This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/wP9XN0HPbdT573dUgsRBAV7PRS8.roa File: wP9XN0HPbdT573dUgsRBAV7PRS8.roa (raw, json) Hash identifier: VLOJ7JilOK/x5azJO/3ok7WSh0+p3vmnpnzfLTSHGnQ= Subject key identifier: C0:FF:57:37:41:CF:6D:D4:F9:EF:77:54:82:C4:41:01:5E:CF:45:2F Certificate issuer: /CN=2dfc54d5543e12484b6bab2fdc399a8f5295787c Certificate serial: 019B7F83FEA298BE16F9A20287FEF5485F06 Authority key identifier: 2D:FC:54:D5:54:3E:12:48:4B:6B:AB:2F:DC:39:9A:8F:52:95:78:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/wP9XN0HPbdT573dUgsRBAV7PRS8.roa Signing time: Fri 02 Jan 2026 16:21:55 +0000 ROA not before: Fri 02 Jan 2026 16:21:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56522 IP address blocks: 91.224.200.0/23 maxlen: 23 176.121.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.mft rsync://rpki.ripe.net/repository/DEFAULT/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:fe:a2:98:be:16:f9:a2:02:87:fe:f5:48:5f:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dfc54d5543e12484b6bab2fdc399a8f5295787c Validity Not Before: Jan 2 16:21:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c0ff573741cf6dd4f9ef775482c441015ecf452f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:59:86:81:97:06:48:6c:c2:53:27:1b:69:71: e4:94:16:97:21:d4:3a:a2:f6:99:36:c3:5a:03:c0: 50:6b:15:9e:26:b3:da:c0:2c:f6:32:85:52:af:7c: b0:36:ee:02:f2:02:15:01:1a:2c:73:1c:2a:3c:bf: 21:4a:f6:0a:7b:32:b8:b6:97:20:19:b8:e9:e1:ab: c1:71:23:13:87:f7:7e:7f:cd:dd:81:0b:79:4b:75: 47:4a:93:86:4f:15:73:a6:ca:22:1a:62:3a:7d:d5: 37:88:c8:f5:58:3a:f0:5d:72:c4:1e:41:2d:90:61: 73:ee:ad:b5:d0:b2:27:87:00:ff:f7:3d:c2:b1:b1: 6b:cf:cb:2c:d3:5b:97:14:3b:1b:14:21:ae:97:b6: 87:01:0c:a2:e6:2d:5f:4e:c2:35:d9:d8:34:44:06: 7c:4a:f8:dd:a9:d4:02:34:ba:60:16:db:bf:9d:d4: f9:ac:24:a2:91:40:b2:51:7e:12:a6:ec:61:a7:ec: b6:d4:d4:e3:b2:17:39:8f:eb:85:a9:19:93:55:83: d7:cc:08:12:5d:69:96:cd:20:d1:17:d6:64:3f:76: 7c:f6:2a:fe:96:4a:cf:fb:b6:32:77:63:9f:50:a3: 27:6c:3f:3a:fc:af:ff:da:09:27:fa:5a:7b:39:e0: 25:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:FF:57:37:41:CF:6D:D4:F9:EF:77:54:82:C4:41:01:5E:CF:45:2F X509v3 Authority Key Identifier: keyid:2D:FC:54:D5:54:3E:12:48:4B:6B:AB:2F:DC:39:9A:8F:52:95:78:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/wP9XN0HPbdT573dUgsRBAV7PRS8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.224.200.0/23 176.121.72.0/21 Signature Algorithm: sha256WithRSAEncryption 07:b7:58:8e:ba:1e:c1:7c:29:84:b4:02:5b:15:d5:d8:f4:da: 7a:50:5c:5c:a8:10:dd:78:ba:05:67:cc:2f:3e:f5:a6:e7:e4: c5:6e:51:38:c7:73:90:2d:45:3f:98:ff:fd:10:b0:7f:2c:46: 70:81:6e:d8:1b:87:01:74:28:cf:1f:30:cd:1c:d3:f0:57:d3: 7b:42:f3:84:07:30:81:fb:15:aa:de:49:c1:d6:b6:e0:f7:b3: ca:a0:d8:cb:ca:9e:8d:44:45:21:85:3c:58:cb:a0:46:53:c2: 12:e6:34:d6:1d:6f:90:14:af:30:3a:ed:ab:f8:22:93:df:5b: 07:2d:2f:b0:26:bd:cf:9d:59:75:db:0f:1a:d5:07:ed:2e:08: ad:8e:79:6b:d1:39:f6:31:f2:d0:81:15:f8:4c:f6:9e:c0:b4: c7:27:8e:3f:77:ed:bb:e6:50:4a:31:d8:10:6c:23:ab:c5:a0: 4a:ba:f2:19:d9:f5:d5:91:dc:92:47:1b:93:e6:01:b1:bf:a7: d5:76:9e:b9:37:60:d7:fc:a8:22:af:f4:ed:67:42:69:fd:b2: af:ac:4f:c7:17:12:72:95:04:41:95:88:71:de:e5:16:52:3a: e2:c4:4d:99:52:41:bd:44:fc:83:f3:25:80:0f:b5:1b:86:52: 9a:33:7e:b0 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/g/6imL4W+aICh/71SF8GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkZmM1NGQ1NTQzZTEyNDg0YjZiYWIyZmRjMzk5YThmNTI5 NTc4N2MwHhcNMjYwMTAyMTYyMTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMGZmNTczNzQxY2Y2ZGQ0ZjllZjc3NTQ4MmM0NDEwMTVlY2Y0NTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlmGgZcGSGzCUycbaXHklBaXIdQ6 ovaZNsNaA8BQaxWeJrPawCz2MoVSr3ywNu4C8gIVARoscxwqPL8hSvYKezK4tpcg Gbjp4avBcSMTh/d+f83dgQt5S3VHSpOGTxVzpsoiGmI6fdU3iMj1WDrwXXLEHkEt kGFz7q210LInhwD/9z3CsbFrz8ss01uXFDsbFCGul7aHAQyi5i1fTsI12dg0RAZ8 SvjdqdQCNLpgFtu/ndT5rCSikUCyUX4Spuxhp+y21NTjshc5j+uFqRmTVYPXzAgS XWmWzSDRF9ZkP3Z89ir+lkrP+7Yyd2OfUKMnbD86/K//2gkn+lp7OeAluwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMD/VzdBz23U+e93VILEQQFez0UvMB8GA1UdIwQY MBaAFC38VNVUPhJIS2urL9w5mo9SlXh8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGZ4VTFWUS1Fa2hMYTZzdjNEbWFqMUtWZUh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9iNmI5YzQtODJkZi00ZWE2LWFlZmMt NzA2NDRlOGYzNjQxLzEvd1A5WE4wSFBiZFQ1NzNkVWdzUkJBVjdQUlM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9iNmI5YzQtODJkZi00ZWE2LWFlZmMtNzA2NDRlOGYzNjQx LzEvTGZ4VTFWUS1Fa2hMYTZzdjNEbWFqMUtWZUh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW+DIAwQD sHlIMA0GCSqGSIb3DQEBCwUAA4IBAQAHt1iOuh7BfCmEtAJbFdXY9Np6UFxcqBDd eLoFZ8wvPvWm5+TFblE4x3OQLUU/mP/9ELB/LEZwgW7YG4cBdCjPHzDNHNPwV9N7 QvOEBzCB+xWq3knB1rbg97PKoNjLyp6NREUhhTxYy6BGU8IS5jTWHW+QFK8wOu2r +CKT31sHLS+wJr3PnVl12w8a1QftLgitjnlr0Tn2MfLQgRX4TPaewLTHJ44/d+27 5lBKMdgQbCOrxaBKuvIZ2fXVkdySRxuT5gGxv6fVdp65N2DX/Kgir/TtZ0Jp/bKv rE/HFxJylQRBlYhx3uUWUjrixE2ZUkG9RPyD8yWAD7UbhlKaM36w -----END CERTIFICATE-----Generated at Tue Feb 10 07:52:06 2026 by rpki-client