This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/WRguYfM3qsHbTi2gzGt0rBZ4XRg.roa File: WRguYfM3qsHbTi2gzGt0rBZ4XRg.roa (raw, json) Hash identifier: F8MLxVzFRvqV/2YfTnWO3X00LJXowheNEVbv/Z0npuM= Subject key identifier: 59:18:2E:61:F3:37:AA:C1:DB:4E:2D:A0:CC:6B:74:AC:16:78:5D:18 Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c Certificate serial: 019B7AC78FB6CBD063CB245ECB42D9AD5342 Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/WRguYfM3qsHbTi2gzGt0rBZ4XRg.roa Signing time: Thu 01 Jan 2026 18:17:37 +0000 ROA not before: Thu 01 Jan 2026 18:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47270 IP address blocks: 91.212.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:8f:b6:cb:d0:63:cb:24:5e:cb:42:d9:ad:53:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c Validity Not Before: Jan 1 18:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=59182e61f337aac1db4e2da0cc6b74ac16785d18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9a:9b:bf:d2:75:fd:66:37:88:c2:56:5c:60: db:4e:be:46:89:72:fa:f0:ce:bb:f8:ac:29:c0:65: b9:cf:af:4b:67:b4:e8:82:1b:79:8a:c8:13:a8:f3: 21:b9:d5:73:db:c4:14:b9:13:56:24:0b:f7:25:37: 99:cc:24:25:1a:ab:4d:d9:45:c3:00:e4:81:10:21: c8:0d:40:53:06:96:3d:f7:5e:11:c9:df:66:1a:05: ce:76:14:2b:f5:66:f3:50:4b:2a:e0:8f:6c:a5:38: 7a:8f:e9:20:f5:e8:f8:95:0d:0d:71:05:ac:70:31: d9:f2:6a:a0:2f:62:46:3e:63:83:a3:49:2f:05:95: d8:d1:e8:e7:03:46:75:31:a7:1b:51:ba:8c:c3:b4: fe:ad:76:3c:bc:05:b1:34:7f:de:64:c3:c6:4c:76: 3b:16:9d:5a:80:0b:4e:d8:43:00:47:21:04:fc:84: 6d:be:1b:32:d0:df:3d:d3:fa:ef:db:5a:c5:83:a8: d4:56:aa:b7:b6:b1:d3:87:a1:ee:cb:f3:90:34:55: be:f3:75:48:0b:a8:6e:fa:6a:c9:63:8e:42:9d:39: f8:12:c7:86:1c:c3:99:07:17:39:9b:af:e2:b9:77: fa:76:f8:f3:2f:a7:74:23:64:6b:d9:be:64:f2:ae: 6e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:18:2E:61:F3:37:AA:C1:DB:4E:2D:A0:CC:6B:74:AC:16:78:5D:18 X509v3 Authority Key Identifier: keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/WRguYfM3qsHbTi2gzGt0rBZ4XRg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.61.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:99:a4:f3:f3:8a:bf:e4:b2:80:42:e7:62:b2:b9:77:8f:72: c3:b1:57:44:db:6e:a8:68:11:d2:9d:b2:46:4f:54:5a:14:49: 0c:aa:da:88:43:b6:c4:35:3c:9a:f7:9c:a1:65:82:fb:83:b3: f3:92:1b:d5:f5:fe:7c:fe:5d:a1:c1:96:cb:fc:ec:90:9e:25: 71:f3:b7:b4:2d:97:e7:60:8f:a9:de:ac:f4:47:47:aa:89:ec: 8b:49:50:e6:a8:57:37:78:2e:7c:e5:a6:88:c1:81:81:56:ad: 62:98:c6:c4:08:9e:dc:8e:d6:45:67:18:10:fe:ee:84:70:eb: 4b:ca:bd:13:99:64:92:e8:78:b9:a2:01:3b:bc:b9:02:70:66: 16:e5:27:95:6e:5b:a9:a7:be:2c:04:4b:69:53:59:d3:ea:94: 90:91:c1:9e:3e:9b:31:4a:2c:df:7a:07:f8:bc:e1:8e:3a:81: 29:da:0a:9b:c8:88:1a:51:03:dc:fd:c3:37:8d:c6:53:1b:8f: 90:a0:9d:82:9c:db:9f:06:33:bb:eb:e0:36:c9:8a:44:10:ab: eb:a1:a5:e8:9c:fc:44:74:c0:73:1f:2e:11:2c:2d:13:05:b4: 6b:b3:58:74:52:41:d4:76:2c:3c:ce:62:8f:25:20:7c:a2:cb: c8:9d:8a:a2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x4+2y9BjyyRey0LZrVNCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMjJlMWMyYTUzMTUzMzRiNjZkODBmNzhkNWI1MGI0MmU0 ODBiOWMwHhcNMjYwMTAxMTgxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTE4MmU2MWYzMzdhYWMxZGI0ZTJkYTBjYzZiNzRhYzE2Nzg1ZDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZqbv9J1/WY3iMJWXGDbTr5GiXL6 8M67+KwpwGW5z69LZ7Toght5isgTqPMhudVz28QUuRNWJAv3JTeZzCQlGqtN2UXD AOSBECHIDUBTBpY9914Ryd9mGgXOdhQr9WbzUEsq4I9spTh6j+kg9ej4lQ0NcQWs cDHZ8mqgL2JGPmODo0kvBZXY0ejnA0Z1MacbUbqMw7T+rXY8vAWxNH/eZMPGTHY7 Fp1agAtO2EMARyEE/IRtvhsy0N890/rv21rFg6jUVqq3trHTh6Huy/OQNFW+83VI C6hu+mrJY45CnTn4EseGHMOZBxc5m6/iuXf6dvjzL6d0I2Rr2b5k8q5u7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFkYLmHzN6rB204toMxrdKwWeF0YMB8GA1UdIwQY MBaAFGIi4cKlMVM0tm2A941bULQuSAucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEt NTczNzAxYzg0ODMzLzEvV1JndVlmTTNxc0hiVGkyZ3pHdDByQlo0WFJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEtNTczNzAxYzg0ODMz LzEvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9Q9MA0G CSqGSIb3DQEBCwUAA4IBAQCMmaTz84q/5LKAQudisrl3j3LDsVdE226oaBHSnbJG T1RaFEkMqtqIQ7bENTya95yhZYL7g7PzkhvV9f58/l2hwZbL/OyQniVx87e0LZfn YI+p3qz0R0eqieyLSVDmqFc3eC585aaIwYGBVq1imMbECJ7cjtZFZxgQ/u6EcOtL yr0TmWSS6Hi5ogE7vLkCcGYW5SeVblupp74sBEtpU1nT6pSQkcGePpsxSizfegf4 vOGOOoEp2gqbyIgaUQPc/cM3jcZTG4+QoJ2CnNufBjO76+A2yYpEEKvroaXonPxE dMBzHy4RLC0TBbRrs1h0UkHUdiw8zmKPJSB8osvInYqi -----END CERTIFICATE-----Generated at Mon Jan 19 20:37:19 2026 by rpki-client