This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/4bb0e2-c9ef-424c-93d3-f9d1f26d29d1/1/wSyM0gz4zx6p84uHauOvtvDMKGs.roa File: wSyM0gz4zx6p84uHauOvtvDMKGs.roa (raw, json) Hash identifier: WZ6TV+R46SR5wmwXRRLIlAJ/bQgYVkvtoX9ha3Mmbrg= Subject key identifier: C1:2C:8C:D2:0C:F8:CF:1E:A9:F3:8B:87:6A:E3:AF:B6:F0:CC:28:6B Certificate issuer: /CN=e6153fcea19f1d49faf3e47e989db6bf5e6fe5a9 Certificate serial: 019B79ED3B4E89EAB926D2958B20C41364C8 Authority key identifier: E6:15:3F:CE:A1:9F:1D:49:FA:F3:E4:7E:98:9D:B6:BF:5E:6F:E5:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hU_zqGfHUn68-R-mJ22v15v5ak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/4bb0e2-c9ef-424c-93d3-f9d1f26d29d1/1/wSyM0gz4zx6p84uHauOvtvDMKGs.roa Signing time: Thu 01 Jan 2026 14:19:08 +0000 ROA not before: Thu 01 Jan 2026 14:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21470 IP address blocks: 81.17.64.0/20 maxlen: 20 81.17.76.0/24 maxlen: 24 91.102.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/4bb0e2-c9ef-424c-93d3-f9d1f26d29d1/1/5hU_zqGfHUn68-R-mJ22v15v5ak.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/4bb0e2-c9ef-424c-93d3-f9d1f26d29d1/1/5hU_zqGfHUn68-R-mJ22v15v5ak.mft rsync://rpki.ripe.net/repository/DEFAULT/5hU_zqGfHUn68-R-mJ22v15v5ak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:3b:4e:89:ea:b9:26:d2:95:8b:20:c4:13:64:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6153fcea19f1d49faf3e47e989db6bf5e6fe5a9 Validity Not Before: Jan 1 14:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c12c8cd20cf8cf1ea9f38b876ae3afb6f0cc286b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2d:c2:69:0d:05:d7:35:6d:04:47:96:5d:4c: ff:f8:f7:1d:bb:3b:4d:1c:07:fa:e6:8d:ac:fe:bf: 4d:8b:1e:5d:2a:b3:e9:02:9b:d5:fd:60:97:43:63: 06:14:48:dc:ae:5b:0c:78:ec:df:b7:e6:70:e6:0d: 31:80:1c:a3:e5:82:bc:78:f3:bc:5a:6a:09:c7:b9: f6:27:3a:bf:0d:27:bc:d9:b8:15:18:c3:3f:ee:ca: 5e:ec:80:17:61:ea:77:1f:2c:06:42:ee:66:be:47: 7a:74:49:94:e5:42:ee:ca:6f:8f:67:df:3b:4f:18: 0e:60:c2:8b:59:68:08:e2:55:0f:db:0f:36:2b:12: 6c:b4:3f:fb:01:7c:52:08:6f:1b:d7:0f:2d:9e:d4: 93:b8:66:18:e2:4a:50:54:3f:11:d5:cf:64:14:32: d4:45:ca:a9:f1:3c:06:d5:4a:d4:4a:d1:d4:82:04: b8:01:ac:43:ac:df:38:ef:32:31:d4:f3:bb:10:21: b3:1e:b1:e8:3f:96:bc:d6:7d:00:b8:bc:bc:3c:a2: 1d:cd:cb:6b:fc:44:93:4a:a0:ce:8a:a9:1d:84:e7: 7a:d6:75:20:80:b2:c8:c0:ab:ff:1d:84:9e:fb:5d: 08:1e:88:17:ea:c2:30:00:58:23:9e:49:cb:76:33: 28:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:2C:8C:D2:0C:F8:CF:1E:A9:F3:8B:87:6A:E3:AF:B6:F0:CC:28:6B X509v3 Authority Key Identifier: keyid:E6:15:3F:CE:A1:9F:1D:49:FA:F3:E4:7E:98:9D:B6:BF:5E:6F:E5:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hU_zqGfHUn68-R-mJ22v15v5ak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4bb0e2-c9ef-424c-93d3-f9d1f26d29d1/1/wSyM0gz4zx6p84uHauOvtvDMKGs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4bb0e2-c9ef-424c-93d3-f9d1f26d29d1/1/5hU_zqGfHUn68-R-mJ22v15v5ak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.17.64.0/20 91.102.0.0/21 Signature Algorithm: sha256WithRSAEncryption 06:45:9c:74:8e:9c:95:9e:63:37:23:94:bf:c5:d0:d0:5f:89: 72:ea:59:db:c9:92:9d:ae:99:0a:e5:a9:8c:f1:78:da:55:88: 63:c8:bc:a6:8f:3d:f5:0e:b9:b9:f5:1f:f9:19:b7:8b:50:bb: c6:df:8a:77:4f:cb:c6:8c:ef:62:06:63:c0:cc:6c:2e:85:be: 24:41:9d:9e:64:da:d5:82:88:a4:b0:9f:af:70:5d:b2:bf:29: 74:08:8b:ad:39:e5:d9:96:9a:e7:fd:e9:03:10:70:9c:6f:25: 31:2c:75:f2:f3:70:83:17:71:78:ca:6b:99:eb:35:4a:04:fd: 71:c7:06:65:9c:92:62:8a:56:a1:2e:93:21:09:ef:e7:1f:d5: b4:e6:12:64:6f:40:95:0e:a2:28:e6:a0:3f:0c:31:95:4f:c6: 61:fb:7f:5d:40:5e:92:b8:f1:ce:cb:6f:88:9e:80:18:ce:07: 6c:ae:6c:10:fc:3f:20:32:e8:94:a9:68:eb:d1:c8:51:a3:c5: f9:9f:f4:6f:77:e7:7a:1a:1f:d8:85:24:27:fa:4b:28:28:d0: 11:00:04:e3:b6:5b:a2:38:d7:11:5f:6c:a1:87:1e:fc:52:5c: 87:ab:9c:31:5e:db:60:c0:1c:89:4e:f8:8b:4c:f1:5f:e2:33: 9d:64:e5:09 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57TtOieq5JtKViyDEE2TIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2MTUzZmNlYTE5ZjFkNDlmYWYzZTQ3ZTk4OWRiNmJmNWU2 ZmU1YTkwHhcNMjYwMTAxMTQxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTJjOGNkMjBjZjhjZjFlYTlmMzhiODc2YWUzYWZiNmYwY2MyODZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuC3CaQ0F1zVtBEeWXUz/+PcduztN HAf65o2s/r9Nix5dKrPpApvV/WCXQ2MGFEjcrlsMeOzft+Zw5g0xgByj5YK8ePO8 WmoJx7n2Jzq/DSe82bgVGMM/7spe7IAXYep3HywGQu5mvkd6dEmU5ULuym+PZ987 TxgOYMKLWWgI4lUP2w82KxJstD/7AXxSCG8b1w8tntSTuGYY4kpQVD8R1c9kFDLU Rcqp8TwG1UrUStHUggS4AaxDrN847zIx1PO7ECGzHrHoP5a81n0AuLy8PKIdzctr /ESTSqDOiqkdhOd61nUggLLIwKv/HYSe+10IHogX6sIwAFgjnknLdjMo9QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMEsjNIM+M8eqfOLh2rjr7bwzChrMB8GA1UdIwQY MBaAFOYVP86hnx1J+vPkfpidtr9eb+WpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWhVX3pxR2ZIVW42OC1SLW1KMjJ2MTV2NWFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC80YmIwZTItYzllZi00MjRjLTkzZDMt ZjlkMWYyNmQyOWQxLzEvd1N5TTBnejR6eDZwODR1SGF1T3Z0dkRNS0dzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC80YmIwZTItYzllZi00MjRjLTkzZDMtZjlkMWYyNmQyOWQx LzEvNWhVX3pxR2ZIVW42OC1SLW1KMjJ2MTV2NWFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEURFAAwQD W2YAMA0GCSqGSIb3DQEBCwUAA4IBAQAGRZx0jpyVnmM3I5S/xdDQX4ly6lnbyZKd rpkK5amM8XjaVYhjyLymjz31Drm59R/5GbeLULvG34p3T8vGjO9iBmPAzGwuhb4k QZ2eZNrVgoiksJ+vcF2yvyl0CIutOeXZlprn/ekDEHCcbyUxLHXy83CDF3F4ymuZ 6zVKBP1xxwZlnJJiilahLpMhCe/nH9W05hJkb0CVDqIo5qA/DDGVT8Zh+39dQF6S uPHOy2+InoAYzgdsrmwQ/D8gMuiUqWjr0chRo8X5n/Rvd+d6Gh/YhSQn+ksoKNAR AATjtluiONcRX2yhhx78UlyHq5wxXttgwByJTviLTPFf4jOdZOUJ -----END CERTIFICATE-----Generated at Tue Feb 10 04:31:17 2026 by rpki-client