This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/6d09ad-af5e-4bf0-9ff2-a9522b2d048b/1/oWffLjaGq-IXRHBvQysDthZTD2Q.roa File: oWffLjaGq-IXRHBvQysDthZTD2Q.roa (raw, json) Hash identifier: Tx5kDn4/vasHod+fSg/24219jw41rYyzwpaoioVB2Lc= Subject key identifier: A1:67:DF:2E:36:86:AB:E2:17:44:70:6F:43:2B:03:B6:16:53:0F:64 Certificate issuer: /CN=5993efdd0a28fd3ab66b7a05b9b8d77c56666356 Certificate serial: 019B76EB6060EE83B3704518F8465B5C4BC8 Authority key identifier: 59:93:EF:DD:0A:28:FD:3A:B6:6B:7A:05:B9:B8:D7:7C:56:66:63:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WZPv3Qoo_Tq2a3oFubjXfFZmY1Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/6d09ad-af5e-4bf0-9ff2-a9522b2d048b/1/oWffLjaGq-IXRHBvQysDthZTD2Q.roa Signing time: Thu 01 Jan 2026 00:18:15 +0000 ROA not before: Thu 01 Jan 2026 00:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51141 IP address blocks: 91.216.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/6d09ad-af5e-4bf0-9ff2-a9522b2d048b/1/WZPv3Qoo_Tq2a3oFubjXfFZmY1Y.crl rsync://rpki.ripe.net/repository/DEFAULT/82/6d09ad-af5e-4bf0-9ff2-a9522b2d048b/1/WZPv3Qoo_Tq2a3oFubjXfFZmY1Y.mft rsync://rpki.ripe.net/repository/DEFAULT/WZPv3Qoo_Tq2a3oFubjXfFZmY1Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:60:60:ee:83:b3:70:45:18:f8:46:5b:5c:4b:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5993efdd0a28fd3ab66b7a05b9b8d77c56666356 Validity Not Before: Jan 1 00:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a167df2e3686abe21744706f432b03b616530f64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1a:69:a6:36:dc:f1:17:a9:5c:4e:44:10:44: 71:84:49:cb:95:64:fe:3e:f9:d4:4b:80:48:69:97: eb:3a:f3:f5:f6:37:70:08:01:e7:cf:76:5f:e3:4c: 02:16:d3:4e:d8:a8:e3:92:59:c7:4f:1a:12:18:4c: 8b:32:7b:d5:7b:11:e4:a4:5e:51:9c:0e:72:86:dc: 6a:6e:47:ce:ed:d4:e3:9c:89:d4:c1:31:3c:a7:d1: 92:1a:1d:c4:27:a3:a4:1f:a4:84:54:e6:29:bf:fa: 87:9a:75:77:0c:3a:4a:3a:2c:f4:df:b6:59:89:42: d9:d5:a1:14:aa:0f:2d:08:8d:53:c3:99:08:68:be: c8:57:a7:16:7e:5f:7c:9c:5f:e4:9f:e1:66:27:87: 62:76:f5:f7:08:19:85:0d:0a:29:c7:9a:6c:f7:06: 5a:9e:21:2b:83:3f:f9:e9:8e:f0:20:41:bf:2c:a9: 55:63:82:a0:e9:50:77:66:77:85:16:70:94:9d:7b: 97:3f:20:af:73:18:4d:d4:72:ef:0d:3a:6a:52:96: c4:39:69:49:1d:7b:66:ef:fd:c1:31:94:27:93:e3: e0:66:60:8b:0f:4b:d3:34:04:90:a8:e1:50:e5:70: 30:e4:e8:bd:6c:fa:24:30:b9:db:32:b9:4b:e9:55: 41:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:67:DF:2E:36:86:AB:E2:17:44:70:6F:43:2B:03:B6:16:53:0F:64 X509v3 Authority Key Identifier: keyid:59:93:EF:DD:0A:28:FD:3A:B6:6B:7A:05:B9:B8:D7:7C:56:66:63:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZPv3Qoo_Tq2a3oFubjXfFZmY1Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6d09ad-af5e-4bf0-9ff2-a9522b2d048b/1/oWffLjaGq-IXRHBvQysDthZTD2Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6d09ad-af5e-4bf0-9ff2-a9522b2d048b/1/WZPv3Qoo_Tq2a3oFubjXfFZmY1Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.166.0/24 Signature Algorithm: sha256WithRSAEncryption 15:1a:cf:da:d1:74:48:5c:f8:73:7c:cd:c0:1b:bf:44:9e:0c: 81:29:6a:f9:6b:65:35:88:30:d9:12:80:f8:b8:7f:45:2d:d7: 42:19:d9:6e:be:77:d8:c6:34:ab:11:93:a8:07:9e:8b:b0:61: cd:36:4f:5c:42:3f:fb:65:0e:e8:17:2b:be:b1:b4:9d:0d:81: 5a:60:e0:55:dd:6d:e3:8b:90:d0:81:a5:b9:72:db:af:d0:f4: e9:f2:e3:07:a3:11:e3:47:7c:99:d4:70:06:a0:be:09:ec:8f: 02:0a:13:3c:11:9f:cc:6c:3b:57:a2:8d:e6:fe:4d:0c:9e:37: 5b:ee:e0:14:4c:8e:f0:6a:ac:2c:8d:d8:c3:10:55:b6:64:4e: c3:83:a3:ec:da:76:72:4f:3e:0e:c0:dc:66:ac:30:76:0f:5c: 87:0d:6b:0a:9b:35:ec:1b:4d:fa:fe:ea:bb:01:52:f9:ca:16: 06:1d:f9:1f:9c:21:a1:29:32:b7:9b:c4:33:f7:d7:76:23:fb: 0c:e4:73:f8:9f:73:c0:28:cb:6e:0a:95:38:80:3b:46:fb:e3: 69:80:40:f3:ab:f4:6c:f6:60:6a:1d:28:2e:47:1f:12:f3:c1: 4a:a6:4d:18:a3:d0:c6:e1:34:47:8a:89:62:c2:8b:f2:eb:65: ed:cc:e2:ac -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt262Bg7oOzcEUY+EZbXEvIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5OTNlZmRkMGEyOGZkM2FiNjZiN2EwNWI5YjhkNzdjNTY2 NjYzNTYwHhcNMjYwMTAxMDAxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTY3ZGYyZTM2ODZhYmUyMTc0NDcwNmY0MzJiMDNiNjE2NTMwZjY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxpppjbc8RepXE5EEERxhEnLlWT+ PvnUS4BIaZfrOvP19jdwCAHnz3Zf40wCFtNO2KjjklnHTxoSGEyLMnvVexHkpF5R nA5yhtxqbkfO7dTjnInUwTE8p9GSGh3EJ6OkH6SEVOYpv/qHmnV3DDpKOiz037ZZ iULZ1aEUqg8tCI1Tw5kIaL7IV6cWfl98nF/kn+FmJ4didvX3CBmFDQopx5ps9wZa niErgz/56Y7wIEG/LKlVY4Kg6VB3ZneFFnCUnXuXPyCvcxhN1HLvDTpqUpbEOWlJ HXtm7/3BMZQnk+PgZmCLD0vTNASQqOFQ5XAw5Oi9bPokMLnbMrlL6VVBAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKFn3y42hqviF0Rwb0MrA7YWUw9kMB8GA1UdIwQY MBaAFFmT790KKP06tmt6Bbm413xWZmNWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1pQdjNRb29fVHEyYTNvRnVialhmRlptWTFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi82ZDA5YWQtYWY1ZS00YmYwLTlmZjIt YTk1MjJiMmQwNDhiLzEvb1dmZkxqYUdxLUlYUkhCdlF5c0R0aFpURDJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi82ZDA5YWQtYWY1ZS00YmYwLTlmZjItYTk1MjJiMmQwNDhi LzEvV1pQdjNRb29fVHEyYTNvRnVialhmRlptWTFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9imMA0G CSqGSIb3DQEBCwUAA4IBAQAVGs/a0XRIXPhzfM3AG79EngyBKWr5a2U1iDDZEoD4 uH9FLddCGdluvnfYxjSrEZOoB56LsGHNNk9cQj/7ZQ7oFyu+sbSdDYFaYOBV3W3j i5DQgaW5ctuv0PTp8uMHoxHjR3yZ1HAGoL4J7I8CChM8EZ/MbDtXoo3m/k0Mnjdb 7uAUTI7waqwsjdjDEFW2ZE7Dg6Ps2nZyTz4OwNxmrDB2D1yHDWsKmzXsG036/uq7 AVL5yhYGHfkfnCGhKTK3m8Qz99d2I/sM5HP4n3PAKMtuCpU4gDtG++NpgEDzq/Rs 9mBqHSguRx8S88FKpk0Yo9DG4TRHioliwovy62XtzOKs -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:33 2026 by rpki-client