This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/W2i76MrSQ6wt7tAiZdLDluFBtFM.roa File: W2i76MrSQ6wt7tAiZdLDluFBtFM.roa (raw, json) Hash identifier: x2yrgDtcnU02x3m/qpzHhyg+W4mYTMS/IQSYEXZQTTE= Subject key identifier: 5B:68:BB:E8:CA:D2:43:AC:2D:EE:D0:22:65:D2:C3:96:E1:41:B4:53 Certificate issuer: /CN=01cbc6e744eef9c0167401d56c1f9380eef64948 Certificate serial: 019B78A259E599F89C7569CA74B4B894B166 Authority key identifier: 01:CB:C6:E7:44:EE:F9:C0:16:74:01:D5:6C:1F:93:80:EE:F6:49:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/W2i76MrSQ6wt7tAiZdLDluFBtFM.roa Signing time: Thu 01 Jan 2026 08:17:44 +0000 ROA not before: Thu 01 Jan 2026 08:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51099 IP address blocks: 91.216.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:59:e5:99:f8:9c:75:69:ca:74:b4:b8:94:b1:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01cbc6e744eef9c0167401d56c1f9380eef64948 Validity Not Before: Jan 1 08:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b68bbe8cad243ac2deed02265d2c396e141b453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:f9:2b:3a:66:94:2a:29:48:9b:9f:6f:d3:68: 21:29:3e:f2:37:5d:a4:35:cb:80:c2:f1:0c:3a:6c: 1e:b3:61:57:7e:b1:a7:68:81:5d:81:d4:a3:8a:48: ad:c6:51:c0:92:a9:67:ae:cf:19:71:63:59:1f:ec: 14:4f:83:05:9b:91:ca:06:ed:37:7b:c3:c4:ec:7b: 9e:9c:a8:e1:c1:2c:d2:41:1e:89:4c:24:bd:1a:c3: 95:97:87:a6:af:9a:3c:f5:4c:80:39:d1:a3:8b:72: 37:b0:3f:df:5f:21:8e:fc:c0:fa:e5:06:1d:b8:8a: 41:4b:ed:9d:9e:08:5b:96:6c:32:69:ef:80:1b:dc: af:bd:99:86:6d:71:3f:1d:4d:44:39:f4:6f:17:fc: b8:4a:2b:58:05:57:76:ce:21:cb:2a:49:fb:63:c6: b8:53:a0:01:cd:30:ae:ec:c4:6d:2e:83:d6:f9:3f: 3c:da:a9:50:85:c9:f5:49:17:1a:9b:cc:7b:33:83: 0a:12:ee:ae:c1:25:80:ed:7a:55:56:0c:05:53:82: e6:32:64:89:4d:ce:7b:02:cb:43:fe:df:86:d0:32: e6:eb:2e:c8:f9:13:30:70:27:d4:e6:fe:95:ba:ad: f9:56:08:77:02:cd:8e:b9:55:3e:9d:27:e6:b1:6d: 0c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:68:BB:E8:CA:D2:43:AC:2D:EE:D0:22:65:D2:C3:96:E1:41:B4:53 X509v3 Authority Key Identifier: keyid:01:CB:C6:E7:44:EE:F9:C0:16:74:01:D5:6C:1F:93:80:EE:F6:49:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/W2i76MrSQ6wt7tAiZdLDluFBtFM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.151.0/24 Signature Algorithm: sha256WithRSAEncryption 86:f5:5b:66:d5:3d:2e:28:fa:1d:fd:4b:58:2f:e4:13:df:4f: 23:f2:fc:76:06:be:60:99:b0:96:ed:bc:3a:6e:0a:7d:61:b3: 52:2d:96:2c:1b:6c:f0:df:0f:b8:81:db:94:64:a0:b8:4f:36: 5b:10:50:7f:4f:6a:7d:fd:94:42:de:51:37:10:b9:a0:0e:f1: 7f:6a:a3:cc:55:24:8c:ae:87:ff:a2:ab:f7:21:d3:ff:f0:c5: 83:a7:45:c7:05:62:0a:bd:34:d7:eb:98:37:c7:8d:77:62:c5: 1a:40:ce:8d:ce:98:32:e4:a8:7a:55:2c:ed:df:8b:3a:f2:ff: 85:af:bd:9b:4f:bd:6c:02:90:fd:4c:42:54:fb:ab:83:9a:b2: 63:ec:8b:c0:79:13:d2:c1:30:01:ca:3a:2f:c7:45:0c:49:aa: 62:8b:c3:0d:61:bc:14:2e:d6:c6:23:de:cc:2a:6a:4c:33:f4: dd:4a:a8:11:b9:d9:7e:63:83:14:5b:a6:10:b3:2d:bc:7f:57: 41:60:6e:e7:11:8c:f3:12:44:6e:90:24:85:6d:b3:88:6c:a3: 7e:61:c5:56:6c:ae:66:ea:da:32:f6:32:64:a9:0d:65:1c:aa: ab:58:8a:78:91:a0:21:36:01:fd:c3:a3:3a:ac:eb:61:3d:98: cf:be:bc:e6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4olnlmficdWnKdLS4lLFmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxY2JjNmU3NDRlZWY5YzAxNjc0MDFkNTZjMWY5MzgwZWVm NjQ5NDgwHhcNMjYwMTAxMDgxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjY4YmJlOGNhZDI0M2FjMmRlZWQwMjI2NWQyYzM5NmUxNDFiNDUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5/krOmaUKilIm59v02ghKT7yN12k NcuAwvEMOmwes2FXfrGnaIFdgdSjikitxlHAkqlnrs8ZcWNZH+wUT4MFm5HKBu03 e8PE7HuenKjhwSzSQR6JTCS9GsOVl4emr5o89UyAOdGji3I3sD/fXyGO/MD65QYd uIpBS+2dnghblmwyae+AG9yvvZmGbXE/HU1EOfRvF/y4SitYBVd2ziHLKkn7Y8a4 U6ABzTCu7MRtLoPW+T882qlQhcn1SRcam8x7M4MKEu6uwSWA7XpVVgwFU4LmMmSJ Tc57AstD/t+G0DLm6y7I+RMwcCfU5v6Vuq35Vgh3As2OuVU+nSfmsW0MMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFtou+jK0kOsLe7QImXSw5bhQbRTMB8GA1UdIwQY MBaAFAHLxudE7vnAFnQB1Wwfk4Du9klIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWN2RzUwVHUtY0FXZEFIVmJCLVRnTzcyU1VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mNDkzYzYtMTAzYy00ZDc5LTlhZTIt OWUyZGEzN2I0MTllLzEvVzJpNzZNclNRNnd0N3RBaVpkTERsdUZCdEZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9mNDkzYzYtMTAzYy00ZDc5LTlhZTItOWUyZGEzN2I0MTll LzEvQWN2RzUwVHUtY0FXZEFIVmJCLVRnTzcyU1VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9iXMA0G CSqGSIb3DQEBCwUAA4IBAQCG9Vtm1T0uKPod/UtYL+QT308j8vx2Br5gmbCW7bw6 bgp9YbNSLZYsG2zw3w+4gduUZKC4TzZbEFB/T2p9/ZRC3lE3ELmgDvF/aqPMVSSM rof/oqv3IdP/8MWDp0XHBWIKvTTX65g3x413YsUaQM6Nzpgy5Kh6VSzt34s68v+F r72bT71sApD9TEJU+6uDmrJj7IvAeRPSwTAByjovx0UMSapii8MNYbwULtbGI97M KmpMM/TdSqgRudl+Y4MUW6YQsy28f1dBYG7nEYzzEkRukCSFbbOIbKN+YcVWbK5m 6toy9jJkqQ1lHKqrWIp4kaAhNgH9w6M6rOthPZjPvrzm -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:57 2026 by rpki-client