This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/weSYVqMTtYavkOiQZpP9gYMiZus.roa File: weSYVqMTtYavkOiQZpP9gYMiZus.roa (raw, json) Hash identifier: X/ZBIkk3ifVXczE4hyPAqaqW4sjcoY/7KiE8XxmmGqM= Subject key identifier: C1:E4:98:56:A3:13:B5:86:AF:90:E8:90:66:93:FD:81:83:22:66:EB Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019B7DCB69701DE7FC783BD03575C3A89292 Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/weSYVqMTtYavkOiQZpP9gYMiZus.roa Signing time: Fri 02 Jan 2026 08:20:41 +0000 ROA not before: Fri 02 Jan 2026 08:20:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50053 IP address blocks: 91.236.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:69:70:1d:e7:fc:78:3b:d0:35:75:c3:a8:92:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Jan 2 08:20:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1e49856a313b586af90e8906693fd81832266eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:1e:85:b8:88:0d:73:57:53:3d:23:77:60:8e: ec:51:b2:68:31:14:c1:83:d4:3d:70:94:27:2a:0a: 47:a9:90:8b:8c:94:80:ec:6f:50:ef:19:cb:f8:d3: 54:87:a4:ae:c0:f3:86:98:87:7b:1c:cf:5a:4f:68: 64:4c:67:03:36:56:bb:b0:3b:1a:06:00:66:e9:df: 1d:db:b7:5c:03:25:1e:1e:be:a8:c2:21:d9:a0:b7: 05:6d:1d:70:be:d9:11:32:96:0c:8c:4a:49:68:26: 69:d0:7a:cc:bc:4c:5f:05:59:83:17:f0:50:fa:42: c7:6e:86:b2:6a:ae:02:3a:bc:c5:21:33:cc:6f:b6: ec:98:c2:ec:ac:41:84:e6:c2:24:f4:08:fa:68:c9: a1:c0:f9:23:0c:3b:c4:dd:ad:34:57:f4:55:21:37: 99:0e:a3:06:94:6d:f1:ff:c8:86:38:47:9b:ab:aa: 9e:03:4b:84:69:56:e4:fd:c8:60:e3:35:cf:08:02: 4e:39:db:ae:ee:63:9f:d9:eb:5a:20:95:24:31:60: cb:41:44:a9:ae:72:50:e0:bb:e5:bb:e2:0e:66:73: f1:11:3f:fa:48:91:90:42:d8:1f:cb:5e:f0:97:8e: ea:46:38:6e:03:4c:ab:03:70:be:c1:14:8e:b7:a9: 4d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:E4:98:56:A3:13:B5:86:AF:90:E8:90:66:93:FD:81:83:22:66:EB X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/weSYVqMTtYavkOiQZpP9gYMiZus.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.236.79.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:1c:d1:6e:f2:ce:d8:67:ef:b1:03:b5:79:ef:e3:55:38:89: 31:b4:8d:c7:2a:4b:da:fd:90:1f:9f:a6:ff:df:b3:43:36:0a: a2:17:72:2a:84:88:04:ff:1d:08:d6:5f:7e:11:8f:b5:fe:eb: bf:07:c0:0c:a3:4e:6c:b7:fe:8d:49:c5:df:33:97:c0:50:d7: e2:52:5e:18:43:3f:98:9b:5b:14:95:ba:5e:57:1f:d5:79:3e: b3:3e:2a:36:eb:22:b5:08:34:97:c4:d1:72:b6:f7:3b:54:91: 2e:85:06:8b:63:f7:34:c6:9d:b7:89:cc:b2:4a:c8:5e:82:ea: 0c:00:0b:54:cb:f0:2f:18:c2:21:94:e4:5f:a4:1e:f1:e0:5a: 59:9f:aa:48:c3:3b:af:34:98:94:0b:fd:20:bf:13:15:e8:26: c7:a7:2a:7a:00:58:f5:2c:cf:e5:f7:66:59:d0:86:78:f5:65: ca:01:56:6b:2a:96:b0:2a:d2:16:a0:2b:01:22:34:4f:47:24: e0:43:46:ca:dc:f9:a8:00:c8:c7:d0:a7:df:c8:f8:32:5f:30: fe:8b:e3:1a:4e:20:7a:e0:a9:8f:72:91:61:30:9b:29:a8:10: 3b:e4:d8:e4:af:1d:9a:a4:5a:0c:14:32:6c:05:5e:f1:cd:88: 5c:1b:8c:6a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y2lwHef8eDvQNXXDqJKSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjYwMTAyMDgyMDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMWU0OTg1NmEzMTNiNTg2YWY5MGU4OTA2NjkzZmQ4MTgzMjI2NmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8B6FuIgNc1dTPSN3YI7sUbJoMRTB g9Q9cJQnKgpHqZCLjJSA7G9Q7xnL+NNUh6SuwPOGmId7HM9aT2hkTGcDNla7sDsa BgBm6d8d27dcAyUeHr6owiHZoLcFbR1wvtkRMpYMjEpJaCZp0HrMvExfBVmDF/BQ +kLHboayaq4COrzFITPMb7bsmMLsrEGE5sIk9Aj6aMmhwPkjDDvE3a00V/RVITeZ DqMGlG3x/8iGOEebq6qeA0uEaVbk/chg4zXPCAJOOduu7mOf2etaIJUkMWDLQUSp rnJQ4Lvlu+IOZnPxET/6SJGQQtgfy17wl47qRjhuA0yrA3C+wRSOt6lNZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMHkmFajE7WGr5DokGaT/YGDImbrMB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvd2VTWVZxTVR0WWF2a09pUVpwUDlnWU1pWnVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+xPMA0G CSqGSIb3DQEBCwUAA4IBAQArHNFu8s7YZ++xA7V57+NVOIkxtI3HKkva/ZAfn6b/ 37NDNgqiF3IqhIgE/x0I1l9+EY+1/uu/B8AMo05st/6NScXfM5fAUNfiUl4YQz+Y m1sUlbpeVx/VeT6zPio26yK1CDSXxNFytvc7VJEuhQaLY/c0xp23icyySsheguoM AAtUy/AvGMIhlORfpB7x4FpZn6pIwzuvNJiUC/0gvxMV6CbHpyp6AFj1LM/l92ZZ 0IZ49WXKAVZrKpawKtIWoCsBIjRPRyTgQ0bK3PmoAMjH0KffyPgyXzD+i+MaTiB6 4KmPcpFhMJspqBA75Njkrx2apFoMFDJsBV7xzYhcG4xq -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:07 2026 by rpki-client