This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/vIWIV4oXAuGiXUkF2YHYJ3cotXI.roa File: vIWIV4oXAuGiXUkF2YHYJ3cotXI.roa (raw, json) Hash identifier: Ru1bWNukTkXSCygvXpMUB0wX3ITs/41hlno7KHqordo= Subject key identifier: BC:85:88:57:8A:17:02:E1:A2:5D:49:05:D9:81:D8:27:77:28:B5:72 Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339 Certificate serial: 019B76EB1D8AD14368C0945A3B9487EA1431 Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/vIWIV4oXAuGiXUkF2YHYJ3cotXI.roa Signing time: Thu 01 Jan 2026 00:17:58 +0000 ROA not before: Thu 01 Jan 2026 00:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215590 IP address blocks: 91.108.226.0/24 maxlen: 24 91.108.227.0/24 maxlen: 24 91.108.244.0/24 maxlen: 24 91.108.245.0/24 maxlen: 24 91.108.246.0/24 maxlen: 24 91.108.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 12:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:1d:8a:d1:43:68:c0:94:5a:3b:94:87:ea:14:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339 Validity Not Before: Jan 1 00:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc8588578a1702e1a25d4905d981d8277728b572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:73:97:76:ab:04:66:fe:78:3a:04:9e:b6:20: ee:aa:64:5b:cd:af:b4:7a:75:22:3b:22:27:77:39: bd:c3:d1:00:cf:45:0a:70:84:24:91:d7:8f:cc:b9: c5:22:d8:c1:b0:a1:03:e2:d5:d8:a0:f5:73:24:15: 04:d7:06:4e:89:89:b4:35:21:41:7a:77:5a:2a:ea: 4e:af:1b:47:6f:30:87:ed:76:86:a5:b6:8d:78:40: 7d:bd:44:a9:e3:f0:f5:07:0e:f2:1d:cc:35:a4:14: 80:c4:59:14:9e:e6:78:7c:67:40:80:6f:f0:2c:01: 28:fb:f2:8e:e2:dd:91:a2:99:59:01:a9:f8:29:d3: cd:52:6e:92:63:20:d9:96:ef:52:97:60:90:37:1b: 1e:4b:b4:da:ba:ec:fa:b7:32:9a:ee:f2:44:d2:2d: 08:1e:f6:16:77:83:42:35:a2:3e:8a:e4:e5:4e:6a: 6f:db:1c:39:3a:c1:71:28:ab:f0:41:31:ce:64:c5: 29:4a:5d:bd:34:e2:9c:5b:cd:67:c5:9c:73:e6:0e: 9f:c7:56:b8:4d:a0:0a:42:d2:ca:fe:38:76:9f:50: 40:2b:e5:8e:57:53:17:9e:c3:08:a0:3a:0c:1c:be: 68:70:96:7e:a0:bc:58:4c:a7:70:37:55:79:48:38: 70:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:85:88:57:8A:17:02:E1:A2:5D:49:05:D9:81:D8:27:77:28:B5:72 X509v3 Authority Key Identifier: keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/vIWIV4oXAuGiXUkF2YHYJ3cotXI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.108.226.0/23 91.108.244.0/22 Signature Algorithm: sha256WithRSAEncryption 50:52:f0:00:94:5d:05:66:c0:0f:14:a5:ad:04:00:7a:b9:94: c1:aa:9e:d3:8a:1b:1c:ce:60:ee:0a:d5:c2:0b:6f:cf:9c:4b: 42:70:54:03:8b:d1:d5:e1:07:98:3d:ff:18:f4:f8:ac:59:d7: ed:0f:d5:05:69:8d:eb:67:ce:f9:6a:f6:cc:f1:36:58:b2:35: 14:21:c6:b8:2f:09:2f:7d:1e:b7:d2:e0:0a:19:06:7c:95:59: 42:9f:e5:95:8c:2b:81:04:11:1b:16:e8:0c:f6:a3:73:69:6a: 39:98:24:fd:12:90:f1:93:df:f4:77:c8:2d:1e:90:41:e3:7d: 2b:95:b8:9e:48:d8:f0:d1:50:87:8d:5b:83:cf:cd:43:47:24: cf:8f:3c:6e:b9:06:f0:f6:60:fd:62:21:35:60:47:e1:09:3a: 07:4a:2d:1a:ff:38:ac:83:82:42:85:d9:8d:19:2a:67:47:35: b2:ae:b5:14:02:a8:b0:51:cd:97:09:2f:f8:82:08:d7:6d:60: 91:23:de:3c:7b:dc:3e:27:2c:70:d3:98:4e:1c:94:a7:b9:94: 69:ef:e1:10:64:11:bd:c1:41:ae:ea:91:b7:0f:c4:74:b9:01: de:4e:56:54:62:ed:b9:11:d8:51:1e:f9:45:e7:69:65:c8:75: d8:d3:8b:8b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt26x2K0UNowJRaO5SH6hQxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZWU0NTQyNmUxMmU1MGZlMzBlOGZmYzM5ZTA0NDg1ZDhm NzMzMzkwHhcNMjYwMTAxMDAxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzg1ODg1NzhhMTcwMmUxYTI1ZDQ5MDVkOTgxZDgyNzc3MjhiNTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHOXdqsEZv54OgSetiDuqmRbza+0 enUiOyIndzm9w9EAz0UKcIQkkdePzLnFItjBsKED4tXYoPVzJBUE1wZOiYm0NSFB endaKupOrxtHbzCH7XaGpbaNeEB9vUSp4/D1Bw7yHcw1pBSAxFkUnuZ4fGdAgG/w LAEo+/KO4t2RoplZAan4KdPNUm6SYyDZlu9Sl2CQNxseS7Tauuz6tzKa7vJE0i0I HvYWd4NCNaI+iuTlTmpv2xw5OsFxKKvwQTHOZMUpSl29NOKcW81nxZxz5g6fx1a4 TaAKQtLK/jh2n1BAK+WOV1MXnsMIoDoMHL5ocJZ+oLxYTKdwN1V5SDhwPQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLyFiFeKFwLhol1JBdmB2Cd3KLVyMB8GA1UdIwQY MBaAFMLuRUJuEuUP4w6P/DngRIXY9zM5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3U1RlFtNFM1UV9qRG9fOE9lQkVoZGozTXprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC83MGFhMzItOTYwNy00ZGI3LThmMWUt ZGE3NTQzMGIxNmY2LzEvdklXSVY0b1hBdUdpWFVrRjJZSFlKM2NvdFhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC83MGFhMzItOTYwNy00ZGI3LThmMWUtZGE3NTQzMGIxNmY2 LzEvd3U1RlFtNFM1UV9qRG9fOE9lQkVoZGozTXprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW2ziAwQC W2z0MA0GCSqGSIb3DQEBCwUAA4IBAQBQUvAAlF0FZsAPFKWtBAB6uZTBqp7Tihsc zmDuCtXCC2/PnEtCcFQDi9HV4QeYPf8Y9PisWdftD9UFaY3rZ875avbM8TZYsjUU Ica4LwkvfR630uAKGQZ8lVlCn+WVjCuBBBEbFugM9qNzaWo5mCT9EpDxk9/0d8gt HpBB430rlbieSNjw0VCHjVuDz81DRyTPjzxuuQbw9mD9YiE1YEfhCToHSi0a/zis g4JChdmNGSpnRzWyrrUUAqiwUc2XCS/4ggjXbWCRI948e9w+Jyxw05hOHJSnuZRp 7+EQZBG9wUGu6pG3D8R0uQHeTlZUYu25EdhRHvlF52llyHXY04uL -----END CERTIFICATE-----Generated at Tue Jan 20 15:47:23 2026 by rpki-client