This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/wRkYU-8UwR69v9239dh2hReiLIk.roa File: wRkYU-8UwR69v9239dh2hReiLIk.roa (raw, json) Hash identifier: qk1tAsneRLOzj3I71YrKf4Qz3NDzdsyT/yJUXhc7iYo= Subject key identifier: C1:19:18:53:EF:14:C1:1E:BD:BF:DD:B7:F5:D8:76:85:17:A2:2C:89 Certificate issuer: /CN=2ebff6cfb8326b447295a11b107868212e665fdd Certificate serial: 019B797E6B539BB8D9945F0B3762220E4F26 Authority key identifier: 2E:BF:F6:CF:B8:32:6B:44:72:95:A1:1B:10:78:68:21:2E:66:5F:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lr_2z7gya0RylaEbEHhoIS5mX90.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/wRkYU-8UwR69v9239dh2hReiLIk.roa Signing time: Thu 01 Jan 2026 12:18:06 +0000 ROA not before: Thu 01 Jan 2026 12:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56428 IP address blocks: 91.223.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/Lr_2z7gya0RylaEbEHhoIS5mX90.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/Lr_2z7gya0RylaEbEHhoIS5mX90.mft rsync://rpki.ripe.net/repository/DEFAULT/Lr_2z7gya0RylaEbEHhoIS5mX90.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:6b:53:9b:b8:d9:94:5f:0b:37:62:22:0e:4f:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ebff6cfb8326b447295a11b107868212e665fdd Validity Not Before: Jan 1 12:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1191853ef14c11ebdbfddb7f5d8768517a22c89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7f:15:b0:cb:94:f2:44:0b:31:2d:2b:d7:aa: 23:09:72:59:42:0b:80:04:f2:4d:7b:45:8b:f2:a7: f1:c1:f0:2c:d5:19:ab:b9:d8:3a:54:62:fe:96:23: 0a:27:c8:aa:a0:54:cf:3c:ef:7b:24:a1:21:e2:92: 73:42:b8:73:fb:98:16:86:f0:ac:64:be:73:5e:87: 56:99:4c:1e:b6:94:62:5c:e1:27:d6:0c:f5:d9:2c: 99:09:07:2a:8e:a5:fc:63:07:f1:0e:a9:a2:cc:73: 0a:4c:5b:57:cd:51:43:83:3e:af:14:57:66:bf:26: 8a:27:ed:31:97:09:f1:6c:93:bc:64:95:50:4d:27: c6:6d:84:1b:1b:74:de:3d:ed:b1:7e:4f:29:fa:c0: a5:e4:a2:c5:c3:9d:cc:50:0d:53:9e:9e:77:b7:1f: 1b:3e:72:46:6b:0f:8b:4b:95:c1:f4:37:6a:40:54: 7a:12:b4:ce:e4:d8:fb:13:47:74:e3:91:13:e4:57: 72:47:fd:05:99:7b:13:e7:95:ca:95:f7:87:c8:49: 33:47:da:78:3e:18:22:06:7d:08:8e:0c:e0:8f:b2: 25:90:aa:22:f7:08:19:ad:2e:f8:7d:98:63:d6:b8: c9:fb:80:b0:30:63:d3:d5:f6:d4:e3:fb:34:56:ed: 18:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:19:18:53:EF:14:C1:1E:BD:BF:DD:B7:F5:D8:76:85:17:A2:2C:89 X509v3 Authority Key Identifier: keyid:2E:BF:F6:CF:B8:32:6B:44:72:95:A1:1B:10:78:68:21:2E:66:5F:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lr_2z7gya0RylaEbEHhoIS5mX90.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/wRkYU-8UwR69v9239dh2hReiLIk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/Lr_2z7gya0RylaEbEHhoIS5mX90.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.136.0/24 Signature Algorithm: sha256WithRSAEncryption ac:6f:4e:70:3f:0d:d5:58:f0:37:73:a4:8d:18:58:97:21:70: 84:9b:09:2d:a4:5f:fd:49:38:a4:f2:71:dc:3b:fd:e6:39:1b: 3a:7d:e1:c4:6c:45:2e:f4:ed:d5:ff:ca:89:fd:e5:c8:13:b9: be:78:c8:01:94:a4:6c:e9:af:f9:8a:7b:fb:26:79:73:79:69: bf:b3:fe:ad:1c:80:24:15:ff:44:fd:05:be:49:90:1b:10:18: 96:73:19:71:af:cc:24:a8:a4:31:c3:55:fc:c4:e0:ad:b0:19: 2a:4f:e8:b1:97:ba:03:b9:d7:78:fa:21:e4:c4:32:ba:23:41: 97:0f:20:99:b1:53:4d:60:7f:cb:79:db:b2:99:c5:ff:4b:2e: 88:8c:36:c0:99:41:70:2e:04:3d:e3:af:98:6c:43:fb:22:10: 9f:69:7f:bb:31:e7:5f:c3:8d:88:27:ad:c7:86:ac:e1:85:c8: 60:5e:c4:35:29:00:68:6f:7b:5c:0b:4d:52:60:4f:5b:92:13: a1:41:9b:c5:a1:a7:2d:1c:64:9b:40:61:92:83:ee:51:25:9e: f2:36:e9:3e:81:55:02:d4:65:88:4f:73:dd:13:cc:22:48:7a: fc:f4:2b:3a:1b:b6:61:59:a6:3b:a8:b6:3c:ae:09:76:0f:83: c1:13:3d:73 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fmtTm7jZlF8LN2IiDk8mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlYmZmNmNmYjgzMjZiNDQ3Mjk1YTExYjEwNzg2ODIxMmU2 NjVmZGQwHhcNMjYwMTAxMTIxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTE5MTg1M2VmMTRjMTFlYmRiZmRkYjdmNWQ4NzY4NTE3YTIyYzg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyn8VsMuU8kQLMS0r16ojCXJZQguA BPJNe0WL8qfxwfAs1Rmrudg6VGL+liMKJ8iqoFTPPO97JKEh4pJzQrhz+5gWhvCs ZL5zXodWmUwetpRiXOEn1gz12SyZCQcqjqX8YwfxDqmizHMKTFtXzVFDgz6vFFdm vyaKJ+0xlwnxbJO8ZJVQTSfGbYQbG3TePe2xfk8p+sCl5KLFw53MUA1Tnp53tx8b PnJGaw+LS5XB9DdqQFR6ErTO5Nj7E0d045ET5FdyR/0FmXsT55XKlfeHyEkzR9p4 PhgiBn0Ijgzgj7IlkKoi9wgZrS74fZhj1rjJ+4CwMGPT1fbU4/s0Vu0YtQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMEZGFPvFMEevb/dt/XYdoUXoiyJMB8GA1UdIwQY MBaAFC6/9s+4MmtEcpWhGxB4aCEuZl/dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHJfMno3Z3lhMFJ5bGFFYkVIaG9JUzVtWDkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8yZGFmYmMtNTJlZS00YzdiLWIwMDYt YTc4NmNlYmUyMGQzLzEvd1JrWVUtOFV3UjY5djkyMzlkaDJoUmVpTElrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8yZGFmYmMtNTJlZS00YzdiLWIwMDYtYTc4NmNlYmUyMGQz LzEvTHJfMno3Z3lhMFJ5bGFFYkVIaG9JUzVtWDkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9+IMA0G CSqGSIb3DQEBCwUAA4IBAQCsb05wPw3VWPA3c6SNGFiXIXCEmwktpF/9STik8nHc O/3mORs6feHEbEUu9O3V/8qJ/eXIE7m+eMgBlKRs6a/5inv7JnlzeWm/s/6tHIAk Ff9E/QW+SZAbEBiWcxlxr8wkqKQxw1X8xOCtsBkqT+ixl7oDudd4+iHkxDK6I0GX DyCZsVNNYH/LeduymcX/Sy6IjDbAmUFwLgQ946+YbEP7IhCfaX+7Medfw42IJ63H hqzhhchgXsQ1KQBob3tcC01SYE9bkhOhQZvFoactHGSbQGGSg+5RJZ7yNuk+gVUC 1GWIT3PdE8wiSHr89Cs6G7ZhWaY7qLY8rgl2D4PBEz1z -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:22 2026 by rpki-client