This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/WGlmFAJ29VU-bwCnaF8NI0bUhWE.roa File: WGlmFAJ29VU-bwCnaF8NI0bUhWE.roa (raw, json) Hash identifier: f7yhgzYGC0HsMyQiPjUzXb1Tizgt5BdNWAmq8zA+cRk= Subject key identifier: 58:69:66:14:02:76:F5:55:3E:6F:00:A7:68:5F:0D:23:46:D4:85:61 Certificate issuer: /CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46 Certificate serial: 019B77C7217C4CFC56E4BDEB3CEF65D5E042 Authority key identifier: 9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/WGlmFAJ29VU-bwCnaF8NI0bUhWE.roa Signing time: Thu 01 Jan 2026 04:18:17 +0000 ROA not before: Thu 01 Jan 2026 04:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205161 IP address blocks: 91.203.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:21:7c:4c:fc:56:e4:bd:eb:3c:ef:65:d5:e0:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46 Validity Not Before: Jan 1 04:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=586966140276f5553e6f00a7685f0d2346d48561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a3:b0:d8:94:75:e9:d0:56:95:ee:7e:41:06: 5d:6c:53:98:12:18:e4:c7:7f:97:b6:cf:11:90:6a: 23:35:d5:50:42:68:5e:59:3f:32:ba:2a:11:a2:1c: 25:f3:80:ce:b0:99:79:51:81:67:9b:ae:26:5a:91: e9:e2:7d:75:13:36:7d:64:c3:4a:be:83:dd:bb:b1: 96:e9:cd:2f:73:9c:ac:00:c5:58:22:07:3a:f8:04: 5e:e6:d4:31:b8:5c:e9:88:ef:d9:f3:4e:5f:a9:19: c7:ff:e5:40:fc:80:d0:32:2d:1f:5b:e6:b5:f2:b8: f9:5a:27:8e:b6:39:8a:90:8a:59:d0:a9:97:f8:3a: d7:75:c7:7f:c4:dc:79:69:37:aa:d6:96:46:cf:c9: 7e:e7:ae:58:78:9b:05:39:57:5c:da:7f:00:2a:b1: d1:79:5a:a7:5c:46:be:65:08:66:03:92:db:e9:0a: c8:f8:f5:6f:9a:08:57:c9:fa:34:44:2d:78:52:0c: ce:18:b0:bb:68:29:d8:f4:42:1a:5e:c8:a3:72:6e: 07:ad:6c:09:24:32:19:3a:78:7a:36:59:fd:0a:ed: b4:4e:88:89:12:54:29:f1:94:f8:24:75:c8:dd:df: 1d:32:c5:d6:35:28:27:bd:73:09:8e:58:4d:d3:98: 8c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:69:66:14:02:76:F5:55:3E:6F:00:A7:68:5F:0D:23:46:D4:85:61 X509v3 Authority Key Identifier: keyid:9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/WGlmFAJ29VU-bwCnaF8NI0bUhWE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.203.225.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:0a:ed:52:cc:0a:38:cf:14:94:46:05:7b:82:c6:24:55:45: fb:30:20:12:01:e4:02:2a:50:c9:9a:49:24:30:21:39:44:c6: b7:95:ac:78:c5:2b:63:2f:34:17:98:7f:e3:8b:3c:4d:b8:7b: a6:9d:12:4a:97:ce:e2:1d:c6:b5:9b:fd:e0:e9:3e:6e:a5:33: 17:8f:cc:ed:e2:91:fe:97:f3:0a:56:37:f3:50:96:9e:71:2f: 92:7c:8e:6f:3f:30:a9:e7:b0:06:80:2d:fd:54:0c:47:1d:ca: 71:6a:ee:c3:bc:66:f5:74:b2:80:6c:c5:3f:2a:06:db:90:53: 76:80:20:48:f7:3f:04:b6:47:e6:88:6b:4f:d6:77:a4:cf:c8: 1d:c6:6d:7e:06:14:48:d9:bd:f8:89:46:96:7d:18:07:31:57: b3:d5:d6:13:b5:d0:56:30:c8:30:a3:01:e1:89:5d:9d:c2:b7: f3:d9:9c:cc:22:70:ca:1f:cf:38:c0:b7:0a:71:05:a2:23:fe: 0b:39:b4:f2:bf:1a:9b:9d:2c:04:01:75:c3:c5:d1:75:04:f0: ac:5b:bd:4a:dd:e2:62:5d:cb:ef:fb:06:a1:1f:86:3d:cd:4f: aa:ef:61:09:dc:93:52:49:b0:4e:bd:a6:13:dc:a7:ab:d7:d0: fa:f4:2f:06 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xyF8TPxW5L3rPO9l1eBCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNTI2YTczY2U4ZjlmNjJjMTRhMTFhMmVhOTEzZWMyNzNk NThjNDYwHhcNMjYwMTAxMDQxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODY5NjYxNDAyNzZmNTU1M2U2ZjAwYTc2ODVmMGQyMzQ2ZDQ4NTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaOw2JR16dBWle5+QQZdbFOYEhjk x3+Xts8RkGojNdVQQmheWT8yuioRohwl84DOsJl5UYFnm64mWpHp4n11EzZ9ZMNK voPdu7GW6c0vc5ysAMVYIgc6+ARe5tQxuFzpiO/Z805fqRnH/+VA/IDQMi0fW+a1 8rj5WieOtjmKkIpZ0KmX+DrXdcd/xNx5aTeq1pZGz8l+565YeJsFOVdc2n8AKrHR eVqnXEa+ZQhmA5Lb6QrI+PVvmghXyfo0RC14UgzOGLC7aCnY9EIaXsijcm4HrWwJ JDIZOnh6Nln9Cu20ToiJElQp8ZT4JHXI3d8dMsXWNSgnvXMJjlhN05iMYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFhpZhQCdvVVPm8Ap2hfDSNG1IVhMB8GA1UdIwQY MBaAFJpSanPOj59iwUoRouqRPsJz1YxGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWxKcWM4NlBuMkxCU2hHaTZwRS13blBWakVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi82ZmNkY2EtZDEyMS00MzkxLTljZmMt N2QxNmI5MGRiZTcyLzEvV0dsbUZBSjI5VlUtYndDbmFGOE5JMGJVaFdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi82ZmNkY2EtZDEyMS00MzkxLTljZmMtN2QxNmI5MGRiZTcy LzEvbWxKcWM4NlBuMkxCU2hHaTZwRS13blBWakVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8vhMA0G CSqGSIb3DQEBCwUAA4IBAQCaCu1SzAo4zxSURgV7gsYkVUX7MCASAeQCKlDJmkkk MCE5RMa3lax4xStjLzQXmH/jizxNuHumnRJKl87iHca1m/3g6T5upTMXj8zt4pH+ l/MKVjfzUJaecS+SfI5vPzCp57AGgC39VAxHHcpxau7DvGb1dLKAbMU/KgbbkFN2 gCBI9z8EtkfmiGtP1nekz8gdxm1+BhRI2b34iUaWfRgHMVez1dYTtdBWMMgwowHh iV2dwrfz2ZzMInDKH884wLcKcQWiI/4LObTyvxqbnSwEAXXDxdF1BPCsW71K3eJi Xcvv+wahH4Y9zU+q72EJ3JNSSbBOvaYT3Ker19D69C8G -----END CERTIFICATE-----Generated at Mon Jan 26 05:49:42 2026 by rpki-client