This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/WxnDI9dSFugc7Iy0b5YqreC9wbU.roa File: WxnDI9dSFugc7Iy0b5YqreC9wbU.roa (raw, json) Hash identifier: z//4HqyEyKzOrY+CM2iIO8ckIeunZSzbquuEiF28tBw= Subject key identifier: 5B:19:C3:23:D7:52:16:E8:1C:EC:8C:B4:6F:96:2A:AD:E0:BD:C1:B5 Certificate issuer: /CN=87a594e304b682183aa2359e40e1dcef93fe0570 Certificate serial: 019B7AC8AB03755089A32C92BC47E2052EA1 Authority key identifier: 87:A5:94:E3:04:B6:82:18:3A:A2:35:9E:40:E1:DC:EF:93:FE:05:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h6WU4wS2ghg6ojWeQOHc75P-BXA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/WxnDI9dSFugc7Iy0b5YqreC9wbU.roa Signing time: Thu 01 Jan 2026 18:18:49 +0000 ROA not before: Thu 01 Jan 2026 18:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5531 IP address blocks: 91.224.2.0/24 maxlen: 24 91.224.3.0/24 maxlen: 24 194.165.24.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.crl rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.mft rsync://rpki.ripe.net/repository/DEFAULT/h6WU4wS2ghg6ojWeQOHc75P-BXA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:ab:03:75:50:89:a3:2c:92:bc:47:e2:05:2e:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87a594e304b682183aa2359e40e1dcef93fe0570 Validity Not Before: Jan 1 18:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b19c323d75216e81cec8cb46f962aade0bdc1b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:49:10:a9:0f:cc:37:1e:e3:93:2a:06:75:93: 00:31:91:bd:20:34:fc:ab:46:1c:2d:46:c7:63:68: 01:f3:05:7d:f3:85:76:b5:a1:9b:ab:67:b9:b7:ef: 78:e5:60:cc:01:92:32:a3:4c:19:eb:50:cc:1b:a4: fe:e6:84:39:8e:f3:aa:e3:fc:d1:b2:a9:54:fc:e7: 93:58:6f:7e:b7:22:49:21:91:f1:5d:01:1d:5d:09: fa:89:e4:f6:38:22:f8:11:0b:41:ef:c6:70:81:57: e8:8d:16:db:73:67:58:df:83:69:ac:90:78:cc:b4: e8:90:82:b3:ec:c0:53:d6:99:9a:6c:8c:ee:be:9f: c9:2d:bc:31:6c:7f:17:af:90:7e:4e:22:ab:6d:b1: 63:56:ce:0a:f6:8e:63:f4:31:58:93:f5:5f:64:7e: 99:d7:ef:70:87:02:2b:8f:e3:be:b6:18:97:f7:8f: 62:71:ba:3e:19:d4:2c:69:3a:70:cd:c7:01:a9:83: 5d:35:ef:9d:d7:d1:3b:ba:e1:4c:5e:74:c2:08:54: 28:de:93:43:51:e5:f9:83:1c:f9:72:79:65:41:46: 4d:8f:e9:a3:ac:2b:b1:39:56:b2:83:24:78:05:9a: 00:05:14:97:17:32:9b:9f:60:e3:77:57:e4:25:b0: d6:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:19:C3:23:D7:52:16:E8:1C:EC:8C:B4:6F:96:2A:AD:E0:BD:C1:B5 X509v3 Authority Key Identifier: keyid:87:A5:94:E3:04:B6:82:18:3A:A2:35:9E:40:E1:DC:EF:93:FE:05:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h6WU4wS2ghg6ojWeQOHc75P-BXA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/WxnDI9dSFugc7Iy0b5YqreC9wbU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.224.2.0/23 194.165.24.0/23 Signature Algorithm: sha256WithRSAEncryption 36:e7:df:4b:f8:b8:a4:a5:11:1d:d5:ab:da:61:5e:d5:c8:26: 48:29:55:41:55:cd:3e:68:c8:39:5e:4a:d7:be:12:44:c5:77: 2d:37:62:8b:0a:92:8f:d7:1e:f1:51:64:78:23:fd:bc:64:6a: f9:19:03:98:35:a8:27:65:2f:e2:59:30:46:af:d3:fb:a4:7f: 45:af:0d:5a:1c:7e:51:5a:1b:6e:06:d7:1f:6e:04:a4:16:9e: c6:7d:1a:56:86:65:21:03:74:04:fc:f9:2b:11:5b:82:f9:5d: 89:fe:5c:7c:ad:3a:96:e8:bf:00:11:1d:9b:32:02:03:db:bb: e6:a4:3d:97:08:12:35:f1:7b:90:07:c7:ac:8a:7c:77:a8:60: 42:19:43:ae:87:5b:f4:46:85:41:ed:97:ff:b1:02:fa:fc:93: 18:40:cd:32:23:36:42:49:68:9f:ce:e0:b7:3f:83:90:5d:b8: ad:69:0e:e7:f2:14:98:c8:06:c9:44:a5:0c:87:fc:9e:1e:36: ff:d0:b2:1d:89:42:36:b7:9f:55:bc:dc:53:f3:d4:d5:24:59: b4:1f:8e:8c:7d:8e:0e:38:1b:eb:f9:8f:1e:1c:20:81:2d:eb: 80:54:5a:95:aa:0d:b3:4a:94:8f:b9:f5:22:c7:50:8d:48:ec: ff:cc:82:a9 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6yKsDdVCJoyySvEfiBS6hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3YTU5NGUzMDRiNjgyMTgzYWEyMzU5ZTQwZTFkY2VmOTNm ZTA1NzAwHhcNMjYwMTAxMTgxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjE5YzMyM2Q3NTIxNmU4MWNlYzhjYjQ2Zjk2MmFhZGUwYmRjMWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUkQqQ/MNx7jkyoGdZMAMZG9IDT8 q0YcLUbHY2gB8wV984V2taGbq2e5t+945WDMAZIyo0wZ61DMG6T+5oQ5jvOq4/zR sqlU/OeTWG9+tyJJIZHxXQEdXQn6ieT2OCL4EQtB78ZwgVfojRbbc2dY34NprJB4 zLTokIKz7MBT1pmabIzuvp/JLbwxbH8Xr5B+TiKrbbFjVs4K9o5j9DFYk/VfZH6Z 1+9whwIrj+O+thiX949icbo+GdQsaTpwzccBqYNdNe+d19E7uuFMXnTCCFQo3pND UeX5gxz5cnllQUZNj+mjrCuxOVaygyR4BZoABRSXFzKbn2Djd1fkJbDWGwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFsZwyPXUhboHOyMtG+WKq3gvcG1MB8GA1UdIwQY MBaAFIellOMEtoIYOqI1nkDh3O+T/gVwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDZXVTR3UzJnaGc2b2pXZVFPSGM3NVAtQlhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC80Zjg2OTktN2I1Mi00MDZlLTgyYzAt YjllMzRhMzhmM2E5LzEvV3huREk5ZFNGdWdjN0l5MGI1WXFyZUM5d2JVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC80Zjg2OTktN2I1Mi00MDZlLTgyYzAtYjllMzRhMzhmM2E5 LzEvaDZXVTR3UzJnaGc2b2pXZVFPSGM3NVAtQlhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW+ACAwQB wqUYMA0GCSqGSIb3DQEBCwUAA4IBAQA2599L+LikpREd1avaYV7VyCZIKVVBVc0+ aMg5XkrXvhJExXctN2KLCpKP1x7xUWR4I/28ZGr5GQOYNagnZS/iWTBGr9P7pH9F rw1aHH5RWhtuBtcfbgSkFp7GfRpWhmUhA3QE/PkrEVuC+V2J/lx8rTqW6L8AER2b MgID27vmpD2XCBI18XuQB8esinx3qGBCGUOuh1v0RoVB7Zf/sQL6/JMYQM0yIzZC SWifzuC3P4OQXbitaQ7n8hSYyAbJRKUMh/yeHjb/0LIdiUI2t59VvNxT89TVJFm0 H46MfY4OOBvr+Y8eHCCBLeuAVFqVqg2zSpSPufUix1CNSOz/zIKp -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:02 2026 by rpki-client