This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/w2zfAC9OFoRmjotH_tHfZysWNMM.roa File: w2zfAC9OFoRmjotH_tHfZysWNMM.roa (raw, json) Hash identifier: a05kJJ6+2j1m7iM1OBjj6aSX+sB+ZxnLme7+mqcwB44= Subject key identifier: C3:6C:DF:00:2F:4E:16:84:66:8E:8B:47:FE:D1:DF:67:2B:16:34:C3 Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2 Certificate serial: 019B7F13A0DAE39AF65AC8DC2BDFCD01445D Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/w2zfAC9OFoRmjotH_tHfZysWNMM.roa Signing time: Fri 02 Jan 2026 14:19:11 +0000 ROA not before: Fri 02 Jan 2026 14:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201909 IP address blocks: 91.219.16.0/24 maxlen: 24 91.236.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:a0:da:e3:9a:f6:5a:c8:dc:2b:df:cd:01:44:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2 Validity Not Before: Jan 2 14:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c36cdf002f4e1684668e8b47fed1df672b1634c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d1:a1:26:b0:e5:87:8d:38:f0:db:9c:e9:bb: 81:01:f8:21:95:0d:a6:8a:26:c2:fc:ae:50:b5:b4: be:4e:08:ab:24:70:a6:2b:7b:43:97:e0:6c:04:4d: 8a:d6:d3:61:ac:fb:d5:cd:5b:c5:b8:fc:ee:97:a0: 83:15:48:4a:1f:b9:7c:70:a3:2b:3e:98:c3:3d:1e: 60:ae:2f:77:bf:07:7f:73:ce:12:7d:25:55:6f:e1: 74:9d:cc:c0:2a:c0:f4:47:17:ab:c1:3c:e3:6b:c3: f2:e0:e9:f6:69:88:81:8e:bf:cb:e9:5b:d8:a4:0a: b4:68:03:2f:f4:ec:94:ee:c7:46:af:b6:19:13:36: 61:97:89:fb:26:6f:43:d0:32:f9:37:f0:60:72:f7: 84:cc:4b:e8:84:4c:e9:89:ef:53:ad:25:8a:a1:ba: 58:c6:55:01:eb:a3:f1:42:e6:83:b8:86:ed:89:3b: 20:b1:23:cd:0e:65:51:69:48:f2:b0:6e:d3:9a:39: 65:a6:b6:4a:fd:14:3d:b8:c1:6c:ce:7a:1a:27:1e: a9:40:00:f1:da:c3:45:67:d7:7c:40:e5:fd:79:5f: fb:6e:93:ee:8e:74:2f:30:bc:3e:80:ea:2b:87:21: 30:3f:37:d9:03:20:dc:00:c9:44:28:3d:7e:a0:e5: cd:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:6C:DF:00:2F:4E:16:84:66:8E:8B:47:FE:D1:DF:67:2B:16:34:C3 X509v3 Authority Key Identifier: keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/w2zfAC9OFoRmjotH_tHfZysWNMM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.219.16.0/24 91.236.88.0/24 Signature Algorithm: sha256WithRSAEncryption 29:f4:25:92:14:6b:58:88:e7:21:36:9d:45:54:75:ce:4a:5c: b6:80:a1:7f:7d:ca:f7:2b:ae:55:aa:45:eb:df:4f:63:01:0a: 47:75:10:9d:95:b8:c2:9a:85:8b:8c:0b:cf:f9:4a:c6:5c:33: 27:ce:a7:a9:7c:b3:25:a9:1c:d2:3a:a1:68:0a:34:56:07:d6: e2:ed:1b:73:94:86:e4:98:0f:db:99:74:7a:df:84:bb:2f:2d: 49:f4:e5:b2:02:71:af:5f:d1:f4:53:b2:f2:4e:4d:bb:d1:6c: 2e:bf:af:c8:08:d3:08:57:73:e1:fc:e1:e1:ca:60:08:1e:e4: 1e:9d:6d:b4:a8:5d:d8:f2:a6:b4:df:3a:6f:36:dd:59:81:45: 88:a3:31:20:e3:3b:be:a7:a5:93:8e:57:14:33:ba:14:36:ce: b0:84:b0:9c:6c:7d:45:3d:c9:4c:c5:64:e0:a7:66:11:6a:b6: c2:f6:ec:c3:1b:0d:c4:cd:10:0b:c0:fb:46:7c:37:6f:d8:fb: 35:84:bf:ab:a1:9d:10:3c:fb:cf:1a:06:05:b0:88:39:94:d5: ba:aa:b7:4e:05:87:65:da:33:bb:d9:5e:dc:77:e4:b3:1d:cf: 4e:4a:ad:e3:03:51:5f:26:52:bc:68:2e:6f:8e:11:50:00:db: a4:09:ff:46 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/E6Da45r2WsjcK9/NAURdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZjJjMmU3YmMxZGE1NGQ5MTljYTViNTk0MWQzNzg4OTJi MmNjYjIwHhcNMjYwMTAyMTQxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzZjZGYwMDJmNGUxNjg0NjY4ZThiNDdmZWQxZGY2NzJiMTYzNGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dGhJrDlh4048Nuc6buBAfghlQ2m iibC/K5QtbS+TgirJHCmK3tDl+BsBE2K1tNhrPvVzVvFuPzul6CDFUhKH7l8cKMr PpjDPR5gri93vwd/c84SfSVVb+F0nczAKsD0RxerwTzja8Py4On2aYiBjr/L6VvY pAq0aAMv9OyU7sdGr7YZEzZhl4n7Jm9D0DL5N/BgcveEzEvohEzpie9TrSWKobpY xlUB66PxQuaDuIbtiTsgsSPNDmVRaUjysG7TmjllprZK/RQ9uMFsznoaJx6pQADx 2sNFZ9d8QOX9eV/7bpPujnQvMLw+gOorhyEwPzfZAyDcAMlEKD1+oOXNSwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMNs3wAvThaEZo6LR/7R32crFjTDMB8GA1UdIwQY MBaAFCLywue8HaVNkZyltZQdN4iSssyyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi82MDI1MzAtNmQyMi00NmYxLThlMDUt MDJkZWY2ZTg0YzkxLzEvdzJ6ZkFDOU9Gb1Jtam90SF90SGZaeXNXTk1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi82MDI1MzAtNmQyMi00NmYxLThlMDUtMDJkZWY2ZTg0Yzkx LzEvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9sQAwQA W+xYMA0GCSqGSIb3DQEBCwUAA4IBAQAp9CWSFGtYiOchNp1FVHXOSly2gKF/fcr3 K65VqkXr309jAQpHdRCdlbjCmoWLjAvP+UrGXDMnzqepfLMlqRzSOqFoCjRWB9bi 7RtzlIbkmA/bmXR634S7Ly1J9OWyAnGvX9H0U7LyTk270Wwuv6/ICNMIV3Ph/OHh ymAIHuQenW20qF3Y8qa03zpvNt1ZgUWIozEg4zu+p6WTjlcUM7oUNs6whLCcbH1F PclMxWTgp2YRarbC9uzDGw3EzRALwPtGfDdv2Ps1hL+roZ0QPPvPGgYFsIg5lNW6 qrdOBYdl2jO72V7cd+SzHc9OSq3jA1FfJlK8aC5vjhFQANukCf9G -----END CERTIFICATE-----Generated at Sun Jan 25 14:36:22 2026 by rpki-client