This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/w9I-TITWUP65GSq15FkjvyWMmjA.roa File: w9I-TITWUP65GSq15FkjvyWMmjA.roa (raw, json) Hash identifier: zy+zixulBGIOWMUqfVrmypdwCmfjRlJukmDFjYyZjjI= Subject key identifier: C3:D2:3E:4C:84:D6:50:FE:B9:19:2A:B5:E4:59:23:BF:25:8C:9A:30 Certificate issuer: /CN=b562ac701c14d34bb2e4475ec51152a40c9d3d3c Certificate serial: 019B7C117553A1B99101D7249CCC8302AE11 Authority key identifier: B5:62:AC:70:1C:14:D3:4B:B2:E4:47:5E:C5:11:52:A4:0C:9D:3D:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWKscBwU00uy5EdexRFSpAydPTw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/w9I-TITWUP65GSq15FkjvyWMmjA.roa Signing time: Fri 02 Jan 2026 00:17:57 +0000 ROA not before: Fri 02 Jan 2026 00:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51341 IP address blocks: 46.255.25.0/24 maxlen: 24 91.218.84.0/24 maxlen: 24 91.218.85.0/24 maxlen: 24 91.218.86.0/24 maxlen: 24 91.218.87.0/24 maxlen: 24 91.236.140.0/24 maxlen: 24 91.236.141.0/24 maxlen: 24 91.236.142.0/24 maxlen: 24 91.236.143.0/24 maxlen: 24 213.109.201.0/24 maxlen: 24 2a13:af80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.crl rsync://rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.mft rsync://rpki.ripe.net/repository/DEFAULT/tWKscBwU00uy5EdexRFSpAydPTw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:75:53:a1:b9:91:01:d7:24:9c:cc:83:02:ae:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b562ac701c14d34bb2e4475ec51152a40c9d3d3c Validity Not Before: Jan 2 00:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c3d23e4c84d650feb9192ab5e45923bf258c9a30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:42:dd:50:9c:d0:93:65:d1:ce:f6:59:eb:db: 1a:d4:36:ae:a9:92:dd:86:e2:4c:dc:db:80:04:68: 34:9b:b4:ab:dc:75:d1:37:0d:51:0b:a6:ca:43:d7: 97:3b:17:cc:17:c9:2e:28:af:73:70:31:f1:5b:e0: d9:00:1e:c8:a7:5f:58:4b:2e:b0:dd:7a:31:6e:65: e5:b1:27:0b:65:66:a6:25:b1:51:f5:8a:41:3c:d3: 90:74:96:bb:bd:54:e8:62:90:cf:73:4c:1a:de:9b: 11:f0:87:df:f4:ea:7a:96:d0:88:88:85:38:9c:4a: 3b:f8:63:fa:40:74:13:c6:6b:d3:7f:04:48:f7:cb: 60:b5:87:19:91:0e:2d:dd:89:5e:6b:b5:83:a6:00: e7:0f:2f:71:c1:b1:f4:2b:33:e2:0f:ad:95:00:16: b6:23:bd:b1:d0:7e:0c:7c:2f:3a:f3:28:60:78:58: e8:14:5c:14:a6:e6:f2:4b:d4:f6:68:3a:fb:18:79: a9:bc:33:92:6e:44:1a:82:ad:91:48:0b:39:11:ac: 25:a2:ea:b3:1a:05:48:92:62:0f:06:5e:a6:46:a0: b0:aa:57:d5:63:2e:3d:07:e3:85:f9:1b:83:c8:8f: a8:ee:5f:ef:89:ce:8e:35:6d:e9:99:95:c5:5b:78: c5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:D2:3E:4C:84:D6:50:FE:B9:19:2A:B5:E4:59:23:BF:25:8C:9A:30 X509v3 Authority Key Identifier: keyid:B5:62:AC:70:1C:14:D3:4B:B2:E4:47:5E:C5:11:52:A4:0C:9D:3D:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWKscBwU00uy5EdexRFSpAydPTw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/w9I-TITWUP65GSq15FkjvyWMmjA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.255.25.0/24 91.218.84.0/22 91.236.140.0/22 213.109.201.0/24 IPv6: 2a13:af80::/29 Signature Algorithm: sha256WithRSAEncryption 73:b8:d9:f9:b5:f0:d5:01:3f:5a:91:5b:04:9c:c0:5c:35:65: f3:c9:99:60:bb:36:23:d9:ef:9f:61:46:ae:58:d3:4b:3c:8d: 85:23:03:18:36:ad:a6:3c:bf:89:21:1c:12:b3:b3:3f:0f:cc: 00:63:c1:d6:c8:23:05:01:5a:70:73:ef:81:a9:c4:a0:dc:47: 09:4e:b1:c8:84:60:72:b1:a9:32:54:14:bc:85:fe:0c:ac:10: f6:09:37:72:06:e0:44:6a:cc:73:7a:b5:94:2e:f1:db:fa:a5: b3:55:70:73:49:e6:ae:bd:91:85:0e:e9:6b:e2:8a:f0:24:7f: 45:f7:12:a3:e2:bc:e0:c3:53:4b:5c:e5:2e:a3:8f:f6:de:37: 25:e0:e0:2e:c5:c6:d2:c0:66:50:79:dc:1c:c6:3e:d6:96:56: 0f:f6:50:74:4b:9f:b7:9f:e6:3e:29:9d:6f:3a:73:ef:46:c3: e1:e5:64:1f:2e:56:35:62:1d:fd:18:6a:c0:f7:e4:15:91:3e: ae:0a:19:9d:6f:32:a3:f3:0a:68:d9:13:74:1f:32:d0:2b:34: 76:70:7a:65:c2:96:32:2d:69:8a:5f:13:0c:57:36:aa:cd:aa: 2b:e7:c2:95:6c:3f:5c:72:e8:8e:1d:0a:b4:2c:ee:42:b3:e9: e6:c1:16:2c -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt8EXVTobmRAdcknMyDAq4RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NjJhYzcwMWMxNGQzNGJiMmU0NDc1ZWM1MTE1MmE0MGM5 ZDNkM2MwHhcNMjYwMTAyMDAxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjM2QyM2U0Yzg0ZDY1MGZlYjkxOTJhYjVlNDU5MjNiZjI1OGM5YTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApELdUJzQk2XRzvZZ69sa1DauqZLd huJM3NuABGg0m7Sr3HXRNw1RC6bKQ9eXOxfMF8kuKK9zcDHxW+DZAB7Ip19YSy6w 3XoxbmXlsScLZWamJbFR9YpBPNOQdJa7vVToYpDPc0wa3psR8Iff9Op6ltCIiIU4 nEo7+GP6QHQTxmvTfwRI98tgtYcZkQ4t3Ylea7WDpgDnDy9xwbH0KzPiD62VABa2 I72x0H4MfC868yhgeFjoFFwUpubyS9T2aDr7GHmpvDOSbkQagq2RSAs5Eawlouqz GgVIkmIPBl6mRqCwqlfVYy49B+OF+RuDyI+o7l/vic6ONW3pmZXFW3jFrQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFMPSPkyE1lD+uRkqteRZI78ljJowMB8GA1UdIwQY MBaAFLVirHAcFNNLsuRHXsURUqQMnT08MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFdLc2NCd1UwMHV5NUVkZXhSRlNwQXlkUFR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84ZjAxYjMtMjU3Yi00OGQ1LTgyZTIt MDk3MzI0ZGQ5ZWM4LzEvdzlJLVRJVFdVUDY1R1NxMTVGa2p2eVdNbWpBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi84ZjAxYjMtMjU3Yi00OGQ1LTgyZTItMDk3MzI0ZGQ5ZWM4 LzEvdFdLc2NCd1UwMHV5NUVkZXhSRlNwQXlkUFR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQALv8ZAwQC W9pUAwQCW+yMAwQA1W3JMA0EAgACMAcDBQMqE6+AMA0GCSqGSIb3DQEBCwUAA4IB AQBzuNn5tfDVAT9akVsEnMBcNWXzyZlguzYj2e+fYUauWNNLPI2FIwMYNq2mPL+J IRwSs7M/D8wAY8HWyCMFAVpwc++BqcSg3EcJTrHIhGBysakyVBS8hf4MrBD2CTdy BuBEasxzerWULvHb+qWzVXBzSeauvZGFDulr4orwJH9F9xKj4rzgw1NLXOUuo4/2 3jcl4OAuxcbSwGZQedwcxj7WllYP9lB0S5+3n+Y+KZ1vOnPvRsPh5WQfLlY1Yh39 GGrA9+QVkT6uChmdbzKj8wpo2RN0HzLQKzR2cHplwpYyLWmKXxMMVzaqzaor58KV bD9ccuiOHQq0LO5Cs+nmwRYs -----END CERTIFICATE-----Generated at Tue Feb 10 04:30:51 2026 by rpki-client