This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/wb43Z4LRKwKhz3shf_5mcq-Z2tk.roa File: wb43Z4LRKwKhz3shf_5mcq-Z2tk.roa (raw, json) Hash identifier: J9HbR6z5Wstz4xYDk+cnL5LY3I2EndV03a589X/+Gws= Subject key identifier: C1:BE:37:67:82:D1:2B:02:A1:CF:7B:21:7F:FE:66:72:AF:99:DA:D9 Certificate issuer: /CN=f341cfec38131f83ae3df6998fa02837585c91dd Certificate serial: 019B7DCAB00FB3A596ED0BAB3F1BAB71F414 Authority key identifier: F3:41:CF:EC:38:13:1F:83:AE:3D:F6:99:8F:A0:28:37:58:5C:91:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/80HP7DgTH4OuPfaZj6AoN1hckd0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/wb43Z4LRKwKhz3shf_5mcq-Z2tk.roa Signing time: Fri 02 Jan 2026 08:19:53 +0000 ROA not before: Fri 02 Jan 2026 08:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205530 IP address blocks: 91.214.252.0/24 maxlen: 32 91.214.254.0/24 maxlen: 24 91.214.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.crl rsync://rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.mft rsync://rpki.ripe.net/repository/DEFAULT/80HP7DgTH4OuPfaZj6AoN1hckd0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:b0:0f:b3:a5:96:ed:0b:ab:3f:1b:ab:71:f4:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f341cfec38131f83ae3df6998fa02837585c91dd Validity Not Before: Jan 2 08:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1be376782d12b02a1cf7b217ffe6672af99dad9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a8:c7:b1:ba:0a:c8:76:aa:45:04:e2:b9:99: 12:ba:62:ce:95:cf:33:10:45:d1:11:49:81:1e:66: db:44:62:92:57:06:fd:c8:c8:96:ab:de:59:d2:8c: 79:fc:79:d0:5e:2e:76:09:1d:12:25:35:f0:2e:6c: fd:dc:60:1c:49:21:c6:b6:86:34:43:fb:61:55:e7: 98:b9:62:e7:e4:14:36:36:82:60:d6:ba:45:a5:38: bf:b3:94:79:91:d4:e5:24:ee:2b:28:c5:7e:8e:4e: 2b:59:08:81:1d:33:94:d0:44:cf:3d:bd:49:48:ea: 86:76:8a:f3:ac:59:a3:56:5e:5e:b5:a1:fd:14:d5: ef:6d:a4:73:57:51:8a:61:b3:72:21:c6:46:e1:1a: ff:6b:47:49:c3:64:48:8a:a2:70:07:c6:a5:1e:89: 53:86:2b:c5:82:1a:24:e3:0d:be:fd:7d:7a:a5:5d: 95:e8:07:99:7f:0a:3c:09:1a:89:07:b0:a3:b6:17: 55:ba:dc:b2:67:ac:6b:d5:e9:4f:f6:13:49:f3:c4: 65:fb:6b:58:4d:3a:a7:ed:60:d9:cc:4a:1d:c7:e1: f0:b1:6f:39:4d:b3:ba:33:39:61:34:c8:7f:80:38: 2b:90:44:c9:8e:7b:9f:b5:ec:64:13:c2:2b:89:63: f8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:BE:37:67:82:D1:2B:02:A1:CF:7B:21:7F:FE:66:72:AF:99:DA:D9 X509v3 Authority Key Identifier: keyid:F3:41:CF:EC:38:13:1F:83:AE:3D:F6:99:8F:A0:28:37:58:5C:91:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80HP7DgTH4OuPfaZj6AoN1hckd0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/wb43Z4LRKwKhz3shf_5mcq-Z2tk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.214.252.0/24 91.214.254.0/23 Signature Algorithm: sha256WithRSAEncryption ac:52:07:8a:ff:d5:cb:d0:59:88:66:9e:47:e7:bb:b6:98:47: 51:41:da:08:78:4d:a1:cb:2d:89:ca:7e:be:82:84:a0:df:bc: b6:49:2e:59:08:e0:8e:25:27:8e:ad:e0:d4:94:63:e0:b5:0b: 7c:2a:54:79:14:e1:db:6e:d3:00:8c:95:42:76:50:d1:45:5d: ce:80:2c:cf:34:c3:cf:90:84:5f:40:70:72:c5:65:7f:41:14: 67:21:76:b0:c7:37:96:d2:8e:3d:2a:f6:ae:27:67:fc:80:e5: 54:f3:8e:b9:ca:80:3a:6c:da:95:77:4f:86:7d:3d:99:91:36: df:e2:6f:5b:5a:5a:17:1f:2e:fc:2c:36:1c:71:f4:e3:2b:61: 20:f3:5f:65:a3:73:a6:84:16:a7:a1:92:a1:e9:59:9b:71:f1: 53:86:1e:aa:76:8a:7a:06:e0:06:34:05:c1:5f:c3:f8:34:18: d3:9e:88:70:0f:19:d7:a2:d4:6b:a5:cc:25:25:b3:47:d1:fb: ae:b9:45:f9:23:b9:d2:ae:5c:14:6e:04:ba:81:55:86:2e:3f: 76:a3:74:6e:97:49:fe:14:2e:f4:b3:c8:e9:c3:78:c9:22:2e: 1b:f1:5d:50:7c:ba:c6:4b:a7:de:9c:0f:02:ef:d7:0c:7d:61: f4:93:0d:04 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9yrAPs6WW7QurPxurcfQUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzNDFjZmVjMzgxMzFmODNhZTNkZjY5OThmYTAyODM3NTg1 YzkxZGQwHhcNMjYwMTAyMDgxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMWJlMzc2NzgyZDEyYjAyYTFjZjdiMjE3ZmZlNjY3MmFmOTlkYWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qjHsboKyHaqRQTiuZkSumLOlc8z EEXREUmBHmbbRGKSVwb9yMiWq95Z0ox5/HnQXi52CR0SJTXwLmz93GAcSSHGtoY0 Q/thVeeYuWLn5BQ2NoJg1rpFpTi/s5R5kdTlJO4rKMV+jk4rWQiBHTOU0ETPPb1J SOqGdorzrFmjVl5etaH9FNXvbaRzV1GKYbNyIcZG4Rr/a0dJw2RIiqJwB8alHolT hivFghok4w2+/X16pV2V6AeZfwo8CRqJB7CjthdVutyyZ6xr1elP9hNJ88Rl+2tY TTqn7WDZzEodx+HwsW85TbO6MzlhNMh/gDgrkETJjnuftexkE8IriWP4twIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMG+N2eC0SsCoc97IX/+ZnKvmdrZMB8GA1UdIwQY MBaAFPNBz+w4Ex+Drj32mY+gKDdYXJHdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODBIUDdEZ1RINE91UGZhWmo2QW9OMWhja2QwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8yMmY4NTEtNzdlZS00ZDY0LWE5NWUt MDlhZmI3ZDZmYjE2LzEvd2I0M1o0TFJLd0toejNzaGZfNW1jcS1aMnRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi8yMmY4NTEtNzdlZS00ZDY0LWE5NWUtMDlhZmI3ZDZmYjE2 LzEvODBIUDdEZ1RINE91UGZhWmo2QW9OMWhja2QwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9b8AwQB W9b+MA0GCSqGSIb3DQEBCwUAA4IBAQCsUgeK/9XL0FmIZp5H57u2mEdRQdoIeE2h yy2Jyn6+goSg37y2SS5ZCOCOJSeOreDUlGPgtQt8KlR5FOHbbtMAjJVCdlDRRV3O gCzPNMPPkIRfQHByxWV/QRRnIXawxzeW0o49KvauJ2f8gOVU8465yoA6bNqVd0+G fT2ZkTbf4m9bWloXHy78LDYccfTjK2Eg819lo3OmhBanoZKh6VmbcfFThh6qdop6 BuAGNAXBX8P4NBjTnohwDxnXotRrpcwlJbNH0fuuuUX5I7nSrlwUbgS6gVWGLj92 o3Rul0n+FC70s8jpw3jJIi4b8V1QfLrGS6fenA8C79cMfWH0kw0E -----END CERTIFICATE-----Generated at Mon Feb 2 15:55:24 2026 by rpki-client