This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/WjH_ZefSAN7wwtbjUvmdIn8zw88.roa File: WjH_ZefSAN7wwtbjUvmdIn8zw88.roa (raw, json) Hash identifier: cKkXcE8FM5i99qr1dZG+cPm90fkHci3xI30wSCEhQhk= Subject key identifier: 5A:31:FF:65:E7:D2:00:DE:F0:C2:D6:E3:52:F9:9D:22:7F:33:C3:CF Certificate issuer: /CN=90f25e6a6893f466d2695e90670c047443643701 Certificate serial: 019B77C75A09278D4F2B524FABE079F2D023 Authority key identifier: 90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/WjH_ZefSAN7wwtbjUvmdIn8zw88.roa Signing time: Thu 01 Jan 2026 04:18:32 +0000 ROA not before: Thu 01 Jan 2026 04:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205031 IP address blocks: 92.235.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:5a:09:27:8d:4f:2b:52:4f:ab:e0:79:f2:d0:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90f25e6a6893f466d2695e90670c047443643701 Validity Not Before: Jan 1 04:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a31ff65e7d200def0c2d6e352f99d227f33c3cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:bf:e0:9b:b8:ca:26:ca:4b:1c:4b:ab:c0:ed: 92:ca:66:12:5a:2c:db:55:dd:b5:be:31:ab:2e:95: fa:ba:a6:0e:9a:2a:20:f7:ec:7c:5e:3e:8a:da:9c: 86:fa:ad:71:fb:40:4e:f2:25:23:77:a7:65:55:63: b7:db:43:30:2f:69:12:a0:09:48:c4:86:ff:0e:83: 80:2f:b4:9f:19:73:e8:e1:ae:f4:76:e7:ad:ca:62: 5d:6d:aa:dd:bc:40:59:02:ee:49:7d:28:2a:6e:f6: 29:d7:22:05:fb:05:b3:92:b9:83:0c:f2:d9:5b:30: dc:6b:9f:e7:4e:f2:74:4c:40:b6:c5:b0:19:d1:be: 74:42:46:a4:15:62:91:13:21:83:8b:82:02:cf:e9: 7e:2d:a6:d2:54:c2:cd:66:17:4f:52:e9:6a:e9:f1: cf:81:2e:75:a0:46:7e:3e:a3:1b:e6:f1:ba:b4:0c: 89:b8:ae:1f:da:ea:3f:7e:b6:29:a9:2e:a6:b2:1c: d5:7c:b7:2f:73:25:ab:22:43:4b:8a:8a:53:c9:39: cb:d1:67:14:69:82:c5:af:f0:18:b2:7f:20:11:cf: b6:69:a9:73:e0:f9:37:ab:09:e4:54:05:9d:97:6b: 9b:71:38:ad:d9:7c:39:5a:41:7a:a3:a9:02:53:ee: f1:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:31:FF:65:E7:D2:00:DE:F0:C2:D6:E3:52:F9:9D:22:7F:33:C3:CF X509v3 Authority Key Identifier: keyid:90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/WjH_ZefSAN7wwtbjUvmdIn8zw88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.235.48.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:f1:da:f8:87:e3:ca:5d:57:fb:e7:c0:81:7c:97:f6:69:70: 0a:9f:9b:16:69:11:5a:b8:49:67:5f:5f:a8:8e:4b:3d:a1:d3: 0d:67:00:4e:96:d4:77:d3:4d:7f:ad:d0:d5:ed:49:6e:cb:e2: 9e:84:f3:44:51:7d:b1:fc:5b:40:be:d2:50:f8:e5:3e:52:d8: 8e:7d:02:f8:1a:86:66:0f:53:6c:b0:b9:20:a4:71:c3:34:3b: 5e:5a:6f:06:c8:b0:63:6d:41:92:3d:8d:d4:b2:37:55:08:31: 57:24:a9:9c:40:08:11:50:46:dd:00:34:9f:64:f4:17:5b:7e: c6:14:2a:f9:79:69:9b:48:be:4c:20:d6:43:8f:ea:1d:13:ed: a9:34:52:14:b7:76:9d:ed:1a:5b:fe:e8:9c:e1:43:62:76:da: 4c:35:4b:0c:71:3b:1d:41:c5:17:65:8b:5c:86:eb:f3:4f:85: 50:c0:b8:f3:2f:a3:45:75:67:92:f6:50:e6:00:d2:58:2a:9e: bc:fa:67:cb:eb:8e:a1:18:3b:9e:e5:0c:a8:4d:5b:e6:b3:fd: 2a:87:b7:20:3a:5e:57:cb:42:95:7a:cd:4b:7c:ca:bf:ff:69: 5d:c5:71:95:e2:73:f6:94:0b:63:78:9e:3f:21:83:c4:c9:82: 28:58:3e:a8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x1oJJ41PK1JPq+B58tAjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwZjI1ZTZhNjg5M2Y0NjZkMjY5NWU5MDY3MGMwNDc0NDM2 NDM3MDEwHhcNMjYwMTAxMDQxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTMxZmY2NWU3ZDIwMGRlZjBjMmQ2ZTM1MmY5OWQyMjdmMzNjM2NmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsb/gm7jKJspLHEurwO2SymYSWizb Vd21vjGrLpX6uqYOmiog9+x8Xj6K2pyG+q1x+0BO8iUjd6dlVWO320MwL2kSoAlI xIb/DoOAL7SfGXPo4a70duetymJdbardvEBZAu5JfSgqbvYp1yIF+wWzkrmDDPLZ WzDca5/nTvJ0TEC2xbAZ0b50QkakFWKREyGDi4ICz+l+LabSVMLNZhdPUulq6fHP gS51oEZ+PqMb5vG6tAyJuK4f2uo/frYpqS6mshzVfLcvcyWrIkNLiopTyTnL0WcU aYLFr/AYsn8gEc+2aalz4Pk3qwnkVAWdl2ubcTit2Xw5WkF6o6kCU+7xdQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFox/2Xn0gDe8MLW41L5nSJ/M8PPMB8GA1UdIwQY MBaAFJDyXmpok/Rm0mlekGcMBHRDZDcBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wNGIxNjItNzA5OS00MDRkLTgzOTEt M2IwYjRiOGEyOTgzLzEvV2pIX1plZlNBTjd3d3RialV2bWRJbjh6dzg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8wNGIxNjItNzA5OS00MDRkLTgzOTEtM2IwYjRiOGEyOTgz LzEva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXOswMA0G CSqGSIb3DQEBCwUAA4IBAQA88dr4h+PKXVf758CBfJf2aXAKn5sWaRFauElnX1+o jks9odMNZwBOltR3001/rdDV7Uluy+KehPNEUX2x/FtAvtJQ+OU+UtiOfQL4GoZm D1NssLkgpHHDNDteWm8GyLBjbUGSPY3UsjdVCDFXJKmcQAgRUEbdADSfZPQXW37G FCr5eWmbSL5MINZDj+odE+2pNFIUt3ad7Rpb/uic4UNidtpMNUsMcTsdQcUXZYtc huvzT4VQwLjzL6NFdWeS9lDmANJYKp68+mfL646hGDue5QyoTVvms/0qh7cgOl5X y0KVes1LfMq//2ldxXGV4nP2lAtjeJ4/IYPEyYIoWD6o -----END CERTIFICATE-----Generated at Sun Jan 25 17:41:27 2026 by rpki-client