This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/wP0JXiaPHK1PWypoONdu1P4k-xY.roa File: wP0JXiaPHK1PWypoONdu1P4k-xY.roa (raw, json) Hash identifier: hOHj+bHUfpcBNhAym5OZKL6pfElusgMVxMa3fRinXoc= Subject key identifier: C0:FD:09:5E:26:8F:1C:AD:4F:5B:2A:68:38:D7:6E:D4:FE:24:FB:16 Certificate issuer: /CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625 Certificate serial: 019B7BA50228818FCBB296908A88D09B052C Authority key identifier: 8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/wP0JXiaPHK1PWypoONdu1P4k-xY.roa Signing time: Thu 01 Jan 2026 22:19:30 +0000 ROA not before: Thu 01 Jan 2026 22:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 10010 IP address blocks: 91.200.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:02:28:81:8f:cb:b2:96:90:8a:88:d0:9b:05:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625 Validity Not Before: Jan 1 22:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c0fd095e268f1cad4f5b2a6838d76ed4fe24fb16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bb:7a:b6:5c:fb:7a:0f:d6:2f:cd:3b:cd:d8: 17:68:51:88:0b:aa:6d:4e:25:ef:ab:05:cf:b6:6d: 41:f4:e0:8d:e7:13:d2:0d:91:7c:c1:27:fc:29:a1: 80:cf:a0:42:86:fa:43:25:9e:ee:fe:eb:36:e5:99: df:5d:1a:0e:63:9c:6a:c8:8c:65:04:19:a9:45:8d: 52:08:18:61:af:cc:62:d0:32:93:e2:3b:1b:96:6a: 3f:35:b1:e0:da:d1:9a:ed:27:1f:72:eb:b3:8c:88: 48:fc:10:06:23:1e:73:69:6c:31:45:d9:e3:66:a3: ed:0b:42:cc:4b:3d:4e:9e:32:ca:86:9a:3d:6a:82: 52:f4:f7:7c:c9:9f:19:68:44:d1:af:39:4d:f1:f5: 82:02:d2:ba:cf:0d:10:76:a8:6c:63:22:f8:6a:e8: 59:c6:89:09:ce:9f:ca:2c:4e:ba:71:25:bb:5c:19: f5:e0:b3:4e:48:f4:3b:b2:85:ac:59:25:d1:d4:3a: 32:86:5e:47:ab:88:14:68:55:3a:1c:17:51:db:55: 99:c5:e0:f2:87:28:87:21:49:a4:59:13:51:38:07: ae:7a:f2:c5:59:3a:7c:0b:3e:5a:7c:35:c5:13:f0: ec:bf:cd:2d:61:f1:bf:e2:f7:ca:ea:d7:e3:2d:a7: e0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:FD:09:5E:26:8F:1C:AD:4F:5B:2A:68:38:D7:6E:D4:FE:24:FB:16 X509v3 Authority Key Identifier: keyid:8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/wP0JXiaPHK1PWypoONdu1P4k-xY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.200.58.0/24 Signature Algorithm: sha256WithRSAEncryption 39:d8:ae:8f:47:c8:52:99:63:ac:c3:b2:c8:6f:4c:9d:d3:ab: 98:e5:4b:58:a3:a3:ce:fd:38:db:00:57:08:89:c1:73:6f:26: cb:ae:a5:24:36:ac:c2:54:95:86:73:86:f8:4b:3a:bf:1f:e9: 00:00:af:26:e8:31:1a:83:96:86:f3:7e:7d:9c:2e:e6:00:95: d2:4e:bc:d2:a9:9b:b2:0a:ca:05:ac:66:88:d2:ae:4f:fe:11: ec:a8:5e:ce:9f:1c:e4:f9:8c:bf:88:d3:32:8f:9f:fd:c7:0c: bd:af:e9:40:08:cf:24:30:25:51:e4:95:5b:3c:2d:a0:b5:db: 7f:3e:5a:6f:8f:e9:2b:46:49:ca:ae:b2:d0:78:f0:66:bc:b1: c5:79:b6:7b:8c:4e:45:e4:9d:5f:41:ae:2e:0c:2b:91:27:ba: f2:24:ce:d5:23:28:b3:4f:a8:0f:e5:72:51:8f:63:24:10:28: 96:63:de:15:00:28:c8:29:5e:e3:b2:c1:5e:27:80:ca:27:cf: 03:76:33:01:8a:e6:de:7d:84:c6:52:9f:6d:7a:c4:b8:5f:8f: 53:c9:ff:5a:16:60:c4:55:fe:ee:0a:41:29:1d:31:50:2e:91: e0:76:9a:5d:49:05:12:57:87:07:b0:e4:b7:e1:e5:8f:de:34: d4:ff:c7:42 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pQIogY/LspaQiojQmwUsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhNjAyNGIyYzI3YTY3ZGZmNWI2NTRlZmEwNmJmN2JmYzEy MjI2MjUwHhcNMjYwMTAxMjIxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMGZkMDk1ZTI2OGYxY2FkNGY1YjJhNjgzOGQ3NmVkNGZlMjRmYjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7t6tlz7eg/WL807zdgXaFGIC6pt TiXvqwXPtm1B9OCN5xPSDZF8wSf8KaGAz6BChvpDJZ7u/us25ZnfXRoOY5xqyIxl BBmpRY1SCBhhr8xi0DKT4jsblmo/NbHg2tGa7ScfcuuzjIhI/BAGIx5zaWwxRdnj ZqPtC0LMSz1OnjLKhpo9aoJS9Pd8yZ8ZaETRrzlN8fWCAtK6zw0QdqhsYyL4auhZ xokJzp/KLE66cSW7XBn14LNOSPQ7soWsWSXR1Doyhl5Hq4gUaFU6HBdR21WZxeDy hyiHIUmkWRNROAeuevLFWTp8Cz5afDXFE/Dsv80tYfG/4vfK6tfjLafgIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMD9CV4mjxytT1sqaDjXbtT+JPsWMB8GA1UdIwQY MBaAFIpgJLLCemff9bZU76Br97/BIiYlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaW1Ba3NzSjZaOV8xdGxUdm9HdjN2OEVpSmlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zM2VjY2YtMGFlMy00YzdlLWE0NDEt MDhlOGYwY2JiODQwLzEvd1AwSlhpYVBISzFQV3lwb09OZHUxUDRrLXhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8zM2VjY2YtMGFlMy00YzdlLWE0NDEtMDhlOGYwY2JiODQw LzEvaW1Ba3NzSjZaOV8xdGxUdm9HdjN2OEVpSmlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8g6MA0G CSqGSIb3DQEBCwUAA4IBAQA52K6PR8hSmWOsw7LIb0yd06uY5UtYo6PO/TjbAFcI icFzbybLrqUkNqzCVJWGc4b4Szq/H+kAAK8m6DEag5aG8359nC7mAJXSTrzSqZuy CsoFrGaI0q5P/hHsqF7Onxzk+Yy/iNMyj5/9xwy9r+lACM8kMCVR5JVbPC2gtdt/ Plpvj+krRknKrrLQePBmvLHFebZ7jE5F5J1fQa4uDCuRJ7ryJM7VIyizT6gP5XJR j2MkECiWY94VACjIKV7jssFeJ4DKJ88DdjMBiubefYTGUp9tesS4X49Tyf9aFmDE Vf7uCkEpHTFQLpHgdppdSQUSV4cHsOS34eWP3jTU/8dC -----END CERTIFICATE-----Generated at Wed Jan 21 19:34:21 2026 by rpki-client