This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/1zpb2nXEr4Ee1d_VNwmBR55ZCj0.roa File: 1zpb2nXEr4Ee1d_VNwmBR55ZCj0.roa (raw, json) Hash identifier: 28f/uCdUk8CNOhACS5NvxGTufUocvQglFvpiAqLBHAE= Subject key identifier: D7:3A:5B:DA:75:C4:AF:81:1E:D5:DF:D5:37:09:81:47:9E:59:0A:3D Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Certificate serial: 019B7F8479854F5252333E2BA61B5AAF7A2E Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/1zpb2nXEr4Ee1d_VNwmBR55ZCj0.roa Signing time: Fri 02 Jan 2026 16:22:26 +0000 ROA not before: Fri 02 Jan 2026 16:22:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211709 IP address blocks: 91.93.184.0/24 maxlen: 24 213.14.231.0/24 maxlen: 24 213.14.233.0/24 maxlen: 24 213.14.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:79:85:4f:52:52:33:3e:2b:a6:1b:5a:af:7a:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Validity Not Before: Jan 2 16:22:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d73a5bda75c4af811ed5dfd5370981479e590a3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b3:82:e1:c2:36:06:a7:bf:7d:ce:0c:f5:c2: e4:ff:95:3e:25:ed:73:70:8e:20:b3:8a:40:e1:00: 55:e6:8a:7c:8a:a8:88:bf:c8:c4:7d:87:b6:8e:60: f6:5d:a4:ce:0e:a6:6e:ac:4d:96:31:92:88:06:60: cc:cd:e8:09:bb:3a:75:e3:cf:14:1c:85:d8:36:f2: 8c:3a:10:53:d5:97:3a:97:f2:0d:3e:5d:48:11:99: f1:b3:c0:4f:91:2f:f2:21:44:9d:9b:c9:fb:5d:d6: dc:1e:8d:66:c3:b1:aa:cf:f5:a3:4a:a9:98:42:1e: 59:f8:c0:4b:a8:f5:42:96:73:43:16:55:bd:32:ed: 75:e3:31:6e:b5:5f:bf:1b:61:8f:72:05:61:e7:b2: 97:89:67:e4:8a:ae:c6:e7:03:fe:4c:7b:b4:d3:ca: 8b:22:89:cd:99:bb:92:8b:77:fe:4f:82:13:dc:fd: 43:f8:13:59:32:39:1d:08:f5:18:13:a4:d9:5b:e3: ae:68:53:ef:cd:bd:ad:6c:12:61:3d:a0:f8:86:77: 31:19:ab:46:66:e5:a9:de:3e:4d:08:71:41:f9:8f: d5:f6:7b:2d:e8:cd:8d:0c:cb:d3:9c:95:77:00:42: 8a:74:36:33:d4:d3:06:0c:4c:5a:1e:8e:6f:03:fc: b7:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:3A:5B:DA:75:C4:AF:81:1E:D5:DF:D5:37:09:81:47:9E:59:0A:3D X509v3 Authority Key Identifier: keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/1zpb2nXEr4Ee1d_VNwmBR55ZCj0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.93.184.0/24 213.14.231.0/24 213.14.233.0-213.14.234.255 Signature Algorithm: sha256WithRSAEncryption 4f:93:ca:9e:b8:ff:bf:32:67:9f:8a:9f:30:6c:8b:26:b8:a6: 5d:72:78:5a:2a:c0:11:ce:74:b3:ed:e2:39:c8:d2:14:d3:fc: 46:a0:84:53:a3:ec:cc:31:3b:7e:83:75:6e:2b:da:16:90:df: 81:d0:4c:f4:9f:38:27:36:a4:ef:90:63:2e:02:55:3b:8e:79: 83:86:9c:be:78:c3:d7:f0:b0:95:62:68:58:36:5b:2f:55:e8: 40:09:47:5a:d4:5d:c3:aa:14:bb:b3:12:e4:e7:fa:14:a7:ee: 56:34:09:89:b0:bc:f9:fe:df:4d:4c:7f:f2:31:87:27:32:50: af:07:cb:7c:a6:b8:6e:29:86:8b:7d:64:22:d1:ab:94:92:2f: b2:97:a4:d5:88:93:e1:e5:ef:98:eb:74:35:64:8a:47:38:1c: 2f:84:f1:37:e0:77:ec:61:b9:24:5c:ea:cb:92:2d:f7:ce:bb: ea:72:1c:10:be:2e:38:28:2f:7e:f3:2e:af:a9:5e:a9:d0:9a: 95:1c:3e:ab:1a:fc:22:9c:07:64:1b:83:68:7d:a0:21:6b:b4: ea:ef:63:6d:35:31:4c:d6:22:61:72:7a:62:47:04:f8:e5:4d: de:4a:db:3b:8d:a3:17:a2:49:df:2b:d3:ba:bb:e0:5d:68:ec: 02:8b:97:9b -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt/hHmFT1JSMz4rphtar3ouMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNTljNDMyM2Y3NjdjZTRmZmM4NWRhYWQyMDhiOTBjMDRm YmQzZTkwHhcNMjYwMTAyMTYyMjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzNhNWJkYTc1YzRhZjgxMWVkNWRmZDUzNzA5ODE0NzllNTkwYTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7OC4cI2Bqe/fc4M9cLk/5U+Je1z cI4gs4pA4QBV5op8iqiIv8jEfYe2jmD2XaTODqZurE2WMZKIBmDMzegJuzp1488U HIXYNvKMOhBT1Zc6l/INPl1IEZnxs8BPkS/yIUSdm8n7XdbcHo1mw7Gqz/WjSqmY Qh5Z+MBLqPVClnNDFlW9Mu114zFutV+/G2GPcgVh57KXiWfkiq7G5wP+THu008qL IonNmbuSi3f+T4IT3P1D+BNZMjkdCPUYE6TZW+OuaFPvzb2tbBJhPaD4hncxGatG ZuWp3j5NCHFB+Y/V9nst6M2NDMvTnJV3AEKKdDYz1NMGDExaHo5vA/y3EwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFNc6W9p1xK+BHtXf1TcJgUeeWQo9MB8GA1UdIwQY MBaAFI1ZxDI/dnzk/8hdqtIIuQwE+9PpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUt ZjJiZTlmNmM2NjRjLzEvMXpwYjJuWEVyNEVlMWRfVk53bUJSNTVaQ2owLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUtZjJiZTlmNmM2NjRj LzEvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAW124AwQA 1Q7nMAwDBADVDukDBADVDuowDQYJKoZIhvcNAQELBQADggEBAE+Typ64/78yZ5+K nzBsiya4pl1yeFoqwBHOdLPt4jnI0hTT/EaghFOj7MwxO36DdW4r2haQ34HQTPSf OCc2pO+QYy4CVTuOeYOGnL54w9fwsJViaFg2Wy9V6EAJR1rUXcOqFLuzEuTn+hSn 7lY0CYmwvPn+301Mf/IxhycyUK8Hy3ymuG4phot9ZCLRq5SSL7KXpNWIk+Hl75jr dDVkikc4HC+E8Tfgd+xhuSRc6suSLffOu+pyHBC+LjgoL37zLq+pXqnQmpUcPqsa /CKcB2Qbg2h9oCFrtOrvY201MUzWImFyemJHBPjlTd5K2zuNoxeiSd8r07q74F1o 7AKLl5s= -----END CERTIFICATE-----Generated at Mon Jan 26 05:32:47 2026 by rpki-client