This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/zRqtOZF-gQSY1lw46NbjxTdegwo.roa File: zRqtOZF-gQSY1lw46NbjxTdegwo.roa (raw, json) Hash identifier: XNy6oMhww9HHcF0MTFIo/vS5TPp+j3NibXiN6cMPZe4= Subject key identifier: CD:1A:AD:39:91:7E:81:04:98:D6:5C:38:E8:D6:E3:C5:37:5E:83:0A Certificate issuer: /CN=a32b618b508ec1365372c2aa675f3601293cc624 Certificate serial: 019B7C803E0A1DEE712713FAE8A4D0BA75B3 Authority key identifier: A3:2B:61:8B:50:8E:C1:36:53:72:C2:AA:67:5F:36:01:29:3C:C6:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/zRqtOZF-gQSY1lw46NbjxTdegwo.roa Signing time: Fri 02 Jan 2026 02:18:57 +0000 ROA not before: Fri 02 Jan 2026 02:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44947 IP address blocks: 91.195.37.0/24 maxlen: 24 2a13:6340::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:3e:0a:1d:ee:71:27:13:fa:e8:a4:d0:ba:75:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32b618b508ec1365372c2aa675f3601293cc624 Validity Not Before: Jan 2 02:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd1aad39917e810498d65c38e8d6e3c5375e830a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:67:75:1c:f1:06:53:b6:27:fb:b9:d7:24:d1: 49:43:62:31:5f:5b:22:79:ca:20:7f:73:6e:f0:ee: ef:46:28:94:f0:ba:62:9c:77:e3:08:d8:05:bb:b8: 64:29:dd:7f:ba:13:f9:8b:a1:03:1c:ff:ab:f7:de: 72:79:f8:24:f3:78:ba:78:a9:3b:e7:98:cc:3d:ea: d4:87:fa:17:ad:e2:fd:46:24:0a:ee:e9:4f:8f:28: ef:0c:ae:57:eb:83:3f:6e:da:b6:25:6e:77:9b:db: 75:ca:30:3a:76:44:15:a9:ac:f7:6c:b9:bf:fb:4b: b3:c9:47:9d:9b:26:92:b7:78:5d:6e:df:46:c5:12: bc:f6:22:7d:03:f9:40:96:5b:b6:71:41:00:c4:8f: 57:9c:3f:e6:04:7d:70:ac:68:90:17:a2:e2:71:f9: 45:5e:94:b2:7b:a8:20:72:eb:6d:f7:f0:f8:67:b4: 84:c3:db:09:23:7d:1d:bd:12:c3:90:58:e6:fc:27: 87:51:e7:c2:66:28:7d:52:63:09:92:ff:0d:45:1e: 89:8a:d9:eb:2f:f7:f0:c0:e8:16:f7:20:60:f5:de: 84:00:68:e3:d0:db:be:f7:2b:af:79:c0:12:d3:ca: 2c:47:c8:66:32:c4:48:e2:63:90:0f:89:e3:21:74: 62:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:1A:AD:39:91:7E:81:04:98:D6:5C:38:E8:D6:E3:C5:37:5E:83:0A X509v3 Authority Key Identifier: keyid:A3:2B:61:8B:50:8E:C1:36:53:72:C2:AA:67:5F:36:01:29:3C:C6:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/zRqtOZF-gQSY1lw46NbjxTdegwo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.195.37.0/24 IPv6: 2a13:6340::/29 Signature Algorithm: sha256WithRSAEncryption 0c:40:32:f2:89:6a:88:7e:84:9c:3f:f0:43:6e:45:c2:fd:5b: 57:2d:68:46:64:fa:3b:59:84:84:aa:f9:17:e6:8d:c5:29:46: a5:53:fd:af:b3:35:e3:d2:0d:df:b8:37:3c:a7:78:93:14:00: 01:e8:d7:18:47:9f:59:ff:aa:52:ad:4f:55:3a:9d:67:9d:eb: d6:51:41:94:c1:94:55:0f:b0:bb:e3:1e:fd:e0:65:7f:23:73: 1c:c3:7a:ce:f9:d9:35:ee:34:b0:9c:aa:c7:3a:39:87:26:ed: 01:ea:c3:77:c7:3e:cf:d5:74:00:e4:10:c6:a4:a9:11:74:5a: 4b:b5:59:1c:9b:5c:70:7c:3f:30:b9:a1:ee:2b:80:0f:16:ee: 27:a6:ff:1c:ff:c8:03:a9:93:44:d3:a4:b5:5a:14:13:24:fa: 7e:33:81:2e:df:69:dd:1c:1b:2f:58:0f:47:f3:56:75:76:ef: e5:f3:2c:c2:e6:e5:6e:27:23:6c:ba:19:5a:e9:59:b6:a7:84: 06:54:98:c0:39:a5:a0:8a:c6:00:82:64:36:98:2d:dd:0b:af: 86:e2:7b:93:16:ef:32:50:81:03:30:a4:2b:38:26:81:cd:e6: f3:61:a3:38:12:4d:94:55:00:63:ae:df:42:4f:36:45:da:3c: 55:40:59:9a -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8gD4KHe5xJxP66KTQunWzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzMmI2MThiNTA4ZWMxMzY1MzcyYzJhYTY3NWYzNjAxMjkz Y2M2MjQwHhcNMjYwMTAyMDIxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDFhYWQzOTkxN2U4MTA0OThkNjVjMzhlOGQ2ZTNjNTM3NWU4MzBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2d1HPEGU7Yn+7nXJNFJQ2IxX1si ecogf3Nu8O7vRiiU8LpinHfjCNgFu7hkKd1/uhP5i6EDHP+r995yefgk83i6eKk7 55jMPerUh/oXreL9RiQK7ulPjyjvDK5X64M/btq2JW53m9t1yjA6dkQVqaz3bLm/ +0uzyUedmyaSt3hdbt9GxRK89iJ9A/lAllu2cUEAxI9XnD/mBH1wrGiQF6LicflF XpSye6ggcutt9/D4Z7SEw9sJI30dvRLDkFjm/CeHUefCZih9UmMJkv8NRR6Jitnr L/fwwOgW9yBg9d6EAGjj0Nu+9yuvecAS08osR8hmMsRI4mOQD4njIXRitwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFM0arTmRfoEEmNZcOOjW48U3XoMKMB8GA1UdIwQY MBaAFKMrYYtQjsE2U3LCqmdfNgEpPMYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3l0aGkxQ093VFpUY3NLcVoxODJBU2s4eGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jZmVkMGQtMGZiMC00NTk4LWIzNjUt NjUwOTZkYmNhYzMwLzEvelJxdE9aRi1nUVNZMWx3NDZOYmp4VGRlZ3dvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9jZmVkMGQtMGZiMC00NTk4LWIzNjUtNjUwOTZkYmNhYzMw LzEvb3l0aGkxQ093VFpUY3NLcVoxODJBU2s4eGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAW8MlMA0E AgACMAcDBQMqE2NAMA0GCSqGSIb3DQEBCwUAA4IBAQAMQDLyiWqIfoScP/BDbkXC /VtXLWhGZPo7WYSEqvkX5o3FKUalU/2vszXj0g3fuDc8p3iTFAAB6NcYR59Z/6pS rU9VOp1nnevWUUGUwZRVD7C74x794GV/I3Mcw3rO+dk17jSwnKrHOjmHJu0B6sN3 xz7P1XQA5BDGpKkRdFpLtVkcm1xwfD8wuaHuK4APFu4npv8c/8gDqZNE06S1WhQT JPp+M4Eu32ndHBsvWA9H81Z1du/l8yzC5uVuJyNsuhla6Vm2p4QGVJjAOaWgisYA gmQ2mC3dC6+G4nuTFu8yUIEDMKQrOCaBzebzYaM4Ek2UVQBjrt9CTzZF2jxVQFma -----END CERTIFICATE-----Generated at Sun Jan 25 15:38:00 2026 by rpki-client