This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/w9-s1rg8ZZyOOyxtduxCw6s1Z18.roa File: w9-s1rg8ZZyOOyxtduxCw6s1Z18.roa (raw, json) Hash identifier: SjJ+kgcVTjrARPsmt0o25UIbqtkMvNHn5HJI2G5k1Mw= Subject key identifier: C3:DF:AC:D6:B8:3C:65:9C:8E:3B:2C:6D:76:EC:42:C3:AB:35:67:5F Certificate issuer: /CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9 Certificate serial: 019B77C7298F5BA8150E92655CC197553B8E Authority key identifier: 1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/w9-s1rg8ZZyOOyxtduxCw6s1Z18.roa Signing time: Thu 01 Jan 2026 04:18:19 +0000 ROA not before: Thu 01 Jan 2026 04:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201744 IP address blocks: 91.149.193.0/24 maxlen: 24 91.149.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:29:8f:5b:a8:15:0e:92:65:5c:c1:97:55:3b:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9 Validity Not Before: Jan 1 04:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c3dfacd6b83c659c8e3b2c6d76ec42c3ab35675f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:55:ef:ae:0c:11:06:90:4f:a0:39:60:ba:91: 75:e0:59:69:c3:88:b2:17:94:b0:e6:bc:37:71:a3: 40:9b:7c:e4:84:31:88:ea:12:fb:8c:17:2b:0f:96: 75:8c:45:7c:d2:ba:3d:72:48:33:73:39:7e:c5:3a: 4d:0e:84:cc:69:73:87:73:12:6e:60:5b:ff:6b:f8: 78:5d:81:85:1d:63:44:51:c4:e9:62:11:e9:10:ee: f9:cd:48:d7:57:01:6d:47:3e:d4:f6:18:08:de:94: b2:a7:41:be:02:4d:73:9c:bf:13:b5:8d:e5:45:b9: 58:a3:a0:fa:26:18:e8:bc:8d:4b:04:49:d7:e7:d7: ae:b4:06:ac:1b:57:2f:6c:5c:ed:8b:d1:92:61:11: 9e:d3:78:89:4a:6e:ba:c9:aa:00:f4:59:b3:a8:38: 92:3e:14:24:f5:72:c2:d0:a5:e9:c0:99:8a:30:00: e7:5a:ac:f3:c6:5e:79:13:a5:74:16:f2:79:b3:58: 0e:16:0b:3b:00:9a:55:68:ad:b4:01:f0:e9:85:cf: c8:44:8a:3b:79:f0:ab:35:76:90:b2:93:c7:51:4d: d6:eb:38:f8:8f:f9:d1:60:70:fb:42:62:7d:28:27: 07:c5:8f:5f:7c:79:7b:0b:79:e2:e5:fd:80:86:14: 8c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:DF:AC:D6:B8:3C:65:9C:8E:3B:2C:6D:76:EC:42:C3:AB:35:67:5F X509v3 Authority Key Identifier: keyid:1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/w9-s1rg8ZZyOOyxtduxCw6s1Z18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.149.193.0/24 91.149.235.0/24 Signature Algorithm: sha256WithRSAEncryption 65:55:87:23:88:3e:71:31:e0:a6:20:92:42:f9:be:8f:3c:ab: cd:11:f4:43:ce:17:46:b3:6e:a5:27:ae:7a:1a:9c:65:b3:13: 49:17:27:53:10:bb:c2:96:6c:20:69:e8:dd:f5:41:62:2f:07: 6a:4c:4f:26:d4:82:6d:8b:5a:d8:bf:20:d6:0e:2f:48:8c:42: 9a:78:9a:c4:29:55:06:ee:a6:c7:ce:7e:df:79:92:3d:4d:49: 15:06:61:fd:cf:7d:27:f4:54:be:33:74:58:3c:64:c0:1a:c5: c7:e2:79:0c:ec:42:3b:26:90:64:fd:4b:c0:a2:a4:cf:80:df: 90:fa:91:7c:4f:a2:19:ae:b8:69:5e:c1:18:37:24:af:8c:ad: 68:5c:21:69:9b:da:40:f9:1f:42:4e:31:93:0a:59:f9:26:e6: 5f:4e:d3:e6:b2:ed:a7:e2:7f:a3:c3:db:cc:62:a2:ae:53:ad: 6f:cd:e3:fd:97:7e:ce:dd:a2:97:69:6f:2f:4d:12:07:65:58: e0:47:9c:75:f4:7a:c0:74:42:b2:33:00:4a:dd:f1:6b:2c:b4: f1:d5:2e:29:fc:17:89:7d:b1:a5:b9:11:05:82:16:3e:04:13: ae:8f:fb:31:3b:2e:e1:bf:32:69:22:d0:19:c2:b6:6d:6b:b7: ac:54:ce:76 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xymPW6gVDpJlXMGXVTuOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhY2I2Mzc2YTE2NDhkNDlkNTVlNGQ3YjAxMzcxMzY3YjBk YzJhZjkwHhcNMjYwMTAxMDQxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjM2RmYWNkNmI4M2M2NTljOGUzYjJjNmQ3NmVjNDJjM2FiMzU2NzVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VXvrgwRBpBPoDlgupF14Flpw4iy F5Sw5rw3caNAm3zkhDGI6hL7jBcrD5Z1jEV80ro9ckgzczl+xTpNDoTMaXOHcxJu YFv/a/h4XYGFHWNEUcTpYhHpEO75zUjXVwFtRz7U9hgI3pSyp0G+Ak1znL8TtY3l RblYo6D6JhjovI1LBEnX59eutAasG1cvbFzti9GSYRGe03iJSm66yaoA9FmzqDiS PhQk9XLC0KXpwJmKMADnWqzzxl55E6V0FvJ5s1gOFgs7AJpVaK20AfDphc/IRIo7 efCrNXaQspPHUU3W6zj4j/nRYHD7QmJ9KCcHxY9ffHl7C3ni5f2AhhSM+QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMPfrNa4PGWcjjssbXbsQsOrNWdfMB8GA1UdIwQY MBaAFBrLY3ahZI1J1V5NewE3E2ew3Cr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAt N2E5MzY3NTFkYjFiLzEvdzktczFyZzhaWnlPT3l4dGR1eEN3NnMxWjE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAtN2E5MzY3NTFkYjFi LzEvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW5XBAwQA W5XrMA0GCSqGSIb3DQEBCwUAA4IBAQBlVYcjiD5xMeCmIJJC+b6PPKvNEfRDzhdG s26lJ656GpxlsxNJFydTELvClmwgaejd9UFiLwdqTE8m1IJti1rYvyDWDi9IjEKa eJrEKVUG7qbHzn7feZI9TUkVBmH9z30n9FS+M3RYPGTAGsXH4nkM7EI7JpBk/UvA oqTPgN+Q+pF8T6IZrrhpXsEYNySvjK1oXCFpm9pA+R9CTjGTCln5JuZfTtPmsu2n 4n+jw9vMYqKuU61vzeP9l37O3aKXaW8vTRIHZVjgR5x19HrAdEKyMwBK3fFrLLTx 1S4p/BeJfbGluREFghY+BBOuj/sxOy7hvzJpItAZwrZta7esVM52 -----END CERTIFICATE-----Generated at Sun Jan 25 16:28:33 2026 by rpki-client