This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/WkUUwZ6rVtE4GE30shju3hlhJgM.roa File: WkUUwZ6rVtE4GE30shju3hlhJgM.roa (raw, json) Hash identifier: 0WM1KO6HOedT6k303IOfaiByBYuzAj6O/xtO7pUBUvU= Subject key identifier: 5A:45:14:C1:9E:AB:56:D1:38:18:4D:F4:B2:18:EE:DE:19:61:26:03 Certificate issuer: /CN=9f783dfc289bfaa3c4ba1b324f1dbb57f586a01d Certificate serial: 019B77C6DA36904B2E739C052B5B661A6984 Authority key identifier: 9F:78:3D:FC:28:9B:FA:A3:C4:BA:1B:32:4F:1D:BB:57:F5:86:A0:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n3g9_Cib-qPEuhsyTx27V_WGoB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/WkUUwZ6rVtE4GE30shju3hlhJgM.roa Signing time: Thu 01 Jan 2026 04:17:59 +0000 ROA not before: Thu 01 Jan 2026 04:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47133 IP address blocks: 91.203.188.0/24 maxlen: 24 91.203.189.0/24 maxlen: 24 91.203.190.0/24 maxlen: 24 91.203.191.0/24 maxlen: 24 2001:67c:f40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft rsync://rpki.ripe.net/repository/DEFAULT/n3g9_Cib-qPEuhsyTx27V_WGoB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:da:36:90:4b:2e:73:9c:05:2b:5b:66:1a:69:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f783dfc289bfaa3c4ba1b324f1dbb57f586a01d Validity Not Before: Jan 1 04:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a4514c19eab56d138184df4b218eede19612603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8b:86:a5:d4:47:0c:6d:b3:f6:1c:9a:f7:27: eb:ad:05:49:50:62:4c:58:f3:f8:b4:e6:5c:64:a6: 3c:dc:6b:02:ce:75:1f:0a:e8:36:29:cd:cc:4f:6e: a4:e9:61:11:ed:bc:ab:68:e7:61:e7:b3:62:33:58: e9:bb:de:a9:5a:0f:e0:46:3e:60:f1:15:d4:fd:08: 37:39:9e:26:4d:1c:85:5d:3c:a3:79:6a:07:f5:14: f9:ff:d3:0c:38:a6:f1:94:fd:81:82:ef:30:10:93: 87:06:c1:47:a6:af:b3:83:31:74:b7:1d:3b:86:f5: 18:9f:cf:c6:3d:a7:7b:a6:ce:25:4d:6c:5a:d9:3b: 29:95:bf:1c:e9:b7:c2:6a:58:ff:bc:62:8b:53:bb: 91:b6:6e:67:9d:0d:34:f2:c5:ce:68:9a:53:56:bd: 5b:83:27:32:b2:c7:1a:14:e3:68:42:76:f3:42:0d: 87:22:32:56:5f:e7:07:d2:ff:87:89:ef:27:64:3d: 72:87:aa:42:32:4c:7c:c5:0d:18:97:b5:c1:dd:46: 0e:4b:9c:e1:a9:b2:36:b9:c5:80:4f:f5:fb:36:cb: e8:3d:bf:f3:95:89:ff:58:53:84:04:3c:bf:67:28: 78:ba:fa:85:7a:0f:4d:51:c7:b4:45:12:e5:cf:49: b1:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:45:14:C1:9E:AB:56:D1:38:18:4D:F4:B2:18:EE:DE:19:61:26:03 X509v3 Authority Key Identifier: keyid:9F:78:3D:FC:28:9B:FA:A3:C4:BA:1B:32:4F:1D:BB:57:F5:86:A0:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3g9_Cib-qPEuhsyTx27V_WGoB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/WkUUwZ6rVtE4GE30shju3hlhJgM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.203.188.0/22 IPv6: 2001:67c:f40::/48 Signature Algorithm: sha256WithRSAEncryption 52:eb:49:ce:a9:0e:fe:a6:b2:12:6b:c0:eb:2f:9a:be:a5:4f: d3:03:49:10:fc:48:7e:35:f8:0d:23:4c:7c:da:ba:c0:08:4b: 24:1d:af:d9:16:cb:14:5a:5b:30:9c:53:cd:ab:e8:81:ff:9c: 45:18:f9:09:8f:1d:d2:71:73:82:7a:f9:85:54:87:6a:cc:2a: e0:a4:8f:1d:d5:51:5b:c2:38:4b:18:17:cd:5f:24:9e:c7:d4: 98:bd:10:31:16:1a:e2:c2:36:c3:d4:6c:17:f8:97:46:cf:a2: c6:97:bb:05:50:b0:18:69:2d:3f:41:a7:45:ff:90:a3:64:47: d4:22:3f:8a:23:87:65:65:ea:cd:83:a2:60:23:1f:49:0d:cc: 95:7f:8f:7d:e8:a6:73:cc:9d:51:e3:06:1f:7a:bb:67:12:cb: 4a:16:f9:65:e7:c3:10:fc:37:7d:79:af:1a:58:07:8c:aa:26: 30:0b:8a:4e:0d:34:d1:59:42:ca:fb:e4:77:f3:84:ed:87:c5: 8f:d0:13:69:b6:0d:57:4b:a4:17:6e:89:b4:5e:41:3a:a0:27: 17:77:fd:53:75:2d:4c:3f:c5:21:a8:af:fb:c8:b7:7d:8f:05: a0:a9:64:06:32:4d:f6:5c:cd:95:9e:6d:00:ec:3f:1d:2d:60: bd:cb:71:92 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt3xto2kEsuc5wFK1tmGmmEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmNzgzZGZjMjg5YmZhYTNjNGJhMWIzMjRmMWRiYjU3ZjU4 NmEwMWQwHhcNMjYwMTAxMDQxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTQ1MTRjMTllYWI1NmQxMzgxODRkZjRiMjE4ZWVkZTE5NjEyNjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIuGpdRHDG2z9hya9yfrrQVJUGJM WPP4tOZcZKY83GsCznUfCug2Kc3MT26k6WER7byraOdh57NiM1jpu96pWg/gRj5g 8RXU/Qg3OZ4mTRyFXTyjeWoH9RT5/9MMOKbxlP2Bgu8wEJOHBsFHpq+zgzF0tx07 hvUYn8/GPad7ps4lTWxa2Tsplb8c6bfCalj/vGKLU7uRtm5nnQ008sXOaJpTVr1b gycysscaFONoQnbzQg2HIjJWX+cH0v+Hie8nZD1yh6pCMkx8xQ0Yl7XB3UYOS5zh qbI2ucWAT/X7NsvoPb/zlYn/WFOEBDy/Zyh4uvqFeg9NUce0RRLlz0mxiwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFFpFFMGeq1bROBhN9LIY7t4ZYSYDMB8GA1UdIwQY MBaAFJ94Pfwom/qjxLobMk8du1f1hqAdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjNnOV9DaWItcVBFdWhzeVR4MjdWX1dHb0IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8yYjA5MjgtNWNiNi00ZDZiLWE4YWQt MDBlNTVhMjQ5OWQwLzEvV2tVVXdaNnJWdEU0R0UzMHNoanUzaGxoSmdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8yYjA5MjgtNWNiNi00ZDZiLWE4YWQtMDBlNTVhMjQ5OWQw LzEvbjNnOV9DaWItcVBFdWhzeVR4MjdWX1dHb0IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCW8u8MA8E AgACMAkDBwAgAQZ8D0AwDQYJKoZIhvcNAQELBQADggEBAFLrSc6pDv6mshJrwOsv mr6lT9MDSRD8SH41+A0jTHzausAISyQdr9kWyxRaWzCcU82r6IH/nEUY+QmPHdJx c4J6+YVUh2rMKuCkjx3VUVvCOEsYF81fJJ7H1Ji9EDEWGuLCNsPUbBf4l0bPosaX uwVQsBhpLT9Bp0X/kKNkR9QiP4ojh2Vl6s2DomAjH0kNzJV/j33opnPMnVHjBh96 u2cSy0oW+WXnwxD8N315rxpYB4yqJjALik4NNNFZQsr75HfzhO2HxY/QE2m2DVdL pBduibReQTqgJxd3/VN1LUw/xSGor/vIt32PBaCpZAYyTfZczZWebQDsPx0tYL3L cZI= -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:45 2026 by rpki-client