This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/wvc7hmN_qOw44QTtjVGpa7H0Y0I.roa File: wvc7hmN_qOw44QTtjVGpa7H0Y0I.roa (raw, json) Hash identifier: 7x0ZicNAknUw4aPkY6qk/SSSVnY0qsOQEXjRjIouV4I= Subject key identifier: C2:F7:3B:86:63:7F:A8:EC:38:E1:04:ED:8D:51:A9:6B:B1:F4:63:42 Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d Certificate serial: 019C09E41CAC118902239205D9136AE32CCD Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/wvc7hmN_qOw44QTtjVGpa7H0Y0I.roa Signing time: Thu 29 Jan 2026 13:14:30 +0000 ROA not before: Thu 29 Jan 2026 13:14:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29802 IP address blocks: 91.217.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 12:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:09:e4:1c:ac:11:89:02:23:92:05:d9:13:6a:e3:2c:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ad734cf90c773428806b968209515b914831a9d Validity Not Before: Jan 29 13:14:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c2f73b86637fa8ec38e104ed8d51a96bb1f46342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d7:09:81:47:23:5b:58:16:c6:c4:2e:55:cb: a4:69:e8:e9:df:21:fa:2e:35:0d:b7:56:30:ef:97: 50:aa:eb:aa:e8:88:00:c6:fc:8f:03:cb:d0:52:09: da:17:be:5b:05:0a:9a:56:e2:aa:d9:eb:84:7c:85: 6f:53:ec:1e:f4:d1:45:8d:f3:eb:90:66:24:74:3c: 17:47:38:bb:82:2d:e5:a5:03:67:9a:17:e1:1c:33: 75:99:64:2d:d1:89:08:b2:91:b7:28:9b:9e:36:e8: f6:bd:16:b9:d2:64:e0:86:7a:a7:2d:e4:e6:9e:a1: 37:b1:a2:dc:b6:e9:8b:db:9b:a3:97:9e:7a:df:76: e5:d9:59:df:7c:03:e2:d5:16:d0:f2:cc:1c:24:94: be:40:6e:73:54:99:e5:33:a0:84:c0:31:59:57:0a: ea:7a:50:36:50:9c:50:01:8e:40:4e:52:4e:2a:98: eb:b9:1b:df:81:cc:19:63:8c:a8:b5:2b:e9:09:3f: 0b:6b:4e:f6:ce:58:c2:2d:f5:f1:4b:c2:da:eb:b9: 94:8f:db:91:2c:a7:56:c7:ae:28:6d:58:7e:69:f5: 19:44:a4:b4:26:f5:ac:a7:93:ff:e7:45:ec:74:6c: 0b:87:49:83:7a:5a:ed:c8:92:9b:4e:46:ec:77:da: ad:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:F7:3B:86:63:7F:A8:EC:38:E1:04:ED:8D:51:A9:6B:B1:F4:63:42 X509v3 Authority Key Identifier: keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/wvc7hmN_qOw44QTtjVGpa7H0Y0I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.217.223.0/24 Signature Algorithm: sha256WithRSAEncryption 61:6b:21:5d:78:34:a3:16:9a:8f:09:d0:cd:07:2e:94:d9:18: e4:ea:69:a4:92:2a:1a:c8:9c:ad:1f:72:cf:a3:b6:ed:fa:41: ec:1c:a7:83:c2:39:71:5b:e3:e0:65:67:fe:66:53:bb:a2:9d: b1:af:8d:15:7b:5c:cc:83:f5:c3:31:7d:11:ba:76:91:0f:45: 3c:2b:02:c7:21:24:5d:42:36:e6:94:ec:4a:8f:10:58:b5:8c: 74:9f:26:e1:c0:f4:7b:c9:42:67:c3:69:f9:e2:0a:c2:4d:e7: a6:a4:cd:3e:cd:38:a9:60:8c:c4:6b:18:b0:26:fb:7f:80:c6: 25:b1:d5:4a:7b:7f:84:be:13:86:8a:2b:50:ea:79:10:89:31: 72:b1:f8:55:15:48:5e:de:b1:a5:25:93:a0:b9:8a:a1:9a:14: 40:fc:69:93:de:8a:83:bb:e9:27:7e:27:a9:11:2b:0a:41:33: c1:b3:19:1f:98:22:f0:02:73:23:39:ff:45:9d:ff:39:8f:cf: ec:8b:87:8b:94:dd:a0:d7:d4:f5:95:d2:75:4b:0d:b2:14:c6: bb:45:71:20:ad:09:c8:48:60:ef:54:9c:04:08:42:2d:ce:36: b8:ca:06:c6:df:e5:2f:78:81:51:7a:65:bb:ca:01:70:f4:f5: 48:01:73:5c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwJ5BysEYkCI5IF2RNq4yzNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZDczNGNmOTBjNzczNDI4ODA2Yjk2ODIwOTUxNWI5MTQ4 MzFhOWQwHhcNMjYwMTI5MTMxNDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMmY3M2I4NjYzN2ZhOGVjMzhlMTA0ZWQ4ZDUxYTk2YmIxZjQ2MzQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNcJgUcjW1gWxsQuVcukaejp3yH6 LjUNt1Yw75dQquuq6IgAxvyPA8vQUgnaF75bBQqaVuKq2euEfIVvU+we9NFFjfPr kGYkdDwXRzi7gi3lpQNnmhfhHDN1mWQt0YkIspG3KJueNuj2vRa50mTghnqnLeTm nqE3saLctumL25ujl55633bl2VnffAPi1RbQ8swcJJS+QG5zVJnlM6CEwDFZVwrq elA2UJxQAY5ATlJOKpjruRvfgcwZY4yotSvpCT8La072zljCLfXxS8La67mUj9uR LKdWx64obVh+afUZRKS0JvWsp5P/50XsdGwLh0mDelrtyJKbTkbsd9qt8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFML3O4Zjf6jsOOEE7Y1RqWux9GNCMB8GA1UdIwQY MBaAFDrXNM+Qx3NCiAa5aCCVFbkUgxqdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMt NzZhMWQ0ZDgzMTk3LzEvd3ZjN2htTl9xT3c0NFFUdGpWR3BhN0gwWTBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMtNzZhMWQ0ZDgzMTk3 LzEvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9nfMA0G CSqGSIb3DQEBCwUAA4IBAQBhayFdeDSjFpqPCdDNBy6U2Rjk6mmkkioayJytH3LP o7bt+kHsHKeDwjlxW+PgZWf+ZlO7op2xr40Ve1zMg/XDMX0RunaRD0U8KwLHISRd QjbmlOxKjxBYtYx0nybhwPR7yUJnw2n54grCTeempM0+zTipYIzEaxiwJvt/gMYl sdVKe3+EvhOGiitQ6nkQiTFysfhVFUhe3rGlJZOguYqhmhRA/GmT3oqDu+knfiep ESsKQTPBsxkfmCLwAnMjOf9Fnf85j8/si4eLlN2g19T1ldJ1Sw2yFMa7RXEgrQnI SGDvVJwECEItzja4ygbG3+UveIFRemW7ygFw9PVIAXNc -----END CERTIFICATE-----Generated at Thu Jan 29 17:48:56 2026 by rpki-client