This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/wKG5f7dn1-pgRZqivJIzmXImgvk.roa File: wKG5f7dn1-pgRZqivJIzmXImgvk.roa (raw, json) Hash identifier: 9MbV7Vdo6+ToMH+TbPulkfdTZLPlSBCEwYkmIQl3ggs= Subject key identifier: C0:A1:B9:7F:B7:67:D7:EA:60:45:9A:A2:BC:92:33:99:72:26:82:F9 Certificate issuer: /CN=a137891dd4f3df83772d7cfe7183843cbff44d54 Certificate serial: 019B791070A3C736726FA241C3712E525306 Authority key identifier: A1:37:89:1D:D4:F3:DF:83:77:2D:7C:FE:71:83:84:3C:BF:F4:4D:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oTeJHdTz34N3LXz-cYOEPL_0TVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/wKG5f7dn1-pgRZqivJIzmXImgvk.roa Signing time: Thu 01 Jan 2026 10:17:59 +0000 ROA not before: Thu 01 Jan 2026 10:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44489 IP address blocks: 93.91.48.0/20 maxlen: 20 2a01:7ec0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/oTeJHdTz34N3LXz-cYOEPL_0TVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:70:a3:c7:36:72:6f:a2:41:c3:71:2e:52:53:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a137891dd4f3df83772d7cfe7183843cbff44d54 Validity Not Before: Jan 1 10:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c0a1b97fb767d7ea60459aa2bc923399722682f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:35:ef:b0:67:a7:76:44:4d:a5:41:bc:50:bf: 96:b2:c2:cc:30:3e:82:0e:68:e7:8c:f5:e4:c4:0f: 56:36:b5:5a:aa:f6:24:1a:2c:1f:8f:3f:76:b7:9e: ff:9c:bf:57:32:6c:4f:a5:d9:eb:fd:88:a8:13:40: 35:d3:67:86:a8:bd:5e:3f:0c:03:d2:d7:73:1f:5b: 70:2a:a0:1b:f3:ee:c8:8a:26:d7:6f:61:9f:24:0d: 16:89:3c:44:8a:03:04:62:70:0d:c7:62:b0:9d:53: db:62:d5:6e:dc:75:d1:8a:fd:72:de:53:2b:6d:6f: 09:80:30:c3:e3:67:95:fa:a8:42:d0:6c:a2:c7:dd: fc:70:51:2f:d5:d7:54:ff:ae:2e:ac:c0:ff:6d:f8: 01:ab:a0:ea:14:63:d3:0a:49:03:23:c3:50:4f:7e: 50:aa:78:89:f0:75:f3:54:56:6d:d3:16:01:a5:89: 6d:42:74:a0:28:5f:7e:08:f4:e9:25:b6:d3:5c:7e: c0:1c:8f:83:2a:42:73:69:35:31:d2:a0:3c:90:4d: 34:28:97:f6:73:6d:92:01:03:08:c0:10:0f:fe:9b: 27:0f:e7:e9:a6:e3:a8:c2:2d:2d:ae:10:5a:a4:ad: 81:e1:c5:6a:49:37:b3:6d:de:d8:7e:0c:10:4b:ad: 91:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:A1:B9:7F:B7:67:D7:EA:60:45:9A:A2:BC:92:33:99:72:26:82:F9 X509v3 Authority Key Identifier: keyid:A1:37:89:1D:D4:F3:DF:83:77:2D:7C:FE:71:83:84:3C:BF:F4:4D:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTeJHdTz34N3LXz-cYOEPL_0TVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/wKG5f7dn1-pgRZqivJIzmXImgvk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.91.48.0/20 IPv6: 2a01:7ec0::/32 Signature Algorithm: sha256WithRSAEncryption 35:78:b1:bd:83:9e:47:50:68:ea:c2:74:f6:56:bf:90:c1:97: 9c:4e:d7:7c:b7:7a:ae:13:10:ae:c9:c8:da:d7:1b:f2:93:5d: af:8b:79:83:74:e2:90:fd:b8:96:4b:d0:5b:3a:f2:ae:9d:11: b3:41:c9:34:d7:73:18:ab:43:c1:8e:8e:3c:86:eb:9b:aa:46: 77:99:0a:1e:69:ca:f8:4a:88:54:96:81:f5:56:3d:1f:ad:5d: 79:2a:9e:a8:40:60:7f:13:7b:45:e3:1e:41:fd:a9:b7:a6:10: 71:d8:af:98:e6:85:59:8b:38:af:ce:97:87:96:fa:f2:55:99: c5:8f:de:46:a8:fc:b5:fc:1b:d6:da:c6:5c:d6:43:ba:0e:4f: c7:6e:f5:06:9e:53:16:4e:3d:9f:34:7c:0e:fe:7b:08:3d:46: 3b:11:a1:12:a0:c8:b7:15:e8:24:b0:a6:74:5d:1f:12:79:6d: 38:b7:75:05:b0:de:39:93:3e:45:5c:76:6c:4c:3d:e1:98:4c: fb:6d:ba:63:c5:d5:07:73:bb:59:34:54:18:52:a9:2f:c4:71: 40:0d:66:90:90:1b:3a:b2:21:66:ba:5e:37:a7:b8:3c:02:e1: fb:23:a4:f2:ae:29:ca:4d:75:56:b2:b6:05:37:c2:16:09:f2: 5d:af:55:b6 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5EHCjxzZyb6JBw3EuUlMGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExMzc4OTFkZDRmM2RmODM3NzJkN2NmZTcxODM4NDNjYmZm NDRkNTQwHhcNMjYwMTAxMTAxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMGExYjk3ZmI3NjdkN2VhNjA0NTlhYTJiYzkyMzM5OTcyMjY4MmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjXvsGendkRNpUG8UL+WssLMMD6C DmjnjPXkxA9WNrVaqvYkGiwfjz92t57/nL9XMmxPpdnr/YioE0A102eGqL1ePwwD 0tdzH1twKqAb8+7IiibXb2GfJA0WiTxEigMEYnANx2KwnVPbYtVu3HXRiv1y3lMr bW8JgDDD42eV+qhC0Gyix938cFEv1ddU/64urMD/bfgBq6DqFGPTCkkDI8NQT35Q qniJ8HXzVFZt0xYBpYltQnSgKF9+CPTpJbbTXH7AHI+DKkJzaTUx0qA8kE00KJf2 c22SAQMIwBAP/psnD+fppuOowi0trhBapK2B4cVqSTezbd7YfgwQS62RZwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMChuX+3Z9fqYEWaorySM5lyJoL5MB8GA1UdIwQY MBaAFKE3iR3U89+Ddy18/nGDhDy/9E1UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1RlSkhkVHozNE4zTFh6LWNZT0VQTF8wVFZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9hMmJiOTItYzU5MS00MjUwLWIyZDMt OGRkYTZjNmNhODFkLzEvd0tHNWY3ZG4xLXBnUlpxaXZKSXptWEltZ3ZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9hMmJiOTItYzU5MS00MjUwLWIyZDMtOGRkYTZjNmNhODFk LzEvb1RlSkhkVHozNE4zTFh6LWNZT0VQTF8wVFZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQEXVswMA0E AgACMAcDBQAqAX7AMA0GCSqGSIb3DQEBCwUAA4IBAQA1eLG9g55HUGjqwnT2Vr+Q wZecTtd8t3quExCuycja1xvyk12vi3mDdOKQ/biWS9BbOvKunRGzQck013MYq0PB jo48huubqkZ3mQoeacr4SohUloH1Vj0frV15Kp6oQGB/E3tF4x5B/am3phBx2K+Y 5oVZizivzpeHlvryVZnFj95GqPy1/BvW2sZc1kO6Dk/HbvUGnlMWTj2fNHwO/nsI PUY7EaESoMi3FegksKZ0XR8SeW04t3UFsN45kz5FXHZsTD3hmEz7bbpjxdUHc7tZ NFQYUqkvxHFADWaQkBs6siFmul43p7g8AuH7I6TyrinKTXVWsrYFN8IWCfJdr1W2 -----END CERTIFICATE-----Generated at Mon Feb 9 22:59:29 2026 by rpki-client