This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/w3WwugLLFUcrItCxeJKoofI3afc.roa File: w3WwugLLFUcrItCxeJKoofI3afc.roa (raw, json) Hash identifier: EnJ2zpdE5VsVYk/C8ci9QDlsMzJ01oLKtWbpS2SqvN8= Subject key identifier: C3:75:B0:BA:02:CB:15:47:2B:22:D0:B1:78:92:A8:A1:F2:37:69:F7 Certificate issuer: /CN=cdba6d5704fd290d0e073376eda688717564d196 Certificate serial: 019B7A5B7E05480FFEA4495066619F1931AB Authority key identifier: CD:BA:6D:57:04:FD:29:0D:0E:07:33:76:ED:A6:88:71:75:64:D1:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbptVwT9KQ0OBzN27aaIcXVk0ZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/w3WwugLLFUcrItCxeJKoofI3afc.roa Signing time: Thu 01 Jan 2026 16:19:34 +0000 ROA not before: Thu 01 Jan 2026 16:19:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207114 IP address blocks: 91.207.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/zbptVwT9KQ0OBzN27aaIcXVk0ZY.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/zbptVwT9KQ0OBzN27aaIcXVk0ZY.mft rsync://rpki.ripe.net/repository/DEFAULT/zbptVwT9KQ0OBzN27aaIcXVk0ZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:7e:05:48:0f:fe:a4:49:50:66:61:9f:19:31:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdba6d5704fd290d0e073376eda688717564d196 Validity Not Before: Jan 1 16:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c375b0ba02cb15472b22d0b17892a8a1f23769f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:83:2b:75:76:ee:23:cb:e5:de:91:2e:b1:4f: 35:48:c7:0d:90:a5:ff:b7:ed:7e:0c:d9:61:bc:15: 2e:01:57:79:ae:4a:45:dc:79:a6:1f:76:27:0c:f9: af:10:75:44:be:48:be:8b:4c:3f:bc:32:b0:9a:59: 88:fd:94:e8:b0:ce:59:13:1e:5d:ea:47:85:18:63: 2d:fa:f6:b6:9b:35:9b:d3:78:53:e8:0b:d2:f5:2e: d9:89:30:cf:21:d0:c6:e2:18:02:a1:2a:af:f5:c9: f2:17:74:88:68:12:71:d8:35:ea:2e:f0:2f:fc:f4: 63:fa:63:6d:29:2c:d6:b6:d1:f6:29:fc:d8:c1:fc: 27:57:40:e1:c3:69:7a:60:9a:44:e1:c9:7a:d8:bc: bf:1d:38:77:33:4c:8c:bd:86:32:b8:02:4b:c0:11: 38:3d:34:9b:8f:02:fb:15:7f:96:83:cd:cb:43:03: 98:9d:bd:eb:7c:7d:0c:53:7c:dd:18:98:b4:b6:33: cd:1c:b8:cd:c6:0e:b5:70:5e:81:5f:3f:3c:bb:aa: dc:3e:cf:eb:54:5a:0f:ec:0e:e3:b8:a1:98:e2:bd: c5:f7:df:13:d3:b0:d2:51:5b:f0:f0:a3:7f:ba:2e: 02:0d:c0:10:fc:2e:b3:e5:37:1d:88:ea:28:66:c7: 61:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:75:B0:BA:02:CB:15:47:2B:22:D0:B1:78:92:A8:A1:F2:37:69:F7 X509v3 Authority Key Identifier: keyid:CD:BA:6D:57:04:FD:29:0D:0E:07:33:76:ED:A6:88:71:75:64:D1:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbptVwT9KQ0OBzN27aaIcXVk0ZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/w3WwugLLFUcrItCxeJKoofI3afc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/zbptVwT9KQ0OBzN27aaIcXVk0ZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.207.249.0/24 Signature Algorithm: sha256WithRSAEncryption 41:99:ba:eb:a5:3f:7e:a0:18:03:0b:aa:55:73:87:63:9c:df: ac:d6:ef:37:69:ac:e8:93:f0:9f:3e:ef:34:89:ab:b8:90:26: 83:67:4c:69:8c:0c:51:ed:21:68:0c:a5:0a:3f:b6:60:30:f3: 9d:f1:bc:05:e0:8a:e3:49:a8:6f:57:de:4e:fc:de:42:44:ea: 2d:73:7d:7b:1f:e5:fc:c6:25:7e:63:1e:2f:59:0d:c5:3b:c0: a6:f2:31:1d:7e:a9:c9:4a:7d:fc:02:3a:45:fe:4d:5b:1a:10: a4:cb:22:fc:70:3a:8e:76:95:c4:21:07:a3:88:95:ed:6b:1a: dc:85:2a:5a:67:aa:1b:b9:e7:0b:f9:9b:46:56:77:c6:b7:b4: cb:6b:15:7b:ad:9a:5a:1c:c1:88:59:cf:ae:be:d7:60:c7:05: 12:6d:2f:0a:da:ca:b5:6c:70:62:51:23:63:b7:9f:25:db:f3: 69:5c:97:b6:95:92:8a:ec:49:68:6c:95:da:a2:35:62:a0:e0: 1d:4c:79:eb:d3:71:9c:60:e3:dd:c5:50:cc:7e:d1:0b:f6:d8: f8:b4:36:1c:b7:8c:0c:62:e8:9a:0f:d2:4e:78:b7:3b:3b:ec: d3:e9:23:3f:41:ba:b5:40:8f:01:71:b7:a3:46:27:f4:7c:5e: c3:55:ed:af -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W34FSA/+pElQZmGfGTGrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYmE2ZDU3MDRmZDI5MGQwZTA3MzM3NmVkYTY4ODcxNzU2 NGQxOTYwHhcNMjYwMTAxMTYxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzc1YjBiYTAyY2IxNTQ3MmIyMmQwYjE3ODkyYThhMWYyMzc2OWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYMrdXbuI8vl3pEusU81SMcNkKX/ t+1+DNlhvBUuAVd5rkpF3HmmH3YnDPmvEHVEvki+i0w/vDKwmlmI/ZTosM5ZEx5d 6keFGGMt+va2mzWb03hT6AvS9S7ZiTDPIdDG4hgCoSqv9cnyF3SIaBJx2DXqLvAv /PRj+mNtKSzWttH2KfzYwfwnV0Dhw2l6YJpE4cl62Ly/HTh3M0yMvYYyuAJLwBE4 PTSbjwL7FX+Wg83LQwOYnb3rfH0MU3zdGJi0tjPNHLjNxg61cF6BXz88u6rcPs/r VFoP7A7juKGY4r3F998T07DSUVvw8KN/ui4CDcAQ/C6z5TcdiOooZsdhvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMN1sLoCyxVHKyLQsXiSqKHyN2n3MB8GA1UdIwQY MBaAFM26bVcE/SkNDgczdu2miHF1ZNGWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemJwdFZ3VDlLUTBPQnpOMjdhYUljWFZrMFpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9kMzI4MGItNTNmNy00Mzk0LTg1NTkt YTQ2MTE2OWYxZGMyLzEvdzNXd3VnTExGVWNySXRDeGVKS29vZkkzYWZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC9kMzI4MGItNTNmNy00Mzk0LTg1NTktYTQ2MTE2OWYxZGMy LzEvemJwdFZ3VDlLUTBPQnpOMjdhYUljWFZrMFpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8/5MA0G CSqGSIb3DQEBCwUAA4IBAQBBmbrrpT9+oBgDC6pVc4djnN+s1u83aazok/CfPu80 iau4kCaDZ0xpjAxR7SFoDKUKP7ZgMPOd8bwF4IrjSahvV95O/N5CROotc317H+X8 xiV+Yx4vWQ3FO8Cm8jEdfqnJSn38AjpF/k1bGhCkyyL8cDqOdpXEIQejiJXtaxrc hSpaZ6obuecL+ZtGVnfGt7TLaxV7rZpaHMGIWc+uvtdgxwUSbS8K2sq1bHBiUSNj t58l2/NpXJe2lZKK7ElobJXaojVioOAdTHnr03GcYOPdxVDMftEL9tj4tDYct4wM YuiaD9JOeLc7O+zT6SM/Qbq1QI8BcbejRif0fF7DVe2v -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:58 2026 by rpki-client