This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/waBpAN9vgWoJZ16stjfS0W9YhCk.roa File: waBpAN9vgWoJZ16stjfS0W9YhCk.roa (raw, json) Hash identifier: zjbsi6uKqamU37PZUdeMKzkzKXpoFYorr604US4cNqY= Subject key identifier: C1:A0:69:00:DF:6F:81:6A:09:67:5E:AC:B6:37:D2:D1:6F:58:84:29 Certificate issuer: /CN=fb5602802a8793a24fda4d0edcc30a196c0f77e0 Certificate serial: 019B78A2D63A15FE0CC89C54AE6CE3DE9DF0 Authority key identifier: FB:56:02:80:2A:87:93:A2:4F:DA:4D:0E:DC:C3:0A:19:6C:0F:77:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/waBpAN9vgWoJZ16stjfS0W9YhCk.roa Signing time: Thu 01 Jan 2026 08:18:16 +0000 ROA not before: Thu 01 Jan 2026 08:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203046 IP address blocks: 91.208.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft rsync://rpki.ripe.net/repository/DEFAULT/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:d6:3a:15:fe:0c:c8:9c:54:ae:6c:e3:de:9d:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb5602802a8793a24fda4d0edcc30a196c0f77e0 Validity Not Before: Jan 1 08:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1a06900df6f816a09675eacb637d2d16f588429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:fe:84:bc:32:f6:1e:2e:4b:d3:10:e2:9f:3d: c8:17:f4:4c:49:79:6b:39:ff:e3:1e:ec:6b:c7:dd: 2e:50:8d:0d:52:fa:dd:07:39:a2:86:a6:f9:82:1d: 2c:92:f9:c4:98:d5:d2:92:12:8f:56:f4:a4:66:09: 0c:b4:a8:24:78:c7:8d:03:d6:51:16:6c:68:7c:2f: 6c:82:72:2b:75:43:93:53:bb:e6:51:2f:92:37:b3: a0:86:0a:3c:e1:ba:87:17:6a:57:4c:ae:9a:a9:1e: 67:39:42:ba:52:63:df:7a:2f:09:bb:fd:a8:dc:b9: cb:eb:c5:ed:ae:a8:c4:7d:d9:fb:57:fd:df:29:e6: cc:0f:58:31:e8:51:61:e6:47:89:df:33:11:45:b5: 6a:5c:0c:64:13:e5:21:f1:33:ef:bb:32:66:7c:0a: 1d:0c:71:1f:d0:89:14:de:bb:37:03:76:c0:27:23: 40:98:3d:0c:fa:cf:90:0c:04:06:8a:94:51:64:05: 98:91:fa:96:3d:d5:eb:29:04:cc:ee:2c:b8:b9:54: 56:22:b9:e7:c0:4c:21:0b:c9:9c:b4:6f:75:2c:5b: 83:19:c0:42:d9:17:ef:2b:6f:40:ac:f5:bd:58:e7: 31:bc:65:71:89:59:89:32:89:0f:3f:2d:1f:a8:98: e4:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:A0:69:00:DF:6F:81:6A:09:67:5E:AC:B6:37:D2:D1:6F:58:84:29 X509v3 Authority Key Identifier: keyid:FB:56:02:80:2A:87:93:A2:4F:DA:4D:0E:DC:C3:0A:19:6C:0F:77:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/waBpAN9vgWoJZ16stjfS0W9YhCk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.191.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:8e:9e:45:f1:1d:ff:0a:db:0e:f1:73:b7:b8:97:dd:da:b7: d2:fb:0f:67:f1:c2:89:00:4f:b7:91:d6:22:3c:30:42:2d:e3: b9:ab:4c:1b:37:94:98:4b:81:f6:cb:20:84:12:a8:dc:48:2f: f7:11:56:6a:08:33:b0:a8:93:9d:7c:a7:9b:b8:ba:c9:eb:a2: 25:0b:bd:81:d5:54:59:05:f2:39:de:f1:a2:8f:47:fc:ef:2d: 6f:dd:4d:58:34:01:0e:13:33:1b:08:3b:e8:cc:e9:90:4a:13: 36:4f:92:4f:bb:25:10:f4:3c:92:65:b3:d8:47:97:a4:4a:27: 3d:1c:ca:64:34:30:f8:01:30:8b:43:de:6c:a4:b3:d1:c6:79: 3c:f5:1f:79:bf:b2:b9:d5:b4:df:9e:e3:35:12:d1:fd:13:0c: 02:b5:47:3c:5d:49:30:95:03:8f:65:67:db:02:98:1f:ea:e1: 1f:69:4a:ad:86:38:3d:b9:df:41:a6:ae:e7:f8:75:06:eb:cf: 65:8c:df:25:fc:42:9d:17:b7:69:6d:6a:5b:66:e5:ca:68:32: a3:ce:6b:c2:9a:3b:09:9e:29:d3:26:5f:98:56:8b:6f:7d:a8: 00:12:7a:2d:c3:d9:07:f7:7a:29:76:c7:89:0c:0d:0c:57:cf: cb:27:f4:6c -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt4otY6Ff4MyJxUrmzj3p3wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiNTYwMjgwMmE4NzkzYTI0ZmRhNGQwZWRjYzMwYTE5NmMw Zjc3ZTAwHhcNMjYwMTAxMDgxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMWEwNjkwMGRmNmY4MTZhMDk2NzVlYWNiNjM3ZDJkMTZmNTg4NDI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/6EvDL2Hi5L0xDinz3IF/RMSXlr Of/jHuxrx90uUI0NUvrdBzmihqb5gh0skvnEmNXSkhKPVvSkZgkMtKgkeMeNA9ZR FmxofC9sgnIrdUOTU7vmUS+SN7Oghgo84bqHF2pXTK6aqR5nOUK6UmPfei8Ju/2o 3LnL68XtrqjEfdn7V/3fKebMD1gx6FFh5keJ3zMRRbVqXAxkE+Uh8TPvuzJmfAod DHEf0IkU3rs3A3bAJyNAmD0M+s+QDAQGipRRZAWYkfqWPdXrKQTM7iy4uVRWIrnn wEwhC8mctG91LFuDGcBC2RfvK29ArPW9WOcxvGVxiVmJMokPPy0fqJjkEQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFMGgaQDfb4FqCWderLY30tFvWIQpMB8GA1UdIwQY MBaAFPtWAoAqh5OiT9pNDtzDChlsD3fgMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS0xWUNnQ3FIazZKUDJrME8zTU1LR1d3UGQtQS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgvODM4N2E3LTA2OGMtNDgzMi1hYTI2 LWRiNWIxZjg5YTUwZC8xL3dhQnBBTjl2Z1dvSloxNnN0amZTMFc5WWhDay5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYjgvODM4N2E3LTA2OGMtNDgzMi1hYTI2LWRiNWIxZjg5YTUw ZC8xLzEtMVlDZ0NxSGs2SlAyazBPM01NS0dXd1BkLUEuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABb0L8w DQYJKoZIhvcNAQELBQADggEBAHyOnkXxHf8K2w7xc7e4l93at9L7D2fxwokAT7eR 1iI8MEIt47mrTBs3lJhLgfbLIIQSqNxIL/cRVmoIM7Cok518p5u4usnroiULvYHV VFkF8jne8aKPR/zvLW/dTVg0AQ4TMxsIO+jM6ZBKEzZPkk+7JRD0PJJls9hHl6RK Jz0cymQ0MPgBMItD3myks9HGeTz1H3m/srnVtN+e4zUS0f0TDAK1RzxdSTCVA49l Z9sCmB/q4R9pSq2GOD2530Gmruf4dQbrz2WM3yX8Qp0Xt2ltaltm5cpoMqPOa8Ka OwmeKdMmX5hWi299qAASei3D2Qf3eil2x4kMDQxXz8sn9Gw= -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:55 2026 by rpki-client