This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/WCWp0vmGJYt70q-YkfGeiqk74HA.roa File: WCWp0vmGJYt70q-YkfGeiqk74HA.roa (raw, json) Hash identifier: WWuYuPcraJwNveZ8Pjl950Glgpk1p9KqCUVVhSjy+fs= Subject key identifier: 58:25:A9:D2:F9:86:25:8B:7B:D2:AF:98:91:F1:9E:8A:A9:3B:E0:70 Certificate issuer: /CN=626aa89132d2a684d8d2a1a3f7e40f2234636f38 Certificate serial: 019B791039BC29C5B27A02953826A7ED2179 Authority key identifier: 62:6A:A8:91:32:D2:A6:84:D8:D2:A1:A3:F7:E4:0F:22:34:63:6F:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmqokTLSpoTY0qGj9-QPIjRjbzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/WCWp0vmGJYt70q-YkfGeiqk74HA.roa Signing time: Thu 01 Jan 2026 10:17:45 +0000 ROA not before: Thu 01 Jan 2026 10:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51793 IP address blocks: 91.221.78.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.crl rsync://rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.mft rsync://rpki.ripe.net/repository/DEFAULT/YmqokTLSpoTY0qGj9-QPIjRjbzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:39:bc:29:c5:b2:7a:02:95:38:26:a7:ed:21:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=626aa89132d2a684d8d2a1a3f7e40f2234636f38 Validity Not Before: Jan 1 10:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5825a9d2f986258b7bd2af9891f19e8aa93be070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:70:e6:92:5a:da:37:26:5e:1e:25:bf:10:05: a9:6b:d1:a2:7f:8c:38:93:fd:12:14:c8:00:47:4c: ba:67:28:ed:c3:38:26:36:bf:e9:29:f2:52:9d:4a: 7c:71:c1:7f:da:63:57:7a:94:ae:5d:33:ce:d4:3a: c1:e0:3c:7a:42:ab:a9:a3:11:99:b8:de:39:34:f3: e7:b7:37:fd:58:22:03:74:50:d7:bf:25:af:59:82: de:55:9b:9e:2f:9a:b3:06:3c:24:20:c5:b1:c2:35: 6a:a8:28:b4:04:74:0f:b2:bf:94:c5:39:d6:61:e8: 4d:04:7e:20:da:eb:6c:c8:c0:db:a7:8d:ed:8e:f7: a0:82:c0:b1:5e:f5:36:d9:88:73:ea:a7:a0:ff:da: 37:bb:8b:f8:40:66:6f:76:d3:a2:72:87:d2:cd:f5: 10:1e:0b:a8:19:36:07:de:16:fa:fa:1a:49:00:e1: 39:31:df:36:80:2b:b4:e7:ba:53:16:64:41:f3:c5: 63:31:5c:cf:7a:e8:23:ca:49:ed:6f:b5:f7:12:7a: 51:a8:78:c8:37:78:05:bf:00:85:c9:7b:e5:6e:8c: fb:4a:fd:28:40:d6:43:b9:28:fd:3b:c1:37:ba:27: 65:d2:04:d4:f3:79:21:7d:68:7d:b2:45:1e:a1:68: 0f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:25:A9:D2:F9:86:25:8B:7B:D2:AF:98:91:F1:9E:8A:A9:3B:E0:70 X509v3 Authority Key Identifier: keyid:62:6A:A8:91:32:D2:A6:84:D8:D2:A1:A3:F7:E4:0F:22:34:63:6F:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmqokTLSpoTY0qGj9-QPIjRjbzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/WCWp0vmGJYt70q-YkfGeiqk74HA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.221.78.0/23 Signature Algorithm: sha256WithRSAEncryption 89:20:84:2e:34:df:09:86:0b:9d:4f:59:40:0b:e6:fc:9f:bc: 52:4b:c6:04:51:3c:7c:bd:a7:be:2d:6d:bd:ba:d3:1e:d4:28: 74:54:ff:77:55:20:f5:8d:c4:fa:d6:c8:92:e8:27:89:82:92: 3f:cb:95:32:22:32:30:6d:e2:6b:69:7f:b5:b1:8a:29:da:6b: f0:92:dd:66:e1:cf:c9:a1:02:30:ad:6c:c3:f7:ea:76:32:e1: 0d:d7:ad:c7:cc:67:bf:2d:2b:df:2e:78:75:f8:7b:9e:d7:3d: ad:b4:61:cf:c3:a8:8d:2f:32:5f:52:8a:66:5e:9f:44:a8:19: f2:28:f2:dd:31:9a:91:a6:91:8a:b4:64:b0:56:35:3d:57:cc: 54:d9:9c:08:76:ae:d2:74:11:15:c1:ba:e7:19:9f:fd:6f:d0: f6:0b:a8:b7:93:95:9d:95:3c:7e:2b:fd:e8:dc:f9:d4:f5:90: 07:ec:27:62:28:7c:c7:4c:5c:94:a2:72:74:b0:44:d7:50:a8: b5:ab:71:42:fb:04:7a:8d:22:ff:42:52:b3:9d:22:ce:a1:ec: 5f:5d:77:30:9c:db:de:99:ee:9e:59:9e:ad:ec:5a:17:dd:8f: 22:70:69:e1:7a:1a:11:6c:d3:47:15:ca:f8:77:93:eb:36:69: 71:4a:4d:44 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EDm8KcWyegKVOCan7SF5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNmFhODkxMzJkMmE2ODRkOGQyYTFhM2Y3ZTQwZjIyMzQ2 MzZmMzgwHhcNMjYwMTAxMTAxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODI1YTlkMmY5ODYyNThiN2JkMmFmOTg5MWYxOWU4YWE5M2JlMDcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HDmklraNyZeHiW/EAWpa9Gif4w4 k/0SFMgAR0y6ZyjtwzgmNr/pKfJSnUp8ccF/2mNXepSuXTPO1DrB4Dx6QqupoxGZ uN45NPPntzf9WCIDdFDXvyWvWYLeVZueL5qzBjwkIMWxwjVqqCi0BHQPsr+UxTnW YehNBH4g2utsyMDbp43tjveggsCxXvU22Yhz6qeg/9o3u4v4QGZvdtOicofSzfUQ HguoGTYH3hb6+hpJAOE5Md82gCu057pTFmRB88VjMVzPeugjykntb7X3EnpRqHjI N3gFvwCFyXvlboz7Sv0oQNZDuSj9O8E3uidl0gTU83khfWh9skUeoWgPTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFglqdL5hiWLe9KvmJHxnoqpO+BwMB8GA1UdIwQY MBaAFGJqqJEy0qaE2NKho/fkDyI0Y284MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWW1xb2tUTFNwb1RZMHFHajktUVBJalJqYnpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC80Y2MwYTgtZWM0NC00OWRkLWEzZTIt MjkyNmZjNWY2MWI3LzEvV0NXcDB2bUdKWXQ3MHEtWWtmR2VpcWs3NEhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC80Y2MwYTgtZWM0NC00OWRkLWEzZTItMjkyNmZjNWY2MWI3 LzEvWW1xb2tUTFNwb1RZMHFHajktUVBJalJqYnpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW91OMA0G CSqGSIb3DQEBCwUAA4IBAQCJIIQuNN8JhgudT1lAC+b8n7xSS8YEUTx8vae+LW29 utMe1Ch0VP93VSD1jcT61siS6CeJgpI/y5UyIjIwbeJraX+1sYop2mvwkt1m4c/J oQIwrWzD9+p2MuEN163HzGe/LSvfLnh1+Hue1z2ttGHPw6iNLzJfUopmXp9EqBny KPLdMZqRppGKtGSwVjU9V8xU2ZwIdq7SdBEVwbrnGZ/9b9D2C6i3k5WdlTx+K/3o 3PnU9ZAH7CdiKHzHTFyUonJ0sETXUKi1q3FC+wR6jSL/QlKznSLOoexfXXcwnNve me6eWZ6t7FoX3Y8icGnhehoRbNNHFcr4d5PrNmlxSk1E -----END CERTIFICATE-----Generated at Mon Jan 26 07:23:22 2026 by rpki-client