This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/w-XfPqILteG9KHOxrgUZfeVhJuA.roa File: w-XfPqILteG9KHOxrgUZfeVhJuA.roa (raw, json) Hash identifier: b2kqdmupyMow51gQQ6EiC8dJFvG8R5VrVALmITaAfS8= Subject key identifier: C3:E5:DF:3E:A2:0B:B5:E1:BD:28:73:B1:AE:05:19:7D:E5:61:26:E0 Certificate issuer: /CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Certificate serial: 019B77C6F6ECBB701DB009366A2AB2398FDA Authority key identifier: 0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/w-XfPqILteG9KHOxrgUZfeVhJuA.roa Signing time: Thu 01 Jan 2026 04:18:06 +0000 ROA not before: Thu 01 Jan 2026 04:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202602 IP address blocks: 91.223.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:f6:ec:bb:70:1d:b0:09:36:6a:2a:b2:39:8f:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Validity Not Before: Jan 1 04:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c3e5df3ea20bb5e1bd2873b1ae05197de56126e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:7c:32:dc:8c:f5:c9:ae:10:88:99:ec:4f:cd: 2e:be:72:12:f9:73:a6:d6:6d:c5:52:45:71:f3:25: 47:98:4f:25:08:f1:42:f6:76:15:11:5b:5a:0f:91: ad:47:0f:3a:6a:df:5e:22:ed:57:c6:89:cb:95:b7: 5d:61:93:2d:cc:60:7a:7e:57:8b:3f:8b:86:c4:e8: cd:c3:6c:12:b5:58:be:a4:ad:7e:6f:fa:8c:b3:74: 0a:6b:30:d4:fe:f3:10:56:28:ed:0e:c1:a3:bf:2a: ba:84:86:ec:96:5c:31:6d:32:cb:99:1e:10:c1:e6: fc:99:3a:4e:78:31:e2:f7:dc:af:a0:8e:c4:19:cc: 07:99:9e:c8:18:51:83:59:30:6b:b3:92:a9:a9:79: c9:2a:1e:da:35:ec:a5:66:51:53:b8:5c:10:14:74: f5:9a:56:ab:47:a5:7b:85:12:f0:6e:8e:0a:9a:e1: 6d:91:93:67:51:ae:34:b2:c3:36:16:18:87:66:9f: 97:f0:80:83:00:8f:1f:1b:19:13:9f:d2:c5:ca:c5: d1:24:5f:e8:bd:7e:e2:2f:5d:54:68:e1:d6:67:af: e1:da:2e:30:72:9f:3f:52:7d:e5:84:75:0c:ae:82: 93:20:b6:90:e0:5b:94:a6:16:c3:10:b8:b6:73:24: 43:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:E5:DF:3E:A2:0B:B5:E1:BD:28:73:B1:AE:05:19:7D:E5:61:26:E0 X509v3 Authority Key Identifier: keyid:0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/w-XfPqILteG9KHOxrgUZfeVhJuA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.119.0/24 Signature Algorithm: sha256WithRSAEncryption 41:79:52:bb:5d:04:7e:6d:99:a7:e4:11:d7:c2:bb:9e:9f:85: 40:ea:5f:29:d8:f4:9e:e4:79:2b:5e:9d:01:30:67:99:26:7a: 63:14:a4:6d:52:d7:a6:63:95:72:27:bf:01:db:bf:c6:ab:ec: 97:89:de:97:ab:29:35:85:ec:3e:29:46:04:f6:74:f5:8e:4f: e0:10:66:58:91:40:47:eb:0f:ec:b8:26:0e:dd:c5:dc:08:73: e3:2c:f6:3e:1b:f5:e4:88:d9:88:77:12:78:b7:d8:d7:b8:36: 3e:d3:15:7e:e6:37:54:dd:fb:05:23:ab:b2:99:48:a2:2f:d1: 79:8b:7f:1e:f4:fd:d1:55:11:a8:de:41:42:03:cf:c7:e5:e7: ac:d3:8e:41:d4:9f:00:58:6e:88:c3:91:68:7e:f6:a5:6a:22: da:fc:73:50:1d:5d:fb:bb:6a:d1:42:75:c3:f3:ac:19:bb:88: 2d:14:7f:d6:24:67:f5:32:5e:18:b3:bc:91:de:c7:12:de:f0: 65:34:a4:5d:50:5e:66:d5:de:7f:fc:f9:31:d8:00:8b:9a:1e: 33:a9:78:42:76:bb:36:26:3d:b5:17:e1:cc:b1:6a:74:fe:86: 90:82:7d:a6:63:4b:52:cc:24:33:9a:1a:a3:cd:05:3d:9a:db: 02:b6:47:e2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xvbsu3AdsAk2aiqyOY/aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMTdiZjI0OThmMzY4MmQ3MTgzZTQ3Zjc1YjI4YWY0MWMy ODE1YjkwHhcNMjYwMTAxMDQxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjM2U1ZGYzZWEyMGJiNWUxYmQyODczYjFhZTA1MTk3ZGU1NjEyNmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33wy3Iz1ya4QiJnsT80uvnIS+XOm 1m3FUkVx8yVHmE8lCPFC9nYVEVtaD5GtRw86at9eIu1XxonLlbddYZMtzGB6fleL P4uGxOjNw2wStVi+pK1+b/qMs3QKazDU/vMQVijtDsGjvyq6hIbsllwxbTLLmR4Q web8mTpOeDHi99yvoI7EGcwHmZ7IGFGDWTBrs5KpqXnJKh7aNeylZlFTuFwQFHT1 mlarR6V7hRLwbo4KmuFtkZNnUa40ssM2FhiHZp+X8ICDAI8fGxkTn9LFysXRJF/o vX7iL11UaOHWZ6/h2i4wcp8/Un3lhHUMroKTILaQ4FuUphbDELi2cyRDHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMPl3z6iC7XhvShzsa4FGX3lYSbgMB8GA1UdIwQY MBaAFA8XvySY82gtcYPkf3WyivQcKBW5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMt YTQ5Y2JiODRmOTgyLzEvdy1YZlBxSUx0ZUc5S0hPeHJnVVpmZVZoSnVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMtYTQ5Y2JiODRmOTgy LzEvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW993MA0G CSqGSIb3DQEBCwUAA4IBAQBBeVK7XQR+bZmn5BHXwruen4VA6l8p2PSe5HkrXp0B MGeZJnpjFKRtUtemY5VyJ78B27/Gq+yXid6Xqyk1hew+KUYE9nT1jk/gEGZYkUBH 6w/suCYO3cXcCHPjLPY+G/XkiNmIdxJ4t9jXuDY+0xV+5jdU3fsFI6uymUiiL9F5 i38e9P3RVRGo3kFCA8/H5ees045B1J8AWG6Iw5FofvalaiLa/HNQHV37u2rRQnXD 86wZu4gtFH/WJGf1Ml4Ys7yR3scS3vBlNKRdUF5m1d5//Pkx2ACLmh4zqXhCdrs2 Jj21F+HMsWp0/oaQgn2mY0tSzCQzmhqjzQU9mtsCtkfi -----END CERTIFICATE-----Generated at Sun Jan 18 06:33:16 2026 by rpki-client