This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/WFvPF_8VC-S0qgsTBdvqpE6pWug.roa File: WFvPF_8VC-S0qgsTBdvqpE6pWug.roa (raw, json) Hash identifier: hC9en9kRQ4ZgWYQeZCnrellhiIJNeme26ezCh3FsZRI= Subject key identifier: 58:5B:CF:17:FF:15:0B:E4:B4:AA:0B:13:05:DB:EA:A4:4E:A9:5A:E8 Certificate issuer: /CN=29ff15581bb904f1b90538742118b01f9efaa662 Certificate serial: 019B7F83F4E77B4041A5036A8C62CCF64F91 Authority key identifier: 29:FF:15:58:1B:B9:04:F1:B9:05:38:74:21:18:B0:1F:9E:FA:A6:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kf8VWBu5BPG5BTh0IRiwH576pmI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/WFvPF_8VC-S0qgsTBdvqpE6pWug.roa Signing time: Fri 02 Jan 2026 16:21:52 +0000 ROA not before: Fri 02 Jan 2026 16:21:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50931 IP address blocks: 91.223.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft rsync://rpki.ripe.net/repository/DEFAULT/Kf8VWBu5BPG5BTh0IRiwH576pmI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 01:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:f4:e7:7b:40:41:a5:03:6a:8c:62:cc:f6:4f:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29ff15581bb904f1b90538742118b01f9efaa662 Validity Not Before: Jan 2 16:21:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=585bcf17ff150be4b4aa0b1305dbeaa44ea95ae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1a:b8:91:e9:65:4c:2c:1d:db:2f:c1:67:06: 3a:5e:39:b4:6b:ac:e3:24:d3:90:68:1c:2d:39:6a: e0:ca:d0:6c:76:68:6d:57:0b:7e:7c:e7:d8:ea:1d: 53:59:7d:83:c6:38:ee:59:b7:53:43:8c:ec:69:8a: 39:3e:3b:24:01:eb:c1:ea:de:73:42:db:1d:1f:97: 05:fa:69:61:1d:1a:c2:69:51:5b:cb:71:09:ba:84: 08:e4:95:bf:29:ea:04:d2:60:9d:1e:65:83:34:78: 80:5f:62:ed:e2:58:aa:9f:bd:49:3f:dc:da:3c:17: b2:2b:16:34:e1:a6:49:6d:eb:48:67:df:46:18:0d: ed:4c:1e:42:e0:a6:30:de:1b:4d:44:d2:2c:8e:b5: 9d:0c:33:cf:12:44:2f:b1:03:dd:c9:80:ae:14:f5: 9e:4d:c1:52:97:7a:50:16:b9:64:1a:da:3c:04:39: 2a:53:2a:83:e9:a0:20:2c:6f:8d:c6:4c:e4:ff:d9: f6:22:9a:2a:e7:80:8e:b0:f6:cd:30:aa:f5:8c:75: e2:f2:02:0f:66:af:b1:01:d9:23:0f:65:ac:f3:88: f6:e2:80:11:16:9b:1b:88:38:f7:95:f5:45:e4:1f: 65:7d:3f:d2:98:b9:e0:22:7f:61:ed:43:63:1e:0f: 0c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:5B:CF:17:FF:15:0B:E4:B4:AA:0B:13:05:DB:EA:A4:4E:A9:5A:E8 X509v3 Authority Key Identifier: keyid:29:FF:15:58:1B:B9:04:F1:B9:05:38:74:21:18:B0:1F:9E:FA:A6:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kf8VWBu5BPG5BTh0IRiwH576pmI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/WFvPF_8VC-S0qgsTBdvqpE6pWug.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.91.0/24 Signature Algorithm: sha256WithRSAEncryption 76:8a:5c:f2:76:af:ea:d2:f6:5a:49:a7:ca:46:30:f9:30:83: 01:78:b2:a1:fb:61:61:d3:c1:1b:72:4b:71:64:02:68:1c:10: e8:4b:83:1b:0a:8e:5b:84:7b:b6:47:c2:12:4f:7a:9a:1b:1c: 67:d9:cb:9d:45:28:ea:98:86:04:8a:14:c0:9f:62:bf:d9:ac: 52:5c:e1:c2:45:c0:93:d3:90:bb:46:88:6c:00:9c:6f:ae:df: 82:fb:9f:66:75:30:31:00:86:ea:72:3d:3a:ac:e0:23:e7:2b: aa:4c:ea:04:bb:d9:99:68:30:a1:49:57:21:90:19:4e:fe:d6: 45:ec:93:4f:c2:bf:d5:69:0e:f3:09:6f:ac:92:98:f6:3a:cc: 17:31:f2:de:c9:35:9e:54:41:2a:3e:7e:0a:af:c2:98:d3:1f: 7b:12:31:51:7f:ed:72:f3:b9:bc:3a:0f:0e:bc:93:cc:d1:c1: 0b:fa:11:4f:df:23:52:69:da:3b:5b:2d:a2:b4:e2:e4:4e:fa: 03:b2:0e:da:f0:77:a5:5c:2d:06:97:7b:d5:7f:82:74:df:0f: 2e:52:9d:c0:f2:a7:c4:56:70:2e:6c:a5:b8:bf:56:38:d4:08: ce:b7:c8:f0:9d:6d:d2:5d:ca:cd:b1:04:e4:37:13:f4:b3:7d: bc:87:cc:67 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g/Tne0BBpQNqjGLM9k+RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZmYxNTU4MWJiOTA0ZjFiOTA1Mzg3NDIxMThiMDFmOWVm YWE2NjIwHhcNMjYwMTAyMTYyMTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODViY2YxN2ZmMTUwYmU0YjRhYTBiMTMwNWRiZWFhNDRlYTk1YWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxq4kellTCwd2y/BZwY6Xjm0a6zj JNOQaBwtOWrgytBsdmhtVwt+fOfY6h1TWX2DxjjuWbdTQ4zsaYo5PjskAevB6t5z QtsdH5cF+mlhHRrCaVFby3EJuoQI5JW/KeoE0mCdHmWDNHiAX2Lt4liqn71JP9za PBeyKxY04aZJbetIZ99GGA3tTB5C4KYw3htNRNIsjrWdDDPPEkQvsQPdyYCuFPWe TcFSl3pQFrlkGto8BDkqUyqD6aAgLG+Nxkzk/9n2Ipoq54COsPbNMKr1jHXi8gIP Zq+xAdkjD2Ws84j24oARFpsbiDj3lfVF5B9lfT/SmLngIn9h7UNjHg8MpwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFhbzxf/FQvktKoLEwXb6qROqVroMB8GA1UdIwQY MBaAFCn/FVgbuQTxuQU4dCEYsB+e+qZiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2Y4VldCdTVCUEc1QlRoMElSaXdINTc2cG1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9kYjYyMzEtM2E3YS00ODRkLThiZWUt M2I4ZDhiNzZiN2Y2LzEvV0Z2UEZfOFZDLVMwcWdzVEJkdnFwRTZwV3VnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9kYjYyMzEtM2E3YS00ODRkLThiZWUtM2I4ZDhiNzZiN2Y2 LzEvS2Y4VldCdTVCUEc1QlRoMElSaXdINTc2cG1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW99bMA0G CSqGSIb3DQEBCwUAA4IBAQB2ilzydq/q0vZaSafKRjD5MIMBeLKh+2Fh08Ebcktx ZAJoHBDoS4MbCo5bhHu2R8IST3qaGxxn2cudRSjqmIYEihTAn2K/2axSXOHCRcCT 05C7RohsAJxvrt+C+59mdTAxAIbqcj06rOAj5yuqTOoEu9mZaDChSVchkBlO/tZF 7JNPwr/VaQ7zCW+skpj2OswXMfLeyTWeVEEqPn4Kr8KY0x97EjFRf+1y87m8Og8O vJPM0cEL+hFP3yNSado7Wy2itOLkTvoDsg7a8HelXC0Gl3vVf4J03w8uUp3A8qfE VnAubKW4v1Y41AjOt8jwnW3SXcrNsQTkNxP0s328h8xn -----END CERTIFICATE-----Generated at Mon Jan 12 12:27:13 2026 by rpki-client