This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/wk26zi3ldsjZ_XJitrGy59Nt3RU.roa File: wk26zi3ldsjZ_XJitrGy59Nt3RU.roa (raw, json) Hash identifier: Y/LqsA9Orheu884pJMTCuEfdY61dLN5gUejTk6JnsDE= Subject key identifier: C2:4D:BA:CE:2D:E5:76:C8:D9:FD:72:62:B6:B1:B2:E7:D3:6D:DD:15 Certificate issuer: /CN=4d687d862808225b459fa399e65f8a069469aba3 Certificate serial: 019B7AC7867577F35DD6ADC50E9915A44F36 Authority key identifier: 4D:68:7D:86:28:08:22:5B:45:9F:A3:99:E6:5F:8A:06:94:69:AB:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TWh9higIIltFn6OZ5l-KBpRpq6M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/wk26zi3ldsjZ_XJitrGy59Nt3RU.roa Signing time: Thu 01 Jan 2026 18:17:35 +0000 ROA not before: Thu 01 Jan 2026 18:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31317 IP address blocks: 77.87.191.0/24 maxlen: 32 2001:678:e40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.mft rsync://rpki.ripe.net/repository/DEFAULT/TWh9higIIltFn6OZ5l-KBpRpq6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:86:75:77:f3:5d:d6:ad:c5:0e:99:15:a4:4f:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d687d862808225b459fa399e65f8a069469aba3 Validity Not Before: Jan 1 18:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c24dbace2de576c8d9fd7262b6b1b2e7d36ddd15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:03:7a:eb:28:d0:a9:e0:47:e3:02:82:5d:cd: 3b:50:a9:a7:a7:9d:0b:d7:23:af:f4:c2:3c:ed:7b: 24:25:87:7c:5a:46:e2:f5:17:51:74:9e:b0:0c:45: 1c:3f:82:5b:dd:68:1d:df:b5:36:92:91:6e:32:74: 51:3d:c5:6f:55:ee:0d:06:9f:57:01:73:a2:ad:7f: 08:5b:f1:1c:42:c0:28:30:4d:97:85:73:8f:dd:12: 27:a1:6e:1f:49:bf:10:81:84:20:14:78:de:d9:8f: f3:b3:d3:fa:54:9e:26:85:09:43:f3:9a:b0:04:4b: 1c:c8:9b:35:81:50:fd:cb:8b:eb:c7:4d:d1:90:83: c9:0e:ef:3c:42:16:51:63:4d:19:78:e9:dc:e9:0c: 69:d8:2c:d9:d0:af:a2:ae:2b:8a:a3:e9:ee:28:e6: 55:5e:d7:84:13:d7:c3:e6:01:c1:89:08:7f:f7:7d: ee:76:8d:1d:56:25:4b:66:80:a3:4f:f1:99:15:d8: 2f:4d:d2:34:1b:ac:aa:d4:95:d5:2a:d6:2c:6c:55: f6:a9:c6:36:8b:9c:eb:fa:10:b5:63:f3:46:93:68: 4a:12:c3:a6:07:68:52:73:29:75:f9:4a:eb:5d:5d: 8a:d5:f6:11:11:14:21:c1:44:6e:c8:2c:eb:67:f0: 18:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:4D:BA:CE:2D:E5:76:C8:D9:FD:72:62:B6:B1:B2:E7:D3:6D:DD:15 X509v3 Authority Key Identifier: keyid:4D:68:7D:86:28:08:22:5B:45:9F:A3:99:E6:5F:8A:06:94:69:AB:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWh9higIIltFn6OZ5l-KBpRpq6M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/wk26zi3ldsjZ_XJitrGy59Nt3RU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.87.191.0/24 IPv6: 2001:678:e40::/48 Signature Algorithm: sha256WithRSAEncryption 45:5b:1e:01:12:cf:af:77:24:90:39:88:94:ec:0d:a7:2c:c4: 29:c3:5d:85:28:12:d0:e4:37:82:16:ca:31:3e:af:08:ff:c2: 7b:88:0b:b8:46:7f:54:19:68:d8:98:59:3e:cf:28:96:d7:fa: 05:b7:0f:18:07:bb:c6:97:5f:09:4f:3f:45:e2:9f:d0:06:50: 3e:4f:8d:9c:19:ca:11:14:1a:97:4c:f2:9d:ea:fe:d7:7e:8d: d3:9a:29:22:d0:b4:a2:ce:6e:a1:82:0a:81:17:04:31:78:cb: 89:d1:fd:00:8a:2b:dd:68:77:c7:fe:1a:d0:71:99:96:96:4f: 79:a5:cf:68:7a:99:c0:62:42:ea:a0:e4:1c:52:64:0c:83:0a: 94:f3:21:fb:1d:82:03:dc:fc:74:25:90:8b:23:d5:10:a4:fb: a3:2b:43:4a:e2:7a:95:8c:37:04:b2:0b:5f:7d:2e:6f:73:8f: ba:41:2d:f3:f1:ed:22:b5:8d:7f:6d:9c:14:c8:09:40:6c:64: 55:a9:51:56:9a:f8:1b:28:41:8e:b6:df:41:f7:2a:42:64:63: 4d:65:ec:2e:c8:a7:f1:74:19:d8:6d:d8:06:09:b7:24:77:05: 8f:57:2e:d5:3b:d4:df:d0:18:89:35:8d:fb:af:98:de:30:94: a1:b6:91:73 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt6x4Z1d/Nd1q3FDpkVpE82MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkNjg3ZDg2MjgwODIyNWI0NTlmYTM5OWU2NWY4YTA2OTQ2 OWFiYTMwHhcNMjYwMTAxMTgxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjRkYmFjZTJkZTU3NmM4ZDlmZDcyNjJiNmIxYjJlN2QzNmRkZDE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAN66yjQqeBH4wKCXc07UKmnp50L 1yOv9MI87XskJYd8Wkbi9RdRdJ6wDEUcP4Jb3Wgd37U2kpFuMnRRPcVvVe4NBp9X AXOirX8IW/EcQsAoME2XhXOP3RInoW4fSb8QgYQgFHje2Y/zs9P6VJ4mhQlD85qw BEscyJs1gVD9y4vrx03RkIPJDu88QhZRY00ZeOnc6Qxp2CzZ0K+iriuKo+nuKOZV XteEE9fD5gHBiQh/933udo0dViVLZoCjT/GZFdgvTdI0G6yq1JXVKtYsbFX2qcY2 i5zr+hC1Y/NGk2hKEsOmB2hScyl1+UrrXV2K1fYRERQhwURuyCzrZ/AYQwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFMJNus4t5XbI2f1yYraxsufTbd0VMB8GA1UdIwQY MBaAFE1ofYYoCCJbRZ+jmeZfigaUaaujMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFdoOWhpZ0lJbHRGbjZPWjVsLUtCcFJwcTZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9lZDNiMmUtZjBmZS00NDYwLTg1MGQt NTg0N2IxNDY5MzI2LzEvd2syNnppM2xkc2paX1hKaXRyR3k1OU50M1JVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9lZDNiMmUtZjBmZS00NDYwLTg1MGQtNTg0N2IxNDY5MzI2 LzEvVFdoOWhpZ0lJbHRGbjZPWjVsLUtCcFJwcTZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQATVe/MA8E AgACMAkDBwAgAQZ4DkAwDQYJKoZIhvcNAQELBQADggEBAEVbHgESz693JJA5iJTs DacsxCnDXYUoEtDkN4IWyjE+rwj/wnuIC7hGf1QZaNiYWT7PKJbX+gW3DxgHu8aX XwlPP0Xin9AGUD5PjZwZyhEUGpdM8p3q/td+jdOaKSLQtKLObqGCCoEXBDF4y4nR /QCKK91od8f+GtBxmZaWT3mlz2h6mcBiQuqg5BxSZAyDCpTzIfsdggPc/HQlkIsj 1RCk+6MrQ0riepWMNwSyC199Lm9zj7pBLfPx7SK1jX9tnBTICUBsZFWpUVaa+Bso QY6230H3KkJkY01l7C7Ip/F0Gdht2AYJtyR3BY9XLtU71N/QGIk1jfuvmN4wlKG2 kXM= -----END CERTIFICATE-----Generated at Tue Feb 10 00:09:55 2026 by rpki-client