This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/wVQATVneJGNgeJdEAAt8JoUma-o.roa File: wVQATVneJGNgeJdEAAt8JoUma-o.roa (raw, json) Hash identifier: 0T7EKoEIVpeyvaEceVoNM5TEKal0WHNVbKVS5qTgZTc= Subject key identifier: C1:54:00:4D:59:DE:24:63:60:78:97:44:00:0B:7C:26:85:26:6B:EA Certificate issuer: /CN=76aa51f2014fa0fd7117069d88a679f1670c32a4 Certificate serial: 019B7AC86E6EDC49EEC12B45EEE3D5894658 Authority key identifier: 76:AA:51:F2:01:4F:A0:FD:71:17:06:9D:88:A6:79:F1:67:0C:32:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqpR8gFPoP1xFwadiKZ58WcMMqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/wVQATVneJGNgeJdEAAt8JoUma-o.roa Signing time: Thu 01 Jan 2026 18:18:34 +0000 ROA not before: Thu 01 Jan 2026 18:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20559 IP address blocks: 91.234.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/dqpR8gFPoP1xFwadiKZ58WcMMqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:6e:6e:dc:49:ee:c1:2b:45:ee:e3:d5:89:46:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76aa51f2014fa0fd7117069d88a679f1670c32a4 Validity Not Before: Jan 1 18:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c154004d59de246360789744000b7c2685266bea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f9:4d:64:ed:2e:af:aa:67:ed:e1:68:0c:c1: 6c:bf:5c:a0:6a:97:02:a8:66:dd:6a:ea:42:0e:ac: a9:0d:d2:c2:ff:b8:9b:bf:c9:5b:83:d8:48:9d:13: 50:ba:db:25:64:e7:bf:4e:c6:b5:0f:0c:64:86:26: 43:80:3c:0b:c4:53:e6:67:55:8f:6e:5e:23:5c:d1: 44:97:05:7b:4d:8e:cb:e7:e5:1d:4c:80:ae:e7:ef: 00:0b:c0:49:7b:8e:e9:e9:d5:44:94:ce:e0:b5:3f: 6a:b6:64:e2:11:b1:d7:f4:4b:3e:65:7f:f2:1e:4c: c5:a9:cd:f3:13:fa:37:ca:f3:8e:1f:b6:11:f9:09: 08:30:cf:9a:a3:a3:1c:c2:21:60:02:d5:1d:e2:c0: 54:3d:ec:86:79:05:86:6c:96:e6:c6:97:6e:fd:8e: ed:34:1a:b8:b2:b4:05:1a:59:d5:68:06:6f:77:15: 9e:05:55:67:b7:3f:76:84:32:2d:a0:e8:38:01:7d: aa:1e:df:3f:da:76:a2:e5:4e:51:54:67:11:45:88: ce:f5:9a:ba:2c:d7:a2:08:4f:e4:86:9c:62:50:fa: 86:c7:96:f9:9b:5c:3e:81:61:12:cb:51:1c:ac:fa: 8f:c1:f4:16:b8:26:c5:21:e5:94:ac:9a:a2:9e:04: ed:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:54:00:4D:59:DE:24:63:60:78:97:44:00:0B:7C:26:85:26:6B:EA X509v3 Authority Key Identifier: keyid:76:AA:51:F2:01:4F:A0:FD:71:17:06:9D:88:A6:79:F1:67:0C:32:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqpR8gFPoP1xFwadiKZ58WcMMqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/wVQATVneJGNgeJdEAAt8JoUma-o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.234.193.0/24 Signature Algorithm: sha256WithRSAEncryption 60:da:b4:07:df:aa:14:95:8f:70:b6:b3:33:47:5e:63:bd:af: 01:2c:ef:e5:a4:e0:cb:46:e9:40:44:d1:10:ea:e2:6c:34:4d: 9c:a7:73:b6:00:68:a9:68:84:ea:15:f0:d5:47:20:91:d6:b5: 1b:f1:61:fe:a4:5d:b2:c8:17:f7:aa:cf:6a:43:d9:05:ff:02: 50:14:20:0d:65:a9:c2:ea:c0:a4:3a:7a:df:18:e2:91:a0:d6: 6f:d8:b2:c6:ad:f9:18:6e:e3:d6:cb:48:78:31:72:5f:64:f2: a2:36:02:07:36:48:46:e1:34:db:ac:cf:ef:32:22:5e:89:ab: 16:8f:b2:9f:b0:9f:c9:db:ca:af:16:94:56:ef:b6:88:a3:02: 5e:c8:49:64:28:72:83:eb:d8:91:ec:22:a8:54:ab:18:99:d5: dd:a6:ba:60:2e:bd:96:79:14:22:1f:7f:d5:68:f8:09:9c:fa: 1e:ad:29:03:83:42:d0:9e:52:50:88:5b:87:56:ee:eb:c8:b5: 61:14:ba:70:b8:49:d2:0e:61:52:52:cb:7d:3b:26:6e:2f:a8: 3c:b9:bb:c3:24:e1:f0:2a:79:75:26:93:01:3b:49:9c:ca:be: e3:e2:cd:dc:6c:0e:c2:f9:0f:a0:2d:57:a7:65:4f:1c:71:c3: 17:84:c3:28 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yG5u3EnuwStF7uPViUZYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2YWE1MWYyMDE0ZmEwZmQ3MTE3MDY5ZDg4YTY3OWYxNjcw YzMyYTQwHhcNMjYwMTAxMTgxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTU0MDA0ZDU5ZGUyNDYzNjA3ODk3NDQwMDBiN2MyNjg1MjY2YmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPlNZO0ur6pn7eFoDMFsv1ygapcC qGbdaupCDqypDdLC/7ibv8lbg9hInRNQutslZOe/Tsa1DwxkhiZDgDwLxFPmZ1WP bl4jXNFElwV7TY7L5+UdTICu5+8AC8BJe47p6dVElM7gtT9qtmTiEbHX9Es+ZX/y HkzFqc3zE/o3yvOOH7YR+QkIMM+ao6McwiFgAtUd4sBUPeyGeQWGbJbmxpdu/Y7t NBq4srQFGlnVaAZvdxWeBVVntz92hDItoOg4AX2qHt8/2nai5U5RVGcRRYjO9Zq6 LNeiCE/khpxiUPqGx5b5m1w+gWESy1EcrPqPwfQWuCbFIeWUrJqingTtlQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMFUAE1Z3iRjYHiXRAALfCaFJmvqMB8GA1UdIwQY MBaAFHaqUfIBT6D9cRcGnYimefFnDDKkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHFwUjhnRlBvUDF4RndhZGlLWjU4V2NNTXFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS81ZGI1YTMtYTVlNi00NmM4LWFhOGUt MjUxZjVkY2U3ZTRkLzEvd1ZRQVRWbmVKR05nZUpkRUFBdDhKb1VtYS1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS81ZGI1YTMtYTVlNi00NmM4LWFhOGUtMjUxZjVkY2U3ZTRk LzEvZHFwUjhnRlBvUDF4RndhZGlLWjU4V2NNTXFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+rBMA0G CSqGSIb3DQEBCwUAA4IBAQBg2rQH36oUlY9wtrMzR15jva8BLO/lpODLRulARNEQ 6uJsNE2cp3O2AGipaITqFfDVRyCR1rUb8WH+pF2yyBf3qs9qQ9kF/wJQFCANZanC 6sCkOnrfGOKRoNZv2LLGrfkYbuPWy0h4MXJfZPKiNgIHNkhG4TTbrM/vMiJeiasW j7KfsJ/J28qvFpRW77aIowJeyElkKHKD69iR7CKoVKsYmdXdprpgLr2WeRQiH3/V aPgJnPoerSkDg0LQnlJQiFuHVu7ryLVhFLpwuEnSDmFSUst9OyZuL6g8ubvDJOHw Knl1JpMBO0mcyr7j4s3cbA7C+Q+gLVenZU8cccMXhMMo -----END CERTIFICATE-----Generated at Tue Jan 27 10:17:49 2026 by rpki-client