This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/WEResR1vKVF1XFqQZFnpiSVDhdQ.roa File: WEResR1vKVF1XFqQZFnpiSVDhdQ.roa (raw, json) Hash identifier: nNBq14HUZikLjgzpH3qRgEC7vVQNRFCy0PpayQuzXVc= Subject key identifier: 58:44:5E:B1:1D:6F:29:51:75:5C:5A:90:64:59:E9:89:25:43:85:D4 Certificate issuer: /CN=61aedfdc7133e95f42498f7760f68fb80faa84ac Certificate serial: 019B791076AA7AEE11F962ACE47D40185070 Authority key identifier: 61:AE:DF:DC:71:33:E9:5F:42:49:8F:77:60:F6:8F:B8:0F:AA:84:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/WEResR1vKVF1XFqQZFnpiSVDhdQ.roa Signing time: Thu 01 Jan 2026 10:18:00 +0000 ROA not before: Thu 01 Jan 2026 10:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61276 IP address blocks: 91.190.156.0/24 maxlen: 24 193.47.41.0/24 maxlen: 24 2a11:6380::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:76:aa:7a:ee:11:f9:62:ac:e4:7d:40:18:50:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61aedfdc7133e95f42498f7760f68fb80faa84ac Validity Not Before: Jan 1 10:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58445eb11d6f2951755c5a906459e989254385d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ab:5b:6d:cf:16:a8:c7:67:ab:80:dd:5f:cb: 30:6d:dd:1e:6b:c0:c6:12:50:c7:ee:e8:2e:98:1e: ee:38:1b:e3:43:7e:98:81:9b:72:e1:e1:bc:93:6a: 75:87:6a:ea:87:a5:ef:86:21:97:59:2c:78:30:9c: 17:16:a2:aa:df:66:3d:75:8b:ee:5d:45:ae:2e:21: 3f:18:8f:50:6d:3f:ba:a4:c1:48:e5:0a:7e:2d:42: 5a:bb:07:6f:4f:34:ba:fd:a6:a0:73:a0:51:e0:62: 14:a3:ff:08:57:b8:97:85:69:3a:9d:67:65:db:c1: 4d:cc:d5:22:9c:84:9f:6f:1c:d8:e7:04:7f:ad:76: b7:9a:cf:52:5a:30:5e:33:9a:25:96:61:5e:0b:d6: 1b:d7:9f:ff:2e:84:68:d8:b6:40:4d:ec:1b:30:e0: c7:e2:a3:24:e2:e8:01:8f:f0:b8:ea:c5:d3:ee:4a: 59:ec:a1:e3:6e:c4:5e:3c:46:f4:a8:b9:99:a5:9c: b2:1b:50:c6:ae:6b:9b:82:23:e6:53:e6:b9:15:08: 3a:6d:6e:cf:ef:09:b9:9f:b9:1f:e1:89:13:56:d4: 77:ed:c3:ac:71:ca:4d:3e:8d:1b:a8:f6:71:ad:62: 29:45:d6:0d:63:17:3b:d6:db:29:90:18:a6:56:f1: 1a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:44:5E:B1:1D:6F:29:51:75:5C:5A:90:64:59:E9:89:25:43:85:D4 X509v3 Authority Key Identifier: keyid:61:AE:DF:DC:71:33:E9:5F:42:49:8F:77:60:F6:8F:B8:0F:AA:84:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/WEResR1vKVF1XFqQZFnpiSVDhdQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.190.156.0/24 193.47.41.0/24 IPv6: 2a11:6380::/29 Signature Algorithm: sha256WithRSAEncryption 19:ed:30:f2:c2:88:d8:c1:a5:ed:4c:9e:d4:80:dc:e6:ab:d1: 70:57:86:65:74:33:64:f1:42:db:e3:31:1a:14:33:b2:9b:14: b3:3f:6d:5d:3e:9d:ad:5e:f2:7f:66:e9:f6:5f:73:6e:85:2c: 07:c8:f7:b4:a1:f3:db:8f:03:a0:32:5f:c5:f5:e9:b3:37:34: e6:98:bb:2a:a7:fc:73:68:37:17:c5:e1:e7:82:c7:c5:a2:c5: aa:e1:51:4a:c0:52:e4:b8:33:8a:91:c2:83:43:25:e0:1c:f7: 20:be:44:d0:0e:0d:d6:eb:6b:a0:47:10:a2:d8:42:59:6e:d2: 1d:ac:b8:d8:9e:32:5e:f9:f8:7b:46:2f:4b:56:19:9a:5e:a9: 02:4d:05:b9:41:8b:59:53:47:18:90:69:67:d3:2e:6e:1d:1f: 15:6c:b5:df:6c:22:84:25:f1:ae:07:64:14:e3:19:71:6b:03: dd:23:7e:ea:8f:e5:0b:5c:fd:05:1f:da:ff:42:07:2a:81:05: c2:fa:67:f9:49:28:a8:c6:88:ce:65:1c:f0:77:24:f6:05:60: 4d:81:78:03:ab:d9:01:83:be:05:53:7f:46:ec:25:b8:5c:f5: 6f:98:b1:7f:56:f9:f7:2d:fa:bc:8f:2d:b9:cf:80:15:12:2e: af:ae:3f:d2 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt5EHaqeu4R+WKs5H1AGFBwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxYWVkZmRjNzEzM2U5NWY0MjQ5OGY3NzYwZjY4ZmI4MGZh YTg0YWMwHhcNMjYwMTAxMTAxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODQ0NWViMTFkNmYyOTUxNzU1YzVhOTA2NDU5ZTk4OTI1NDM4NWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKtbbc8WqMdnq4DdX8swbd0ea8DG ElDH7ugumB7uOBvjQ36YgZty4eG8k2p1h2rqh6XvhiGXWSx4MJwXFqKq32Y9dYvu XUWuLiE/GI9QbT+6pMFI5Qp+LUJauwdvTzS6/aagc6BR4GIUo/8IV7iXhWk6nWdl 28FNzNUinISfbxzY5wR/rXa3ms9SWjBeM5ollmFeC9Yb15//LoRo2LZATewbMODH 4qMk4ugBj/C46sXT7kpZ7KHjbsRePEb0qLmZpZyyG1DGrmubgiPmU+a5FQg6bW7P 7wm5n7kf4YkTVtR37cOsccpNPo0bqPZxrWIpRdYNYxc71tspkBimVvEaWQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFFhEXrEdbylRdVxakGRZ6YklQ4XUMB8GA1UdIwQY MBaAFGGu39xxM+lfQkmPd2D2j7gPqoSsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWE3ZjNIRXo2VjlDU1k5M1lQYVB1QS1xaEt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8wMmI1MjItOWYwOC00NmZjLTk5ZWEt OWYzZThmOWVmYzk5LzEvV0VSZXNSMXZLVkYxWEZxUVpGbnBpU1ZEaGRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8wMmI1MjItOWYwOC00NmZjLTk5ZWEtOWYzZThmOWVmYzk5 LzEvWWE3ZjNIRXo2VjlDU1k5M1lQYVB1QS1xaEt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAW76cAwQA wS8pMA0EAgACMAcDBQMqEWOAMA0GCSqGSIb3DQEBCwUAA4IBAQAZ7TDywojYwaXt TJ7UgNzmq9FwV4ZldDNk8ULb4zEaFDOymxSzP21dPp2tXvJ/Zun2X3NuhSwHyPe0 ofPbjwOgMl/F9emzNzTmmLsqp/xzaDcXxeHngsfFosWq4VFKwFLkuDOKkcKDQyXg HPcgvkTQDg3W62ugRxCi2EJZbtIdrLjYnjJe+fh7Ri9LVhmaXqkCTQW5QYtZU0cY kGln0y5uHR8VbLXfbCKEJfGuB2QU4xlxawPdI37qj+ULXP0FH9r/QgcqgQXC+mf5 SSioxojOZRzwdyT2BWBNgXgDq9kBg74FU39G7CW4XPVvmLF/Vvn3Lfq8jy25z4AV Ei6vrj/S -----END CERTIFICATE-----Generated at Tue Jan 20 06:03:13 2026 by rpki-client