This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/wZ9RkRMpZ0zSJRETkyLZujvEe_A.roa File: wZ9RkRMpZ0zSJRETkyLZujvEe_A.roa (raw, json) Hash identifier: 8sVpKy5s2khImy6cMRVFY6mSlDYqhzQpPN1YY16omwI= Subject key identifier: C1:9F:51:91:13:29:67:4C:D2:25:11:13:93:22:D9:BA:3B:C4:7B:F0 Certificate issuer: /CN=e31f3656c6ed9a3f9a42c678a78a2e374f8e57d3 Certificate serial: 019B7DC9EA3E30458092B546F648787C4C9F Authority key identifier: E3:1F:36:56:C6:ED:9A:3F:9A:42:C6:78:A7:8A:2E:37:4F:8E:57:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/wZ9RkRMpZ0zSJRETkyLZujvEe_A.roa Signing time: Fri 02 Jan 2026 08:19:03 +0000 ROA not before: Fri 02 Jan 2026 08:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2914 IP address blocks: 92.249.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft rsync://rpki.ripe.net/repository/DEFAULT/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 14:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:ea:3e:30:45:80:92:b5:46:f6:48:78:7c:4c:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e31f3656c6ed9a3f9a42c678a78a2e374f8e57d3 Validity Not Before: Jan 2 08:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c19f51911329674cd22511139322d9ba3bc47bf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:bc:02:94:44:38:76:ab:89:25:18:c2:a3:75: d7:fc:4c:a1:c2:70:68:ca:c4:89:22:8f:46:2b:eb: b0:55:f1:f7:ff:52:93:f7:fd:43:86:21:25:a4:c7: 29:46:c1:db:3b:e8:12:3e:2d:d3:97:8a:2c:bf:a5: 77:62:22:45:5d:85:63:8f:59:5d:90:0e:ad:d9:c0: ba:09:e8:e1:13:98:8a:08:97:56:fc:63:92:5c:27: aa:6b:2b:f3:6f:54:df:de:39:28:31:c4:d9:98:b3: c9:2f:3f:49:68:ff:98:28:8a:54:80:1f:ad:56:8f: f4:cc:9d:e7:d5:a9:8f:72:b3:67:0c:2b:09:df:51: 0c:53:d8:23:ba:73:39:14:7a:e4:81:83:c9:c1:82: a7:bf:3a:9c:1c:9d:63:32:ad:2a:18:ef:07:3a:fc: 36:52:6c:c2:dc:6a:bf:05:76:61:ef:d1:b4:a4:d2: ff:02:88:94:36:a5:88:6f:cb:56:83:57:43:45:8d: 0c:ea:50:4f:04:ed:7b:51:dc:ed:9b:70:e6:af:41: 8d:42:14:93:3e:77:d9:e2:25:8d:e4:8f:7f:fd:b5: c1:da:7d:e1:92:4c:ee:eb:f7:18:d2:b5:a2:1d:dd: ff:29:d6:d9:18:da:87:22:1a:5b:c0:5f:7a:f4:b9: 77:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:9F:51:91:13:29:67:4C:D2:25:11:13:93:22:D9:BA:3B:C4:7B:F0 X509v3 Authority Key Identifier: keyid:E3:1F:36:56:C6:ED:9A:3F:9A:42:C6:78:A7:8A:2E:37:4F:8E:57:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/wZ9RkRMpZ0zSJRETkyLZujvEe_A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.249.25.0/24 Signature Algorithm: sha256WithRSAEncryption 26:8d:6b:b3:04:b8:40:8a:e6:0d:db:04:83:0f:fe:da:f3:cc: cb:74:2c:b0:13:a2:8f:ad:76:f0:f4:6f:62:e4:81:c2:0e:58: 59:59:68:8b:1f:30:a2:0a:32:b8:82:79:c3:7d:e9:5d:e2:7b: be:db:dd:38:fe:ea:f0:2a:6e:ac:56:90:38:9c:0b:67:0d:3f: 0d:d4:9d:4f:fb:26:93:48:40:80:29:e6:2b:99:32:38:e9:ca: 7e:8a:ed:9e:b3:66:99:a5:53:e4:95:9c:d1:e0:50:dd:d7:1d: dc:d9:52:b5:e7:03:a3:73:2a:b1:a7:dd:ac:50:96:fe:2e:f1: 46:69:06:ce:9d:ac:d1:fb:2f:ff:5d:d5:f2:64:03:f0:8a:42: 9c:82:34:de:45:64:20:73:0c:06:40:cc:46:51:6a:36:54:0f: 09:b1:4f:80:5d:1e:bc:f5:45:8f:7b:c1:40:32:46:20:d5:dd: 05:18:ae:dc:bd:61:ac:28:68:a2:8e:d4:8c:40:b4:f2:20:4c: c5:73:63:68:a4:5a:9d:c9:4f:c0:c4:7a:1d:50:c3:bc:6d:cb: 30:20:1a:1f:87:a3:31:af:45:22:19:2c:c5:ad:cf:a6:2c:71: 4e:c7:57:7e:95:32:d0:d8:77:e6:b5:12:b9:07:31:97:53:ae: 77:13:e5:47 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yeo+MEWAkrVG9kh4fEyfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMWYzNjU2YzZlZDlhM2Y5YTQyYzY3OGE3OGEyZTM3NGY4 ZTU3ZDMwHhcNMjYwMTAyMDgxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTlmNTE5MTEzMjk2NzRjZDIyNTExMTM5MzIyZDliYTNiYzQ3YmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLwClEQ4dquJJRjCo3XX/EyhwnBo ysSJIo9GK+uwVfH3/1KT9/1DhiElpMcpRsHbO+gSPi3Tl4osv6V3YiJFXYVjj1ld kA6t2cC6CejhE5iKCJdW/GOSXCeqayvzb1Tf3jkoMcTZmLPJLz9JaP+YKIpUgB+t Vo/0zJ3n1amPcrNnDCsJ31EMU9gjunM5FHrkgYPJwYKnvzqcHJ1jMq0qGO8HOvw2 UmzC3Gq/BXZh79G0pNL/AoiUNqWIb8tWg1dDRY0M6lBPBO17Udztm3Dmr0GNQhST PnfZ4iWN5I9//bXB2n3hkkzu6/cY0rWiHd3/KdbZGNqHIhpbwF969Ll37wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMGfUZETKWdM0iURE5Mi2bo7xHvwMB8GA1UdIwQY MBaAFOMfNlbG7Zo/mkLGeKeKLjdPjlfTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHg4MlZzYnRtai1hUXNaNHA0b3VOMC1PVjlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8wMmY4YTEtMzM4My00ZDIxLWFhMjUt ZTczM2MyNjJhMzgyLzEvd1o5UmtSTXBaMHpTSlJFVGt5TFp1anZFZV9BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8wMmY4YTEtMzM4My00ZDIxLWFhMjUtZTczM2MyNjJhMzgy LzEvNHg4MlZzYnRtai1hUXNaNHA0b3VOMC1PVjlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXPkZMA0G CSqGSIb3DQEBCwUAA4IBAQAmjWuzBLhAiuYN2wSDD/7a88zLdCywE6KPrXbw9G9i 5IHCDlhZWWiLHzCiCjK4gnnDfeld4nu+2904/urwKm6sVpA4nAtnDT8N1J1P+yaT SECAKeYrmTI46cp+iu2es2aZpVPklZzR4FDd1x3c2VK15wOjcyqxp92sUJb+LvFG aQbOnazR+y//XdXyZAPwikKcgjTeRWQgcwwGQMxGUWo2VA8JsU+AXR689UWPe8FA MkYg1d0FGK7cvWGsKGiijtSMQLTyIEzFc2NopFqdyU/AxHodUMO8bcswIBofh6Mx r0UiGSzFrc+mLHFOx1d+lTLQ2HfmtRK5BzGXU653E+VH -----END CERTIFICATE-----Generated at Thu Jan 8 00:16:39 2026 by rpki-client