This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/W2_Fzw1Kd6WhipAVYQDiRl5QANo.roa File: W2_Fzw1Kd6WhipAVYQDiRl5QANo.roa (raw, json) Hash identifier: WalT8Zk90ypdkvVuejVIllr7KNMPTiXSreh1fRmtk3c= Subject key identifier: 5B:6F:C5:CF:0D:4A:77:A5:A1:8A:90:15:61:00:E2:46:5E:50:00:DA Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f Certificate serial: 019B7834A3EF6E7D8B47C9104F747A9F54A4 Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/W2_Fzw1Kd6WhipAVYQDiRl5QANo.roa Signing time: Thu 01 Jan 2026 06:17:54 +0000 ROA not before: Thu 01 Jan 2026 06:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212341 IP address blocks: 91.108.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.mft rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:a3:ef:6e:7d:8b:47:c9:10:4f:74:7a:9f:54:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f Validity Not Before: Jan 1 06:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b6fc5cf0d4a77a5a18a90156100e2465e5000da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:de:41:67:2b:0b:3e:f3:ac:ec:e0:b2:ed:1b: c6:f1:25:0a:bc:19:4e:6b:1d:c1:91:3d:54:b0:85: 79:3c:31:69:5c:72:b9:a0:d1:37:a5:2c:b9:98:43: bf:18:bf:db:5d:0c:81:4b:6a:00:55:f5:25:4b:bb: 66:68:bd:83:48:a1:57:b2:38:1e:c1:cf:d6:f3:39: 77:f2:27:aa:87:99:81:ea:e5:f6:c4:f2:4c:37:78: d7:70:7c:af:9a:19:28:4f:86:9f:86:8b:91:7e:9a: 73:5a:02:52:c1:5d:c9:34:ee:8d:d9:80:cf:0c:85: 0e:7a:8d:96:a2:3e:0d:58:af:81:db:95:f5:e4:ec: d4:1e:c4:e5:33:71:05:76:9a:61:cc:8e:9b:c6:d2: 27:5d:e3:7f:db:9f:c3:59:6c:4b:8c:ad:06:37:c5: 94:c2:68:5b:09:22:fd:c0:0a:e4:84:f2:30:99:fb: 64:3d:93:f5:d9:0d:43:cc:05:f0:29:6c:ce:c7:1b: a3:33:e2:24:f2:43:f4:93:41:6e:bd:96:d6:a4:ea: e2:06:86:39:3c:be:88:85:38:a6:81:5e:16:45:27: cd:1f:3c:8a:0e:7e:af:d5:57:2b:b5:06:d3:6b:80: 14:52:30:bc:9e:86:76:39:1c:31:e2:5e:d4:9f:12: f1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:6F:C5:CF:0D:4A:77:A5:A1:8A:90:15:61:00:E2:46:5E:50:00:DA X509v3 Authority Key Identifier: keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/W2_Fzw1Kd6WhipAVYQDiRl5QANo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.108.80.0/24 Signature Algorithm: sha256WithRSAEncryption 94:c8:e5:bb:4d:f0:91:a6:48:93:d0:b0:79:0d:5d:46:c6:a9: 74:5b:b0:45:99:dd:80:cb:0c:39:ad:cc:00:8d:41:d8:9c:25: 90:22:80:6f:b2:a6:a1:c8:f2:af:67:88:8e:74:6c:cc:6a:68: f5:98:61:cd:7a:ae:ac:a6:89:04:39:bd:a7:e3:35:53:8e:ad: f5:e0:53:45:4d:73:da:e5:1d:1e:fb:09:97:f4:fc:85:e0:3e: d9:77:42:27:2d:12:47:aa:ea:71:92:bf:6d:bd:c1:20:11:4e: 44:ec:ba:d1:2c:4a:22:30:f0:17:c3:9c:fd:45:82:17:7d:aa: 27:fe:7b:47:55:16:9d:08:05:86:10:26:cc:e7:23:e1:13:f9: de:89:8b:da:ae:1c:60:a9:b2:41:e0:e0:48:e5:40:90:1b:d4: db:06:fd:8d:e6:ec:a8:5b:d0:a6:a8:89:70:7c:f9:0b:c0:2a: 77:4a:c4:fb:62:47:95:f9:ac:2b:99:74:fd:c1:bd:d3:b4:89: 7a:9f:f0:f2:97:4f:22:4b:0f:9c:75:1b:3a:31:28:dd:ec:d8: d1:0e:a9:75:34:99:ee:0a:a2:3a:d2:6b:0c:f0:fc:67:5e:d4: 4c:47:4c:0d:9d:5c:8d:4e:b4:3f:7a:06:9c:c5:75:28:d7:7c: b1:c3:09:0b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NKPvbn2LR8kQT3R6n1SkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNzhiYzNiZDM1MGVlZGM0ZjM3N2MyMjQ1NTZiMjUwZGE2 ZGRlNmYwHhcNMjYwMTAxMDYxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjZmYzVjZjBkNGE3N2E1YTE4YTkwMTU2MTAwZTI0NjVlNTAwMGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxd5BZysLPvOs7OCy7RvG8SUKvBlO ax3BkT1UsIV5PDFpXHK5oNE3pSy5mEO/GL/bXQyBS2oAVfUlS7tmaL2DSKFXsjge wc/W8zl38ieqh5mB6uX2xPJMN3jXcHyvmhkoT4afhouRfppzWgJSwV3JNO6N2YDP DIUOeo2Woj4NWK+B25X15OzUHsTlM3EFdpphzI6bxtInXeN/25/DWWxLjK0GN8WU wmhbCSL9wArkhPIwmftkPZP12Q1DzAXwKWzOxxujM+Ik8kP0k0FuvZbWpOriBoY5 PL6IhTimgV4WRSfNHzyKDn6v1VcrtQbTa4AUUjC8noZ2ORwx4l7UnxLxGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFtvxc8NSneloYqQFWEA4kZeUADaMB8GA1UdIwQY MBaAFMN4vDvTUO7cTzd8IkVWslDabd5vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzNpOE85TlE3dHhQTjN3aVJWYXlVTnB0M204LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iZTY2ZTQtZjE0Yi00YjMxLWJkYWYt NDQxNDU1OGZkY2JiLzEvVzJfRnp3MUtkNldoaXBBVllRRGlSbDVRQU5vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iZTY2ZTQtZjE0Yi00YjMxLWJkYWYtNDQxNDU1OGZkY2Ji LzEvdzNpOE85TlE3dHhQTjN3aVJWYXlVTnB0M204LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW2xQMA0G CSqGSIb3DQEBCwUAA4IBAQCUyOW7TfCRpkiT0LB5DV1Gxql0W7BFmd2Ayww5rcwA jUHYnCWQIoBvsqahyPKvZ4iOdGzMamj1mGHNeq6spokEOb2n4zVTjq314FNFTXPa 5R0e+wmX9PyF4D7Zd0InLRJHqupxkr9tvcEgEU5E7LrRLEoiMPAXw5z9RYIXfaon /ntHVRadCAWGECbM5yPhE/neiYvarhxgqbJB4OBI5UCQG9TbBv2N5uyoW9CmqIlw fPkLwCp3SsT7YkeV+awrmXT9wb3TtIl6n/Dyl08iSw+cdRs6MSjd7NjRDql1NJnu CqI60msM8PxnXtRMR0wNnVyNTrQ/egacxXUo13yxwwkL -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:20 2026 by rpki-client