This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/W0j6YSMe1GX3A4tZiQV8vzc_kpw.roa File: W0j6YSMe1GX3A4tZiQV8vzc_kpw.roa (raw, json) Hash identifier: fb2PFmFnYQYmWpVf2HANiiXyOyVRMMcnLRhOHSluDkI= Subject key identifier: 5B:48:FA:61:23:1E:D4:65:F7:03:8B:59:89:05:7C:BF:37:3F:92:9C Certificate issuer: /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61 Certificate serial: 019B7835023E2BFA7B6BD2F9CD44DD6FA909 Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/W0j6YSMe1GX3A4tZiQV8vzc_kpw.roa Signing time: Thu 01 Jan 2026 06:18:18 +0000 ROA not before: Thu 01 Jan 2026 06:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51478 IP address blocks: 91.219.12.0/22 maxlen: 22 91.219.12.0/24 maxlen: 24 91.219.13.0/24 maxlen: 24 91.219.14.0/24 maxlen: 24 91.219.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 21:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:02:3e:2b:fa:7b:6b:d2:f9:cd:44:dd:6f:a9:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61 Validity Not Before: Jan 1 06:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b48fa61231ed465f7038b5989057cbf373f929c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:27:3a:1a:93:85:dd:17:ee:95:77:7c:03:b0: b8:4b:e1:87:ce:83:d8:08:ba:f6:12:23:aa:d6:43: a8:81:d3:5b:2c:2f:62:db:47:e9:19:ed:48:a3:62: 72:17:c3:7d:33:3b:a0:97:00:8f:cc:ce:7c:10:9c: e5:7c:bf:5a:26:ca:2a:a3:82:54:b8:19:05:7b:de: a6:97:40:84:43:dd:79:3f:10:97:b9:69:98:bd:3a: b6:e5:d6:4c:b4:92:1c:a3:bb:54:97:62:f7:71:d2: da:c6:36:0f:8d:d6:ef:dd:12:0e:f5:c3:13:64:cf: 88:4a:84:f6:41:c2:1e:ef:41:4f:fa:94:fa:8d:57: db:26:33:59:fd:72:08:a5:7d:bf:0d:f2:1f:6e:ee: 37:e3:2c:10:ff:4c:5c:9a:1f:88:7d:af:70:ce:c8: df:10:43:a3:e9:71:bf:6a:2a:1b:30:92:a5:eb:5d: 87:71:38:cb:d3:57:2c:cd:e2:ee:d5:b7:cd:b7:6e: fc:b0:cb:d7:1a:3c:41:0e:71:57:a4:08:50:84:ef: 82:18:d2:bd:37:4e:12:b1:43:d4:01:f7:ee:63:4f: 28:41:80:5b:e2:a7:93:8c:b4:65:9a:f9:fe:ce:57: 43:31:ce:be:73:06:22:37:57:93:f7:4c:2b:9d:7c: 14:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:48:FA:61:23:1E:D4:65:F7:03:8B:59:89:05:7C:BF:37:3F:92:9C X509v3 Authority Key Identifier: keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/W0j6YSMe1GX3A4tZiQV8vzc_kpw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.219.12.0/22 Signature Algorithm: sha256WithRSAEncryption 16:b5:32:d7:5c:e6:ea:a2:af:58:ea:ef:20:1f:80:48:69:90: 43:87:bb:bb:c6:f2:1d:5e:ee:b1:32:97:bd:2a:0c:48:5f:58: 2a:a0:bb:c9:85:7f:ba:fd:f3:a6:ae:5f:94:fd:30:04:48:54: 2d:f5:e3:ae:b5:c5:0b:ee:45:24:1e:46:6a:76:41:4e:25:7f: 59:b6:cc:33:87:2e:ff:00:47:81:a2:4e:5a:de:8f:77:71:04: f5:2e:22:58:79:16:a0:15:a1:3a:7a:99:17:a4:f4:ca:ec:e9: d7:a6:cf:4f:cf:42:02:e1:e4:55:fd:b6:3a:27:eb:01:ae:af: 27:6f:8f:4c:c4:c7:4f:48:1a:67:92:66:37:c2:8e:ec:13:df: 5a:7d:86:68:a2:64:80:a1:85:6c:2f:a6:32:dc:a6:cb:6f:c5: 01:00:44:bc:d0:54:11:4f:b7:31:41:1d:4e:06:28:b1:40:68: b7:99:8c:65:34:62:89:47:87:53:cf:9e:ee:40:2c:8b:5a:2a: 1a:08:fb:38:b1:77:3d:70:5c:57:cc:db:3c:93:12:18:ca:b9: 72:a3:9b:1c:1e:25:38:a8:d3:c6:fa:a9:2a:3f:f0:f4:f4:f2: 82:c7:45:94:20:c1:81:da:3b:0a:82:7a:a4:d0:11:07:b2:09: bc:ef:a4:41 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NQI+K/p7a9L5zUTdb6kJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5Nzk4NjNjZWE4MmFlYjhlOWRmMzg0YjM5YWE1MTc2ZjRi Y2ZhNjEwHhcNMjYwMTAxMDYxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjQ4ZmE2MTIzMWVkNDY1ZjcwMzhiNTk4OTA1N2NiZjM3M2Y5MjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yc6GpOF3RfulXd8A7C4S+GHzoPY CLr2EiOq1kOogdNbLC9i20fpGe1Io2JyF8N9MzuglwCPzM58EJzlfL9aJsoqo4JU uBkFe96ml0CEQ915PxCXuWmYvTq25dZMtJIco7tUl2L3cdLaxjYPjdbv3RIO9cMT ZM+ISoT2QcIe70FP+pT6jVfbJjNZ/XIIpX2/DfIfbu434ywQ/0xcmh+Ifa9wzsjf EEOj6XG/aiobMJKl612HcTjL01cszeLu1bfNt278sMvXGjxBDnFXpAhQhO+CGNK9 N04SsUPUAffuY08oQYBb4qeTjLRlmvn+zldDMc6+cwYiN1eT90wrnXwUDwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFtI+mEjHtRl9wOLWYkFfL83P5KcMB8GA1UdIwQY MBaAFHl5hjzqgq646d84SzmqUXb0vPphMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xY2NmMjUtMjBkZS00YjJlLWEwZTEt ZGU0YWNmNDQ3ZmFlLzEvVzBqNllTTWUxR1gzQTR0WmlRVjh2emNfa3B3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8xY2NmMjUtMjBkZS00YjJlLWEwZTEtZGU0YWNmNDQ3ZmFl LzEvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW9sMMA0G CSqGSIb3DQEBCwUAA4IBAQAWtTLXXObqoq9Y6u8gH4BIaZBDh7u7xvIdXu6xMpe9 KgxIX1gqoLvJhX+6/fOmrl+U/TAESFQt9eOutcUL7kUkHkZqdkFOJX9Ztswzhy7/ AEeBok5a3o93cQT1LiJYeRagFaE6epkXpPTK7OnXps9Pz0IC4eRV/bY6J+sBrq8n b49MxMdPSBpnkmY3wo7sE99afYZoomSAoYVsL6Yy3KbLb8UBAES80FQRT7cxQR1O BiixQGi3mYxlNGKJR4dTz57uQCyLWioaCPs4sXc9cFxXzNs8kxIYyrlyo5scHiU4 qNPG+qkqP/D09PKCx0WUIMGB2jsKgnqk0BEHsgm876RB -----END CERTIFICATE-----Generated at Wed Jan 7 07:15:37 2026 by rpki-client