This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/W8jOnIUAyFMaEP25sAUwJyxVaIM.roa File: W8jOnIUAyFMaEP25sAUwJyxVaIM.roa (raw, json) Hash identifier: i6lculuV3eQhPhN35emc/bL4sPdv/8Y0MhiLt4tT+wI= Subject key identifier: 5B:C8:CE:9C:85:00:C8:53:1A:10:FD:B9:B0:05:30:27:2C:55:68:83 Certificate issuer: /CN=77a1eed3ace0fc2f8aa000de687a49befd2791d8 Certificate serial: 019B7DCAB1450F183919C2C245427CE73480 Authority key identifier: 77:A1:EE:D3:AC:E0:FC:2F:8A:A0:00:DE:68:7A:49:BE:FD:27:91:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d6Hu06zg_C-KoADeaHpJvv0nkdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/W8jOnIUAyFMaEP25sAUwJyxVaIM.roa Signing time: Fri 02 Jan 2026 08:19:54 +0000 ROA not before: Fri 02 Jan 2026 08:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211645 IP address blocks: 91.205.124.0/24 maxlen: 24 2a10:41c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.mft rsync://rpki.ripe.net/repository/DEFAULT/d6Hu06zg_C-KoADeaHpJvv0nkdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:b1:45:0f:18:39:19:c2:c2:45:42:7c:e7:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77a1eed3ace0fc2f8aa000de687a49befd2791d8 Validity Not Before: Jan 2 08:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5bc8ce9c8500c8531a10fdb9b00530272c556883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5f:13:d6:94:cc:e9:f0:83:cf:67:26:86:29: 30:93:9d:aa:24:06:71:36:77:bc:35:87:7f:3f:14: d5:72:25:20:09:ba:4e:1a:7c:22:56:02:b7:ba:a6: 4e:0f:b0:20:76:15:f3:d3:50:12:75:d8:8c:e6:da: 20:fa:ae:89:c9:33:60:bd:a4:32:c7:9a:28:35:31: ba:0e:32:b4:2a:6f:b3:d3:1d:e6:28:11:81:d9:92: 50:e3:f4:21:4b:cf:74:27:05:db:65:ec:ee:b4:a4: 9b:e9:75:53:d2:0a:7c:43:cc:d1:8f:bc:dd:38:95: 68:15:02:98:46:74:e6:29:5e:51:23:71:84:f0:8b: 21:26:5b:77:ca:88:3f:4e:9e:9c:1f:c0:d1:52:10: cd:47:19:67:62:01:22:c2:94:0e:7d:16:76:88:b0: 2a:c3:05:3c:77:52:b2:18:94:87:d4:38:b2:f1:5f: e8:f1:3f:67:b3:d3:21:b8:f4:18:17:ae:2e:38:07: 3a:95:49:60:d3:46:9a:26:9b:ec:c3:fd:78:54:b2: d8:91:4d:0b:00:2d:50:ed:ce:a0:fa:c9:24:8a:5e: bd:ba:a6:db:d0:31:8c:09:c8:aa:09:42:b2:f4:0c: 11:dd:f5:99:57:57:eb:75:73:e8:13:9e:e3:25:88: c8:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:C8:CE:9C:85:00:C8:53:1A:10:FD:B9:B0:05:30:27:2C:55:68:83 X509v3 Authority Key Identifier: keyid:77:A1:EE:D3:AC:E0:FC:2F:8A:A0:00:DE:68:7A:49:BE:FD:27:91:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6Hu06zg_C-KoADeaHpJvv0nkdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/W8jOnIUAyFMaEP25sAUwJyxVaIM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.205.124.0/24 IPv6: 2a10:41c0::/29 Signature Algorithm: sha256WithRSAEncryption 94:7d:4f:46:f4:1c:c6:e1:52:85:1e:fd:6a:c1:66:86:96:7c: 40:24:61:88:f1:b8:66:c2:c7:08:60:16:39:40:90:8b:8a:45: 61:1d:c0:3c:c4:a4:f6:a1:a0:d7:37:74:17:30:23:a6:48:2d: 24:16:52:97:1f:ab:8a:6f:49:cf:67:15:2f:d7:c2:bf:de:fc: e3:05:f5:ef:49:2d:f0:8e:42:15:06:1d:b1:9a:21:86:4a:46: a8:87:6b:84:17:64:2a:70:da:a3:92:1a:75:e0:2d:6e:c1:84: dc:4f:45:97:df:94:83:22:ea:1d:53:f9:3c:cf:e1:eb:cd:de: 72:9e:ec:e4:35:3a:d1:b3:79:bc:1f:1a:2a:3f:06:f9:cb:2e: 27:c7:3b:aa:f3:de:32:72:1e:d8:9c:ea:2f:f5:37:46:ca:a3: 5f:20:02:42:84:43:de:95:d5:29:09:45:6c:8e:f7:b5:dc:60: 2d:1c:6c:78:08:af:b1:5c:67:5b:9f:e6:86:9e:e4:84:14:02: f5:42:8b:b0:74:e6:d6:28:74:ea:da:c2:76:38:e6:d9:e0:11: b5:6f:05:51:3e:f2:27:e3:a4:56:ad:8a:d4:f8:f3:d5:89:e3: 55:f8:a6:1f:7a:c6:e9:88:99:aa:c5:a6:c2:48:84:dc:57:12: 36:36:29:de -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9yrFFDxg5GcLCRUJ85zSAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3YTFlZWQzYWNlMGZjMmY4YWEwMDBkZTY4N2E0OWJlZmQy NzkxZDgwHhcNMjYwMTAyMDgxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YmM4Y2U5Yzg1MDBjODUzMWExMGZkYjliMDA1MzAyNzJjNTU2ODgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAql8T1pTM6fCDz2cmhikwk52qJAZx Nne8NYd/PxTVciUgCbpOGnwiVgK3uqZOD7AgdhXz01ASddiM5tog+q6JyTNgvaQy x5ooNTG6DjK0Km+z0x3mKBGB2ZJQ4/QhS890JwXbZezutKSb6XVT0gp8Q8zRj7zd OJVoFQKYRnTmKV5RI3GE8IshJlt3yog/Tp6cH8DRUhDNRxlnYgEiwpQOfRZ2iLAq wwU8d1KyGJSH1Diy8V/o8T9ns9MhuPQYF64uOAc6lUlg00aaJpvsw/14VLLYkU0L AC1Q7c6g+skkil69uqbb0DGMCciqCUKy9AwR3fWZV1frdXPoE57jJYjIqwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFFvIzpyFAMhTGhD9ubAFMCcsVWiDMB8GA1UdIwQY MBaAFHeh7tOs4PwviqAA3mh6Sb79J5HYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDZIdTA2emdfQy1Lb0FEZWFIcEp2djBua2RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi80ZjNlMTEtZmQwZi00ZTcxLTkzNjkt MjIwNGVlMjE3MjgwLzEvVzhqT25JVUF5Rk1hRVAyNXNBVXdKeXhWYUlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi80ZjNlMTEtZmQwZi00ZTcxLTkzNjktMjIwNGVlMjE3Mjgw LzEvZDZIdTA2emdfQy1Lb0FEZWFIcEp2djBua2RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAW818MA0E AgACMAcDBQMqEEHAMA0GCSqGSIb3DQEBCwUAA4IBAQCUfU9G9BzG4VKFHv1qwWaG lnxAJGGI8bhmwscIYBY5QJCLikVhHcA8xKT2oaDXN3QXMCOmSC0kFlKXH6uKb0nP ZxUv18K/3vzjBfXvSS3wjkIVBh2xmiGGSkaoh2uEF2QqcNqjkhp14C1uwYTcT0WX 35SDIuodU/k8z+Hrzd5ynuzkNTrRs3m8HxoqPwb5yy4nxzuq894ych7YnOov9TdG yqNfIAJChEPeldUpCUVsjve13GAtHGx4CK+xXGdbn+aGnuSEFAL1QouwdObWKHTq 2sJ2OObZ4BG1bwVRPvIn46RWrYrU+PPVieNV+KYfesbpiJmqxabCSITcVxI2Nine -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:23 2026 by rpki-client