This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/wpG9PWpUhr6GqC2eisrwoTZXDC0.roa File: wpG9PWpUhr6GqC2eisrwoTZXDC0.roa (raw, json) Hash identifier: UzCVZpdigBJ2p9V8fY9Ow84FKsH/rZ2hqhow5aQQ0pc= Subject key identifier: C2:91:BD:3D:6A:54:86:BE:86:A8:2D:9E:8A:CA:F0:A1:36:57:0C:2D Certificate issuer: /CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6 Certificate serial: 019B78A31FE18F31A386EB981055667F6CEF Authority key identifier: F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/wpG9PWpUhr6GqC2eisrwoTZXDC0.roa Signing time: Thu 01 Jan 2026 08:18:35 +0000 ROA not before: Thu 01 Jan 2026 08:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47498 IP address blocks: 109.205.193.0/24 maxlen: 24 2a01:fb01::/32 maxlen: 32 2a01:fb05:a000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:1f:e1:8f:31:a3:86:eb:98:10:55:66:7f:6c:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6 Validity Not Before: Jan 1 08:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c291bd3d6a5486be86a82d9e8acaf0a136570c2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:64:da:52:77:b0:df:c7:ff:e6:1f:73:e3:04: 00:86:76:a5:21:a9:bb:0a:87:81:c1:e6:08:8f:57: 93:5b:79:e9:fa:44:1a:ab:dc:57:66:14:2c:8e:e1: 1c:60:07:f1:e9:34:b3:4b:12:eb:4d:e1:8a:aa:f5: e3:5d:61:59:40:39:ae:13:ad:bd:90:2f:45:ab:3f: a2:ad:6a:c2:5b:37:b3:4b:f3:42:3b:fd:03:66:41: f2:ca:b1:1e:df:4c:ca:e6:cc:87:f1:32:f9:28:72: 0a:3e:8e:5f:47:b9:c7:2f:fa:95:7e:2b:93:97:a6: fd:6b:d8:fd:f2:c0:b7:e5:d6:a3:12:01:4d:bb:05: d6:62:d9:89:07:68:80:ed:ef:dd:30:fe:01:86:47: 24:42:67:13:5b:22:39:c3:af:04:b8:5a:09:fc:92: 99:47:df:63:5f:3c:ef:94:23:fe:0d:ee:20:35:8a: e9:19:a3:85:a7:84:af:30:82:2f:d0:06:cd:e2:bc: 10:07:56:ab:82:53:28:02:a3:fd:ea:81:c9:52:41: d9:cc:58:e6:96:e1:9a:e4:b4:51:18:65:b6:ce:97: 30:ae:09:c5:3f:82:da:6d:ae:25:07:e8:ee:50:1b: 42:0d:1c:5f:9f:fd:00:1b:aa:19:16:e4:6a:33:d8: 05:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:91:BD:3D:6A:54:86:BE:86:A8:2D:9E:8A:CA:F0:A1:36:57:0C:2D X509v3 Authority Key Identifier: keyid:F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/wpG9PWpUhr6GqC2eisrwoTZXDC0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.205.193.0/24 IPv6: 2a01:fb01::/32 2a01:fb05:a000::/36 Signature Algorithm: sha256WithRSAEncryption 4c:08:cb:ee:1e:c0:e5:2a:e2:e6:42:8e:19:bc:82:70:0b:b0: e5:4a:cd:58:3d:db:ee:88:79:b1:58:44:dd:7e:d4:20:18:72: 58:78:50:f6:59:32:ac:4a:7b:00:b2:7f:36:c1:1b:e4:4b:66: 88:58:fa:1a:7e:95:05:c3:58:5d:9e:dc:c3:19:2e:f5:b6:ff: f1:dc:70:08:7e:55:5f:e0:da:1e:a6:ed:9b:75:20:55:51:a5: 06:db:b7:8a:9e:f7:51:6e:52:56:3c:3c:24:2a:ba:48:8f:c8: 2b:ca:b6:29:d1:0e:c1:2e:c8:ce:f3:7d:63:06:35:d3:c6:23: bb:ee:0d:e6:a8:ce:6a:81:dc:58:3a:1a:97:00:07:e1:a9:c5: cc:05:57:5b:45:68:06:1e:d6:95:49:86:7d:e1:da:5f:5c:87: 33:db:76:4c:8a:b1:fd:5c:2d:14:44:7d:e4:87:d3:c7:ef:3e: c4:57:d5:24:0a:42:87:c2:18:3d:33:4b:c2:1d:88:1b:b3:7f: d0:f7:f7:4d:7b:0b:5c:9f:a1:f1:49:9d:82:3f:19:5c:13:a9: 8b:4c:80:5b:50:77:07:f7:e2:4d:1a:ae:ff:45:1c:cb:d3:93: c6:1f:42:c3:08:18:b4:7a:33:06:33:fc:ac:2e:a8:69:ce:ab: d0:57:e7:dd -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt4ox/hjzGjhuuYEFVmf2zvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzMjQ1ODFlNDM2ODgyNWQ1ZTEzZjRmMmEwZDZmZjhlNDg0 Yzk1ZTYwHhcNMjYwMTAxMDgxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjkxYmQzZDZhNTQ4NmJlODZhODJkOWU4YWNhZjBhMTM2NTcwYzJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2TaUnew38f/5h9z4wQAhnalIam7 CoeBweYIj1eTW3np+kQaq9xXZhQsjuEcYAfx6TSzSxLrTeGKqvXjXWFZQDmuE629 kC9Fqz+irWrCWzezS/NCO/0DZkHyyrEe30zK5syH8TL5KHIKPo5fR7nHL/qVfiuT l6b9a9j98sC35dajEgFNuwXWYtmJB2iA7e/dMP4BhkckQmcTWyI5w68EuFoJ/JKZ R99jXzzvlCP+De4gNYrpGaOFp4SvMIIv0AbN4rwQB1arglMoAqP96oHJUkHZzFjm luGa5LRRGGW2zpcwrgnFP4Laba4lB+juUBtCDRxfn/0AG6oZFuRqM9gFwwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFMKRvT1qVIa+hqgtnorK8KE2VwwtMB8GA1UdIwQY MBaAFPMkWB5DaIJdXhP08qDW/45ITJXmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHlSWUhrTm9nbDFlRV9UeW9OYl9qa2hNbGVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS82YjkxYWItOTlkYi00NjQ4LWIxNTMt NmUyZDk3Y2ExNWZmLzEvd3BHOVBXcFVocjZHcUMyZWlzcndvVFpYREMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS82YjkxYWItOTlkYi00NjQ4LWIxNTMtNmUyZDk3Y2ExNWZm LzEvOHlSWUhrTm9nbDFlRV9UeW9OYl9qa2hNbGVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAMBAIAATAGAwQAbc3BMBUE AgACMA8DBQAqAfsBAwYEKgH7BaAwDQYJKoZIhvcNAQELBQADggEBAEwIy+4ewOUq 4uZCjhm8gnALsOVKzVg92+6IebFYRN1+1CAYclh4UPZZMqxKewCyfzbBG+RLZohY +hp+lQXDWF2e3MMZLvW2//HccAh+VV/g2h6m7Zt1IFVRpQbbt4qe91FuUlY8PCQq ukiPyCvKtinRDsEuyM7zfWMGNdPGI7vuDeaozmqB3Fg6GpcAB+GpxcwFV1tFaAYe 1pVJhn3h2l9chzPbdkyKsf1cLRREfeSH08fvPsRX1SQKQofCGD0zS8IdiBuzf9D3 9017C1yfofFJnYI/GVwTqYtMgFtQdwf34k0arv9FHMvTk8YfQsMIGLR6MwYz/Kwu qGnOq9BX590= -----END CERTIFICATE-----Generated at Mon Jan 19 14:37:36 2026 by rpki-client