This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/WOVURcgrOmo7CFBcFUmHZlO20Y8.roa File: WOVURcgrOmo7CFBcFUmHZlO20Y8.roa (raw, json) Hash identifier: wePf8ahRzSpTcfeEJN249YcPQyh2uGg5TQezwCJoWwo= Subject key identifier: 58:E5:54:45:C8:2B:3A:6A:3B:08:50:5C:15:49:87:66:53:B6:D1:8F Certificate issuer: /CN=f95918f76b2e04b175144e23cbe48a63cc9aaa8f Certificate serial: 019B7EA532442F2B1CE092BF5C510FE4FC3E Authority key identifier: F9:59:18:F7:6B:2E:04:B1:75:14:4E:23:CB:E4:8A:63:CC:9A:AA:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/WOVURcgrOmo7CFBcFUmHZlO20Y8.roa Signing time: Fri 02 Jan 2026 12:18:34 +0000 ROA not before: Fri 02 Jan 2026 12:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31554 IP address blocks: 91.220.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:32:44:2f:2b:1c:e0:92:bf:5c:51:0f:e4:fc:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f95918f76b2e04b175144e23cbe48a63cc9aaa8f Validity Not Before: Jan 2 12:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58e55445c82b3a6a3b08505c1549876653b6d18f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f7:f1:9c:63:8f:b9:67:60:01:26:c5:bd:b1: 29:ec:15:33:90:97:d3:f6:77:a2:73:42:a5:3a:fb: 25:e1:5d:3f:f1:f6:ef:0b:6f:e2:86:50:9f:9a:33: a6:b3:70:6d:69:73:f7:22:d9:d2:b0:85:46:9f:66: 83:ce:31:be:22:ed:20:8f:69:6a:b4:41:05:fc:82: 8c:5d:a2:fc:a0:d5:16:40:4d:c4:26:d0:58:c1:c9: 10:4d:1b:c2:b4:1d:41:18:aa:af:ae:5e:a7:d7:ff: 95:1c:23:7d:47:a2:5f:e2:a4:9e:71:35:77:2c:d2: 26:af:fe:f2:43:2f:87:12:c1:86:e7:fb:f1:12:77: 9e:98:ae:7c:05:c9:96:5e:1e:2c:93:4b:51:65:5d: ba:3a:1b:72:66:12:0b:90:f4:92:6b:50:50:29:c0: 3b:8c:9a:2c:ac:b2:b4:1e:40:21:87:e6:66:3f:a7: e0:ef:99:5c:37:21:95:23:c5:e5:d6:76:ae:5b:16: 20:af:7a:2e:22:f2:d4:e9:3d:96:cf:39:b8:d8:c8: 4c:41:73:41:76:bb:1f:3d:aa:f7:3f:2c:a4:3d:dc: 7b:54:b9:40:7c:1d:b7:2e:06:76:09:43:e6:79:5b: d1:21:cf:98:d5:81:3f:f3:e9:e6:a2:30:ab:9c:37: 7c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:E5:54:45:C8:2B:3A:6A:3B:08:50:5C:15:49:87:66:53:B6:D1:8F X509v3 Authority Key Identifier: keyid:F9:59:18:F7:6B:2E:04:B1:75:14:4E:23:CB:E4:8A:63:CC:9A:AA:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/WOVURcgrOmo7CFBcFUmHZlO20Y8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.220.232.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:b8:5a:5f:5a:20:cd:cb:1b:80:61:2b:b8:97:2a:ed:55:3e: 53:e5:2a:bb:72:1e:55:96:5b:39:2a:5b:e9:2a:90:18:ee:75: fb:1c:fc:a4:7c:e2:6a:83:2f:e5:b4:79:74:d8:22:94:71:9d: 4c:69:3c:fc:66:e4:45:09:be:b6:97:9e:db:07:80:76:47:e6: 6c:79:3d:bb:03:df:f1:58:c2:75:6e:44:8f:d5:bd:da:5a:7f: 52:35:f7:30:0d:9d:e0:c9:f4:b9:8f:2a:ea:8e:48:11:f1:93: a7:e4:ea:96:40:62:23:68:48:6a:10:d6:13:51:50:b9:26:89: c8:91:47:fb:5b:bd:5d:3c:80:43:6d:e0:67:a5:42:e6:b2:1f: b7:8a:80:6a:2c:61:82:67:bc:84:9c:ad:5b:1e:f0:e8:68:ba: 89:46:5a:8b:b3:f0:ad:e5:cf:14:66:44:84:63:14:d3:ee:c3: f1:14:ba:31:8b:16:f5:5b:38:01:da:15:e5:2a:94:e4:23:6b: 64:39:63:c8:86:dd:b7:3f:2e:82:f0:17:9e:ee:ae:8e:c0:e9: ad:98:56:88:41:d7:12:e3:d1:8b:40:42:bf:0d:f4:6e:68:65: 07:5c:12:a1:73:05:b7:6c:05:2c:a2:62:d0:5a:02:10:94:da: 89:01:6b:e3 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+pTJELysc4JK/XFEP5Pw+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5NTkxOGY3NmIyZTA0YjE3NTE0NGUyM2NiZTQ4YTYzY2M5 YWFhOGYwHhcNMjYwMTAyMTIxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OGU1NTQ0NWM4MmIzYTZhM2IwODUwNWMxNTQ5ODc2NjUzYjZkMThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/fxnGOPuWdgASbFvbEp7BUzkJfT 9neic0KlOvsl4V0/8fbvC2/ihlCfmjOms3BtaXP3ItnSsIVGn2aDzjG+Iu0gj2lq tEEF/IKMXaL8oNUWQE3EJtBYwckQTRvCtB1BGKqvrl6n1/+VHCN9R6Jf4qSecTV3 LNImr/7yQy+HEsGG5/vxEneemK58BcmWXh4sk0tRZV26OhtyZhILkPSSa1BQKcA7 jJosrLK0HkAhh+ZmP6fg75lcNyGVI8Xl1nauWxYgr3ouIvLU6T2Wzzm42MhMQXNB drsfPar3PyykPdx7VLlAfB23LgZ2CUPmeVvRIc+Y1YE/8+nmojCrnDd8KwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFFjlVEXIKzpqOwhQXBVJh2ZTttGPMB8GA1UdIwQY MBaAFPlZGPdrLgSxdRROI8vkimPMmqqPMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1Wa1k5MnN1QkxGMUZFNGp5LVNLWTh5YXFvOC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmEvMjVkMDkyLTgxYTQtNDdmMy1iZGM2 LTE5Nzc4Yzg3ZmVkNS8xL1dPVlVSY2dyT21vN0NGQmNGVW1IWmxPMjBZOC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZmEvMjVkMDkyLTgxYTQtNDdmMy1iZGM2LTE5Nzc4Yzg3ZmVk NS8xLzEtVmtZOTJzdUJMRjFGRTRqeS1TS1k4eWFxbzguY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABb3Ogw DQYJKoZIhvcNAQELBQADggEBABq4Wl9aIM3LG4BhK7iXKu1VPlPlKrtyHlWWWzkq W+kqkBjudfsc/KR84mqDL+W0eXTYIpRxnUxpPPxm5EUJvraXntsHgHZH5mx5PbsD 3/FYwnVuRI/Vvdpaf1I19zANneDJ9LmPKuqOSBHxk6fk6pZAYiNoSGoQ1hNRULkm iciRR/tbvV08gENt4GelQuayH7eKgGosYYJnvIScrVse8OhouolGWouz8K3lzxRm RIRjFNPuw/EUujGLFvVbOAHaFeUqlOQja2Q5Y8iG3bc/LoLwF57uro7A6a2YVohB 1xLj0YtAQr8N9G5oZQdcEqFzBbdsBSyiYtBaAhCU2okBa+M= -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:12 2026 by rpki-client