This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/WtmFuf6cZrghvDAImf8QiXaCIpU.roa File: WtmFuf6cZrghvDAImf8QiXaCIpU.roa (raw, json) Hash identifier: 4EzmQjEOGNW/iYXS0zB7VQgi3+Kgq0BxHT+khs/YIOA= Subject key identifier: 5A:D9:85:B9:FE:9C:66:B8:21:BC:30:08:99:FF:10:89:76:82:22:95 Certificate issuer: /CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9 Certificate serial: 019B77C727EF3D708ADFFF85E3291727E205 Authority key identifier: 1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/WtmFuf6cZrghvDAImf8QiXaCIpU.roa Signing time: Thu 01 Jan 2026 04:18:19 +0000 ROA not before: Thu 01 Jan 2026 04:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43260 IP address blocks: 91.149.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:27:ef:3d:70:8a:df:ff:85:e3:29:17:27:e2:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9 Validity Not Before: Jan 1 04:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ad985b9fe9c66b821bc300899ff108976822295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:45:de:53:69:62:c9:78:2e:d1:0e:07:04:c1: 12:76:cc:42:8b:44:a0:b1:38:87:b3:2e:f1:63:6c: 8d:4d:08:22:d3:46:ba:32:2a:99:a3:bc:2e:3b:54: 4a:d6:c7:8c:2b:8e:9a:03:31:35:82:7c:c3:7d:ae: 9d:83:fc:17:12:78:40:97:6a:25:c3:16:ac:8b:49: b3:09:57:fc:db:9a:fb:b4:ba:06:91:3a:2b:c1:c0: 11:64:24:9b:98:f2:1d:1c:1e:14:06:b7:6f:26:e2: dd:db:14:cc:a7:ac:4c:91:f7:90:cc:40:99:a1:d1: 99:79:fb:19:3f:79:41:20:ba:c6:ef:d4:e3:c7:8b: ff:43:bf:a3:bc:84:f4:67:64:20:51:f9:c1:30:15: ca:9d:87:d2:d5:85:ed:b6:c6:63:62:ef:29:d4:ed: 39:d5:70:4a:0c:36:33:23:5e:f9:35:84:97:77:42: 71:e2:4e:04:4b:eb:cd:16:41:1f:c5:f7:95:b4:2b: 1d:60:01:c8:03:19:8a:1c:ed:9f:66:22:2f:94:0f: de:a8:7c:2f:a8:0a:c8:c0:74:c1:6a:ed:fb:1e:21: ce:89:3e:5f:3a:d6:aa:b7:c0:03:be:ea:bc:68:aa: cf:eb:ea:d5:9e:a7:31:18:e1:c8:68:9b:b4:0f:1a: 63:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:D9:85:B9:FE:9C:66:B8:21:BC:30:08:99:FF:10:89:76:82:22:95 X509v3 Authority Key Identifier: keyid:1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/WtmFuf6cZrghvDAImf8QiXaCIpU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.149.200.0/24 Signature Algorithm: sha256WithRSAEncryption 91:e7:92:6a:76:3c:bd:59:46:ca:72:bc:96:54:e2:56:0b:51: 82:0f:54:30:53:c7:03:8e:8e:86:b7:d8:d2:d1:65:72:5a:9e: 9c:de:4b:3f:75:a7:92:70:15:41:47:43:07:2a:2e:3e:c7:18: e6:eb:c7:f1:c3:a8:d4:a2:ae:68:36:12:d9:fc:f8:c2:05:b3: f3:9d:8d:15:95:da:d4:5b:ed:2e:5b:a1:f2:82:f7:c1:ed:03: af:4a:e7:69:ab:42:97:f0:1f:ec:08:43:3b:6b:6c:2a:06:3e: 78:8a:0f:7d:a8:ae:6a:dc:a3:81:8c:95:9b:3d:2e:0f:d8:20: 73:58:48:3e:42:cf:a7:4b:e9:04:57:97:1d:4d:10:b8:97:ae: f8:b7:21:a8:86:f5:f3:b7:02:eb:27:2a:9a:e7:72:71:e1:2b: 80:c3:92:6c:37:fd:a9:41:37:75:6a:ce:9a:48:f7:2e:1a:82: 3a:2b:33:da:3d:7f:d7:c4:04:4c:c5:4c:69:6e:e4:7f:ae:a2: a8:dc:a3:0c:c8:56:d4:9b:3b:9b:93:f4:44:68:2b:a5:83:18: 45:1d:25:8e:c5:1f:dc:fc:bb:e0:72:eb:4d:e7:cc:e6:d4:b5: 65:71:2e:45:0b:44:c2:47:9a:26:7f:cc:4d:83:3c:0c:cd:5b: 61:f9:fa:1b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xyfvPXCK3/+F4ykXJ+IFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhY2I2Mzc2YTE2NDhkNDlkNTVlNGQ3YjAxMzcxMzY3YjBk YzJhZjkwHhcNMjYwMTAxMDQxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YWQ5ODViOWZlOWM2NmI4MjFiYzMwMDg5OWZmMTA4OTc2ODIyMjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkXeU2liyXgu0Q4HBMESdsxCi0Sg sTiHsy7xY2yNTQgi00a6MiqZo7wuO1RK1seMK46aAzE1gnzDfa6dg/wXEnhAl2ol wxasi0mzCVf825r7tLoGkTorwcARZCSbmPIdHB4UBrdvJuLd2xTMp6xMkfeQzECZ odGZefsZP3lBILrG79Tjx4v/Q7+jvIT0Z2QgUfnBMBXKnYfS1YXttsZjYu8p1O05 1XBKDDYzI175NYSXd0Jx4k4ES+vNFkEfxfeVtCsdYAHIAxmKHO2fZiIvlA/eqHwv qArIwHTBau37HiHOiT5fOtaqt8ADvuq8aKrP6+rVnqcxGOHIaJu0Dxpj5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFrZhbn+nGa4IbwwCJn/EIl2giKVMB8GA1UdIwQY MBaAFBrLY3ahZI1J1V5NewE3E2ew3Cr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAt N2E5MzY3NTFkYjFiLzEvV3RtRnVmNmNacmdodkRBSW1mOFFpWGFDSXBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAtN2E5MzY3NTFkYjFi LzEvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW5XIMA0G CSqGSIb3DQEBCwUAA4IBAQCR55Jqdjy9WUbKcryWVOJWC1GCD1QwU8cDjo6Gt9jS 0WVyWp6c3ks/daeScBVBR0MHKi4+xxjm68fxw6jUoq5oNhLZ/PjCBbPznY0VldrU W+0uW6HygvfB7QOvSudpq0KX8B/sCEM7a2wqBj54ig99qK5q3KOBjJWbPS4P2CBz WEg+Qs+nS+kEV5cdTRC4l674tyGohvXztwLrJyqa53Jx4SuAw5JsN/2pQTd1as6a SPcuGoI6KzPaPX/XxARMxUxpbuR/rqKo3KMMyFbUmzubk/REaCulgxhFHSWOxR/c /LvgcutN58zm1LVlcS5FC0TCR5omf8xNgzwMzVth+fob -----END CERTIFICATE-----Generated at Mon Jan 19 16:51:40 2026 by rpki-client