f:93:b4:c4: 24:c4:c1:ab:81:a1:7a:90:f4:5d:f3:45:43:97:13: 79:06:c5:36:34:2d:2a:f1:f9:5d:1a:22:40:2b:0b: 54:87:66:f3:c4:d5:fe:9e:32:78:78:cc:91:34:5a: 24:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:D5:85:7A:CF:B6:E5:12:D1:24:B9:64:58:09:CE:57:DC:BF:54:35 X509v3 Authority Key Identifier: keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/rtWFes-25RLRJLlkWAnOV9y_VDU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.109.0/24 Signature Algorithm: sha256WithRSAEncryption b2:27:07:e6:b9:7d:0f:75:1c:42:68:34:53:0d:8e:f2:b1:e2: 8a:33:d2:d7:10:63:f5:3f:a1:7f:01:0b:69:98:bb:40:ae:8e: 69:0e:e5:bd:10:a9:d1:a9:22:c6:70:06:95:c5:35:6b:17:21: 5c:2d:e2:ba:64:f3:4c:14:ce:0a:42:53:7c:96:07:66:b8:df: 85:f6:20:94:26:72:15:b6:4d:ae:33:66:b6:39:ca:40:fb:23: 51:a1:d6:43:9d:2d:b4:91:77:b1:c7:02:fe:66:a1:08:bb:ba: fd:45:de:ae:44:98:f5:fe:c6:61:c5:d1:f9:f1:ef:30:e7:5e: 39:1e:ba:fc:01:2b:d2:5a:fd:75:d9:f4:42:30:d4:d2:65:da: 10:58:85:b8:45:65:4b:29:63:c7:44:e3:32:38:7a:a7:10:f3: 2e:65:3c:c8:a6:f7:e2:66:b5:a1:f4:a9:cf:a4:82:1b:25:c7: 5c:ed:f9:ce:87:54:53:e5:fa:1f:48:4d:c4:1e:70:e0:97:c7: 53:54:84:88:36:2d:be:16:93:86:43:5c:f1:ba:cb:72:e5:b2: 13:f0:29:6a:50:d8:0b:36:af:56:ff:78:24:c3:d5:11:d0:55: 49:6f:09:bc:cf:66:9a:6b:57:af:2f:a6:19:f4:4d:ff:d1:08: d0:f2:e7:50 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wq3re2T0vto4be50/dKAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNDczODM4OWNiM2I5OThlYzRmYTZkNDI3MmY4ZGQ3OTlm YmM0YTkwHhcNMjYwMTAxMTYxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZWQ1ODU3YWNmYjZlNTEyZDEyNGI5NjQ1ODA5Y2U1N2RjYmY1NDM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1aQ8nN31Ok3KMBIbrv8NJQb8BK6y mgvitXaMIAIanS+h0eLNYApBwRopiLHooB7a3jRfNnxbX8AuE1pvdM5kxGvwHB0i LWxEf6rUVC1F3AxNUpDWhAWyRAtHqc+rfQ0kTj2vsKwv1ECuXxyAyR3TZSMUV+JR wwjWb6RNsaeb97H7/sjXKNz8irhXhfCe5gf4qEY8dN/KCOSzQTOzs/ufN1/5qAif 2bnm+Vht5u1Z2X//vGODRtSGnTgu9MHnNIFNso3GYoT3SA/Yx8i5Q2+TtMQkxMGr gaF6kPRd80VDlxN5BsU2NC0q8fldGiJAKwtUh2bzxNX+njJ4eMyRNFokTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK7VhXrPtuUS0SS5ZFgJzlfcv1Q1MB8GA1UdIwQY MBaAFB9HODics7mY7E+m1CcvjdeZ+8SpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjIt NmM3ZTU2ODU4OTBjLzEvcnRXRmVzLTI1UkxSSkxsa1dBbk9WOXlfVkRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjItNmM3ZTU2ODU4OTBj LzEvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9BtMA0G CSqGSIb3DQEBCwUAA4IBAQCyJwfmuX0PdRxCaDRTDY7yseKKM9LXEGP1P6F/AQtp mLtAro5pDuW9EKnRqSLGcAaVxTVrFyFcLeK6ZPNMFM4KQlN8lgdmuN+F9iCUJnIV tk2uM2a2OcpA+yNRodZDnS20kXexxwL+ZqEIu7r9Rd6uRJj1/sZhxdH58e8w5145 Hrr8ASvSWv112fRCMNTSZdoQWIW4RWVLKWPHROMyOHqnEPMuZTzIpvfiZrWh9KnP pIIbJcdc7fnOh1RT5fofSE3EHnDgl8dTVISINi2+FpOGQ1zxusty5bIT8ClqUNgL Nq9W/3gkw9UR0FVJbwm8z2aaa1evL6YZ9E3/0QjQ8udQ -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:40 2026 by rpki-client