This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/WR2mMv7qmUceN0Mkq4FVsAqss34.roa File: WR2mMv7qmUceN0Mkq4FVsAqss34.roa (raw, json) Hash identifier: BI2UfIzSLpmq5ZqkIGDg6SgwwPzP/38b7CPwIY4B+T4= Subject key identifier: 59:1D:A6:32:FE:EA:99:47:1E:37:43:24:AB:81:55:B0:0A:AC:B3:7E Certificate issuer: /CN=f6f18c02405742c25377d696cd2a69dcc974bff8 Certificate serial: 019B7CECC724F5E0E71E45AD37C8F61E7DCA Authority key identifier: F6:F1:8C:02:40:57:42:C2:53:77:D6:96:CD:2A:69:DC:C9:74:BF:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/WR2mMv7qmUceN0Mkq4FVsAqss34.roa Signing time: Fri 02 Jan 2026 04:17:30 +0000 ROA not before: Fri 02 Jan 2026 04:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48919 IP address blocks: 31.128.160.0/21 maxlen: 21 95.215.92.0/22 maxlen: 22 2001:67c:19ac::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.crl rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.mft rsync://rpki.ripe.net/repository/DEFAULT/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:c7:24:f5:e0:e7:1e:45:ad:37:c8:f6:1e:7d:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6f18c02405742c25377d696cd2a69dcc974bff8 Validity Not Before: Jan 2 04:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=591da632feea99471e374324ab8155b00aacb37e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:aa:9c:82:e3:9f:4f:6b:08:d2:44:09:27:29: 0f:00:b3:f6:25:9d:cf:a6:4c:bd:ef:bc:ec:6c:42: f0:02:b3:3c:95:71:c2:4f:b3:4e:0c:af:0a:a5:44: 8e:d9:de:8d:c4:d1:16:2d:55:7f:44:30:db:2b:b1: ee:33:a4:ff:b2:4e:08:ec:4a:a8:8e:fa:c3:2f:03: eb:46:83:90:47:64:dc:2c:37:dc:d1:74:a6:1f:80: 82:4a:b3:b9:1d:f6:50:a8:c3:1d:20:ae:08:ea:d3: fc:1b:17:84:81:d2:dd:92:e6:2e:7f:fc:d1:b8:52: 60:69:30:31:43:3d:32:99:5a:76:fd:26:77:37:8e: ef:62:82:fa:ba:9b:af:db:67:18:95:8d:24:32:d5: 06:7c:4a:c6:fd:55:87:1f:9f:13:91:3e:2d:29:3e: 01:5c:5a:9a:a4:1b:f4:7e:d4:83:07:12:2d:48:42: 6a:f7:c9:b5:e9:60:9f:66:38:49:07:71:ea:49:07: 01:05:8e:d9:0b:c9:b0:16:6d:4b:dd:ed:62:20:e4: fa:f6:8c:6b:48:8e:75:69:31:6c:0f:64:20:71:b9: 8e:15:82:0b:3d:fb:b6:d1:e8:79:77:56:eb:4f:19: f3:7a:ff:0f:db:ed:9c:91:5a:63:3f:fd:ce:16:70: a1:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:1D:A6:32:FE:EA:99:47:1E:37:43:24:AB:81:55:B0:0A:AC:B3:7E X509v3 Authority Key Identifier: keyid:F6:F1:8C:02:40:57:42:C2:53:77:D6:96:CD:2A:69:DC:C9:74:BF:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/WR2mMv7qmUceN0Mkq4FVsAqss34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.128.160.0/21 95.215.92.0/22 IPv6: 2001:67c:19ac::/48 Signature Algorithm: sha256WithRSAEncryption 3e:7e:97:ca:2e:3d:5d:cd:e7:b6:ac:70:ec:1f:9f:df:7e:b7: 69:9d:da:71:bb:65:88:5a:ae:b5:f0:ac:2c:d7:b6:77:39:ea: 67:11:34:c8:84:ce:bf:37:fc:41:9c:93:66:ba:55:86:70:92: 99:a6:f4:d4:d2:e2:c8:90:59:0b:06:b6:d3:32:a0:e5:d9:83: a8:d4:61:34:56:83:3f:a9:6b:9e:62:5c:b0:ea:1c:f2:d4:0a: f6:cb:47:79:58:8c:38:fb:5c:78:df:08:04:c0:e5:24:57:a1: cb:d0:92:99:96:01:e8:f7:89:34:61:3f:ab:f7:65:87:f1:9c: e0:5c:3e:35:da:69:2f:81:d0:27:82:5f:5f:09:93:9e:79:3c: 4c:e1:5c:7d:bf:b0:b4:1f:68:4a:9b:8e:a1:c7:b7:1c:a3:d3: 2e:dd:00:d6:56:d6:2b:16:8b:0b:47:c9:0a:d6:2d:64:84:2e: 08:96:3b:7e:5a:15:47:ac:36:21:1f:7c:ab:b7:38:a2:27:9f: 39:c0:ff:d6:79:bc:5e:e9:eb:38:bb:55:61:5c:4b:da:80:77: ba:6d:0d:b8:cb:b2:db:b1:b8:b6:c7:4c:de:3a:dc:a8:11:32: 1a:14:b8:b5:28:d6:fc:49:3b:4a:ab:b9:c4:74:0d:7c:8b:eb: d8:f5:56:a7 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt87Mck9eDnHkWtN8j2Hn3KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2ZjE4YzAyNDA1NzQyYzI1Mzc3ZDY5NmNkMmE2OWRjYzk3 NGJmZjgwHhcNMjYwMTAyMDQxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTFkYTYzMmZlZWE5OTQ3MWUzNzQzMjRhYjgxNTViMDBhYWNiMzdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqqcguOfT2sI0kQJJykPALP2JZ3P pky977zsbELwArM8lXHCT7NODK8KpUSO2d6NxNEWLVV/RDDbK7HuM6T/sk4I7Eqo jvrDLwPrRoOQR2TcLDfc0XSmH4CCSrO5HfZQqMMdIK4I6tP8GxeEgdLdkuYuf/zR uFJgaTAxQz0ymVp2/SZ3N47vYoL6upuv22cYlY0kMtUGfErG/VWHH58TkT4tKT4B XFqapBv0ftSDBxItSEJq98m16WCfZjhJB3HqSQcBBY7ZC8mwFm1L3e1iIOT69oxr SI51aTFsD2QgcbmOFYILPfu20eh5d1brTxnzev8P2+2ckVpjP/3OFnChiwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFFkdpjL+6plHHjdDJKuBVbAKrLN+MB8GA1UdIwQY MBaAFPbxjAJAV0LCU3fWls0qadzJdL/4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXZHTUFrQlhRc0pUZDlhV3pTcHAzTWwwdl9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9kZjA1ZTEtNjg2Mi00ZWQ0LTg3NmQt MTUwYjVkYjRmNTZiLzEvV1IybU12N3FtVWNlTjBNa3E0RlZzQXFzczM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9kZjA1ZTEtNjg2Mi00ZWQ0LTg3NmQtMTUwYjVkYjRmNTZi LzEvOXZHTUFrQlhRc0pUZDlhV3pTcHAzTWwwdl9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQDH4CgAwQC X9dcMA8EAgACMAkDBwAgAQZ8GawwDQYJKoZIhvcNAQELBQADggEBAD5+l8ouPV3N 57ascOwfn99+t2md2nG7ZYharrXwrCzXtnc56mcRNMiEzr83/EGck2a6VYZwkpmm 9NTS4siQWQsGttMyoOXZg6jUYTRWgz+pa55iXLDqHPLUCvbLR3lYjDj7XHjfCATA 5SRXocvQkpmWAej3iTRhP6v3ZYfxnOBcPjXaaS+B0CeCX18Jk555PEzhXH2/sLQf aEqbjqHHtxyj0y7dANZW1isWiwtHyQrWLWSELgiWO35aFUesNiEffKu3OKInnznA /9Z5vF7p6zi7VWFcS9qAd7ptDbjLstuxuLbHTN463KgRMhoUuLUo1vxJO0qrucR0 DXyL69j1Vqc= -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:21 2026 by rpki-client