This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/WOkIHZ_QXuDVffIDeDyURK804aE.roa File: WOkIHZ_QXuDVffIDeDyURK804aE.roa (raw, json) Hash identifier: XuXaE0/bL4SMN9Fmdr4I3pvWojHD0UjSff7wtZuLd18= Subject key identifier: 58:E9:08:1D:9F:D0:5E:E0:D5:7D:F2:03:78:3C:94:44:AF:34:E1:A1 Certificate issuer: /CN=13d8042a28015d27f35b1f1ab73611e8511b6923 Certificate serial: 019B7F80DBB884B6F021C0200C49C8FD2699 Authority key identifier: 13:D8:04:2A:28:01:5D:27:F3:5B:1F:1A:B7:36:11:E8:51:1B:69:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9gEKigBXSfzWx8atzYR6FEbaSM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/WOkIHZ_QXuDVffIDeDyURK804aE.roa Signing time: Fri 02 Jan 2026 16:18:29 +0000 ROA not before: Fri 02 Jan 2026 16:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197522 IP address blocks: 91.221.218.0/24 maxlen: 24 91.221.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.mft rsync://rpki.ripe.net/repository/DEFAULT/E9gEKigBXSfzWx8atzYR6FEbaSM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:db:b8:84:b6:f0:21:c0:20:0c:49:c8:fd:26:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13d8042a28015d27f35b1f1ab73611e8511b6923 Validity Not Before: Jan 2 16:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58e9081d9fd05ee0d57df203783c9444af34e1a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:85:e8:4c:f6:d0:95:52:39:95:43:96:fc:a7: 68:0e:c0:db:8d:8f:31:16:65:a8:23:00:2b:75:93: 6f:ff:d7:fc:fe:22:1e:b1:47:0a:83:b5:cb:97:ba: c0:17:96:ef:af:81:d6:ef:dc:68:01:49:d9:59:92: f0:01:5b:d5:17:67:ad:44:7c:53:20:db:6c:33:ff: 85:68:cc:34:9a:69:6e:e5:c9:9e:6a:9a:e6:39:e8: d4:05:fc:f0:ee:ca:99:bb:b7:5e:ba:4c:e4:cd:a4: 01:4c:28:bc:68:ee:76:0a:fa:9d:ed:56:41:3c:5e: fe:23:48:15:5b:68:79:4a:78:87:70:88:98:e4:d1: 59:d1:27:c3:b6:b2:03:f0:a2:6e:49:bc:50:a2:b0: 1d:33:97:4d:b3:35:a4:55:69:38:95:45:14:8d:05: 84:7a:cf:f5:b3:7d:32:bf:e5:d2:83:36:e8:89:50: 24:34:51:1f:1b:90:cc:ef:e2:6a:7a:46:44:94:32: 66:11:55:fb:41:10:00:11:f4:88:16:d4:9d:80:57: e2:b8:82:47:a7:ca:c1:c7:0a:eb:04:1a:d3:43:c4: a2:68:2c:a7:ab:98:61:06:44:33:43:93:af:ae:ed: 98:74:91:a2:30:13:00:49:00:e7:df:f3:48:96:0b: 20:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:E9:08:1D:9F:D0:5E:E0:D5:7D:F2:03:78:3C:94:44:AF:34:E1:A1 X509v3 Authority Key Identifier: keyid:13:D8:04:2A:28:01:5D:27:F3:5B:1F:1A:B7:36:11:E8:51:1B:69:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9gEKigBXSfzWx8atzYR6FEbaSM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/WOkIHZ_QXuDVffIDeDyURK804aE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.221.218.0/23 Signature Algorithm: sha256WithRSAEncryption 93:60:29:c8:b6:77:6c:c5:63:07:ea:b2:60:1b:e4:ac:22:95: b9:c4:43:a3:69:16:a4:01:7d:ee:10:bd:8f:26:a4:3d:06:23: f8:2b:b7:03:ed:0c:b6:db:da:f0:40:9c:5a:8c:36:8a:76:8e: 5b:ca:d2:9f:9a:be:37:7a:00:33:55:de:a9:e8:c3:b0:50:e7: 62:43:12:9c:77:31:ae:ff:16:98:9f:00:cd:7b:ba:19:8a:e8: d1:0a:c4:95:6d:eb:ee:2a:1a:db:8f:f1:08:48:cc:16:b1:86: 11:f1:c8:f9:2e:bb:b9:81:7c:d0:4a:cb:a2:2d:ad:f6:88:db: 03:4f:1f:d3:2e:9f:26:15:f0:42:cd:e3:ab:ec:06:a9:eb:bb: a4:68:08:51:8c:8c:b9:6b:e5:10:dd:d1:87:ac:cf:3a:35:97: 1b:f7:b6:8f:a2:fa:d4:86:d8:26:21:ec:02:0f:01:fd:88:f8: 33:d1:3f:2e:73:82:8c:8c:65:da:0c:65:6a:88:3f:d6:94:e6: dc:e4:25:ae:f8:82:d7:fa:37:7f:e0:07:0e:b2:e8:50:bd:2f: e8:8e:21:8a:b7:dd:4c:c5:2f:1a:01:53:2d:e8:89:4f:0d:1e: a2:29:b0:e9:55:4f:7f:32:cd:55:47:35:42:a1:1b:47:ba:e3: 01:50:53:13 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gNu4hLbwIcAgDEnI/SaZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzZDgwNDJhMjgwMTVkMjdmMzViMWYxYWI3MzYxMWU4NTEx YjY5MjMwHhcNMjYwMTAyMTYxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OGU5MDgxZDlmZDA1ZWUwZDU3ZGYyMDM3ODNjOTQ0NGFmMzRlMWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooXoTPbQlVI5lUOW/KdoDsDbjY8x FmWoIwArdZNv/9f8/iIesUcKg7XLl7rAF5bvr4HW79xoAUnZWZLwAVvVF2etRHxT INtsM/+FaMw0mmlu5cmeaprmOejUBfzw7sqZu7deukzkzaQBTCi8aO52Cvqd7VZB PF7+I0gVW2h5SniHcIiY5NFZ0SfDtrID8KJuSbxQorAdM5dNszWkVWk4lUUUjQWE es/1s30yv+XSgzboiVAkNFEfG5DM7+JqekZElDJmEVX7QRAAEfSIFtSdgFfiuIJH p8rBxwrrBBrTQ8SiaCynq5hhBkQzQ5Ovru2YdJGiMBMASQDn3/NIlgsgnwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFjpCB2f0F7g1X3yA3g8lESvNOGhMB8GA1UdIwQY MBaAFBPYBCooAV0n81sfGrc2EehRG2kjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTlnRUtpZ0JYU2Z6V3g4YXR6WVI2RkViYVNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9kN2YyZDgtNDZjZC00MWZkLTgwMDgt YTQyOTZhZDk4NjM1LzEvV09rSUhaX1FYdURWZmZJRGVEeVVSSzgwNGFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9kN2YyZDgtNDZjZC00MWZkLTgwMDgtYTQyOTZhZDk4NjM1 LzEvRTlnRUtpZ0JYU2Z6V3g4YXR6WVI2RkViYVNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW93aMA0G CSqGSIb3DQEBCwUAA4IBAQCTYCnItndsxWMH6rJgG+SsIpW5xEOjaRakAX3uEL2P JqQ9BiP4K7cD7Qy229rwQJxajDaKdo5bytKfmr43egAzVd6p6MOwUOdiQxKcdzGu /xaYnwDNe7oZiujRCsSVbevuKhrbj/EISMwWsYYR8cj5Lru5gXzQSsuiLa32iNsD Tx/TLp8mFfBCzeOr7Aap67ukaAhRjIy5a+UQ3dGHrM86NZcb97aPovrUhtgmIewC DwH9iPgz0T8uc4KMjGXaDGVqiD/WlObc5CWu+ILX+jd/4AcOsuhQvS/ojiGKt91M xS8aAVMt6IlPDR6iKbDpVU9/Ms1VRzVCoRtHuuMBUFMT -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:33 2026 by rpki-client