This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/RWI0HtM8FeYVX5Hs3ItET4DgJ1M.roa File: RWI0HtM8FeYVX5Hs3ItET4DgJ1M.roa (raw, json) Hash identifier: WBFgEn+XUdSoblbljKWavGjaLtYyP3Ll0jM3oHMrroc= Subject key identifier: 45:62:34:1E:D3:3C:15:E6:15:5F:91:EC:DC:8B:44:4F:80:E0:27:53 Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Certificate serial: 019B797E750ADC12E4A08D597F088646D359 Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/RWI0HtM8FeYVX5Hs3ItET4DgJ1M.roa Signing time: Thu 01 Jan 2026 12:18:09 +0000 ROA not before: Thu 01 Jan 2026 12:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210576 IP address blocks: 91.226.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:75:0a:dc:12:e4:a0:8d:59:7f:08:86:46:d3:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Validity Not Before: Jan 1 12:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4562341ed33c15e6155f91ecdc8b444f80e02753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d4:88:f7:cf:42:24:02:88:df:82:40:aa:2a: bf:ac:d9:bc:90:55:90:e7:c8:46:99:63:c7:7e:15: c4:f9:54:ff:ac:de:f9:d0:a9:46:de:d2:b7:39:35: 45:c7:d3:db:ad:dd:85:62:45:dc:04:f2:3b:8b:8c: c2:bb:b3:e1:cc:b3:a5:af:c0:e4:42:bc:ba:27:78: 76:45:6d:ac:87:a1:17:eb:69:66:ce:89:ee:e3:c0: c9:24:1a:bb:9a:40:89:ec:af:ce:37:b6:0c:6d:59: 22:fb:fd:65:a9:d3:5c:37:c5:8e:7c:2a:49:42:74: 5d:a9:01:2a:e3:9a:4f:31:01:d5:07:13:e6:a3:6a: c5:d1:cf:72:dd:29:3c:34:2a:7d:e8:17:46:da:88: da:2d:1e:cf:9b:a1:16:83:6c:58:42:37:0e:e6:5e: 22:86:1f:3c:20:5c:c1:e1:e7:a4:07:77:5c:0e:2b: e9:81:0d:ab:1f:45:70:46:84:94:4b:54:41:db:f4: b1:82:ce:22:b8:e7:1d:86:9e:b9:7d:ec:b3:1b:3b: 2f:a0:c9:ce:9f:a6:cd:e1:09:79:f2:a5:9c:ee:e9: eb:3d:94:8e:54:62:e0:0f:85:99:57:58:da:e4:55: 33:79:00:a5:55:9d:4e:d6:57:a5:56:91:b0:c9:51: 48:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:62:34:1E:D3:3C:15:E6:15:5F:91:EC:DC:8B:44:4F:80:E0:27:53 X509v3 Authority Key Identifier: keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/RWI0HtM8FeYVX5Hs3ItET4DgJ1M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.226.57.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:65:1f:8b:4b:7d:2b:f9:a2:67:37:21:d2:3e:a1:ba:cf:ca: b0:2b:07:a5:8c:61:56:4c:20:bf:92:db:8f:03:57:b5:d6:db: 5c:33:4b:01:c9:6d:dc:89:8c:a2:4c:fc:b8:6b:1f:25:c8:6b: b4:1e:d2:d1:bd:c8:98:f7:7f:ae:b3:ec:f9:3a:2b:5f:ce:c4: 12:b1:d8:b9:e4:2d:64:29:c3:9b:e6:cb:4f:71:87:70:2c:92: fe:02:5c:a3:a8:a9:91:07:9c:32:7c:44:cd:ed:f3:68:29:21: 78:81:8d:99:af:3f:79:32:25:c5:7b:a7:4b:85:17:4e:44:fd: ef:c3:7c:df:d9:23:d2:1a:eb:5f:aa:95:5b:d6:69:36:37:fc: 7c:79:07:41:54:bc:06:2f:1f:20:79:13:fd:17:dc:50:a0:6a: 4b:3c:c8:1a:d8:19:a6:a7:d6:df:f4:3d:6a:86:7f:0b:07:7c: c8:a2:d5:24:95:e3:7c:e9:7d:c5:90:0b:a8:fe:0d:8a:dd:3b: 40:f3:80:d7:f9:03:7b:15:3e:03:d4:1b:d7:42:bb:33:1d:1d: ec:67:bc:e6:d4:d8:7c:14:b8:ba:99:2e:ab:41:73:69:18:fe: 57:4d:50:29:84:91:ce:6c:f9:1f:c0:36:87:2a:f2:96:cb:28: 6b:81:6e:9a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fnUK3BLkoI1ZfwiGRtNZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj NWFjOGQwHhcNMjYwMTAxMTIxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTYyMzQxZWQzM2MxNWU2MTU1ZjkxZWNkYzhiNDQ0ZjgwZTAyNzUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdSI989CJAKI34JAqiq/rNm8kFWQ 58hGmWPHfhXE+VT/rN750KlG3tK3OTVFx9Pbrd2FYkXcBPI7i4zCu7PhzLOlr8Dk Qry6J3h2RW2sh6EX62lmzonu48DJJBq7mkCJ7K/ON7YMbVki+/1lqdNcN8WOfCpJ QnRdqQEq45pPMQHVBxPmo2rF0c9y3Sk8NCp96BdG2ojaLR7Pm6EWg2xYQjcO5l4i hh88IFzB4eekB3dcDivpgQ2rH0VwRoSUS1RB2/Sxgs4iuOcdhp65feyzGzsvoMnO n6bN4Ql58qWc7unrPZSOVGLgD4WZV1ja5FUzeQClVZ1O1lelVpGwyVFIJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEViNB7TPBXmFV+R7NyLRE+A4CdTMB8GA1UdIwQY MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt MzE4YTI2ZDRhOGM5LzEvUldJMEh0TThGZVlWWDVIczNJdEVUNERnSjFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5 LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+I5MA0G CSqGSIb3DQEBCwUAA4IBAQB/ZR+LS30r+aJnNyHSPqG6z8qwKweljGFWTCC/ktuP A1e11ttcM0sByW3ciYyiTPy4ax8lyGu0HtLRvciY93+us+z5OitfzsQSsdi55C1k KcOb5stPcYdwLJL+AlyjqKmRB5wyfETN7fNoKSF4gY2Zrz95MiXFe6dLhRdORP3v w3zf2SPSGutfqpVb1mk2N/x8eQdBVLwGLx8geRP9F9xQoGpLPMga2Bmmp9bf9D1q hn8LB3zIotUkleN86X3FkAuo/g2K3TtA84DX+QN7FT4D1BvXQrszHR3sZ7zm1Nh8 FLi6mS6rQXNpGP5XTVAphJHObPkfwDaHKvKWyyhrgW6a -----END CERTIFICATE-----Generated at Mon Jan 19 13:54:06 2026 by rpki-client