This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/ZXdyEyK3SaId4Xur9UCKxGCjI8c.roa File: ZXdyEyK3SaId4Xur9UCKxGCjI8c.roa (raw, json) Hash identifier: zQ+cgbxBxeFyJgysTpnSUkOVuSjMGCgEsR1NJ1pLGCk= Subject key identifier: 65:77:72:13:22:B7:49:A2:1D:E1:7B:AB:F5:40:8A:C4:60:A3:23:C7 Certificate issuer: /CN=94f8bf9f305527521508697e2eaa3be1c7a18454 Certificate serial: 019B7F858114E5FAC90C55F23D93F44A9B88 Authority key identifier: 94:F8:BF:9F:30:55:27:52:15:08:69:7E:2E:AA:3B:E1:C7:A1:84:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/ZXdyEyK3SaId4Xur9UCKxGCjI8c.roa Signing time: Fri 02 Jan 2026 16:23:34 +0000 ROA not before: Fri 02 Jan 2026 16:23:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210064 IP address blocks: 91.192.160.0/24 maxlen: 24 2a03:8fc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:81:14:e5:fa:c9:0c:55:f2:3d:93:f4:4a:9b:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94f8bf9f305527521508697e2eaa3be1c7a18454 Validity Not Before: Jan 2 16:23:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6577721322b749a21de17babf5408ac460a323c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:14:97:c5:d1:a9:84:fb:bf:17:a6:a5:fb:bd: 9d:62:7d:ef:5d:34:7e:17:59:52:3e:0b:1e:54:fd: a6:6e:45:42:af:64:db:f1:8d:fb:6b:6f:b3:16:3a: 99:ad:bb:d6:29:9c:bb:29:90:2f:03:48:4e:cb:00: 0e:de:94:1c:26:09:88:4c:0d:d3:67:c3:57:42:5d: 7d:94:97:6d:da:77:29:6f:d2:34:db:1f:f5:d6:7a: e3:6d:0b:be:3f:51:82:e7:f1:9a:fc:7c:cf:51:5f: 2c:6d:ac:84:36:cd:8c:68:79:a7:35:62:55:7b:b3: 0a:0b:04:28:09:7b:00:b0:03:3c:a3:91:80:11:0f: ad:29:2f:3c:81:c9:84:9e:ee:a2:0e:d1:08:c4:cb: ba:74:6c:ca:ca:91:27:a6:65:06:fd:e8:34:32:d9: aa:c5:70:46:30:ba:6f:a1:81:f8:2d:51:6e:3c:cf: 39:a9:00:06:ed:ae:d2:b7:c5:14:d2:5f:dd:55:e6: 25:c2:74:13:15:5a:44:04:8c:ee:bd:9b:6c:46:db: 83:34:49:0e:0f:7a:45:f0:97:1e:22:b9:1a:1b:ad: b3:2f:fc:9f:97:f7:90:2d:f0:98:0e:08:55:d3:5f: f7:80:fa:73:72:74:a8:df:a8:17:e1:9c:d3:78:29: 6b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:77:72:13:22:B7:49:A2:1D:E1:7B:AB:F5:40:8A:C4:60:A3:23:C7 X509v3 Authority Key Identifier: keyid:94:F8:BF:9F:30:55:27:52:15:08:69:7E:2E:AA:3B:E1:C7:A1:84:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/ZXdyEyK3SaId4Xur9UCKxGCjI8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.192.160.0/24 IPv6: 2a03:8fc0::/29 Signature Algorithm: sha256WithRSAEncryption 61:33:21:67:2e:2a:b9:66:37:35:ba:f2:c4:dd:bd:b3:30:48: ef:10:b3:50:1f:aa:95:f0:af:b8:18:f5:d7:c8:c2:10:66:93: f2:4e:ee:00:2f:d7:5b:44:0c:7d:89:5d:63:46:bf:b5:e1:f1: 8f:a1:d4:9a:85:65:25:82:ae:bd:9d:f1:03:fd:f4:ae:8d:61: 16:35:8f:5e:8e:0a:b8:1d:54:9d:4e:10:3e:54:a2:aa:28:c4: 3e:d3:aa:98:a1:ac:4f:89:2f:37:0e:ab:f8:3e:dc:9f:bc:ae: 2d:80:04:ad:a6:01:6c:a2:e1:f9:69:67:4d:95:51:16:47:46: 9f:c6:75:d6:25:5c:d4:35:b8:14:a8:28:c7:ef:86:1d:5d:fe: 32:33:ef:e5:7d:3a:39:6b:7b:d9:7b:07:31:93:71:4d:2e:ae: a2:58:07:46:c9:72:9f:5f:2c:12:85:be:e2:f7:49:ee:cd:68: f0:df:09:12:d1:08:0a:52:1e:c6:ad:e3:96:95:9f:43:63:3d: 33:19:db:27:33:90:e1:38:f7:b4:28:d9:f2:24:6d:b7:3a:ed: 08:ac:83:4a:09:ee:79:e7:08:e5:99:94:85:8b:00:18:4c:a8: 10:11:36:f0:1a:5b:f1:bd:32:44:27:5c:33:15:68:cf:4a:17: fd:1e:79:11 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/hYEU5frJDFXyPZP0SpuIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0ZjhiZjlmMzA1NTI3NTIxNTA4Njk3ZTJlYWEzYmUxYzdh MTg0NTQwHhcNMjYwMTAyMTYyMzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTc3NzIxMzIyYjc0OWEyMWRlMTdiYWJmNTQwOGFjNDYwYTMyM2M3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RSXxdGphPu/F6al+72dYn3vXTR+ F1lSPgseVP2mbkVCr2Tb8Y37a2+zFjqZrbvWKZy7KZAvA0hOywAO3pQcJgmITA3T Z8NXQl19lJdt2ncpb9I02x/11nrjbQu+P1GC5/Ga/HzPUV8sbayENs2MaHmnNWJV e7MKCwQoCXsAsAM8o5GAEQ+tKS88gcmEnu6iDtEIxMu6dGzKypEnpmUG/eg0Mtmq xXBGMLpvoYH4LVFuPM85qQAG7a7St8UU0l/dVeYlwnQTFVpEBIzuvZtsRtuDNEkO D3pF8JceIrkaG62zL/yfl/eQLfCYDghV01/3gPpzcnSo36gX4ZzTeClr9wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFGV3chMit0miHeF7q/VAisRgoyPHMB8GA1UdIwQY MBaAFJT4v58wVSdSFQhpfi6qO+HHoYRUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFBpX256QlZKMUlWQ0dsLUxxbzc0Y2VoaEZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lNzNlOTUtYzNjOS00OWFlLWEyZDkt YTdiODU0NjBmMzY2LzEvWlhkeUV5SzNTYUlkNFh1cjlVQ0t4R0NqSThjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9lNzNlOTUtYzNjOS00OWFlLWEyZDktYTdiODU0NjBmMzY2 LzEvbFBpX256QlZKMUlWQ0dsLUxxbzc0Y2VoaEZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAW8CgMA0E AgACMAcDBQMqA4/AMA0GCSqGSIb3DQEBCwUAA4IBAQBhMyFnLiq5Zjc1uvLE3b2z MEjvELNQH6qV8K+4GPXXyMIQZpPyTu4AL9dbRAx9iV1jRr+14fGPodSahWUlgq69 nfED/fSujWEWNY9ejgq4HVSdThA+VKKqKMQ+06qYoaxPiS83Dqv4PtyfvK4tgASt pgFsouH5aWdNlVEWR0afxnXWJVzUNbgUqCjH74YdXf4yM+/lfTo5a3vZewcxk3FN Lq6iWAdGyXKfXywShb7i90nuzWjw3wkS0QgKUh7GreOWlZ9DYz0zGdsnM5DhOPe0 KNnyJG23Ou0IrINKCe555wjlmZSFiwAYTKgQETbwGlvxvTJEJ1wzFWjPShf9HnkR -----END CERTIFICATE-----Generated at Mon Jan 26 04:38:47 2026 by rpki-client