This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/wznAD3d18NzyIQImEdFHQK4JDDo.roa File: wznAD3d18NzyIQImEdFHQK4JDDo.roa (raw, json) Hash identifier: mC+okTPpU/OuWq2rPK2aEL7L1kopmthNIcqe5X5thEI= Subject key identifier: C3:39:C0:0F:77:75:F0:DC:F2:21:02:26:11:D1:47:40:AE:09:0C:3A Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Certificate serial: 019B77C73D168BB1BD7C2B1CEE7DB63B8871 Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/wznAD3d18NzyIQImEdFHQK4JDDo.roa Signing time: Thu 01 Jan 2026 04:18:24 +0000 ROA not before: Thu 01 Jan 2026 04:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 174 IP address blocks: 89.42.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 13:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:3d:16:8b:b1:bd:7c:2b:1c:ee:7d:b6:3b:88:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Validity Not Before: Jan 1 04:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c339c00f7775f0dcf221022611d14740ae090c3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f9:2b:ad:c4:24:ae:13:b4:a7:85:47:f1:a3: 85:ec:80:2b:08:69:95:6f:08:10:f9:e7:4e:99:12: 99:17:1e:d1:03:6e:38:4c:b2:a4:70:ac:55:85:b5: 9f:89:37:52:ef:5c:ad:5e:61:85:48:11:85:76:ec: f4:70:43:33:6b:c7:31:2c:86:10:b5:41:e2:41:af: e9:ea:21:4e:9b:7a:5a:37:98:42:29:eb:9a:6b:ef: e1:a9:b3:cd:16:c5:90:69:47:30:c3:1c:34:99:83: 3d:3b:17:51:a3:7e:4e:36:16:3e:89:dd:8e:7e:17: e1:f2:c0:5b:3d:e4:64:c5:65:e7:d6:2f:88:e6:c7: 48:6b:6c:1e:20:58:d7:6b:f2:2e:3d:b4:44:f3:4c: c5:0f:09:bb:f3:65:ce:96:73:c1:b2:04:62:6b:1a: 29:9a:63:e2:3c:2e:a1:a0:77:c4:d8:e4:ee:d6:a9: 75:77:35:41:01:a8:d7:c8:20:2a:ca:1b:c9:9d:d3: 0c:36:2a:b7:ef:8c:84:60:e5:7a:22:60:26:6e:f8: d1:cb:eb:7f:6c:94:ee:3d:bc:20:0e:2b:e3:a1:43: 1b:75:89:8b:5a:85:20:c2:e6:e4:6e:4e:58:49:af: c0:4f:73:81:af:e0:a7:bd:3f:48:2c:f4:5c:d1:e7: 8d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:39:C0:0F:77:75:F0:DC:F2:21:02:26:11:D1:47:40:AE:09:0C:3A X509v3 Authority Key Identifier: keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/wznAD3d18NzyIQImEdFHQK4JDDo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.42.213.0/24 Signature Algorithm: sha256WithRSAEncryption 49:32:3c:96:4b:a1:ef:85:c4:10:5e:1f:9e:f9:9d:53:51:ef: 90:3d:58:52:03:34:44:88:02:08:4c:d8:68:91:d6:d0:13:7f: c3:d3:93:de:2f:cc:9c:0d:e7:63:56:15:06:6a:91:5f:f1:17: 28:bb:5d:c6:1f:ec:55:a1:eb:c2:70:4a:7c:67:86:1c:7b:41: f2:ce:0b:64:53:2c:99:f1:89:41:1f:ad:b6:46:bb:5f:f2:05: f6:28:fb:e1:7a:d3:21:19:84:92:1d:61:c8:14:75:ec:d6:b6: 22:74:03:11:a4:f6:5d:3d:e4:d7:9e:9c:01:c1:85:b7:98:2a: c7:0a:9c:23:cf:61:60:aa:a9:7a:e9:7e:1e:8f:d5:4b:ed:c2: 5a:e2:6c:01:15:6b:ed:49:66:bb:62:e8:96:60:f3:ab:a1:91: 67:15:59:94:b8:27:39:04:c9:81:e5:a9:6e:f9:67:01:f3:54: f2:95:29:a5:7e:40:53:7b:45:3f:35:44:20:6f:a6:4e:fb:67: e0:3c:91:b5:0b:f8:b8:8b:c7:1a:50:88:fe:92:c1:e1:d1:ee: 30:97:57:8f:fd:26:ca:70:dd:26:f3:57:39:db:1e:8d:8b:3b: c7:81:86:8e:11:e1:59:27:4c:88:74:59:d2:ed:5e:1d:1f:f7: e2:f7:5e:a6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xz0Wi7G9fCsc7n22O4hxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0OGEyN2Y0NGIxMDQwNGM1MmY2ZmZjNGUwOGRjODJiZjhi NWRlZTQwHhcNMjYwMTAxMDQxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzM5YzAwZjc3NzVmMGRjZjIyMTAyMjYxMWQxNDc0MGFlMDkwYzNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfkrrcQkrhO0p4VH8aOF7IArCGmV bwgQ+edOmRKZFx7RA244TLKkcKxVhbWfiTdS71ytXmGFSBGFduz0cEMza8cxLIYQ tUHiQa/p6iFOm3paN5hCKeuaa+/hqbPNFsWQaUcwwxw0mYM9OxdRo35ONhY+id2O fhfh8sBbPeRkxWXn1i+I5sdIa2weIFjXa/IuPbRE80zFDwm782XOlnPBsgRiaxop mmPiPC6hoHfE2OTu1ql1dzVBAajXyCAqyhvJndMMNiq374yEYOV6ImAmbvjRy+t/ bJTuPbwgDivjoUMbdYmLWoUgwubkbk5YSa/AT3OBr+CnvT9ILPRc0eeN2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMM5wA93dfDc8iECJhHRR0CuCQw6MB8GA1UdIwQY MBaAFNSKJ/RLEEBMUvb/xOCNyCv4td7kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYt NTlmNTk4NGI2NGVhLzEvd3puQUQzZDE4Tnp5SVFJbUVkRkhRSzRKRERvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYtNTlmNTk4NGI2NGVh LzEvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSrVMA0G CSqGSIb3DQEBCwUAA4IBAQBJMjyWS6HvhcQQXh+e+Z1TUe+QPVhSAzREiAIITNho kdbQE3/D05PeL8ycDedjVhUGapFf8Rcou13GH+xVoevCcEp8Z4Yce0HyzgtkUyyZ 8YlBH622Rrtf8gX2KPvhetMhGYSSHWHIFHXs1rYidAMRpPZdPeTXnpwBwYW3mCrH Cpwjz2Fgqql66X4ej9VL7cJa4mwBFWvtSWa7YuiWYPOroZFnFVmUuCc5BMmB5alu +WcB81TylSmlfkBTe0U/NUQgb6ZO+2fgPJG1C/i4i8caUIj+ksHh0e4wl1eP/SbK cN0m81c52x6NizvHgYaOEeFZJ0yIdFnS7V4dH/fi916m -----END CERTIFICATE-----Generated at Thu Jan 1 20:22:28 2026 by rpki-client