This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/wkHctLvdsJaCxOWaekPpSlsFo1o.roa File: wkHctLvdsJaCxOWaekPpSlsFo1o.roa (raw, json) Hash identifier: 62uOxIFMIJj4gV6OQmk4HcKVN0NAehpTp48LJq+Xir8= Subject key identifier: C2:41:DC:B4:BB:DD:B0:96:82:C4:E5:9A:7A:43:E9:4A:5B:05:A3:5A Certificate issuer: /CN=26ad7d3560134e0a8ae46fc5b32c5acb61dde39c Certificate serial: 019B7B358FD54F26720B48AB9ED61D0A04A5 Authority key identifier: 26:AD:7D:35:60:13:4E:0A:8A:E4:6F:C5:B3:2C:5A:CB:61:DD:E3:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jq19NWATTgqK5G_Fsyxay2Hd45w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/wkHctLvdsJaCxOWaekPpSlsFo1o.roa Signing time: Thu 01 Jan 2026 20:17:46 +0000 ROA not before: Thu 01 Jan 2026 20:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207462 IP address blocks: 91.205.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/Jq19NWATTgqK5G_Fsyxay2Hd45w.crl rsync://rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/Jq19NWATTgqK5G_Fsyxay2Hd45w.mft rsync://rpki.ripe.net/repository/DEFAULT/Jq19NWATTgqK5G_Fsyxay2Hd45w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:8f:d5:4f:26:72:0b:48:ab:9e:d6:1d:0a:04:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26ad7d3560134e0a8ae46fc5b32c5acb61dde39c Validity Not Before: Jan 1 20:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c241dcb4bbddb09682c4e59a7a43e94a5b05a35a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d1:72:16:b4:30:0b:00:44:82:39:66:ef:04: c9:b6:ab:3e:b5:61:4b:ff:9f:be:8d:13:6d:dd:8b: 87:61:8f:a5:d5:2c:2d:2b:ca:3f:20:1f:cb:66:07: f1:9b:e7:f9:bf:ac:03:3e:90:80:21:54:b6:37:1a: 4e:d4:34:b5:73:eb:b5:ff:b2:d1:45:0c:92:f4:2b: 6e:55:35:44:51:55:ac:c6:ef:ba:93:6c:0e:cf:8f: 9c:c7:35:0d:c8:31:79:fd:a6:2a:e6:59:18:02:82: 6d:7b:ec:89:48:00:30:b6:d5:e2:e4:c4:c8:2c:6d: 08:67:86:20:1b:f0:27:ed:15:e0:17:7c:4b:af:33: 9b:c7:01:40:74:db:8a:4d:91:85:fd:17:40:df:05: 56:6c:89:23:93:e5:b6:ee:2e:e7:7a:79:fe:1c:ed: 85:fd:a4:c2:4c:b3:b7:69:c3:69:ef:8a:ea:ce:a6: 73:4a:cc:74:20:46:00:08:d9:71:4c:e8:2d:55:08: 8d:bf:83:37:bf:58:49:88:05:a8:aa:02:fa:0b:87: b2:85:4a:43:03:7a:88:6c:d7:dc:f1:ef:5e:5f:c2: bd:33:95:e6:ad:ae:af:7e:a7:97:68:7a:62:60:73: 2b:ad:d2:53:89:48:62:8c:a9:d2:27:b1:fa:38:0c: 85:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:41:DC:B4:BB:DD:B0:96:82:C4:E5:9A:7A:43:E9:4A:5B:05:A3:5A X509v3 Authority Key Identifier: keyid:26:AD:7D:35:60:13:4E:0A:8A:E4:6F:C5:B3:2C:5A:CB:61:DD:E3:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jq19NWATTgqK5G_Fsyxay2Hd45w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/wkHctLvdsJaCxOWaekPpSlsFo1o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/Jq19NWATTgqK5G_Fsyxay2Hd45w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.205.42.0/24 Signature Algorithm: sha256WithRSAEncryption 43:f8:71:80:1b:fd:51:93:55:f7:ec:9f:be:6d:75:ce:6c:78: d0:d6:da:a3:7e:3d:35:80:94:57:e7:02:44:a8:15:ed:0e:69: b3:6c:ff:81:0d:70:1a:b7:8b:8d:76:90:a4:cd:ea:5d:32:0d: b4:92:3b:01:2a:b4:cc:64:f1:0b:f2:0a:a5:04:71:2e:77:7d: 1e:11:f7:70:60:3d:bb:87:5c:77:d1:43:58:2d:aa:87:f2:dd: 04:78:8d:d9:5e:91:89:88:3f:cf:a1:6c:8e:82:f0:a3:10:1c: 4d:7e:80:ac:60:83:de:40:6f:c6:f3:57:13:f5:f7:57:eb:06: 0c:22:06:a2:99:e4:b0:2a:31:5a:5c:1b:79:f3:c2:01:bb:27: c5:3c:0c:83:04:1f:16:3f:05:41:1b:7d:cb:fe:03:91:9c:8d: f6:f2:8a:e1:70:82:cd:22:1d:9b:ce:0d:84:1f:63:37:37:38: 80:e6:87:54:d7:3c:63:a4:ce:46:a4:9c:ef:7e:9c:91:0d:74: fd:1a:23:26:6b:f1:37:8c:fa:d2:b7:59:af:33:12:be:b3:62: 09:5f:36:92:42:20:06:29:ba:d1:47:07:50:de:38:80:5b:c2: 02:0e:cf:24:71:7e:cd:1f:47:c1:b1:ff:24:49:b6:d8:1f:5d: ac:0f:ca:81 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NY/VTyZyC0irntYdCgSlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2YWQ3ZDM1NjAxMzRlMGE4YWU0NmZjNWIzMmM1YWNiNjFk ZGUzOWMwHhcNMjYwMTAxMjAxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjQxZGNiNGJiZGRiMDk2ODJjNGU1OWE3YTQzZTk0YTViMDVhMzVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9FyFrQwCwBEgjlm7wTJtqs+tWFL /5++jRNt3YuHYY+l1SwtK8o/IB/LZgfxm+f5v6wDPpCAIVS2NxpO1DS1c+u1/7LR RQyS9CtuVTVEUVWsxu+6k2wOz4+cxzUNyDF5/aYq5lkYAoJte+yJSAAwttXi5MTI LG0IZ4YgG/An7RXgF3xLrzObxwFAdNuKTZGF/RdA3wVWbIkjk+W27i7nenn+HO2F /aTCTLO3acNp74rqzqZzSsx0IEYACNlxTOgtVQiNv4M3v1hJiAWoqgL6C4eyhUpD A3qIbNfc8e9eX8K9M5Xmra6vfqeXaHpiYHMrrdJTiUhijKnSJ7H6OAyFHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMJB3LS73bCWgsTlmnpD6UpbBaNaMB8GA1UdIwQY MBaAFCatfTVgE04KiuRvxbMsWsth3eOcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnExOU5XQVRUZ3FLNUdfRnN5eGF5MkhkNDV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni85OGZjYjUtODdhNy00ZmRlLTk4NDct NDkwMmE2NmIyZDk1LzEvd2tIY3RMdmRzSmFDeE9XYWVrUHBTbHNGbzFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni85OGZjYjUtODdhNy00ZmRlLTk4NDctNDkwMmE2NmIyZDk1 LzEvSnExOU5XQVRUZ3FLNUdfRnN5eGF5MkhkNDV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW80qMA0G CSqGSIb3DQEBCwUAA4IBAQBD+HGAG/1Rk1X37J++bXXObHjQ1tqjfj01gJRX5wJE qBXtDmmzbP+BDXAat4uNdpCkzepdMg20kjsBKrTMZPEL8gqlBHEud30eEfdwYD27 h1x30UNYLaqH8t0EeI3ZXpGJiD/PoWyOgvCjEBxNfoCsYIPeQG/G81cT9fdX6wYM IgaimeSwKjFaXBt588IBuyfFPAyDBB8WPwVBG33L/gORnI328orhcILNIh2bzg2E H2M3NziA5odU1zxjpM5GpJzvfpyRDXT9GiMma/E3jPrSt1mvMxK+s2IJXzaSQiAG KbrRRwdQ3jiAW8ICDs8kcX7NH0fBsf8kSbbYH12sD8qB -----END CERTIFICATE-----Generated at Fri Jan 2 18:34:16 2026 by rpki-client