This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/wgAilhNk_JB54zRjveL96EA9LP8.roa File: wgAilhNk_JB54zRjveL96EA9LP8.roa (raw, json) Hash identifier: 5g3uDJFZLAanJ1siT+5xFo3dY/KZA0bidkW5vxOC84c= Subject key identifier: C2:00:22:96:13:64:FC:90:79:E3:34:63:BD:E2:FD:E8:40:3D:2C:FF Certificate issuer: /CN=e8428fc2da5b6563749ccb99775775e820b7733c Certificate serial: 019B76EB7B133F3B5EA1A374C805565B38D8 Authority key identifier: E8:42:8F:C2:DA:5B:65:63:74:9C:CB:99:77:57:75:E8:20:B7:73:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EKPwtpbZWN0nMuZd1d16CC3czw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/wgAilhNk_JB54zRjveL96EA9LP8.roa Signing time: Thu 01 Jan 2026 00:18:22 +0000 ROA not before: Thu 01 Jan 2026 00:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198670 IP address blocks: 91.237.252.0/23 maxlen: 23 91.237.252.0/24 maxlen: 24 91.237.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.mft rsync://rpki.ripe.net/repository/DEFAULT/6EKPwtpbZWN0nMuZd1d16CC3czw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:7b:13:3f:3b:5e:a1:a3:74:c8:05:56:5b:38:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8428fc2da5b6563749ccb99775775e820b7733c Validity Not Before: Jan 1 00:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c20022961364fc9079e33463bde2fde8403d2cff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:af:b7:17:f5:21:72:66:08:2f:95:de:57:5e: 17:21:48:37:c0:39:0e:72:8c:40:ec:68:14:95:07: 7c:a9:9e:45:20:6b:db:2f:46:2d:98:f0:d5:3b:b4: 49:51:c7:98:f1:f8:09:a8:2c:97:a2:a0:8c:09:ad: 9a:4b:be:e7:e3:52:1d:b9:1b:f9:77:bf:f3:f3:a8: b5:3a:ca:7d:76:9c:e8:6b:50:30:d4:f1:e8:5b:7e: 27:0b:3e:0e:31:29:7d:95:2d:22:5e:29:6c:67:7a: 9d:cd:57:2c:fd:71:16:06:cf:8a:ed:ed:77:04:7f: bd:b7:e3:58:4a:a6:af:0e:93:8f:2b:23:7f:10:d8: b6:e3:21:0b:45:05:99:8b:fc:ad:ba:7c:18:14:e1: e9:29:76:d7:49:dd:3a:ed:69:da:48:8e:5d:96:20: 4f:8a:0c:ec:63:87:36:be:b6:5f:b4:de:12:eb:c7: 95:ce:d8:fe:84:3d:21:50:94:39:d4:74:f4:1b:c0: 90:e6:47:3c:bc:36:25:0f:15:b0:f1:ae:83:96:81: 8b:a8:a9:06:34:be:08:82:0d:4c:5a:6d:b2:b6:af: 4d:0c:79:a2:45:44:6a:0a:f8:4b:4f:24:ba:a8:a3: 37:64:e3:58:a0:bc:fb:25:6b:3e:72:95:2c:cd:13: 0d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:00:22:96:13:64:FC:90:79:E3:34:63:BD:E2:FD:E8:40:3D:2C:FF X509v3 Authority Key Identifier: keyid:E8:42:8F:C2:DA:5B:65:63:74:9C:CB:99:77:57:75:E8:20:B7:73:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EKPwtpbZWN0nMuZd1d16CC3czw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/wgAilhNk_JB54zRjveL96EA9LP8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.237.252.0/23 Signature Algorithm: sha256WithRSAEncryption 87:de:31:a5:de:7d:47:98:30:c7:fb:31:9c:35:64:44:75:e7: f2:a3:d3:60:2a:1d:93:81:c8:27:fc:05:e6:53:81:67:d9:24: 0c:d7:f8:56:56:28:35:92:ba:f0:3e:a9:90:3e:1e:2f:91:ef: 65:02:89:a8:a6:a5:61:9b:80:cd:87:b3:73:33:fc:1b:5b:a4: 1d:54:d2:51:63:e1:56:c7:db:38:47:12:57:bb:f9:95:4d:0a: 91:f4:c2:46:b0:fe:5b:8c:38:ac:00:05:79:95:c3:76:5b:cc: cf:78:60:ba:7f:3e:93:1f:17:ea:6f:83:50:2a:e0:f5:73:4e: 9b:0b:5e:cf:a9:7a:9b:48:e2:38:cb:d9:61:6f:a0:79:2f:a1: 00:e6:97:5f:cd:07:36:f6:a8:da:bf:c1:33:16:06:de:68:f1: 42:c5:8c:79:f9:f6:4c:ea:88:db:0b:ca:ed:c5:2c:da:e7:35: 17:5b:9a:c9:27:68:cf:a8:02:8e:ab:12:f9:43:15:35:6f:6a: c3:27:1f:3f:bd:0c:01:ef:e7:9c:9f:6c:56:42:d0:65:84:56: f4:73:77:e1:08:d9:e1:c0:72:ee:a9:f2:5d:ae:c7:07:36:13: dc:5e:84:2f:dd:dc:40:80:62:ec:16:a4:1d:10:58:8c:51:97: e1:ea:2e:78 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt263sTPzteoaN0yAVWWzjYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4NDI4ZmMyZGE1YjY1NjM3NDljY2I5OTc3NTc3NWU4MjBi NzczM2MwHhcNMjYwMTAxMDAxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjAwMjI5NjEzNjRmYzkwNzllMzM0NjNiZGUyZmRlODQwM2QyY2ZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuK+3F/UhcmYIL5XeV14XIUg3wDkO coxA7GgUlQd8qZ5FIGvbL0YtmPDVO7RJUceY8fgJqCyXoqCMCa2aS77n41IduRv5 d7/z86i1Osp9dpzoa1Aw1PHoW34nCz4OMSl9lS0iXilsZ3qdzVcs/XEWBs+K7e13 BH+9t+NYSqavDpOPKyN/ENi24yELRQWZi/ytunwYFOHpKXbXSd067WnaSI5dliBP igzsY4c2vrZftN4S68eVztj+hD0hUJQ51HT0G8CQ5kc8vDYlDxWw8a6DloGLqKkG NL4Igg1MWm2ytq9NDHmiRURqCvhLTyS6qKM3ZONYoLz7JWs+cpUszRMN3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMIAIpYTZPyQeeM0Y73i/ehAPSz/MB8GA1UdIwQY MBaAFOhCj8LaW2VjdJzLmXdXdeggt3M8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkVLUHd0cGJaV04wbk11WmQxZDE2Q0MzY3p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy81OTY3OTEtNTNjZi00ZDA5LWFlZWMt NWU2Y2Y5NmY3MGNiLzEvd2dBaWxoTmtfSkI1NHpSanZlTDk2RUE5TFA4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy81OTY3OTEtNTNjZi00ZDA5LWFlZWMtNWU2Y2Y5NmY3MGNi LzEvNkVLUHd0cGJaV04wbk11WmQxZDE2Q0MzY3p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+38MA0G CSqGSIb3DQEBCwUAA4IBAQCH3jGl3n1HmDDH+zGcNWREdefyo9NgKh2Tgcgn/AXm U4Fn2SQM1/hWVig1krrwPqmQPh4vke9lAomopqVhm4DNh7NzM/wbW6QdVNJRY+FW x9s4RxJXu/mVTQqR9MJGsP5bjDisAAV5lcN2W8zPeGC6fz6THxfqb4NQKuD1c06b C17PqXqbSOI4y9lhb6B5L6EA5pdfzQc29qjav8EzFgbeaPFCxYx5+fZM6ojbC8rt xSza5zUXW5rJJ2jPqAKOqxL5QxU1b2rDJx8/vQwB7+ecn2xWQtBlhFb0c3fhCNnh wHLuqfJdrscHNhPcXoQv3dxAgGLsFqQdEFiMUZfh6i54 -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:50 2026 by rpki-client