This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/WQ55TI7O_Y3_x9hkYSvF2UvokSE.roa File: WQ55TI7O_Y3_x9hkYSvF2UvokSE.roa (raw, json) Hash identifier: TZOmAdpezSY7WR8DK0sxR8J5sP9pIOwu7JtZmeFi+dA= Subject key identifier: 59:0E:79:4C:8E:CE:FD:8D:FF:C7:D8:64:61:2B:C5:D9:4B:E8:91:21 Certificate issuer: /CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e Certificate serial: 019B7A5B3CAAD0CAEF2D1B2699FF6F6A8A1C Authority key identifier: 5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/WQ55TI7O_Y3_x9hkYSvF2UvokSE.roa Signing time: Thu 01 Jan 2026 16:19:18 +0000 ROA not before: Thu 01 Jan 2026 16:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211936 IP address blocks: 91.198.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 03:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:3c:aa:d0:ca:ef:2d:1b:26:99:ff:6f:6a:8a:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e Validity Not Before: Jan 1 16:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=590e794c8ecefd8dffc7d864612bc5d94be89121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:de:83:e9:24:09:70:11:ce:5d:25:08:20:4a: 59:7f:05:c1:7e:5a:1b:95:c7:8b:de:4a:10:a1:9a: e7:3e:b6:67:77:94:79:11:29:7a:dd:b4:da:ce:53: cd:92:45:5b:47:46:d2:0e:06:80:f6:02:fe:73:c4: 67:eb:55:6d:31:de:03:fb:4a:59:35:73:a1:13:e7: 6d:f1:a9:4a:35:a3:7a:9a:b6:88:d0:a5:71:01:cc: 70:f3:08:67:85:0d:c7:b8:71:37:27:fd:07:e5:aa: f0:9e:68:8f:cb:18:a2:21:d3:7c:18:a3:84:0e:9d: a9:e5:78:7b:f9:4d:9f:c5:32:a6:f7:79:41:1f:8c: f5:4c:87:9b:20:a3:97:78:eb:9d:ae:e6:c9:db:6f: 3e:80:dc:9a:65:ed:7d:ce:7d:2a:d5:78:29:05:39: e4:15:4c:a0:9b:c1:14:d1:dc:dd:bf:a8:5a:21:81: ce:8d:b7:a8:db:12:dd:d6:69:62:56:c5:1b:0f:c3: a2:ae:ac:4c:4b:9c:5e:c1:d9:8d:d2:bf:f8:ce:60: 73:50:28:ed:d3:7f:c8:3d:f5:53:f3:71:aa:ad:dc: 9a:93:1c:90:ac:cd:b4:7c:c9:13:88:23:2c:ee:7f: 5e:b9:99:bf:f0:d5:34:6c:82:28:3a:ac:f9:02:7f: 95:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:0E:79:4C:8E:CE:FD:8D:FF:C7:D8:64:61:2B:C5:D9:4B:E8:91:21 X509v3 Authority Key Identifier: keyid:5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/WQ55TI7O_Y3_x9hkYSvF2UvokSE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.81.0/24 Signature Algorithm: sha256WithRSAEncryption 82:8a:aa:01:ae:37:22:60:bd:fb:de:85:53:82:6e:50:2c:3e: 0c:94:ad:ca:60:af:53:43:21:73:04:79:d0:84:7b:62:36:f0: 2d:e5:0a:9a:e1:53:2c:9c:ee:79:f9:8f:3d:19:bb:34:f4:41: 7e:64:1e:82:39:26:1d:95:2e:fd:96:a9:88:82:c7:05:de:4f: b3:ea:b2:7f:60:04:3a:e6:92:e4:bd:de:2d:93:1c:c4:db:6c: 25:5c:c9:09:d3:d8:4b:71:34:a1:7b:ec:87:64:d7:7e:b6:13: f6:5c:a2:4b:71:4d:d6:56:95:f2:0f:89:dc:aa:03:e5:9b:3f: 1c:71:7b:4f:7a:77:6e:0c:f6:42:c3:7a:df:16:69:5f:6c:e8: 4b:b8:a6:ab:2e:87:5b:21:9b:ee:d5:ed:7f:72:f7:11:1f:6d: b0:f0:b0:91:bd:6a:49:18:3a:2b:84:66:b5:e1:0a:ef:b3:12: 30:94:e6:42:31:a6:bd:4d:73:d5:3e:ba:69:68:53:57:4c:a2: 70:19:d8:d0:0a:78:f6:7a:f2:21:18:3b:1b:d7:0c:a1:2b:5c: b4:65:4a:3e:5a:aa:10:de:fb:b7:11:5f:1d:23:4e:a3:e7:e2: e4:2a:0b:8e:5d:b4:e6:02:c5:a9:84:7f:ba:07:84:a2:6a:2a: 51:a5:dc:c5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wzyq0MrvLRsmmf9vaoocMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlOGQwN2I0NWY3ZDgzMTI0YzlmOGMwZmFjMDNiZWMwMjQ2 OGIzN2UwHhcNMjYwMTAxMTYxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTBlNzk0YzhlY2VmZDhkZmZjN2Q4NjQ2MTJiYzVkOTRiZTg5MTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzt6D6SQJcBHOXSUIIEpZfwXBflob lceL3koQoZrnPrZnd5R5ESl63bTazlPNkkVbR0bSDgaA9gL+c8Rn61VtMd4D+0pZ NXOhE+dt8alKNaN6mraI0KVxAcxw8whnhQ3HuHE3J/0H5arwnmiPyxiiIdN8GKOE Dp2p5Xh7+U2fxTKm93lBH4z1TIebIKOXeOudrubJ228+gNyaZe19zn0q1XgpBTnk FUygm8EU0dzdv6haIYHOjbeo2xLd1mliVsUbD8OirqxMS5xewdmN0r/4zmBzUCjt 03/IPfVT83GqrdyakxyQrM20fMkTiCMs7n9euZm/8NU0bIIoOqz5An+VgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFkOeUyOzv2N/8fYZGErxdlL6JEhMB8GA1UdIwQY MBaAFF6NB7RffYMSTJ+MD6wDvsAkaLN+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWG8wSHRGOTlneEpNbjR3UHJBTy13Q1JvczM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9hMTY4ZTktZDA3MC00NGUwLTk0YTQt NmM4ZmQ4NGJiNWY1LzEvV1E1NVRJN09fWTNfeDloa1lTdkYyVXZva1NFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9hMTY4ZTktZDA3MC00NGUwLTk0YTQtNmM4ZmQ4NGJiNWY1 LzEvWG8wSHRGOTlneEpNbjR3UHJBTy13Q1JvczM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8ZRMA0G CSqGSIb3DQEBCwUAA4IBAQCCiqoBrjciYL373oVTgm5QLD4MlK3KYK9TQyFzBHnQ hHtiNvAt5Qqa4VMsnO55+Y89Gbs09EF+ZB6COSYdlS79lqmIgscF3k+z6rJ/YAQ6 5pLkvd4tkxzE22wlXMkJ09hLcTShe+yHZNd+thP2XKJLcU3WVpXyD4ncqgPlmz8c cXtPenduDPZCw3rfFmlfbOhLuKarLodbIZvu1e1/cvcRH22w8LCRvWpJGDorhGa1 4QrvsxIwlOZCMaa9TXPVPrppaFNXTKJwGdjQCnj2evIhGDsb1wyhK1y0ZUo+WqoQ 3vu3EV8dI06j5+LkKguOXbTmAsWphH+6B4SiaipRpdzF -----END CERTIFICATE-----Generated at Wed Jan 21 10:48:44 2026 by rpki-client