This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/83f818-19c0-4702-83e5-d95636a7a664/1/f_GWy2LHysske0RWtBkF7AL9X-U.roa File: f_GWy2LHysske0RWtBkF7AL9X-U.roa (raw, json) Hash identifier: nrjzy2n06K9FvMdvpZLXzctrlxHCSSGtGX1t8yN4WJI= Subject key identifier: 7F:F1:96:CB:62:C7:CA:CB:24:7B:44:56:B4:19:05:EC:02:FD:5F:E5 Certificate issuer: /CN=5ad8a44dad315f21ea992fc6e10482c41ecdfcf5 Certificate serial: 019B79ECFE0585FF337FB0621723BA3740F1 Authority key identifier: 5A:D8:A4:4D:AD:31:5F:21:EA:99:2F:C6:E1:04:82:C4:1E:CD:FC:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtikTa0xXyHqmS_G4QSCxB7N_PU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/83f818-19c0-4702-83e5-d95636a7a664/1/f_GWy2LHysske0RWtBkF7AL9X-U.roa Signing time: Thu 01 Jan 2026 14:18:53 +0000 ROA not before: Thu 01 Jan 2026 14:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62313 IP address blocks: 91.233.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/83f818-19c0-4702-83e5-d95636a7a664/1/WtikTa0xXyHqmS_G4QSCxB7N_PU.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/83f818-19c0-4702-83e5-d95636a7a664/1/WtikTa0xXyHqmS_G4QSCxB7N_PU.mft rsync://rpki.ripe.net/repository/DEFAULT/WtikTa0xXyHqmS_G4QSCxB7N_PU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:fe:05:85:ff:33:7f:b0:62:17:23:ba:37:40:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ad8a44dad315f21ea992fc6e10482c41ecdfcf5 Validity Not Before: Jan 1 14:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ff196cb62c7cacb247b4456b41905ec02fd5fe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e9:08:f5:6f:72:d6:46:73:be:a0:46:70:67: 8e:fd:2b:ce:eb:f1:5b:98:e8:6c:87:3b:d9:48:71: 9a:6e:6f:bc:d0:13:0e:93:1b:76:76:6b:f0:4f:0c: ca:dc:9f:78:3b:11:4f:73:aa:60:e0:77:8d:3e:72: 31:97:72:d1:2c:d3:a1:9d:48:fb:88:cf:a5:46:3d: 26:66:fa:56:43:bb:43:ec:be:e4:57:94:8c:56:ec: c2:ac:35:0a:b1:3b:5e:c7:30:eb:b3:b0:9c:ec:cd: f2:fa:19:dd:c3:00:c9:cc:d0:b5:a0:5d:28:3d:0a: 75:99:1f:75:fb:ed:19:f6:b3:a2:87:d3:65:d3:d8: 00:b0:95:9d:2b:3f:93:05:99:ac:8c:59:81:01:de: 28:a7:c4:4f:b7:0a:ff:84:2e:cf:b0:83:95:0d:f7: 9c:ce:3b:50:59:11:f3:c9:3a:9a:07:dc:83:06:4a: 10:64:6e:61:db:4c:9c:ff:c7:8d:62:a1:66:76:f0: c3:77:fb:cc:32:22:13:9f:76:40:8c:2d:0c:0f:cf: 1f:e0:64:8c:74:27:22:d1:e5:b0:b1:bf:8a:a1:70: 99:54:75:d7:4c:dd:f8:0a:ae:6a:49:b5:99:83:df: 00:af:dd:b8:1c:a0:e8:8a:40:bc:e5:2f:8b:7c:97: bd:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:F1:96:CB:62:C7:CA:CB:24:7B:44:56:B4:19:05:EC:02:FD:5F:E5 X509v3 Authority Key Identifier: keyid:5A:D8:A4:4D:AD:31:5F:21:EA:99:2F:C6:E1:04:82:C4:1E:CD:FC:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtikTa0xXyHqmS_G4QSCxB7N_PU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/83f818-19c0-4702-83e5-d95636a7a664/1/f_GWy2LHysske0RWtBkF7AL9X-U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/83f818-19c0-4702-83e5-d95636a7a664/1/WtikTa0xXyHqmS_G4QSCxB7N_PU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.233.35.0/24 Signature Algorithm: sha256WithRSAEncryption 30:a5:8d:4c:5b:4f:cb:f7:98:5f:d7:f0:63:b8:01:af:ea:81: 3d:57:20:2b:bc:30:50:e1:53:0e:7b:94:88:1b:60:d9:11:cc: e6:b6:fa:81:5c:68:bf:19:22:59:bc:4b:9d:9f:6d:59:71:7c: 48:ec:ba:36:82:e4:8a:b6:86:f0:fc:23:d1:38:b1:78:d3:12: af:2c:4f:65:0e:82:75:50:90:8c:a6:83:80:0a:0b:1b:5e:ef: 50:ee:ce:37:2a:de:e9:e5:11:31:bd:da:03:d4:f3:bd:5f:ba: 58:81:e4:b5:8c:7b:5a:e6:1d:e4:14:71:16:82:37:0b:06:7c: 98:c6:50:95:36:95:96:ed:68:b1:1a:05:ac:ae:67:3d:4d:85: 0d:ae:12:8b:37:ca:ce:f0:d0:42:7a:f6:d0:93:16:ad:76:1c: df:50:f1:f2:25:96:df:56:23:d5:1d:6b:6c:0d:f7:8f:af:e6: e7:04:e9:cb:ff:d0:62:cd:54:08:79:6a:9c:e0:dc:c7:c0:1b: c7:d7:e3:63:84:b9:ac:4e:2e:6f:60:6b:ec:f4:04:7d:34:13: d0:cc:33:8f:05:20:e1:ca:ff:ab:e6:8d:de:4c:01:88:eb:4a: 7b:d6:5f:6a:bc:46:b2:b0:a1:d8:e2:75:e2:7d:19:c7:a5:4d: 09:5e:9a:c7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57P4Fhf8zf7BiFyO6N0DxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhZDhhNDRkYWQzMTVmMjFlYTk5MmZjNmUxMDQ4MmM0MWVj ZGZjZjUwHhcNMjYwMTAxMTQxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZmYxOTZjYjYyYzdjYWNiMjQ3YjQ0NTZiNDE5MDVlYzAyZmQ1ZmU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuukI9W9y1kZzvqBGcGeO/SvO6/Fb mOhshzvZSHGabm+80BMOkxt2dmvwTwzK3J94OxFPc6pg4HeNPnIxl3LRLNOhnUj7 iM+lRj0mZvpWQ7tD7L7kV5SMVuzCrDUKsTtexzDrs7Cc7M3y+hndwwDJzNC1oF0o PQp1mR91++0Z9rOih9Nl09gAsJWdKz+TBZmsjFmBAd4op8RPtwr/hC7PsIOVDfec zjtQWRHzyTqaB9yDBkoQZG5h20yc/8eNYqFmdvDDd/vMMiITn3ZAjC0MD88f4GSM dCci0eWwsb+KoXCZVHXXTN34Cq5qSbWZg98Ar924HKDoikC85S+LfJe9bQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH/xlstix8rLJHtEVrQZBewC/V/lMB8GA1UdIwQY MBaAFFrYpE2tMV8h6pkvxuEEgsQezfz1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3Rpa1RhMHhYeUhxbVNfRzRRU0N4QjdOX1BVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi84M2Y4MTgtMTljMC00NzAyLTgzZTUt ZDk1NjM2YTdhNjY0LzEvZl9HV3kyTEh5c3NrZTBSV3RCa0Y3QUw5WC1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi84M2Y4MTgtMTljMC00NzAyLTgzZTUtZDk1NjM2YTdhNjY0 LzEvV3Rpa1RhMHhYeUhxbVNfRzRRU0N4QjdOX1BVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+kjMA0G CSqGSIb3DQEBCwUAA4IBAQAwpY1MW0/L95hf1/BjuAGv6oE9VyArvDBQ4VMOe5SI G2DZEczmtvqBXGi/GSJZvEudn21ZcXxI7Lo2guSKtobw/CPROLF40xKvLE9lDoJ1 UJCMpoOACgsbXu9Q7s43Kt7p5RExvdoD1PO9X7pYgeS1jHta5h3kFHEWgjcLBnyY xlCVNpWW7WixGgWsrmc9TYUNrhKLN8rO8NBCevbQkxatdhzfUPHyJZbfViPVHWts DfePr+bnBOnL/9BizVQIeWqc4NzHwBvH1+NjhLmsTi5vYGvs9AR9NBPQzDOPBSDh yv+r5o3eTAGI60p71l9qvEaysKHY4nXifRnHpU0JXprH -----END CERTIFICATE-----Generated at Mon Jan 26 07:57:38 2026 by rpki-client