This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/wBSqoLFJ8ghdrJRBL3vMWYtDQ7Y.roa File: wBSqoLFJ8ghdrJRBL3vMWYtDQ7Y.roa (raw, json) Hash identifier: NXyL8CpxXnA8Of0Eq4HRkrn4hYLRn+YBP9JG8zmPi+4= Subject key identifier: C0:14:AA:A0:B1:49:F2:08:5D:AC:94:41:2F:7B:CC:59:8B:43:43:B6 Certificate issuer: /CN=9980c70f76f0b5f5c8457a0337ad5d63122cf7e6 Certificate serial: 019B7CEE5F33239C9E48405FA0A5D3867C45 Authority key identifier: 99:80:C7:0F:76:F0:B5:F5:C8:45:7A:03:37:AD:5D:63:12:2C:F7:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYDHD3bwtfXIRXoDN61dYxIs9-Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/wBSqoLFJ8ghdrJRBL3vMWYtDQ7Y.roa Signing time: Fri 02 Jan 2026 04:19:15 +0000 ROA not before: Fri 02 Jan 2026 04:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43008 IP address blocks: 91.194.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft rsync://rpki.ripe.net/repository/DEFAULT/mYDHD3bwtfXIRXoDN61dYxIs9-Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:5f:33:23:9c:9e:48:40:5f:a0:a5:d3:86:7c:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9980c70f76f0b5f5c8457a0337ad5d63122cf7e6 Validity Not Before: Jan 2 04:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c014aaa0b149f2085dac94412f7bcc598b4343b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:72:47:f6:67:a4:31:52:2a:73:4e:17:3e:5c: d2:d9:8d:d2:88:0d:55:28:f2:b3:63:bb:bc:d6:ef: 80:5a:d4:bc:6d:4d:25:86:15:5c:0a:f3:86:97:50: f9:89:ac:61:2d:91:13:1e:8e:7d:4c:c3:1b:2c:98: 5e:ca:89:0d:4a:33:bf:35:e0:74:34:c9:2e:38:e9: 3a:62:94:e6:d1:b8:22:05:98:f9:30:de:cf:bf:a1: 55:e3:b0:fc:3b:bf:cf:1c:83:f7:41:61:10:c1:b3: 04:fa:26:83:61:ee:9b:d8:45:6f:60:ef:e9:81:9b: b6:7c:d3:ef:15:0b:49:63:c4:5a:ef:6a:d0:f6:91: ad:03:bb:c0:88:30:87:d6:b2:14:4e:10:2e:d9:f6: 4f:84:e5:da:bf:4a:62:3c:d8:1b:1f:3d:a1:ef:3f: fc:70:d1:08:e2:02:06:ab:55:2c:34:ba:0d:02:b3: bf:e0:89:b0:ad:e0:20:5e:eb:58:05:b2:51:83:eb: 97:9b:65:b9:e9:c1:37:0c:a1:3e:05:7d:59:93:b3: f9:e9:33:f4:03:96:73:f2:ea:5d:61:ce:d0:69:5a: ed:6b:c2:29:8f:d1:1c:fb:05:74:5f:8e:7f:30:17: c4:f5:6c:e6:ac:ca:5f:ea:58:41:5e:0e:59:52:ef: a1:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:14:AA:A0:B1:49:F2:08:5D:AC:94:41:2F:7B:CC:59:8B:43:43:B6 X509v3 Authority Key Identifier: keyid:99:80:C7:0F:76:F0:B5:F5:C8:45:7A:03:37:AD:5D:63:12:2C:F7:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYDHD3bwtfXIRXoDN61dYxIs9-Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/wBSqoLFJ8ghdrJRBL3vMWYtDQ7Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.194.30.0/24 Signature Algorithm: sha256WithRSAEncryption 01:3c:32:66:c3:f3:50:7a:f8:f0:6e:4a:7c:8a:6a:c7:c7:b8: 71:22:dd:98:56:e8:86:40:f0:f5:41:db:af:b4:8e:a9:c6:6f: 2c:d9:d2:c7:14:07:70:89:a0:eb:ee:cb:8f:29:f3:4b:1d:a5: 2b:1c:f6:82:7b:8d:b2:d6:1d:68:b1:28:75:89:e8:0b:2b:4a: fb:2b:05:67:a9:45:47:fc:01:b4:63:7d:ac:5c:6e:3b:a4:90: 19:a2:49:90:d1:0a:3e:f2:6d:91:75:5b:1f:24:71:37:eb:db: c7:d1:48:81:9a:cc:a2:c2:77:9b:21:55:08:84:4d:45:85:f2: 71:58:c4:b3:bc:7f:dc:a8:3b:92:aa:41:d4:19:4e:22:1e:4c: 60:a9:24:b9:19:30:16:e4:d4:3e:ca:a8:be:34:e3:59:e1:c5: 34:d8:14:09:90:5b:95:8d:0f:b2:e3:8b:29:44:a7:57:42:61: 6d:0f:45:d6:15:0c:f3:7c:b3:32:35:cb:58:73:9c:0b:33:93: 03:1d:34:34:2b:3f:59:57:ce:d7:f9:ad:55:dc:12:82:97:4b: 6a:3d:7c:ca:81:96:b3:8a:3d:5a:48:25:e5:e5:1b:d4:66:69: e7:45:ae:68:fb:34:d9:c2:3e:56:d0:c8:d4:03:b2:e3:eb:88: 1b:ea:40:87 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87l8zI5yeSEBfoKXThnxFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ODBjNzBmNzZmMGI1ZjVjODQ1N2EwMzM3YWQ1ZDYzMTIy Y2Y3ZTYwHhcNMjYwMTAyMDQxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDE0YWFhMGIxNDlmMjA4NWRhYzk0NDEyZjdiY2M1OThiNDM0M2I2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXJH9mekMVIqc04XPlzS2Y3SiA1V KPKzY7u81u+AWtS8bU0lhhVcCvOGl1D5iaxhLZETHo59TMMbLJheyokNSjO/NeB0 NMkuOOk6YpTm0bgiBZj5MN7Pv6FV47D8O7/PHIP3QWEQwbME+iaDYe6b2EVvYO/p gZu2fNPvFQtJY8Ra72rQ9pGtA7vAiDCH1rIUThAu2fZPhOXav0piPNgbHz2h7z/8 cNEI4gIGq1UsNLoNArO/4ImwreAgXutYBbJRg+uXm2W56cE3DKE+BX1Zk7P56TP0 A5Zz8updYc7QaVrta8Ipj9Ec+wV0X45/MBfE9WzmrMpf6lhBXg5ZUu+hhQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMAUqqCxSfIIXayUQS97zFmLQ0O2MB8GA1UdIwQY MBaAFJmAxw928LX1yEV6AzetXWMSLPfmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVlESEQzYnd0ZlhJUlhvRE42MWRZeElzOS1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC80MmVjNjgtZDQzMy00MDAwLTkwNmMt YzNlYWU2YjBmYjljLzEvd0JTcW9MRko4Z2hkckpSQkwzdk1XWXREUTdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC80MmVjNjgtZDQzMy00MDAwLTkwNmMtYzNlYWU2YjBmYjlj LzEvbVlESEQzYnd0ZlhJUlhvRE42MWRZeElzOS1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8IeMA0G CSqGSIb3DQEBCwUAA4IBAQABPDJmw/NQevjwbkp8imrHx7hxIt2YVuiGQPD1Qduv tI6pxm8s2dLHFAdwiaDr7suPKfNLHaUrHPaCe42y1h1osSh1iegLK0r7KwVnqUVH /AG0Y32sXG47pJAZokmQ0Qo+8m2RdVsfJHE369vH0UiBmsyiwnebIVUIhE1FhfJx WMSzvH/cqDuSqkHUGU4iHkxgqSS5GTAW5NQ+yqi+NONZ4cU02BQJkFuVjQ+y44sp RKdXQmFtD0XWFQzzfLMyNctYc5wLM5MDHTQ0Kz9ZV87X+a1V3BKCl0tqPXzKgZaz ij1aSCXl5RvUZmnnRa5o+zTZwj5W0MjUA7Lj64gb6kCH -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:15 2026 by rpki-client