This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3e802e-fab8-44fc-991b-2b50693dbf95/1/WICYHswQgB3ANXpj2XMC_BWEC_s.roa File: WICYHswQgB3ANXpj2XMC_BWEC_s.roa (raw, json) Hash identifier: ikH6R5G0JiDUZ3ms+Esb5y69pjV5ZuQpnPGnpa+MynM= Subject key identifier: 58:80:98:1E:CC:10:80:1D:C0:35:7A:63:D9:73:02:FC:15:84:0B:FB Certificate issuer: /CN=aae6ab047bc73296c9715bcbaeae2e918316b78a Certificate serial: 019B7CEE1E6376B13B14993701DD78ADA972 Authority key identifier: AA:E6:AB:04:7B:C7:32:96:C9:71:5B:CB:AE:AE:2E:91:83:16:B7:8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/quarBHvHMpbJcVvLrq4ukYMWt4o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/3e802e-fab8-44fc-991b-2b50693dbf95/1/WICYHswQgB3ANXpj2XMC_BWEC_s.roa Signing time: Fri 02 Jan 2026 04:18:58 +0000 ROA not before: Fri 02 Jan 2026 04:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61971 IP address blocks: 91.226.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/3e802e-fab8-44fc-991b-2b50693dbf95/1/quarBHvHMpbJcVvLrq4ukYMWt4o.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/3e802e-fab8-44fc-991b-2b50693dbf95/1/quarBHvHMpbJcVvLrq4ukYMWt4o.mft rsync://rpki.ripe.net/repository/DEFAULT/quarBHvHMpbJcVvLrq4ukYMWt4o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:1e:63:76:b1:3b:14:99:37:01:dd:78:ad:a9:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aae6ab047bc73296c9715bcbaeae2e918316b78a Validity Not Before: Jan 2 04:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5880981ecc10801dc0357a63d97302fc15840bfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:fb:c9:fa:a9:73:4d:19:f6:6c:ae:88:80:45: 82:13:db:58:53:8c:a8:bf:c9:7a:c8:4e:70:f5:3c: f7:ed:82:66:b8:b6:41:cd:61:9a:78:0f:ea:3f:d0: 81:9e:0c:90:b6:b8:60:fa:60:7b:99:b7:79:3d:82: 36:d0:eb:60:67:21:a2:9c:f4:9b:21:48:10:4c:48: 33:a0:15:69:07:5d:9e:73:0f:5b:9e:4d:67:a1:51: 9f:6c:bb:c6:65:8f:1b:05:0e:25:c4:76:c4:0b:0a: fa:29:02:fa:e8:85:c3:3f:13:90:fd:18:8d:c4:de: 91:f8:76:fb:bf:0f:8c:1b:22:6e:41:44:02:db:06: 66:74:85:53:34:7b:07:75:be:0d:73:6a:94:a6:ea: 1a:cb:12:6d:89:05:4b:ab:ee:b3:35:d1:46:a1:86: 92:1b:d0:b4:b5:32:77:f7:3c:dd:7a:7e:4f:ff:a9: e1:9f:0a:ee:47:15:28:c9:10:6c:90:04:08:b5:cf: 42:d9:1f:26:94:5a:23:ac:bf:17:13:ce:83:e0:76: e7:bb:7b:45:57:43:ee:7f:30:67:42:4c:f3:67:b9: 32:63:b8:18:7a:99:09:b5:4e:5a:ed:c6:f3:81:04: 1f:2f:e9:30:62:89:57:fa:30:12:cd:1a:99:7a:03: f9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:80:98:1E:CC:10:80:1D:C0:35:7A:63:D9:73:02:FC:15:84:0B:FB X509v3 Authority Key Identifier: keyid:AA:E6:AB:04:7B:C7:32:96:C9:71:5B:CB:AE:AE:2E:91:83:16:B7:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quarBHvHMpbJcVvLrq4ukYMWt4o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3e802e-fab8-44fc-991b-2b50693dbf95/1/WICYHswQgB3ANXpj2XMC_BWEC_s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3e802e-fab8-44fc-991b-2b50693dbf95/1/quarBHvHMpbJcVvLrq4ukYMWt4o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.226.136.0/24 Signature Algorithm: sha256WithRSAEncryption 74:6a:8d:55:f7:7b:ff:45:a3:d1:07:59:dd:89:e4:53:9a:0b: 5e:c2:13:53:ad:be:01:0e:c9:7c:ac:70:cb:b1:f0:7f:22:b2: fe:0f:c1:03:e8:4e:10:2b:f7:27:53:a0:e0:03:87:14:15:93: cb:d9:e1:ba:9c:3d:4a:e9:eb:84:a1:f0:07:f0:17:b1:23:43: d2:6b:2c:22:c7:f2:9e:d8:55:3c:6d:43:d7:d7:7a:96:c0:e8: 75:a5:71:89:25:cf:c3:21:04:53:7c:a4:1f:ca:18:dc:13:1c: 36:7b:81:af:47:60:64:b9:75:65:a7:c9:47:81:f8:98:32:40: 42:bf:f9:87:71:05:71:e1:83:08:4a:dd:29:6b:58:b9:df:63: f9:70:13:d1:80:55:53:e1:a6:c5:97:fb:ac:bc:e4:21:3a:32: 44:fb:95:3b:f2:6c:90:ff:97:1c:1c:a4:c3:4e:fa:ea:ad:a5: 1e:be:df:6a:af:ee:6c:cf:a4:2d:8e:f9:cd:ef:1b:d0:4e:2d: 0f:0c:46:5b:72:1a:42:a1:a8:7b:0c:78:b8:ec:ab:29:31:5c: fa:3d:8a:df:df:df:c2:9c:2e:a2:46:28:df:33:22:62:bf:a2: 13:d8:1e:cf:51:5a:12:3f:61:ae:75:e2:a1:a8:b2:22:a7:9a: 6a:22:be:fc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87h5jdrE7FJk3Ad14ralyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhZTZhYjA0N2JjNzMyOTZjOTcxNWJjYmFlYWUyZTkxODMx NmI3OGEwHhcNMjYwMTAyMDQxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODgwOTgxZWNjMTA4MDFkYzAzNTdhNjNkOTczMDJmYzE1ODQwYmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPvJ+qlzTRn2bK6IgEWCE9tYU4yo v8l6yE5w9Tz37YJmuLZBzWGaeA/qP9CBngyQtrhg+mB7mbd5PYI20OtgZyGinPSb IUgQTEgzoBVpB12ecw9bnk1noVGfbLvGZY8bBQ4lxHbECwr6KQL66IXDPxOQ/RiN xN6R+Hb7vw+MGyJuQUQC2wZmdIVTNHsHdb4Nc2qUpuoayxJtiQVLq+6zNdFGoYaS G9C0tTJ39zzden5P/6nhnwruRxUoyRBskAQItc9C2R8mlFojrL8XE86D4Hbnu3tF V0PufzBnQkzzZ7kyY7gYepkJtU5a7cbzgQQfL+kwYolX+jASzRqZegP53wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFiAmB7MEIAdwDV6Y9lzAvwVhAv7MB8GA1UdIwQY MBaAFKrmqwR7xzKWyXFby66uLpGDFreKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXVhckJIdkhNcGJKY1Z2THJxNHVrWU1XdDRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8zZTgwMmUtZmFiOC00NGZjLTk5MWIt MmI1MDY5M2RiZjk1LzEvV0lDWUhzd1FnQjNBTlhwajJYTUNfQldFQ19zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8zZTgwMmUtZmFiOC00NGZjLTk5MWItMmI1MDY5M2RiZjk1 LzEvcXVhckJIdkhNcGJKY1Z2THJxNHVrWU1XdDRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+KIMA0G CSqGSIb3DQEBCwUAA4IBAQB0ao1V93v/RaPRB1ndieRTmgtewhNTrb4BDsl8rHDL sfB/IrL+D8ED6E4QK/cnU6DgA4cUFZPL2eG6nD1K6euEofAH8BexI0PSaywix/Ke 2FU8bUPX13qWwOh1pXGJJc/DIQRTfKQfyhjcExw2e4GvR2BkuXVlp8lHgfiYMkBC v/mHcQVx4YMISt0pa1i532P5cBPRgFVT4abFl/usvOQhOjJE+5U78myQ/5ccHKTD TvrqraUevt9qr+5sz6QtjvnN7xvQTi0PDEZbchpCoah7DHi47KspMVz6PYrf39/C nC6iRijfMyJiv6IT2B7PUVoSP2GudeKhqLIip5pqIr78 -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:33 2026 by rpki-client