This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/1-WO0GACqy-eA17PZxSHorJ0nbCw.roa File: 1-WO0GACqy-eA17PZxSHorJ0nbCw.roa (raw, json) Hash identifier: APG9pmhKy9iTCKXEjwonpREIrLwqDEbWbVud/9m5R4k= Subject key identifier: F9:63:B4:18:00:AA:CB:E7:80:D7:B3:D9:C5:21:E8:AC:9D:27:6C:2C Certificate issuer: /CN=72cae9657c2d84d101ad8500d5d236ea8eb85481 Certificate serial: 019B7DC892F4768608055B8793CBDF7F1DDF Authority key identifier: 72:CA:E9:65:7C:2D:84:D1:01:AD:85:00:D5:D2:36:EA:8E:B8:54:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/1-WO0GACqy-eA17PZxSHorJ0nbCw.roa Signing time: Fri 02 Jan 2026 08:17:35 +0000 ROA not before: Fri 02 Jan 2026 08:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210644 IP address blocks: 91.103.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c8:92:f4:76:86:08:05:5b:87:93:cb:df:7f:1d:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cae9657c2d84d101ad8500d5d236ea8eb85481 Validity Not Before: Jan 2 08:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f963b41800aacbe780d7b3d9c521e8ac9d276c2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:02:99:e3:f5:b2:d0:d5:1d:2d:73:6e:04:07: 37:29:e6:80:83:fd:b6:06:6c:e4:8a:2c:ed:2d:92: 92:a1:b0:43:73:6f:f8:dc:bf:dc:bb:2a:b5:01:24: 23:b8:97:87:b6:b4:ab:bd:8a:59:c1:25:aa:c7:83: 50:c7:59:94:9f:c9:4c:6d:94:a5:1d:87:f3:c3:e8: 96:14:5f:96:d9:49:0f:c4:5a:43:2c:ee:f6:3a:5d: ea:b8:21:7e:d0:8c:57:80:62:ec:64:81:ca:01:04: 49:f3:16:6d:32:02:a2:16:ae:9f:13:84:37:fd:4e: 9e:c6:2c:63:ad:65:ed:ff:32:b2:97:c1:b5:4e:af: 34:1b:5d:f3:4c:cb:07:d5:22:53:db:e9:78:7a:02: a6:ba:86:83:ed:f3:d4:e9:d5:86:52:04:27:5f:f8: 46:7c:67:71:2a:28:79:d7:3d:4c:8c:fd:c0:4d:ea: 82:7a:1e:23:22:06:fd:56:f7:65:df:e9:9d:d6:4e: 9f:87:d2:d4:e2:42:9c:76:ce:ce:3d:12:22:13:a1: 6f:85:84:72:e3:e1:f9:dc:a5:32:26:dd:28:36:1b: 62:4d:c9:d3:87:6b:1f:bb:54:21:35:1e:4e:86:d8: e4:27:6f:37:c3:8a:47:8f:a0:8c:41:a6:17:fe:c7: d2:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:63:B4:18:00:AA:CB:E7:80:D7:B3:D9:C5:21:E8:AC:9D:27:6C:2C X509v3 Authority Key Identifier: keyid:72:CA:E9:65:7C:2D:84:D1:01:AD:85:00:D5:D2:36:EA:8E:B8:54:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/1-WO0GACqy-eA17PZxSHorJ0nbCw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.103.140.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:2b:20:b6:01:0d:49:64:7c:f7:97:5e:14:2b:cf:d4:7b:4c: c8:e8:b1:21:69:8c:bc:cb:c5:9b:fd:0b:08:3c:99:47:96:8d: 67:a9:9d:fc:8a:d6:71:e5:e6:0c:15:ad:b6:7c:db:02:ce:7f: 65:db:39:3e:da:32:c6:26:68:5d:03:d2:1d:dc:e0:a4:31:49: 9e:65:58:04:2e:6b:21:77:c1:e1:23:0a:5e:e1:6a:13:0a:d7: dc:c9:3e:58:3e:da:d3:82:8c:7e:84:5c:a0:3d:1a:89:48:71: f4:84:12:8a:6b:59:84:89:7b:d3:ad:a7:4c:c1:38:b2:f3:0d: 9b:7e:ac:e7:8b:a6:3c:ab:0b:f2:a9:9f:6b:9e:4a:76:ec:e9: e8:6c:75:94:54:be:26:64:b5:fb:51:11:52:60:e0:6b:d9:6d: 2a:52:63:ae:00:a0:95:84:de:8f:b4:f9:a2:3d:f3:d3:03:68: e1:45:44:57:f4:4c:88:ff:06:06:8f:38:78:e8:f4:e6:d1:52: c6:cb:0a:bb:38:1a:b4:6c:23:7c:a0:d6:9f:c2:46:55:57:6b: 09:34:84:61:eb:63:6a:cd:86:81:d8:8f:17:44:0e:a2:04:95: 96:f6:74:92:6d:72:27:04:fb:e4:3d:4d:5c:52:bd:d9:38:04: 19:b9:6b:a5 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt9yJL0doYIBVuHk8vffx3fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyY2FlOTY1N2MyZDg0ZDEwMWFkODUwMGQ1ZDIzNmVhOGVi ODU0ODEwHhcNMjYwMTAyMDgxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTYzYjQxODAwYWFjYmU3ODBkN2IzZDljNTIxZThhYzlkMjc2YzJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAKZ4/Wy0NUdLXNuBAc3KeaAg/22 BmzkiiztLZKSobBDc2/43L/cuyq1ASQjuJeHtrSrvYpZwSWqx4NQx1mUn8lMbZSl HYfzw+iWFF+W2UkPxFpDLO72Ol3quCF+0IxXgGLsZIHKAQRJ8xZtMgKiFq6fE4Q3 /U6exixjrWXt/zKyl8G1Tq80G13zTMsH1SJT2+l4egKmuoaD7fPU6dWGUgQnX/hG fGdxKih51z1MjP3ATeqCeh4jIgb9Vvdl3+md1k6fh9LU4kKcds7OPRIiE6FvhYRy 4+H53KUyJt0oNhtiTcnTh2sfu1QhNR5OhtjkJ283w4pHj6CMQaYX/sfSHwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPljtBgAqsvngNez2cUh6KydJ2wsMB8GA1UdIwQY MBaAFHLK6WV8LYTRAa2FANXSNuqOuFSBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3NycFpYd3RoTkVCcllVQTFkSTI2bzY0VklFLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9kZWQ3MGMtMTA1OS00MzQ1LWI0NTkt NGFlNWZmOWY0ZmM2LzEvMS1XTzBHQUNxeS1lQTE3UFp4U0hvckowbmJDdy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNGIvZGVkNzBjLTEwNTktNDM0NS1iNDU5LTRhZTVmZjlmNGZj Ni8xL2NzcnBaWHd0aE5FQnJZVUExZEkyNm82NFZJRS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFtnjDAN BgkqhkiG9w0BAQsFAAOCAQEALysgtgENSWR895deFCvP1HtMyOixIWmMvMvFm/0L CDyZR5aNZ6md/IrWceXmDBWttnzbAs5/Zds5PtoyxiZoXQPSHdzgpDFJnmVYBC5r IXfB4SMKXuFqEwrX3Mk+WD7a04KMfoRcoD0aiUhx9IQSimtZhIl7062nTME4svMN m36s54umPKsL8qmfa55Kduzp6Gx1lFS+JmS1+1ERUmDga9ltKlJjrgCglYTej7T5 oj3z0wNo4UVEV/RMiP8GBo84eOj05tFSxssKuzgatGwjfKDWn8JGVVdrCTSEYetj as2GgdiPF0QOogSVlvZ0km1yJwT75D1NXFK92TgEGblrpQ== -----END CERTIFICATE-----Generated at Tue Jan 20 06:03:49 2026 by rpki-client