This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/wJwV6ipRPUdCTP4fq4B5e44G-Bk.roa File: wJwV6ipRPUdCTP4fq4B5e44G-Bk.roa (raw, json) Hash identifier: OuGJ2COZawhtaPzVWGfAkluTCMVpexyVap4Pk8L9hUM= Subject key identifier: C0:9C:15:EA:2A:51:3D:47:42:4C:FE:1F:AB:80:79:7B:8E:06:F8:19 Certificate issuer: /CN=b32bb7f2fa8c414c67188bdabbfb76215693ba87 Certificate serial: 019B7DCB073B3242A29BAB2431CCC5795605 Authority key identifier: B3:2B:B7:F2:FA:8C:41:4C:67:18:8B:DA:BB:FB:76:21:56:93:BA:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syu38vqMQUxnGIvau_t2IVaTuoc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/wJwV6ipRPUdCTP4fq4B5e44G-Bk.roa Signing time: Fri 02 Jan 2026 08:20:16 +0000 ROA not before: Fri 02 Jan 2026 08:20:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57550 IP address blocks: 91.232.236.0/23 maxlen: 23 91.232.236.0/24 maxlen: 24 91.232.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.mft rsync://rpki.ripe.net/repository/DEFAULT/syu38vqMQUxnGIvau_t2IVaTuoc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:07:3b:32:42:a2:9b:ab:24:31:cc:c5:79:56:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b32bb7f2fa8c414c67188bdabbfb76215693ba87 Validity Not Before: Jan 2 08:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c09c15ea2a513d47424cfe1fab80797b8e06f819 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e5:16:3a:79:31:d9:0f:c5:23:99:86:63:9b: c3:e1:f0:16:10:6b:c7:59:24:e3:65:07:75:33:2b: 75:ad:c5:3f:66:a8:2e:a0:ad:ba:11:d6:a8:a2:ca: 80:13:59:6b:e5:f4:13:2a:7a:57:19:b7:75:2f:4a: e4:ed:0e:14:b2:32:ec:b2:7e:6d:21:33:32:b7:ae: b7:57:3a:c9:bf:0e:55:98:0e:0f:a7:a1:a4:15:6c: b6:36:3b:4c:75:2a:36:cd:d3:dd:50:61:0d:ce:46: 4d:61:3e:16:00:38:78:ec:86:71:4e:c5:48:5d:0f: 46:84:fb:a2:13:50:25:6d:30:75:c6:52:6b:9e:60: c3:21:84:8c:c9:4e:24:64:f0:48:7c:c6:cb:bf:ea: 0c:3c:6d:76:ae:e2:8d:8a:0c:f2:e9:7b:ab:8b:b6: e4:c8:63:b6:8d:e1:92:79:aa:f0:89:92:dc:0f:a5: e0:ba:56:9d:7b:38:7f:28:08:d4:d4:4b:f7:f0:f2: 4c:d6:ea:d3:e2:fe:6d:5d:ee:2b:2c:9f:99:39:1a: d7:7f:a2:f4:f2:47:07:a7:af:c4:98:74:45:78:d0: 13:b9:cd:a2:9c:2a:d6:f4:40:87:f5:96:0e:bd:51: 08:4a:65:a1:6c:24:41:f7:44:ed:9f:09:0b:91:8b: 01:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:9C:15:EA:2A:51:3D:47:42:4C:FE:1F:AB:80:79:7B:8E:06:F8:19 X509v3 Authority Key Identifier: keyid:B3:2B:B7:F2:FA:8C:41:4C:67:18:8B:DA:BB:FB:76:21:56:93:BA:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syu38vqMQUxnGIvau_t2IVaTuoc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/wJwV6ipRPUdCTP4fq4B5e44G-Bk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.232.236.0/23 Signature Algorithm: sha256WithRSAEncryption 8d:54:a2:db:f5:49:3f:39:2a:f0:d0:df:b0:af:07:33:ca:e6: 51:a1:3a:7b:f3:be:22:07:ba:bf:2c:13:90:3d:11:ac:71:07: 59:ca:9e:6c:a9:82:7b:89:3b:39:a5:9b:c6:ce:3b:be:ef:69: f6:0b:a7:b2:f7:44:e2:40:7c:78:d6:f8:9c:6b:09:5e:27:3c: 6c:de:95:07:59:13:4c:dd:7e:24:83:55:c6:8b:c9:8b:12:18: d8:28:3b:80:77:cf:a4:c4:82:27:51:70:d6:6c:16:6d:26:4c: c6:60:de:ec:97:1e:47:ba:d9:4d:e8:4e:87:92:6d:9d:b3:4f: c4:b0:d2:36:76:bd:63:9c:e3:10:37:8a:c9:fb:eb:a6:e0:a0: 35:cf:18:00:6e:e3:ae:28:80:b8:ee:26:67:2e:9b:e0:35:23: 54:57:f3:fa:75:ba:cb:e3:22:d5:04:9f:e2:f3:87:84:1f:27: be:d0:2d:8a:e3:b3:c9:6d:e4:e6:83:95:74:4c:32:56:b0:56: be:4c:fb:f5:4a:cc:da:a0:b9:09:9c:10:8d:ed:af:40:c4:4e: 49:f2:24:f4:a1:e4:ee:d6:90:25:2e:df:c0:0f:c7:55:7e:be: d4:40:9f:39:b3:d7:cd:cd:aa:82:3d:64:76:57:22:5f:90:9b: 75:c9:20:9c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ywc7MkKim6skMczFeVYFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMmJiN2YyZmE4YzQxNGM2NzE4OGJkYWJiZmI3NjIxNTY5 M2JhODcwHhcNMjYwMTAyMDgyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDljMTVlYTJhNTEzZDQ3NDI0Y2ZlMWZhYjgwNzk3YjhlMDZmODE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuUWOnkx2Q/FI5mGY5vD4fAWEGvH WSTjZQd1Myt1rcU/ZqguoK26EdaoosqAE1lr5fQTKnpXGbd1L0rk7Q4UsjLssn5t ITMyt663VzrJvw5VmA4Pp6GkFWy2NjtMdSo2zdPdUGENzkZNYT4WADh47IZxTsVI XQ9GhPuiE1AlbTB1xlJrnmDDIYSMyU4kZPBIfMbLv+oMPG12ruKNigzy6Xuri7bk yGO2jeGSearwiZLcD6Xguladezh/KAjU1Ev38PJM1urT4v5tXe4rLJ+ZORrXf6L0 8kcHp6/EmHRFeNATuc2inCrW9ECH9ZYOvVEISmWhbCRB90TtnwkLkYsBGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMCcFeoqUT1HQkz+H6uAeXuOBvgZMB8GA1UdIwQY MBaAFLMrt/L6jEFMZxiL2rv7diFWk7qHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3l1Mzh2cU1RVXhuR0l2YXVfdDJJVmFUdW9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hZjMxYWItMmUzNC00N2ZiLTk2MTEt MjIzYTRkOTQ3MDllLzEvd0p3VjZpcFJQVWRDVFA0ZnE0QjVlNDRHLUJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9hZjMxYWItMmUzNC00N2ZiLTk2MTEtMjIzYTRkOTQ3MDll LzEvc3l1Mzh2cU1RVXhuR0l2YXVfdDJJVmFUdW9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+jsMA0G CSqGSIb3DQEBCwUAA4IBAQCNVKLb9Uk/OSrw0N+wrwczyuZRoTp7874iB7q/LBOQ PRGscQdZyp5sqYJ7iTs5pZvGzju+72n2C6ey90TiQHx41vicawleJzxs3pUHWRNM 3X4kg1XGi8mLEhjYKDuAd8+kxIInUXDWbBZtJkzGYN7slx5HutlN6E6Hkm2ds0/E sNI2dr1jnOMQN4rJ++um4KA1zxgAbuOuKIC47iZnLpvgNSNUV/P6dbrL4yLVBJ/i 84eEHye+0C2K47PJbeTmg5V0TDJWsFa+TPv1SszaoLkJnBCN7a9AxE5J8iT0oeTu 1pAlLt/AD8dVfr7UQJ85s9fNzaqCPWR2VyJfkJt1ySCc -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:02 2026 by rpki-client