This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/wt1t9xcpZ0Jt_HY2IiqXfbBM-ps.roa File: wt1t9xcpZ0Jt_HY2IiqXfbBM-ps.roa (raw, json) Hash identifier: b9SUT/BnNyOL/20uzcyGvymLyIjLCiQooMPrSWuoGCU= Subject key identifier: C2:DD:6D:F7:17:29:67:42:6D:FC:76:36:22:2A:97:7D:B0:4C:FA:9B Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019B7DCB69EF43B3E982B3DF480806811179 Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/wt1t9xcpZ0Jt_HY2IiqXfbBM-ps.roa Signing time: Fri 02 Jan 2026 08:20:41 +0000 ROA not before: Fri 02 Jan 2026 08:20:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50284 IP address blocks: 88.151.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:69:ef:43:b3:e9:82:b3:df:48:08:06:81:11:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Jan 2 08:20:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c2dd6df7172967426dfc7636222a977db04cfa9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ef:36:5d:31:0b:68:9c:65:47:01:34:66:21: 60:7c:85:ac:43:4c:7a:b1:c6:84:5b:00:a2:06:ae: 9f:d1:26:a2:68:27:35:85:01:cb:a5:bb:d1:da:e8: a5:06:9e:9b:fa:02:86:35:b6:c3:13:7e:67:54:78: 8f:53:7c:db:c7:79:96:2a:dc:18:1e:bc:1c:ac:8d: ba:40:6e:6b:07:1a:d8:4e:7a:95:6b:8d:d1:02:c4: ab:b5:4f:44:a0:3e:45:c9:82:c4:51:89:eb:76:f6: b8:52:d3:9d:ba:6f:75:83:68:16:eb:73:cb:c8:3f: ab:d9:00:60:47:b6:7b:34:af:9a:c4:dd:61:98:06: 1d:19:31:16:0c:e0:f2:d0:ed:f8:8f:3d:a4:be:7b: 26:45:d2:ce:e4:98:4e:f4:4e:3b:35:1b:8d:01:67: 26:88:13:40:93:6e:01:2b:cb:76:89:12:a9:dc:f6: d4:86:60:2a:a4:40:af:50:6a:f9:45:b1:09:f8:d5: ae:6b:0b:0d:1f:a1:0c:a5:75:06:dc:96:b0:53:e5: ca:e9:ce:74:49:73:38:11:98:14:9a:32:38:49:bb: 7f:a8:15:8f:b1:7c:b2:0a:a7:39:8b:87:e3:cf:25: e4:f2:6b:17:14:35:f0:0c:4e:bf:37:13:86:dc:5c: 49:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:DD:6D:F7:17:29:67:42:6D:FC:76:36:22:2A:97:7D:B0:4C:FA:9B X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/wt1t9xcpZ0Jt_HY2IiqXfbBM-ps.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.151.117.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:89:2a:90:06:10:0f:4d:90:8c:6e:1d:c1:a3:5c:82:f2:11: 28:a3:f3:25:62:a5:d6:f4:71:b8:c5:b1:18:5f:3a:08:8c:a2: f3:b0:10:a3:5d:f0:5c:8e:88:e5:64:61:88:c0:a1:ba:07:a4: 3b:46:49:64:21:14:66:e0:8d:21:ef:7b:6c:7e:2b:36:fc:24: ae:bf:f9:39:6a:c5:a5:04:96:66:4b:99:fb:ef:78:74:a2:5a: 56:fd:c0:ef:95:98:d4:5b:80:31:8b:3e:ac:9b:8e:00:a7:ad: 75:88:1c:1f:0f:25:2c:6a:56:34:9d:80:23:fd:7d:2c:69:64: da:89:0e:30:7c:eb:80:50:bb:f1:36:60:88:9a:22:31:a7:13: 91:90:57:af:bb:08:ac:ed:9b:9a:61:a4:bf:6c:72:5e:14:6a: ff:92:da:4e:b1:2d:a4:df:12:31:cd:95:29:50:d0:ff:ab:34: 35:30:04:6c:89:59:75:a7:d3:c3:7c:4d:13:49:05:8e:4e:8a: 28:f9:9d:d1:a8:19:6e:c3:ec:2e:e2:de:5a:02:ab:08:25:bf: 02:50:9f:8c:26:b5:03:46:99:0b:3b:e3:af:4c:4e:81:2d:f1: fa:f0:53:23:db:1d:27:1d:b6:54:d7:1e:44:80:1f:9d:e0:ca: 3a:fd:03:99 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y2nvQ7PpgrPfSAgGgRF5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjYwMTAyMDgyMDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMmRkNmRmNzE3Mjk2NzQyNmRmYzc2MzYyMjJhOTc3ZGIwNGNmYTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAye82XTELaJxlRwE0ZiFgfIWsQ0x6 scaEWwCiBq6f0SaiaCc1hQHLpbvR2uilBp6b+gKGNbbDE35nVHiPU3zbx3mWKtwY HrwcrI26QG5rBxrYTnqVa43RAsSrtU9EoD5FyYLEUYnrdva4UtOdum91g2gW63PL yD+r2QBgR7Z7NK+axN1hmAYdGTEWDODy0O34jz2kvnsmRdLO5JhO9E47NRuNAWcm iBNAk24BK8t2iRKp3PbUhmAqpECvUGr5RbEJ+NWuawsNH6EMpXUG3JawU+XK6c50 SXM4EZgUmjI4Sbt/qBWPsXyyCqc5i4fjzyXk8msXFDXwDE6/NxOG3FxJXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMLdbfcXKWdCbfx2NiIql32wTPqbMB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvd3QxdDl4Y3BaMEp0X0hZMklpcVhmYkJNLXBzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWJd1MA0G CSqGSIb3DQEBCwUAA4IBAQBbiSqQBhAPTZCMbh3Bo1yC8hEoo/MlYqXW9HG4xbEY XzoIjKLzsBCjXfBcjojlZGGIwKG6B6Q7RklkIRRm4I0h73tsfis2/CSuv/k5asWl BJZmS5n773h0olpW/cDvlZjUW4Axiz6sm44Ap611iBwfDyUsalY0nYAj/X0saWTa iQ4wfOuAULvxNmCImiIxpxORkFevuwis7ZuaYaS/bHJeFGr/ktpOsS2k3xIxzZUp UND/qzQ1MARsiVl1p9PDfE0TSQWOTooo+Z3RqBluw+wu4t5aAqsIJb8CUJ+MJrUD RpkLO+OvTE6BLfH68FMj2x0nHbZU1x5EgB+d4Mo6/QOZ -----END CERTIFICATE-----Generated at Mon Jan 19 23:36:33 2026 by rpki-client