This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aa30c8-157e-4844-8650-76803d82ce8e/1/WiIkoz7nGtAVAxCnt1nF-uXTJsk.roa File: WiIkoz7nGtAVAxCnt1nF-uXTJsk.roa (raw, json) Hash identifier: fspyFKIfZ6Cqhpk31ZCqwzmKWRYPSF+dYkvKaabi768= Subject key identifier: 5A:22:24:A3:3E:E7:1A:D0:15:03:10:A7:B7:59:C5:FA:E5:D3:26:C9 Certificate issuer: /CN=05352119b4ba4708f119e4d1fb4752bc881af493 Certificate serial: 019B7DCB54D3A87123C866B5F0F2D702F0D9 Authority key identifier: 05:35:21:19:B4:BA:47:08:F1:19:E4:D1:FB:47:52:BC:88:1A:F4:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTUhGbS6RwjxGeTR-0dSvIga9JM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aa30c8-157e-4844-8650-76803d82ce8e/1/WiIkoz7nGtAVAxCnt1nF-uXTJsk.roa Signing time: Fri 02 Jan 2026 08:20:36 +0000 ROA not before: Fri 02 Jan 2026 08:20:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49007 IP address blocks: 91.227.196.0/23 maxlen: 23 194.35.236.0/23 maxlen: 23 194.35.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aa30c8-157e-4844-8650-76803d82ce8e/1/BTUhGbS6RwjxGeTR-0dSvIga9JM.crl rsync://rpki.ripe.net/repository/DEFAULT/62/aa30c8-157e-4844-8650-76803d82ce8e/1/BTUhGbS6RwjxGeTR-0dSvIga9JM.mft rsync://rpki.ripe.net/repository/DEFAULT/BTUhGbS6RwjxGeTR-0dSvIga9JM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:54:d3:a8:71:23:c8:66:b5:f0:f2:d7:02:f0:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05352119b4ba4708f119e4d1fb4752bc881af493 Validity Not Before: Jan 2 08:20:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a2224a33ee71ad0150310a7b759c5fae5d326c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f5:23:d6:e9:9d:a6:48:75:48:37:5c:6c:d4: 02:f9:bb:3e:4b:ad:a9:70:c2:7c:25:9e:27:de:ab: 9d:f3:c3:4a:18:d5:7f:14:1e:c6:70:16:9e:67:ef: ae:24:d2:f5:aa:7b:0c:0e:50:18:41:1f:9b:9d:cc: 2d:1e:6b:89:79:e7:30:34:e5:ed:da:57:a7:5e:79: 5d:48:5d:86:1e:25:11:44:f2:5f:b5:32:81:68:c3: c5:62:b3:ae:ee:3e:a7:3c:8e:27:69:77:d6:6f:52: 2a:13:fe:1a:5f:55:88:5e:df:5e:19:30:6f:06:97: e6:0d:f7:36:aa:c4:7e:9d:05:21:e4:bd:13:56:93: 36:30:f1:e0:bc:ce:a7:77:62:81:55:4f:5c:65:3b: c1:59:3b:54:d1:8c:c4:a8:78:f8:0b:82:88:e9:d9: 72:b5:82:0f:3b:ef:14:2d:a7:30:47:86:8d:c2:a1: 18:2a:ec:45:da:fb:9c:63:34:5e:13:2f:2f:d7:4a: 17:18:e5:81:56:1c:ce:59:8c:c9:1a:90:8c:ca:b7: 20:d8:f2:d5:4a:87:5c:ae:c8:59:98:cb:6f:00:f0: 70:9d:10:11:49:8b:c7:4a:1e:66:d4:fa:f1:af:b4: 12:c1:8f:6e:c7:42:7d:6a:4f:14:73:74:24:86:f6: f6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:22:24:A3:3E:E7:1A:D0:15:03:10:A7:B7:59:C5:FA:E5:D3:26:C9 X509v3 Authority Key Identifier: keyid:05:35:21:19:B4:BA:47:08:F1:19:E4:D1:FB:47:52:BC:88:1A:F4:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTUhGbS6RwjxGeTR-0dSvIga9JM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aa30c8-157e-4844-8650-76803d82ce8e/1/WiIkoz7nGtAVAxCnt1nF-uXTJsk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aa30c8-157e-4844-8650-76803d82ce8e/1/BTUhGbS6RwjxGeTR-0dSvIga9JM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.227.196.0/23 194.35.236.0/22 Signature Algorithm: sha256WithRSAEncryption 27:cb:58:68:71:bc:17:6d:67:44:67:f8:70:8e:fc:c9:e0:fd: 22:34:8d:20:3a:3c:01:1c:33:36:28:9f:4a:c8:e8:67:87:10: 9b:92:40:b9:c4:be:4d:e7:70:78:c1:6d:42:2d:fc:9f:fc:45: e9:e2:79:27:42:1e:4d:2e:02:b7:90:6f:e8:45:27:da:da:4a: 72:fb:8d:dd:24:4d:77:2e:3d:01:8b:64:64:9e:4e:00:2e:67: b5:03:2d:cc:0f:61:cf:21:3e:1c:19:7c:6e:4b:57:68:0d:83: 92:5a:b2:ba:c4:25:e3:a2:1b:60:ef:54:8c:d1:1d:be:c2:0b: bb:7d:06:90:b3:77:b4:62:76:7f:86:0e:63:fb:55:07:5c:dc: 9d:c2:dd:df:fb:fa:6e:7e:39:21:17:74:23:09:12:bf:92:9e: a3:f8:84:84:a9:9f:77:53:e3:e8:eb:fc:f0:e6:56:86:ed:c5: 9b:24:df:c0:5a:23:ee:90:59:c6:ef:3e:c6:8d:ec:7f:82:18: 69:06:8f:de:5c:a3:e3:c2:e1:7e:be:e7:ac:b3:7a:90:13:2e: 0b:e7:ac:11:ff:2a:fa:f0:72:29:39:fe:b1:0b:03:98:7b:4f: 64:68:06:d9:6f:e8:3c:c8:f8:4e:5e:ea:27:31:aa:cf:30:a6: a6:04:c3:81 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9y1TTqHEjyGa18PLXAvDZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzUyMTE5YjRiYTQ3MDhmMTE5ZTRkMWZiNDc1MmJjODgx YWY0OTMwHhcNMjYwMTAyMDgyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTIyMjRhMzNlZTcxYWQwMTUwMzEwYTdiNzU5YzVmYWU1ZDMyNmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvUj1umdpkh1SDdcbNQC+bs+S62p cMJ8JZ4n3qud88NKGNV/FB7GcBaeZ++uJNL1qnsMDlAYQR+bncwtHmuJeecwNOXt 2lenXnldSF2GHiURRPJftTKBaMPFYrOu7j6nPI4naXfWb1IqE/4aX1WIXt9eGTBv BpfmDfc2qsR+nQUh5L0TVpM2MPHgvM6nd2KBVU9cZTvBWTtU0YzEqHj4C4KI6dly tYIPO+8ULacwR4aNwqEYKuxF2vucYzReEy8v10oXGOWBVhzOWYzJGpCMyrcg2PLV SodcrshZmMtvAPBwnRARSYvHSh5m1Prxr7QSwY9ux0J9ak8Uc3Qkhvb2NQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFoiJKM+5xrQFQMQp7dZxfrl0ybJMB8GA1UdIwQY MBaAFAU1IRm0ukcI8Rnk0ftHUryIGvSTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRVaEdiUzZSd2p4R2VUUi0wZFN2SWdhOUpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hYTMwYzgtMTU3ZS00ODQ0LTg2NTAt NzY4MDNkODJjZThlLzEvV2lJa296N25HdEFWQXhDbnQxbkYtdVhUSnNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9hYTMwYzgtMTU3ZS00ODQ0LTg2NTAtNzY4MDNkODJjZThl LzEvQlRVaEdiUzZSd2p4R2VUUi0wZFN2SWdhOUpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW+PEAwQC wiPsMA0GCSqGSIb3DQEBCwUAA4IBAQAny1hocbwXbWdEZ/hwjvzJ4P0iNI0gOjwB HDM2KJ9KyOhnhxCbkkC5xL5N53B4wW1CLfyf/EXp4nknQh5NLgK3kG/oRSfa2kpy +43dJE13Lj0Bi2Rknk4ALme1Ay3MD2HPIT4cGXxuS1doDYOSWrK6xCXjohtg71SM 0R2+wgu7fQaQs3e0YnZ/hg5j+1UHXNydwt3f+/pufjkhF3QjCRK/kp6j+ISEqZ93 U+Po6/zw5laG7cWbJN/AWiPukFnG7z7Gjex/ghhpBo/eXKPjwuF+vuess3qQEy4L 56wR/yr68HIpOf6xCwOYe09kaAbZb+g8yPhOXuonMarPMKamBMOB -----END CERTIFICATE-----Generated at Tue Feb 10 01:29:05 2026 by rpki-client