This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/wtRGbtfLMxnElaTSLfs0-HNZBr4.roa File: wtRGbtfLMxnElaTSLfs0-HNZBr4.roa (raw, json) Hash identifier: K9c87c2YTSSv0jFPr/9LcJtSSXghKUVoycOdYeNEeGo= Subject key identifier: C2:D4:46:6E:D7:CB:33:19:C4:95:A4:D2:2D:FB:34:F8:73:59:06:BE Certificate issuer: /CN=2b4ab4c1517f732df8b2ec83de4ad2368d45cfdf Certificate serial: 019B77C6D5AD1910D8127F74B2FF4200CA8F Authority key identifier: 2B:4A:B4:C1:51:7F:73:2D:F8:B2:EC:83:DE:4A:D2:36:8D:45:CF:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0q0wVF_cy34suyD3krSNo1Fz98.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/wtRGbtfLMxnElaTSLfs0-HNZBr4.roa Signing time: Thu 01 Jan 2026 04:17:58 +0000 ROA not before: Thu 01 Jan 2026 04:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209331 IP address blocks: 91.132.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.mft rsync://rpki.ripe.net/repository/DEFAULT/K0q0wVF_cy34suyD3krSNo1Fz98.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:d5:ad:19:10:d8:12:7f:74:b2:ff:42:00:ca:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b4ab4c1517f732df8b2ec83de4ad2368d45cfdf Validity Not Before: Jan 1 04:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c2d4466ed7cb3319c495a4d22dfb34f8735906be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:4b:7b:c1:28:1c:12:b5:14:be:ed:47:91:3f: fb:d8:4b:71:7b:00:f3:4a:df:d2:87:74:8b:b5:ae: 76:35:a8:ca:13:99:27:d3:be:cb:4e:46:a8:2f:c4: 79:22:b8:47:89:2d:36:ec:fc:5e:17:0d:77:ca:a4: 30:9d:d3:9f:ba:49:a6:3d:6f:61:df:0b:1c:00:91: 2a:17:42:cf:a2:27:79:dd:8e:e7:96:3e:74:ca:c6: 04:e0:0d:9c:21:8b:95:b1:37:15:dc:a3:0b:a5:fe: 57:af:ea:22:13:47:6c:79:89:e1:5e:59:95:ee:8f: 59:b4:ff:13:63:89:f2:32:c1:58:1c:81:39:a2:4d: 86:50:f6:11:32:33:9c:fe:98:5e:e4:ae:81:da:6f: d2:eb:79:1c:59:eb:76:70:d3:c2:a3:0c:e3:3d:48: 8f:82:d4:a2:8e:0e:47:f1:39:27:fc:82:d0:81:7f: 5c:ae:dc:6c:90:04:e7:65:a5:6b:0e:b9:c6:f2:e8: 94:23:f6:ea:f8:54:e6:88:b3:d1:67:be:45:58:f0: 46:fe:e4:4b:3d:8f:6e:1e:95:48:fd:b7:8f:70:4c: d5:1c:3f:9b:9c:8e:e6:c2:b2:05:0d:c7:8c:87:a5: a8:c3:5f:61:d8:0f:56:dd:5b:cf:7b:dc:bd:ae:79: ab:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:D4:46:6E:D7:CB:33:19:C4:95:A4:D2:2D:FB:34:F8:73:59:06:BE X509v3 Authority Key Identifier: keyid:2B:4A:B4:C1:51:7F:73:2D:F8:B2:EC:83:DE:4A:D2:36:8D:45:CF:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0q0wVF_cy34suyD3krSNo1Fz98.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/wtRGbtfLMxnElaTSLfs0-HNZBr4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.132.212.0/24 Signature Algorithm: sha256WithRSAEncryption 16:78:f4:29:94:c6:7c:e6:aa:c1:54:0b:90:e5:bc:13:2f:8f: 70:1e:a5:82:be:9e:aa:6d:5b:93:68:bf:2e:5e:9d:34:7e:3e: 04:10:a5:db:f2:bb:1c:19:63:8d:e6:87:bb:29:0e:23:ee:5a: d9:48:c7:88:29:06:f6:70:72:84:2f:f4:e7:28:8b:34:a0:d6: ae:38:42:57:6c:50:b0:49:fd:54:76:be:e2:47:28:af:44:a3: b8:5d:03:19:5f:b2:f7:a2:0c:28:35:16:7c:af:6d:9c:d0:03: a3:a4:18:f7:d2:ff:1b:01:1c:fe:c8:20:95:75:0f:59:6b:6f: 78:e8:5f:63:6a:43:8d:1a:34:79:7c:a2:7f:e0:cb:ce:d3:3f: 3f:5b:8d:df:16:c6:81:c8:80:61:4f:3d:f1:47:4d:59:7d:c2: e7:8b:03:97:d1:7b:04:d0:dc:80:36:6a:04:78:e2:4a:71:28: 7d:85:a8:8a:99:e6:bb:81:d1:90:2b:93:e4:44:9b:c9:80:83: 5c:0a:ba:06:61:69:40:e5:e1:88:ea:e6:61:08:ab:bd:c7:a1: ce:2d:54:86:ca:ca:9f:df:4c:06:3a:04:1a:e8:ec:a8:82:70: 67:f9:8e:f7:90:a7:d9:68:aa:77:ce:ac:19:a5:65:77:aa:5d: eb:39:c1:c8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xtWtGRDYEn90sv9CAMqPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNGFiNGMxNTE3ZjczMmRmOGIyZWM4M2RlNGFkMjM2OGQ0 NWNmZGYwHhcNMjYwMTAxMDQxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMmQ0NDY2ZWQ3Y2IzMzE5YzQ5NWE0ZDIyZGZiMzRmODczNTkwNmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0t7wSgcErUUvu1HkT/72EtxewDz St/Sh3SLta52NajKE5kn077LTkaoL8R5IrhHiS027PxeFw13yqQwndOfukmmPW9h 3wscAJEqF0LPoid53Y7nlj50ysYE4A2cIYuVsTcV3KMLpf5Xr+oiE0dseYnhXlmV 7o9ZtP8TY4nyMsFYHIE5ok2GUPYRMjOc/phe5K6B2m/S63kcWet2cNPCowzjPUiP gtSijg5H8Tkn/ILQgX9crtxskATnZaVrDrnG8uiUI/bq+FTmiLPRZ75FWPBG/uRL PY9uHpVI/bePcEzVHD+bnI7mwrIFDceMh6Wow19h2A9W3VvPe9y9rnmrDwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMLURm7XyzMZxJWk0i37NPhzWQa+MB8GA1UdIwQY MBaAFCtKtMFRf3Mt+LLsg95K0jaNRc/fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzBxMHdWRl9jeTM0c3V5RDNrclNObzFGejk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8yN2M3YTMtOTQzYy00YjI5LWJkODIt ZTdhYmNmMjIzNzE1LzEvd3RSR2J0ZkxNeG5FbGFUU0xmczAtSE5aQnI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi8yN2M3YTMtOTQzYy00YjI5LWJkODItZTdhYmNmMjIzNzE1 LzEvSzBxMHdWRl9jeTM0c3V5RDNrclNObzFGejk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW4TUMA0G CSqGSIb3DQEBCwUAA4IBAQAWePQplMZ85qrBVAuQ5bwTL49wHqWCvp6qbVuTaL8u Xp00fj4EEKXb8rscGWON5oe7KQ4j7lrZSMeIKQb2cHKEL/TnKIs0oNauOEJXbFCw Sf1Udr7iRyivRKO4XQMZX7L3ogwoNRZ8r22c0AOjpBj30v8bARz+yCCVdQ9Za294 6F9jakONGjR5fKJ/4MvO0z8/W43fFsaByIBhTz3xR01ZfcLniwOX0XsE0NyANmoE eOJKcSh9haiKmea7gdGQK5PkRJvJgINcCroGYWlA5eGI6uZhCKu9x6HOLVSGysqf 30wGOgQa6OyognBn+Y73kKfZaKp3zqwZpWV3ql3rOcHI -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:38 2026 by rpki-client