This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/kz2wF3XWQ2RN8sHvIuIFZYtVNIQ.roa File: kz2wF3XWQ2RN8sHvIuIFZYtVNIQ.roa (raw, json) Hash identifier: mNiLwNy9yFADV0O6uoYz7QI7buc164Ngl+VExm6ZaD8= Subject key identifier: 93:3D:B0:17:75:D6:43:64:4D:F2:C1:EF:22:E2:05:65:8B:55:34:84 Certificate issuer: /CN=62beaa57c67aeb5bafd99793ab4846850a796c28 Certificate serial: 019B7D5AC1B8B9608B4DE6EA27A6543E2E20 Authority key identifier: 62:BE:AA:57:C6:7A:EB:5B:AF:D9:97:93:AB:48:46:85:0A:79:6C:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/kz2wF3XWQ2RN8sHvIuIFZYtVNIQ.roa Signing time: Fri 02 Jan 2026 06:17:38 +0000 ROA not before: Fri 02 Jan 2026 06:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44947 IP address blocks: 91.239.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.mft rsync://rpki.ripe.net/repository/DEFAULT/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:c1:b8:b9:60:8b:4d:e6:ea:27:a6:54:3e:2e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62beaa57c67aeb5bafd99793ab4846850a796c28 Validity Not Before: Jan 2 06:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=933db01775d643644df2c1ef22e205658b553484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3c:17:7c:57:5d:ba:fd:d3:3a:b9:09:56:e0: 69:a7:96:4d:af:cf:0e:c4:e8:16:85:b1:02:09:b8: 33:a3:e0:c5:54:27:11:e7:cd:56:98:aa:e9:3d:41: a2:fc:2f:a0:a6:32:b9:6e:06:79:00:f4:57:8a:14: 39:df:2e:51:0c:e2:26:e2:ea:47:17:4e:85:52:53: c2:08:0b:19:e1:3d:4a:be:0c:9a:03:1f:a2:70:17: 92:57:c3:8f:46:98:c9:58:78:a0:f7:53:d4:5b:91: 0b:7d:f7:d0:14:f2:de:38:9f:9a:87:0f:a5:7a:c1: e5:04:5e:60:a6:ec:01:d6:d2:31:a2:84:8d:c0:6c: af:6e:b9:e8:f8:26:3c:b1:db:de:82:f7:ab:71:be: 76:80:40:c2:42:80:27:89:65:7e:c4:be:21:b2:a7: cd:b3:e7:01:57:c3:20:61:ec:7b:3d:1c:64:6e:67: e5:16:81:31:dc:cc:c4:f1:1e:12:bd:99:27:81:95: 1e:f4:e9:8f:02:92:d3:79:ed:79:1e:93:f3:db:21: c0:75:de:55:f0:89:38:f9:e1:5f:56:31:91:d6:da: ad:71:62:d1:de:b2:d2:21:06:28:78:30:d2:8f:26: 8c:1d:52:5e:ff:0e:1d:26:78:39:59:2b:5d:ff:e3: c8:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:3D:B0:17:75:D6:43:64:4D:F2:C1:EF:22:E2:05:65:8B:55:34:84 X509v3 Authority Key Identifier: keyid:62:BE:AA:57:C6:7A:EB:5B:AF:D9:97:93:AB:48:46:85:0A:79:6C:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/kz2wF3XWQ2RN8sHvIuIFZYtVNIQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.239.189.0/24 Signature Algorithm: sha256WithRSAEncryption 38:5c:56:d8:4e:5e:cd:dc:05:09:37:0e:61:44:12:42:64:0c: ef:88:e9:95:87:9e:96:7a:50:d3:b7:6e:90:08:36:09:3e:c6: 53:4d:d1:30:7b:fa:f7:b6:fa:74:fe:df:33:59:00:fa:81:78: f5:dc:ed:85:ae:07:e4:36:c3:e0:af:8b:09:46:0d:71:8a:11: 2f:34:f3:ee:51:09:e8:40:0f:88:21:59:cd:17:06:1c:6a:e2: ab:90:a1:73:52:73:4e:d8:6b:d8:98:98:c7:28:d9:7d:a6:d5: bf:3a:bf:fa:0c:0b:07:e8:65:91:b4:5e:79:78:45:f2:6c:f2: c3:f9:9f:4c:03:3d:57:1e:b3:3f:c4:54:0f:e4:d7:0d:7d:e0: 09:92:b5:94:b4:18:c1:e9:05:56:7e:f3:8e:d0:8d:45:97:d6: c7:6d:28:bd:2d:04:06:a1:ae:b0:01:7c:d5:04:b8:66:90:e9: 9b:dc:bb:03:e9:51:47:81:08:11:3a:65:c8:39:90:b8:74:bc: bb:ac:c0:75:34:9a:e2:98:bb:b8:d7:3d:90:0d:7f:f7:be:71: 33:ae:44:85:c0:5f:eb:44:0d:22:00:92:20:0c:a8:48:c1:f6: 5a:d1:fb:e1:32:8e:d6:6c:71:d0:7c:2a:6d:5a:37:6d:9d:dd: 78:45:1b:7b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WsG4uWCLTebqJ6ZUPi4gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyYmVhYTU3YzY3YWViNWJhZmQ5OTc5M2FiNDg0Njg1MGE3 OTZjMjgwHhcNMjYwMTAyMDYxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MzNkYjAxNzc1ZDY0MzY0NGRmMmMxZWYyMmUyMDU2NThiNTUzNDg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTwXfFdduv3TOrkJVuBpp5ZNr88O xOgWhbECCbgzo+DFVCcR581WmKrpPUGi/C+gpjK5bgZ5APRXihQ53y5RDOIm4upH F06FUlPCCAsZ4T1KvgyaAx+icBeSV8OPRpjJWHig91PUW5ELfffQFPLeOJ+ahw+l esHlBF5gpuwB1tIxooSNwGyvbrno+CY8sdvegvercb52gEDCQoAniWV+xL4hsqfN s+cBV8MgYex7PRxkbmflFoEx3MzE8R4SvZkngZUe9OmPApLTee15HpPz2yHAdd5V 8Ik4+eFfVjGR1tqtcWLR3rLSIQYoeDDSjyaMHVJe/w4dJng5WStd/+PIewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJM9sBd11kNkTfLB7yLiBWWLVTSEMB8GA1UdIwQY MBaAFGK+qlfGeutbr9mXk6tIRoUKeWwoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXI2cVY4WjY2MXV2MlplVHEwaEdoUXA1YkNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8yMjU4MWUtZmU4Yy00ZmI4LTk1ODUt OTg4MGYwNGRiOTRhLzEva3oyd0YzWFdRMlJOOHNIdkl1SUZaWXRWTklRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy8yMjU4MWUtZmU4Yy00ZmI4LTk1ODUtOTg4MGYwNGRiOTRh LzEvWXI2cVY4WjY2MXV2MlplVHEwaEdoUXA1YkNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW++9MA0G CSqGSIb3DQEBCwUAA4IBAQA4XFbYTl7N3AUJNw5hRBJCZAzviOmVh56WelDTt26Q CDYJPsZTTdEwe/r3tvp0/t8zWQD6gXj13O2FrgfkNsPgr4sJRg1xihEvNPPuUQno QA+IIVnNFwYcauKrkKFzUnNO2GvYmJjHKNl9ptW/Or/6DAsH6GWRtF55eEXybPLD +Z9MAz1XHrM/xFQP5NcNfeAJkrWUtBjB6QVWfvOO0I1Fl9bHbSi9LQQGoa6wAXzV BLhmkOmb3LsD6VFHgQgROmXIOZC4dLy7rMB1NJrimLu41z2QDX/3vnEzrkSFwF/r RA0iAJIgDKhIwfZa0fvhMo7WbHHQfCptWjdtnd14RRt7 -----END CERTIFICATE-----Generated at Sun Jan 25 16:55:12 2026 by rpki-client