This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/wQjiul8nEUm7rTrpmnxVu05vfYw.roa File: wQjiul8nEUm7rTrpmnxVu05vfYw.roa (raw, json) Hash identifier: OwpCUGAA3H+6uhau4CnuhtRzlm3HYsRifbd/fGUsCD0= Subject key identifier: C1:08:E2:BA:5F:27:11:49:BB:AD:3A:E9:9A:7C:55:BB:4E:6F:7D:8C Certificate issuer: /CN=285dee401808e1b5ec04b5c1abe5d9de5a3858ac Certificate serial: 019B7CEE3A53DC602D04E5FDF08731599294 Authority key identifier: 28:5D:EE:40:18:08:E1:B5:EC:04:B5:C1:AB:E5:D9:DE:5A:38:58:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/wQjiul8nEUm7rTrpmnxVu05vfYw.roa Signing time: Fri 02 Jan 2026 04:19:05 +0000 ROA not before: Fri 02 Jan 2026 04:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48918 IP address blocks: 91.237.117.0/24 maxlen: 24 2001:67c:28e0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.crl rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft rsync://rpki.ripe.net/repository/DEFAULT/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 15:35:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:3a:53:dc:60:2d:04:e5:fd:f0:87:31:59:92:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=285dee401808e1b5ec04b5c1abe5d9de5a3858ac Validity Not Before: Jan 2 04:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c108e2ba5f271149bbad3ae99a7c55bb4e6f7d8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:df:5a:b2:7f:5f:b6:20:10:08:b5:76:b4:24: ae:a1:ce:f8:ea:2c:4a:f1:a6:a9:99:87:e5:4c:eb: 78:ae:3f:f2:bd:9d:22:20:1f:a0:a5:c8:0a:57:8e: 30:3e:cf:de:f1:cc:88:71:8b:6e:a6:b3:6c:4a:ee: 39:7c:cd:d6:30:8f:ba:ab:93:90:f7:e6:d7:d2:04: d1:17:47:4a:b2:bd:3d:b0:c2:2a:16:62:97:93:63: 88:70:bc:7a:cb:69:74:7b:6e:97:f4:4d:f7:c2:8a: 8c:a2:14:cd:bd:9d:d6:4d:8b:2d:8e:bf:e3:d4:ff: 62:2d:d6:64:2b:3c:30:2e:5e:d2:a1:d0:ae:9f:78: e7:d3:74:73:70:4a:0e:8b:00:2c:89:f2:6a:94:11: 8e:99:d8:33:d2:62:5b:90:fe:54:47:68:17:ff:17: 6a:8e:b8:de:ea:d4:7f:4c:cd:f6:a9:e9:95:52:48: ec:d6:37:f7:02:57:8d:20:32:d9:59:9d:86:9f:30: a5:dc:c0:45:85:4a:a0:99:f1:b0:95:9a:93:42:64: d0:ab:47:f7:85:c3:b5:9c:21:ad:4d:c1:d3:74:02: 3c:c4:9d:b8:75:76:3b:3a:4b:b3:c8:3d:17:cd:01: fe:c5:44:c5:dd:46:a5:84:22:13:33:8c:ee:64:c1: 10:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:08:E2:BA:5F:27:11:49:BB:AD:3A:E9:9A:7C:55:BB:4E:6F:7D:8C X509v3 Authority Key Identifier: keyid:28:5D:EE:40:18:08:E1:B5:EC:04:B5:C1:AB:E5:D9:DE:5A:38:58:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/wQjiul8nEUm7rTrpmnxVu05vfYw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.237.117.0/24 IPv6: 2001:67c:28e0::/48 Signature Algorithm: sha256WithRSAEncryption 9d:a0:e0:f1:b7:a4:87:2e:39:9c:e3:b5:85:d3:95:82:0f:df: b9:da:60:96:ba:c3:77:c0:a9:51:97:ae:1c:68:b7:77:1e:fc: 9e:7e:c8:ea:84:ed:b3:57:bd:29:ec:c4:e4:77:06:02:20:23: 17:50:bf:1c:fe:3e:16:8f:50:ad:d5:dd:24:c6:9b:c8:96:3a: 2e:76:ad:ce:4b:36:69:4d:e7:0f:76:8f:a7:95:27:45:ce:6a: 34:76:2e:86:b8:9c:54:d4:48:f6:c5:25:b5:a4:39:d3:f8:93: 9e:95:7f:15:f1:08:49:72:c3:74:9f:fd:48:98:b4:c7:49:76: 1c:dd:91:e1:41:da:22:f5:d6:40:be:bf:19:50:c2:50:1b:cf: ac:23:ba:27:2d:95:fb:76:d7:26:bb:22:36:a0:3f:74:f7:da: f4:3a:f1:02:9a:09:d7:a3:c0:18:e7:f0:49:5a:6a:21:4a:60: a3:08:1d:99:01:17:de:a7:5a:7b:e6:8d:f7:6c:6b:b9:ed:db: 59:89:53:ee:b9:9b:94:2e:38:c0:0b:67:6c:a4:e9:cd:9f:14: ea:d2:7a:9b:be:47:2c:76:72:53:0b:3f:97:2a:34:31:88:b3: b6:d5:29:6e:18:25:b7:2d:8b:eb:bf:2c:9e:0d:78:2d:04:e5: ab:52:31:ed -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt87jpT3GAtBOX98IcxWZKUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4NWRlZTQwMTgwOGUxYjVlYzA0YjVjMWFiZTVkOWRlNWEz ODU4YWMwHhcNMjYwMTAyMDQxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTA4ZTJiYTVmMjcxMTQ5YmJhZDNhZTk5YTdjNTViYjRlNmY3ZDhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtt9asn9ftiAQCLV2tCSuoc746ixK 8aapmYflTOt4rj/yvZ0iIB+gpcgKV44wPs/e8cyIcYtuprNsSu45fM3WMI+6q5OQ 9+bX0gTRF0dKsr09sMIqFmKXk2OIcLx6y2l0e26X9E33woqMohTNvZ3WTYstjr/j 1P9iLdZkKzwwLl7SodCun3jn03RzcEoOiwAsifJqlBGOmdgz0mJbkP5UR2gX/xdq jrje6tR/TM32qemVUkjs1jf3AleNIDLZWZ2GnzCl3MBFhUqgmfGwlZqTQmTQq0f3 hcO1nCGtTcHTdAI8xJ24dXY7OkuzyD0XzQH+xUTF3UalhCITM4zuZMEQCQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFMEI4rpfJxFJu6066Zp8VbtOb32MMB8GA1UdIwQY MBaAFChd7kAYCOG17AS1wavl2d5aOFisMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0YzdVFCZ0k0YlhzQkxYQnEtWFozbG80V0t3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8zMzI4NDYtOWQ0Mi00MjFkLWIzZWQt OTgwYTRiNTQ0MDU2LzEvd1FqaXVsOG5FVW03clRycG1ueFZ1MDV2Zll3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni8zMzI4NDYtOWQ0Mi00MjFkLWIzZWQtOTgwYTRiNTQ0MDU2 LzEvS0YzdVFCZ0k0YlhzQkxYQnEtWFozbG80V0t3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW+11MA8E AgACMAkDBwAgAQZ8KOAwDQYJKoZIhvcNAQELBQADggEBAJ2g4PG3pIcuOZzjtYXT lYIP37naYJa6w3fAqVGXrhxot3ce/J5+yOqE7bNXvSnsxOR3BgIgIxdQvxz+PhaP UK3V3STGm8iWOi52rc5LNmlN5w92j6eVJ0XOajR2Loa4nFTUSPbFJbWkOdP4k56V fxXxCElyw3Sf/UiYtMdJdhzdkeFB2iL11kC+vxlQwlAbz6wjuictlft21ya7Ijag P3T32vQ68QKaCdejwBjn8ElaaiFKYKMIHZkBF96nWnvmjfdsa7nt21mJU+65m5Qu OMALZ2yk6c2fFOrSepu+Ryx2clMLP5cqNDGIs7bVKW4YJbcti+u/LJ4NeC0E5atS Me0= -----END CERTIFICATE-----Generated at Tue Feb 3 00:09:09 2026 by rpki-client