This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/W4cImxro0S1Oqpe5aOmc9Zk1to0.roa File: W4cImxro0S1Oqpe5aOmc9Zk1to0.roa (raw, json) Hash identifier: 2C5FiGId1eEcbsSAENT53ABjs4YVPjHtZepjzsteNl8= Subject key identifier: 5B:87:08:9B:1A:E8:D1:2D:4E:AA:97:B9:68:E9:9C:F5:99:35:B6:8D Certificate issuer: /CN=d276c41a2176254f236d23d391fd56090619670d Certificate serial: 019B7F8437655C66F0CA4E012C0030C040B5 Authority key identifier: D2:76:C4:1A:21:76:25:4F:23:6D:23:D3:91:FD:56:09:06:19:67:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nbEGiF2JU8jbSPTkf1WCQYZZw0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/W4cImxro0S1Oqpe5aOmc9Zk1to0.roa Signing time: Fri 02 Jan 2026 16:22:09 +0000 ROA not before: Fri 02 Jan 2026 16:22:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213241 IP address blocks: 91.199.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft rsync://rpki.ripe.net/repository/DEFAULT/0nbEGiF2JU8jbSPTkf1WCQYZZw0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:37:65:5c:66:f0:ca:4e:01:2c:00:30:c0:40:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d276c41a2176254f236d23d391fd56090619670d Validity Not Before: Jan 2 16:22:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b87089b1ae8d12d4eaa97b968e99cf59935b68d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:32:1e:c3:87:e8:3e:3d:f3:a0:35:4d:19:42: 6a:78:41:5a:91:59:16:36:ed:8d:de:06:50:2d:c0: 76:99:47:a3:2c:25:c6:5a:e3:fd:b3:a2:d2:3e:cf: 8b:ca:9b:3e:fa:41:0d:32:0c:f8:1a:ef:10:a4:31: 98:7c:d9:d7:11:26:55:41:2d:aa:89:87:90:3d:e2: 86:8c:1d:1f:30:da:65:8b:ed:85:5f:60:72:95:b7: 17:18:5e:c3:2f:29:6a:a1:f1:26:98:ce:79:fd:50: 6c:4f:84:e8:9f:7d:fa:58:0c:cf:45:c3:82:ea:7c: 4c:a9:81:31:e9:6d:4b:d4:e4:b6:fe:93:e8:9c:00: 71:15:3c:b9:53:7e:b5:79:91:ac:07:19:db:0f:b9: 47:32:60:b5:09:8a:9c:93:27:f4:87:8f:80:21:f2: 35:ee:85:cf:d9:22:7e:5f:31:71:ff:1e:87:90:22: 50:ea:e9:72:27:9b:d0:e8:5a:ba:7c:07:dc:a0:0a: 1f:69:94:bb:00:fe:5b:f3:16:0d:0a:2c:33:d3:51: eb:50:dd:25:10:da:da:16:05:ab:50:87:4f:88:93: 19:90:e5:61:39:79:81:90:2b:63:bf:5f:c1:11:7e: 5f:fd:56:14:ee:6f:5c:fb:e4:c0:c8:c8:7c:5f:50: 1c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:87:08:9B:1A:E8:D1:2D:4E:AA:97:B9:68:E9:9C:F5:99:35:B6:8D X509v3 Authority Key Identifier: keyid:D2:76:C4:1A:21:76:25:4F:23:6D:23:D3:91:FD:56:09:06:19:67:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nbEGiF2JU8jbSPTkf1WCQYZZw0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/W4cImxro0S1Oqpe5aOmc9Zk1to0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.199.110.0/24 Signature Algorithm: sha256WithRSAEncryption 92:28:26:67:86:75:24:4c:3a:1c:c0:74:88:ae:8c:4b:8f:dd: 6c:74:64:8b:b8:3b:21:b9:3f:cf:77:d7:ce:09:35:0c:9e:48: 94:bc:41:ed:4a:64:89:15:59:d4:cd:6e:5c:9d:a8:21:ca:a0: 32:58:fc:bb:3c:41:f8:79:a7:48:f9:64:84:66:f8:08:75:3e: ec:60:c3:e0:d0:2f:bd:d1:43:0c:6c:a9:fb:2a:e4:40:b5:30: 6a:03:15:6c:fc:c1:01:67:4b:1a:3d:14:67:7c:8d:5a:23:76: a0:08:d4:f4:fb:d7:73:df:d9:ec:cd:49:40:eb:4d:a0:d2:ad: 83:52:58:9d:e7:60:35:e8:e8:49:f5:e6:d9:62:be:63:c3:39: c7:07:6a:67:aa:6d:a5:30:95:d6:86:7e:d3:5c:6c:f6:22:62: 89:73:d9:ab:46:d6:d1:2b:09:a7:13:10:06:66:fb:9f:85:65: ad:c1:fe:01:42:79:60:d0:76:f0:78:0a:75:70:54:6f:70:04: 87:3d:46:b8:d5:c9:20:86:c8:1d:27:13:20:24:e4:75:3d:f9: d9:d8:3a:d4:2b:fe:6d:11:44:7e:c7:03:86:90:34:8e:a6:d6: 63:8b:ab:39:0f:08:9a:4e:c4:f6:3e:61:6b:10:4f:3d:cf:3c: a8:d7:bb:1d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hDdlXGbwyk4BLAAwwEC1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyNzZjNDFhMjE3NjI1NGYyMzZkMjNkMzkxZmQ1NjA5MDYx OTY3MGQwHhcNMjYwMTAyMTYyMjA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Yjg3MDg5YjFhZThkMTJkNGVhYTk3Yjk2OGU5OWNmNTk5MzViNjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzIew4foPj3zoDVNGUJqeEFakVkW Nu2N3gZQLcB2mUejLCXGWuP9s6LSPs+Lyps++kENMgz4Gu8QpDGYfNnXESZVQS2q iYeQPeKGjB0fMNpli+2FX2BylbcXGF7DLylqofEmmM55/VBsT4Ton336WAzPRcOC 6nxMqYEx6W1L1OS2/pPonABxFTy5U361eZGsBxnbD7lHMmC1CYqckyf0h4+AIfI1 7oXP2SJ+XzFx/x6HkCJQ6ulyJ5vQ6Fq6fAfcoAofaZS7AP5b8xYNCiwz01HrUN0l ENraFgWrUIdPiJMZkOVhOXmBkCtjv1/BEX5f/VYU7m9c++TAyMh8X1AcbQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFuHCJsa6NEtTqqXuWjpnPWZNbaNMB8GA1UdIwQY MBaAFNJ2xBohdiVPI20j05H9VgkGGWcNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMG5iRUdpRjJKVThqYlNQVGtmMVdDUVlaWncwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS81M2MzZTItZDMzNS00YTgyLWE3OTAt MGQ2YmNkMDE0OGJmLzEvVzRjSW14cm8wUzFPcXBlNWFPbWM5WmsxdG8wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS81M2MzZTItZDMzNS00YTgyLWE3OTAtMGQ2YmNkMDE0OGJm LzEvMG5iRUdpRjJKVThqYlNQVGtmMVdDUVlaWncwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8duMA0G CSqGSIb3DQEBCwUAA4IBAQCSKCZnhnUkTDocwHSIroxLj91sdGSLuDshuT/Pd9fO CTUMnkiUvEHtSmSJFVnUzW5cnaghyqAyWPy7PEH4eadI+WSEZvgIdT7sYMPg0C+9 0UMMbKn7KuRAtTBqAxVs/MEBZ0saPRRnfI1aI3agCNT0+9dz39nszUlA602g0q2D Ulid52A16OhJ9ebZYr5jwznHB2pnqm2lMJXWhn7TXGz2ImKJc9mrRtbRKwmnExAG ZvufhWWtwf4BQnlg0HbweAp1cFRvcASHPUa41ckghsgdJxMgJOR1PfnZ2DrUK/5t EUR+xwOGkDSOptZji6s5DwiaTsT2PmFrEE89zzyo17sd -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:57 2026 by rpki-client