This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/w-zK3gICwu0tZ5BpaCsJ-LEyh_4.roa File: w-zK3gICwu0tZ5BpaCsJ-LEyh_4.roa (raw, json) Hash identifier: MaoF3Nxzc8V8R020ySbLtYOSWWBezqUdqr7TNLevqTY= Subject key identifier: C3:EC:CA:DE:02:02:C2:ED:2D:67:90:69:68:2B:09:F8:B1:32:87:FE Certificate issuer: /CN=1a5b7d43bb4c83e7c7d97ce07543a96d74c69fda Certificate serial: 019B77C6E5674165425E2EC63A7CC4442F37 Authority key identifier: 1A:5B:7D:43:BB:4C:83:E7:C7:D9:7C:E0:75:43:A9:6D:74:C6:9F:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/w-zK3gICwu0tZ5BpaCsJ-LEyh_4.roa Signing time: Thu 01 Jan 2026 04:18:02 +0000 ROA not before: Thu 01 Jan 2026 04:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197479 IP address blocks: 91.222.144.0/22 maxlen: 22 91.222.144.0/24 maxlen: 24 91.222.145.0/24 maxlen: 24 91.222.146.0/24 maxlen: 24 91.222.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.mft rsync://rpki.ripe.net/repository/DEFAULT/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:e5:67:41:65:42:5e:2e:c6:3a:7c:c4:44:2f:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a5b7d43bb4c83e7c7d97ce07543a96d74c69fda Validity Not Before: Jan 1 04:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c3eccade0202c2ed2d679069682b09f8b13287fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:31:9c:06:4f:07:27:99:32:0c:f1:3f:e3:ae: 2b:20:4a:37:45:e1:41:b8:c9:5d:e5:60:4b:ba:73: 74:8c:ce:f5:eb:a5:37:69:da:e5:5d:7b:98:90:d3: 0b:1e:63:04:05:a5:c5:47:5b:d5:e2:e3:0c:04:19: b2:9d:df:76:78:c0:80:f0:63:a8:cf:ed:48:df:57: 06:17:30:1a:ab:d7:ed:87:fa:75:c6:0d:22:b3:ea: 56:77:3a:75:85:89:af:de:89:f7:b6:a7:2f:1f:fc: 6d:bb:90:b6:3c:94:30:b6:56:87:92:38:a5:e1:a8: 7a:b2:f5:03:8f:12:75:88:e5:5e:3f:82:f7:26:29: ef:70:b3:6e:6e:75:31:65:d3:4e:e8:6a:95:9c:82: 57:61:0f:64:22:43:75:0d:82:84:66:61:2e:14:5b: 94:df:7e:f6:23:8f:2c:d8:a5:06:38:f9:0f:92:9c: b6:52:3a:05:3c:bd:dd:a2:e1:55:18:a2:e8:cc:52: 07:1a:78:66:ff:1e:66:67:87:24:af:e1:04:58:d9: 28:78:27:b6:92:d1:03:31:cc:f5:3a:30:44:65:a2: 03:ec:9f:fb:26:fb:c1:b0:c6:a8:32:52:9c:6f:a8: 8e:ed:19:7c:35:70:14:b7:00:e5:ee:76:fc:76:14: ed:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:EC:CA:DE:02:02:C2:ED:2D:67:90:69:68:2B:09:F8:B1:32:87:FE X509v3 Authority Key Identifier: keyid:1A:5B:7D:43:BB:4C:83:E7:C7:D9:7C:E0:75:43:A9:6D:74:C6:9F:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/w-zK3gICwu0tZ5BpaCsJ-LEyh_4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.222.144.0/22 Signature Algorithm: sha256WithRSAEncryption 44:1c:f6:f4:45:5c:cc:af:46:46:8f:4b:c8:3f:d8:1b:0e:47: e0:d5:bf:a4:fb:f5:41:07:6a:8a:3d:65:51:77:b9:59:8b:28: cb:43:39:fa:14:2a:91:1d:8e:7f:e2:a1:39:72:d1:d9:c8:b1: f6:25:30:89:74:6f:b0:61:5d:55:93:b7:0c:8d:b8:5f:b6:92: d5:ff:9e:f8:4d:93:16:32:19:2e:c8:83:8f:1a:70:56:c9:f8: 8c:e9:0a:df:c7:e0:9b:25:32:0a:cc:37:c0:df:c9:c0:fd:58: 01:19:12:07:bd:8d:48:06:45:2a:5d:2d:50:4f:9b:95:e3:6f: 6e:dc:58:de:62:e0:e5:9f:5c:04:14:27:49:aa:41:16:2a:a9: 9d:59:69:f8:db:96:01:6f:56:da:a0:f9:05:a7:68:49:73:df: 01:cf:16:23:b2:93:98:9d:2e:c8:c6:73:5b:03:8c:b2:8e:6b: 36:d7:3b:8e:70:14:3c:b0:67:47:38:eb:94:17:bf:57:7c:50: 38:a4:74:dc:62:8a:29:37:f0:9f:3c:9f:fd:f4:fa:9f:9c:18: 46:a6:2c:0c:2f:e7:1a:ff:be:96:43:1c:dc:fc:a0:3b:fc:77: 0b:e4:02:dd:cb:ba:59:51:e6:e0:27:03:9a:4b:83:df:45:d2: 09:4b:24:4f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xuVnQWVCXi7GOnzERC83MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNWI3ZDQzYmI0YzgzZTdjN2Q5N2NlMDc1NDNhOTZkNzRj NjlmZGEwHhcNMjYwMTAxMDQxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjM2VjY2FkZTAyMDJjMmVkMmQ2NzkwNjk2ODJiMDlmOGIxMzI4N2ZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjGcBk8HJ5kyDPE/464rIEo3ReFB uMld5WBLunN0jM7166U3adrlXXuYkNMLHmMEBaXFR1vV4uMMBBmynd92eMCA8GOo z+1I31cGFzAaq9fth/p1xg0is+pWdzp1hYmv3on3tqcvH/xtu5C2PJQwtlaHkjil 4ah6svUDjxJ1iOVeP4L3JinvcLNubnUxZdNO6GqVnIJXYQ9kIkN1DYKEZmEuFFuU 3372I48s2KUGOPkPkpy2UjoFPL3douFVGKLozFIHGnhm/x5mZ4ckr+EEWNkoeCe2 ktEDMcz1OjBEZaID7J/7JvvBsMaoMlKcb6iO7Rl8NXAUtwDl7nb8dhTthwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMPsyt4CAsLtLWeQaWgrCfixMof+MB8GA1UdIwQY MBaAFBpbfUO7TIPnx9l84HVDqW10xp/aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2x0OVE3dE1nLWZIMlh6Z2RVT3BiWFRHbjlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC84YWQ2NGEtMDU3Zi00NzJhLTg5YjEt NWVlZjAyNGQ5YTkyLzEvdy16SzNnSUN3dTB0WjVCcGFDc0otTEV5aF80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC84YWQ2NGEtMDU3Zi00NzJhLTg5YjEtNWVlZjAyNGQ5YTky LzEvR2x0OVE3dE1nLWZIMlh6Z2RVT3BiWFRHbjlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW96QMA0G CSqGSIb3DQEBCwUAA4IBAQBEHPb0RVzMr0ZGj0vIP9gbDkfg1b+k+/VBB2qKPWVR d7lZiyjLQzn6FCqRHY5/4qE5ctHZyLH2JTCJdG+wYV1Vk7cMjbhftpLV/574TZMW MhkuyIOPGnBWyfiM6Qrfx+CbJTIKzDfA38nA/VgBGRIHvY1IBkUqXS1QT5uV429u 3FjeYuDln1wEFCdJqkEWKqmdWWn425YBb1baoPkFp2hJc98BzxYjspOYnS7IxnNb A4yyjms21zuOcBQ8sGdHOOuUF79XfFA4pHTcYoopN/CfPJ/99PqfnBhGpiwML+ca /76WQxzc/KA7/HcL5ALdy7pZUebgJwOaS4PfRdIJSyRP -----END CERTIFICATE-----Generated at Mon Feb 9 18:44:41 2026 by rpki-client