This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/b1fd7a-2e26-4a5d-802d-7246aefcd272/1/wMAaF9FeE8vQPeGbyh-_gFZr-RQ.roa File: wMAaF9FeE8vQPeGbyh-_gFZr-RQ.roa (raw, json) Hash identifier: U3G2ZKAfz9i+c+9iabqEffqSxjMJIKuTC8d9C/LqbOM= Subject key identifier: C0:C0:1A:17:D1:5E:13:CB:D0:3D:E1:9B:CA:1F:BF:80:56:6B:F9:14 Certificate issuer: /CN=405ffc74ae92386afb7ce770f0390e90d4cde306 Certificate serial: 019B7EA6F5AA44ED5EF1F3966462C3275CFF Authority key identifier: 40:5F:FC:74:AE:92:38:6A:FB:7C:E7:70:F0:39:0E:90:D4:CD:E3:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QF_8dK6SOGr7fOdw8DkOkNTN4wY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/b1fd7a-2e26-4a5d-802d-7246aefcd272/1/wMAaF9FeE8vQPeGbyh-_gFZr-RQ.roa Signing time: Fri 02 Jan 2026 12:20:29 +0000 ROA not before: Fri 02 Jan 2026 12:20:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203967 IP address blocks: 91.195.250.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/b1fd7a-2e26-4a5d-802d-7246aefcd272/1/QF_8dK6SOGr7fOdw8DkOkNTN4wY.crl rsync://rpki.ripe.net/repository/DEFAULT/63/b1fd7a-2e26-4a5d-802d-7246aefcd272/1/QF_8dK6SOGr7fOdw8DkOkNTN4wY.mft rsync://rpki.ripe.net/repository/DEFAULT/QF_8dK6SOGr7fOdw8DkOkNTN4wY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:f5:aa:44:ed:5e:f1:f3:96:64:62:c3:27:5c:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=405ffc74ae92386afb7ce770f0390e90d4cde306 Validity Not Before: Jan 2 12:20:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c0c01a17d15e13cbd03de19bca1fbf80566bf914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0b:09:19:4b:c0:04:e3:8a:e3:fc:55:19:c5: a7:31:97:57:4a:2c:cf:0b:ea:84:e9:19:eb:12:8b: fd:55:77:41:ed:20:04:16:61:82:38:8c:06:53:24: a9:b7:68:7b:be:e3:04:3e:89:3c:7b:54:43:6b:c8: ae:78:ee:4f:f8:76:ef:ca:ae:12:07:b9:d9:4e:b3: da:ad:2e:a5:76:b4:24:58:36:72:1a:f8:fc:14:25: f2:78:d5:a3:53:94:7b:05:79:79:15:0e:9b:26:32: c2:62:2e:fc:32:17:f7:b5:79:b9:df:e2:18:f9:5a: a8:c6:e1:24:5c:a3:fa:a6:08:4a:42:41:14:8f:db: a1:9f:53:13:9a:f8:69:d8:0c:d3:67:4b:e0:65:07: 4b:57:f8:ce:a1:e2:e5:6c:e3:a5:59:86:dc:b0:d2: 43:c6:14:35:a0:0e:f4:c7:59:8a:bb:f7:ee:91:17: d9:f1:d1:1a:ff:90:e9:4e:35:6b:f2:bc:07:cb:fe: 83:90:39:6c:90:3d:ec:34:e0:b2:f6:53:28:9c:e8: cf:12:be:56:aa:c6:78:72:84:5b:aa:cd:63:5a:38: 9d:a1:26:e2:d3:4c:09:e3:6a:11:56:fb:5f:1d:21: b6:e5:48:01:e7:e5:9e:36:d1:c9:58:c5:fd:15:eb: 5d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:C0:1A:17:D1:5E:13:CB:D0:3D:E1:9B:CA:1F:BF:80:56:6B:F9:14 X509v3 Authority Key Identifier: keyid:40:5F:FC:74:AE:92:38:6A:FB:7C:E7:70:F0:39:0E:90:D4:CD:E3:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QF_8dK6SOGr7fOdw8DkOkNTN4wY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b1fd7a-2e26-4a5d-802d-7246aefcd272/1/wMAaF9FeE8vQPeGbyh-_gFZr-RQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b1fd7a-2e26-4a5d-802d-7246aefcd272/1/QF_8dK6SOGr7fOdw8DkOkNTN4wY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.195.250.0/23 Signature Algorithm: sha256WithRSAEncryption 28:90:89:b6:d0:e3:8b:ba:8e:00:88:86:74:7c:d2:a1:bc:eb: 1e:2d:a0:30:bd:e5:a9:e5:7a:3c:7e:30:05:27:81:36:b9:e6: 65:da:a0:33:82:c2:79:f0:38:24:11:86:1c:7f:00:f0:7d:82: a2:00:05:58:28:eb:ae:a1:93:bf:00:08:13:c2:b6:22:b7:64: 62:95:cd:7e:9a:52:57:b9:5f:8f:ce:0f:13:00:ba:e3:54:9e: 08:3a:b1:80:dd:00:d4:a7:47:b0:f7:5d:e7:b3:76:52:b9:38: e1:6e:f2:72:af:35:9d:a7:33:50:cc:d9:c7:6e:c0:30:4e:34: d0:b5:88:1e:ed:ef:21:c4:cd:bc:f9:bd:67:77:dd:09:58:93: 46:c2:23:29:39:f0:3c:4c:2d:60:eb:29:f4:07:10:bc:af:c6: 72:11:96:dc:1b:3f:df:44:c9:70:de:80:b3:15:bd:19:d1:dc: 50:80:e5:b8:73:ab:87:ed:62:19:2b:be:24:ef:c9:f1:f9:7e: 43:6a:36:7e:fd:49:b7:26:58:44:5d:2b:a8:db:f2:3e:b4:49: 47:ac:c4:d3:a6:12:dd:30:0d:00:ed:6f:c7:d6:9e:e5:b0:15: 58:10:13:88:1d:28:f5:47:a9:04:ce:94:d4:dc:39:24:87:e0: 64:dd:be:06 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pvWqRO1e8fOWZGLDJ1z/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwNWZmYzc0YWU5MjM4NmFmYjdjZTc3MGYwMzkwZTkwZDRj ZGUzMDYwHhcNMjYwMTAyMTIyMDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMGMwMWExN2QxNWUxM2NiZDAzZGUxOWJjYTFmYmY4MDU2NmJmOTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQsJGUvABOOK4/xVGcWnMZdXSizP C+qE6RnrEov9VXdB7SAEFmGCOIwGUySpt2h7vuMEPok8e1RDa8iueO5P+Hbvyq4S B7nZTrParS6ldrQkWDZyGvj8FCXyeNWjU5R7BXl5FQ6bJjLCYi78Mhf3tXm53+IY +VqoxuEkXKP6pghKQkEUj9uhn1MTmvhp2AzTZ0vgZQdLV/jOoeLlbOOlWYbcsNJD xhQ1oA70x1mKu/fukRfZ8dEa/5DpTjVr8rwHy/6DkDlskD3sNOCy9lMonOjPEr5W qsZ4coRbqs1jWjidoSbi00wJ42oRVvtfHSG25UgB5+WeNtHJWMX9FetdmQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMDAGhfRXhPL0D3hm8ofv4BWa/kUMB8GA1UdIwQY MBaAFEBf/HSukjhq+3zncPA5DpDUzeMGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUZfOGRLNlNPR3I3Zk9kdzhEa09rTlRONHdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9iMWZkN2EtMmUyNi00YTVkLTgwMmQt NzI0NmFlZmNkMjcyLzEvd01BYUY5RmVFOHZRUGVHYnloLV9nRlpyLVJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9iMWZkN2EtMmUyNi00YTVkLTgwMmQtNzI0NmFlZmNkMjcy LzEvUUZfOGRLNlNPR3I3Zk9kdzhEa09rTlRONHdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW8P6MA0G CSqGSIb3DQEBCwUAA4IBAQAokIm20OOLuo4AiIZ0fNKhvOseLaAwveWp5Xo8fjAF J4E2ueZl2qAzgsJ58DgkEYYcfwDwfYKiAAVYKOuuoZO/AAgTwrYit2Rilc1+mlJX uV+Pzg8TALrjVJ4IOrGA3QDUp0ew913ns3ZSuTjhbvJyrzWdpzNQzNnHbsAwTjTQ tYge7e8hxM28+b1nd90JWJNGwiMpOfA8TC1g6yn0BxC8r8ZyEZbcGz/fRMlw3oCz Fb0Z0dxQgOW4c6uH7WIZK74k78nx+X5DajZ+/Um3JlhEXSuo2/I+tElHrMTTphLd MA0A7W/H1p7lsBVYEBOIHSj1R6kEzpTU3Dkkh+Bk3b4G -----END CERTIFICATE-----Generated at Tue Feb 10 06:04:00 2026 by rpki-client