This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/WrRSKzPOj6BgLow6AweYah_e1dA.roa File: WrRSKzPOj6BgLow6AweYah_e1dA.roa (raw, json) Hash identifier: zp8UwEZpI6bsmG4yaK4JetrekeKEEBLqIzJ3Rz0Eig8= Subject key identifier: 5A:B4:52:2B:33:CE:8F:A0:60:2E:8C:3A:03:07:98:6A:1F:DE:D5:D0 Certificate issuer: /CN=6b22ad4cf647a48b631ff84f227ea0252130552d Certificate serial: 019B7910B8558F952A23333930C6802FEAD8 Authority key identifier: 6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/WrRSKzPOj6BgLow6AweYah_e1dA.roa Signing time: Thu 01 Jan 2026 10:18:17 +0000 ROA not before: Thu 01 Jan 2026 10:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 149440 IP address blocks: 91.218.183.0/24 maxlen: 24 193.247.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.crl rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 07:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:b8:55:8f:95:2a:23:33:39:30:c6:80:2f:ea:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b22ad4cf647a48b631ff84f227ea0252130552d Validity Not Before: Jan 1 10:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ab4522b33ce8fa0602e8c3a0307986a1fded5d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:0c:4b:f6:1d:8b:96:20:4e:35:ae:30:db:3d: a0:70:a7:6d:44:92:bd:56:1e:3e:0a:39:7f:57:cf: c0:6d:a2:ac:9d:68:0d:04:bc:70:02:d9:62:7c:3b: 72:55:a4:ca:90:a4:91:d5:7e:95:44:84:c9:cc:49: 91:88:64:7e:3b:79:9e:a6:34:86:ff:a6:46:17:e8: 2f:50:b5:2f:9c:d8:e4:79:45:4e:b0:59:fc:31:9e: a4:84:ec:3c:8a:b0:0e:49:47:ed:6d:e7:b8:29:0e: bb:21:62:65:8c:86:07:fb:fa:d1:ce:16:85:02:7e: fd:c4:73:c6:ac:85:88:0e:0c:63:bf:a3:32:85:d3: a8:2f:03:a8:54:6a:d3:19:56:82:e0:52:10:a8:09: ff:5b:62:c4:05:3d:63:87:58:9c:f6:2a:fb:25:fe: 80:ec:cc:d5:ae:af:70:21:fc:d2:d1:8c:d5:75:5f: be:23:56:4b:76:c7:e7:8a:ea:fa:14:99:bb:49:78: c2:89:17:06:e3:17:66:d4:bf:3c:d5:b1:a6:6e:ff: 73:69:33:25:a2:0b:be:52:08:66:59:e2:f0:18:7e: 27:fe:39:c4:64:f7:65:ab:f4:d6:c9:99:4b:1a:4e: 81:ac:43:96:00:cd:09:41:74:3c:bb:c0:b3:78:d0: 06:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:B4:52:2B:33:CE:8F:A0:60:2E:8C:3A:03:07:98:6A:1F:DE:D5:D0 X509v3 Authority Key Identifier: keyid:6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/WrRSKzPOj6BgLow6AweYah_e1dA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.218.183.0/24 193.247.144.0/24 Signature Algorithm: sha256WithRSAEncryption 32:2d:9c:17:7e:f8:58:89:d9:19:4b:84:ce:3c:7f:54:b1:27: 59:bb:cc:79:0a:e0:d4:4c:6f:28:39:d1:1b:37:41:c3:c4:02: 3b:52:c7:46:76:e9:87:76:60:90:5e:cb:b0:1e:7f:c2:58:54: a3:af:06:b3:ba:2f:29:fd:33:ba:0f:e0:e6:46:8e:09:5a:81: 11:8f:93:0c:0d:a4:76:c5:9c:ff:23:74:29:e0:d0:e2:3f:6f: a9:25:bc:13:e6:87:f9:ad:45:a6:54:87:46:c1:c6:7d:6e:96: 21:a3:fd:42:19:ca:bb:0b:83:bd:3f:9b:bd:74:2d:6b:f0:b2: fb:9a:ac:58:8e:b2:ff:a0:cb:da:76:db:fc:a7:13:fa:6c:65: 4d:ff:7e:28:02:08:95:82:d1:0a:7d:d8:f3:d9:f7:b3:7b:f8: 42:3f:06:36:9b:eb:e8:e6:c8:9c:04:52:4f:88:f1:5d:5c:b3: 6c:c1:40:f9:02:af:7d:e2:7e:81:f7:9d:56:c9:30:4b:82:b5: a9:ca:fc:f2:65:8e:4c:bd:d4:d6:d6:4b:c5:50:9d:e5:0b:74: ef:65:7e:89:a2:62:5e:82:11:d9:6e:1d:22:d1:87:a0:59:db: 77:9f:1b:f8:36:f5:ce:cb:f0:5c:e2:20:14:37:2b:75:fd:ca: 05:65:f3:5a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5ELhVj5UqIzM5MMaAL+rYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMjJhZDRjZjY0N2E0OGI2MzFmZjg0ZjIyN2VhMDI1MjEz MDU1MmQwHhcNMjYwMTAxMTAxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YWI0NTIyYjMzY2U4ZmEwNjAyZThjM2EwMzA3OTg2YTFmZGVkNWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8gxL9h2LliBONa4w2z2gcKdtRJK9 Vh4+Cjl/V8/AbaKsnWgNBLxwAtlifDtyVaTKkKSR1X6VRITJzEmRiGR+O3mepjSG /6ZGF+gvULUvnNjkeUVOsFn8MZ6khOw8irAOSUftbee4KQ67IWJljIYH+/rRzhaF An79xHPGrIWIDgxjv6MyhdOoLwOoVGrTGVaC4FIQqAn/W2LEBT1jh1ic9ir7Jf6A 7MzVrq9wIfzS0YzVdV++I1ZLdsfniur6FJm7SXjCiRcG4xdm1L881bGmbv9zaTMl ogu+UghmWeLwGH4n/jnEZPdlq/TWyZlLGk6BrEOWAM0JQXQ8u8CzeNAGAwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFq0Uiszzo+gYC6MOgMHmGof3tXQMB8GA1UdIwQY MBaAFGsirUz2R6SLYx/4TyJ+oCUhMFUtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXlLdFRQWkhwSXRqSF9oUEluNmdKU0V3VlMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC81OTUwMjQtOGJmZi00ZjE4LThjY2It NjlhNDRmMDQ4ZGI4LzEvV3JSU0t6UE9qNkJnTG93NkF3ZVlhaF9lMWRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC81OTUwMjQtOGJmZi00ZjE4LThjY2ItNjlhNDRmMDQ4ZGI4 LzEvYXlLdFRQWkhwSXRqSF9oUEluNmdKU0V3VlMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9q3AwQA wfeQMA0GCSqGSIb3DQEBCwUAA4IBAQAyLZwXfvhYidkZS4TOPH9UsSdZu8x5CuDU TG8oOdEbN0HDxAI7UsdGdumHdmCQXsuwHn/CWFSjrwazui8p/TO6D+DmRo4JWoER j5MMDaR2xZz/I3Qp4NDiP2+pJbwT5of5rUWmVIdGwcZ9bpYho/1CGcq7C4O9P5u9 dC1r8LL7mqxYjrL/oMvadtv8pxP6bGVN/34oAgiVgtEKfdjz2feze/hCPwY2m+vo 5sicBFJPiPFdXLNswUD5Aq994n6B951WyTBLgrWpyvzyZY5MvdTW1kvFUJ3lC3Tv ZX6JomJeghHZbh0i0YegWdt3nxv4NvXOy/Bc4iAUNyt1/coFZfNa -----END CERTIFICATE-----Generated at Wed Jan 21 12:31:57 2026 by rpki-client