This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/WKalSGnevGohhpgm-gEVPpoJ6r8.roa File: WKalSGnevGohhpgm-gEVPpoJ6r8.roa (raw, json) Hash identifier: RtBxGLGQ1rKUm3Dw/j2SrY9FsdpNgrlCWPACnmZSvFU= Subject key identifier: 58:A6:A5:48:69:DE:BC:6A:21:86:98:26:FA:01:15:3E:9A:09:EA:BF Certificate issuer: /CN=ef42aed0e91b23d0cdcbfb24ac839b0dbe6aa04b Certificate serial: 019B7DC9FD053F5D10A226E5220D25BCFE3B Authority key identifier: EF:42:AE:D0:E9:1B:23:D0:CD:CB:FB:24:AC:83:9B:0D:BE:6A:A0:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70Ku0OkbI9DNy_skrIObDb5qoEs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/WKalSGnevGohhpgm-gEVPpoJ6r8.roa Signing time: Fri 02 Jan 2026 08:19:08 +0000 ROA not before: Fri 02 Jan 2026 08:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197655 IP address blocks: 91.223.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.crl rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft rsync://rpki.ripe.net/repository/DEFAULT/70Ku0OkbI9DNy_skrIObDb5qoEs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:fd:05:3f:5d:10:a2:26:e5:22:0d:25:bc:fe:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef42aed0e91b23d0cdcbfb24ac839b0dbe6aa04b Validity Not Before: Jan 2 08:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58a6a54869debc6a21869826fa01153e9a09eabf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:5e:c8:20:d8:6d:bd:1c:0b:bb:91:72:eb:5f: 1e:e0:ca:5c:18:18:6e:9d:cf:ec:6f:ce:d0:eb:de: 55:bb:15:77:60:30:c3:de:5f:87:b4:4e:d2:8f:42: 88:a4:f4:38:ef:5f:fc:14:5b:f6:dd:21:d7:05:93: 46:c5:06:28:b8:0a:f0:4f:81:eb:c0:12:f5:be:c1: e0:32:aa:c1:40:4d:89:a4:3f:7d:61:8d:25:35:80: 33:a0:2c:9d:dc:b6:54:26:ac:10:3c:9d:35:d9:3c: cd:6f:b8:59:ce:80:34:dc:1b:69:b7:92:66:ad:af: 86:8c:7b:6d:18:3d:6a:bd:4a:b2:12:d7:95:ed:3c: cf:69:2a:c6:53:ec:88:85:fd:e2:8d:a6:ef:23:31: 35:e5:6e:4d:6c:4a:c6:cb:02:3e:09:2f:b8:05:97: 44:67:d1:e8:d5:9c:aa:a7:68:9d:c8:53:60:0a:a0: 05:df:ec:a1:70:7b:60:a2:70:b5:b7:66:f6:da:ab: ba:15:a2:db:d5:6f:66:ba:7d:26:ab:c6:b9:8c:11: aa:fc:73:41:01:7b:01:b1:20:fe:92:87:d1:c6:5b: cb:c2:40:d3:a9:d7:83:c0:47:12:60:02:a5:9d:ee: 04:3b:9c:2c:45:e0:fa:c2:ca:16:a4:e1:25:da:da: e2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:A6:A5:48:69:DE:BC:6A:21:86:98:26:FA:01:15:3E:9A:09:EA:BF X509v3 Authority Key Identifier: keyid:EF:42:AE:D0:E9:1B:23:D0:CD:CB:FB:24:AC:83:9B:0D:BE:6A:A0:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70Ku0OkbI9DNy_skrIObDb5qoEs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/WKalSGnevGohhpgm-gEVPpoJ6r8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.193.0/24 Signature Algorithm: sha256WithRSAEncryption da:ab:ac:49:b9:3f:d8:06:45:0c:eb:00:84:7a:e0:ec:56:9a: 6e:49:d4:53:10:30:1c:57:a1:cb:2a:6b:23:03:73:da:91:05: 6d:18:f7:5c:cd:97:2f:d0:9c:7b:5d:7e:0e:1d:ca:8a:b0:72: 54:d1:a2:79:ac:19:97:cd:ed:01:77:82:29:6e:8f:b5:9a:2d: d3:ba:63:1a:1b:6d:c3:20:3e:66:0e:51:84:33:20:7b:cc:86: 66:2b:bb:b9:9d:59:fd:4b:e8:3d:38:42:fe:66:cb:61:d0:8f: 5e:1f:2e:66:4f:c7:4c:6c:bb:2e:4d:9f:51:db:47:e3:ea:8b: 57:b9:4f:6b:3b:97:5f:e5:8a:0c:50:85:8d:75:c8:d7:af:db: 45:a5:62:92:58:d2:10:b9:72:df:51:ff:a7:a8:a1:26:26:87: 4f:2e:42:2d:53:2f:48:81:b7:a9:78:2b:08:d2:1e:3a:72:06: 07:59:66:f5:5d:a2:b8:c2:0f:0e:b2:97:b0:2d:80:64:6f:c7: 2d:8b:a0:37:f9:5a:c8:a7:38:ba:01:24:a8:48:49:63:00:e6: c2:2c:33:ec:f0:f5:c1:34:c2:e7:f7:95:c7:74:a2:21:67:e8: cf:e7:3b:4d:0e:6a:b0:df:25:f1:fd:36:f6:66:1d:70:56:f7: bd:7e:22:f0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yf0FP10QoiblIg0lvP47MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNDJhZWQwZTkxYjIzZDBjZGNiZmIyNGFjODM5YjBkYmU2 YWEwNGIwHhcNMjYwMTAyMDgxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OGE2YTU0ODY5ZGViYzZhMjE4Njk4MjZmYTAxMTUzZTlhMDllYWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA017IINhtvRwLu5Fy618e4MpcGBhu nc/sb87Q695VuxV3YDDD3l+HtE7Sj0KIpPQ471/8FFv23SHXBZNGxQYouArwT4Hr wBL1vsHgMqrBQE2JpD99YY0lNYAzoCyd3LZUJqwQPJ012TzNb7hZzoA03Btpt5Jm ra+GjHttGD1qvUqyEteV7TzPaSrGU+yIhf3ijabvIzE15W5NbErGywI+CS+4BZdE Z9Ho1Zyqp2idyFNgCqAF3+yhcHtgonC1t2b22qu6FaLb1W9mun0mq8a5jBGq/HNB AXsBsSD+kofRxlvLwkDTqdeDwEcSYAKlne4EO5wsReD6wsoWpOEl2tri6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFimpUhp3rxqIYaYJvoBFT6aCeq/MB8GA1UdIwQY MBaAFO9CrtDpGyPQzcv7JKyDmw2+aqBLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzBLdTBPa2JJOUROeV9za3JJT2JEYjVxb0VzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9iZDc1YTItZmM2ZS00YTg2LTllZGYt NjY5OTA5ZTExY2UzLzEvV0thbFNHbmV2R29oaHBnbS1nRVZQcG9KNnI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9iZDc1YTItZmM2ZS00YTg2LTllZGYtNjY5OTA5ZTExY2Uz LzEvNzBLdTBPa2JJOUROeV9za3JJT2JEYjVxb0VzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9/BMA0G CSqGSIb3DQEBCwUAA4IBAQDaq6xJuT/YBkUM6wCEeuDsVppuSdRTEDAcV6HLKmsj A3PakQVtGPdczZcv0Jx7XX4OHcqKsHJU0aJ5rBmXze0Bd4Ipbo+1mi3TumMaG23D ID5mDlGEMyB7zIZmK7u5nVn9S+g9OEL+Zsth0I9eHy5mT8dMbLsuTZ9R20fj6otX uU9rO5df5YoMUIWNdcjXr9tFpWKSWNIQuXLfUf+nqKEmJodPLkItUy9IgbepeCsI 0h46cgYHWWb1XaK4wg8OspewLYBkb8cti6A3+VrIpzi6ASSoSEljAObCLDPs8PXB NMLn95XHdKIhZ+jP5ztNDmqw3yXx/Tb2Zh1wVve9fiLw -----END CERTIFICATE-----Generated at Mon Feb 9 22:17:22 2026 by rpki-client