This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/Zp_dQMxeK4s5cFJUs-SkUn4FjXk.roa File: Zp_dQMxeK4s5cFJUs-SkUn4FjXk.roa (raw, json) Hash identifier: gjQNsvq1Su+L7BoPrc7WNGYbmEUyjE7QFdUTdDWn9gA= Subject key identifier: 66:9F:DD:40:CC:5E:2B:8B:39:70:52:54:B3:E4:A4:52:7E:05:8D:79 Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055 Certificate serial: 019B77C75FC672A119CC8BC91E3127E0F986 Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/Zp_dQMxeK4s5cFJUs-SkUn4FjXk.roa Signing time: Thu 01 Jan 2026 04:18:33 +0000 ROA not before: Thu 01 Jan 2026 04:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396356 IP address blocks: 89.187.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:5f:c6:72:a1:19:cc:8b:c9:1e:31:27:e0:f9:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055 Validity Not Before: Jan 1 04:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=669fdd40cc5e2b8b39705254b3e4a4527e058d79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3d:e7:a5:dd:9e:2f:cc:db:0d:46:45:38:81: 4f:65:fa:f7:d3:fc:10:8f:2f:20:cd:ea:6a:c9:64: 55:d5:31:56:ab:45:c9:c3:09:a9:e7:d3:8c:e8:82: f7:56:6b:25:c7:52:a1:16:11:da:cc:58:ca:99:6c: 42:f3:96:b5:6d:f4:4e:90:b7:d0:c6:46:6d:7b:37: 6e:37:fc:16:b4:3e:93:79:a8:c6:af:b6:c1:09:f3: cd:9a:9f:71:ba:52:57:3b:4c:5f:17:e2:11:aa:d9: 24:78:92:bc:72:f5:4a:e7:ba:9d:75:f3:84:d9:cb: 4a:42:94:7a:8e:bf:ec:3c:73:96:7a:6e:9d:02:2b: 5a:6a:44:cd:4d:07:57:7d:9b:dd:1f:7f:fc:39:f8: 43:a1:83:8b:7b:eb:14:e7:b3:f3:a4:a6:c4:e7:cf: e6:09:2b:dc:a4:65:3f:76:89:91:13:16:49:80:45: 9d:2e:3a:23:87:6c:92:09:6a:1c:0e:4b:8c:18:74: 27:44:ab:32:cf:62:d2:fd:eb:9d:34:03:71:e9:43: 4e:03:84:dd:ff:b4:f2:17:f7:38:ee:5d:be:f4:51: 51:51:2b:52:53:a3:37:2f:7e:e6:31:c7:de:5d:9d: 5c:da:8e:52:7c:cf:c8:51:c9:a1:53:7d:80:90:7d: fa:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:9F:DD:40:CC:5E:2B:8B:39:70:52:54:B3:E4:A4:52:7E:05:8D:79 X509v3 Authority Key Identifier: keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/Zp_dQMxeK4s5cFJUs-SkUn4FjXk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.187.28.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:8f:87:8d:bc:7f:83:d2:f2:4c:f5:a0:40:45:78:48:a9:02: 81:22:c1:f8:e0:1a:90:7f:29:81:4b:aa:c7:be:04:ba:c8:ad: 36:6e:5d:0b:04:13:b6:1d:81:7a:05:e0:ce:8a:b2:ed:c6:a3: b4:60:a2:3b:7e:21:e3:cf:5f:0a:ec:73:7f:a6:ca:b1:0a:09: 50:42:28:4a:38:3f:22:7d:ca:6d:b3:13:0b:41:ff:ad:40:74: 75:ba:9d:3d:96:78:25:4c:72:f4:d4:9c:2c:31:4c:2e:0d:5f: 5e:ab:e7:e4:a1:d6:3f:a6:88:62:29:28:36:59:5b:90:ef:6f: 7a:43:df:06:92:40:e1:fd:e2:bb:a5:04:1c:71:1c:60:24:50: d4:bb:45:65:90:fa:a8:26:d4:c2:14:8b:89:e5:7e:90:29:4d: 2f:51:c3:50:f1:e9:a7:7a:cc:ba:1a:f2:0f:3b:ea:11:e1:37: 6d:93:b4:7f:b9:5f:c9:dc:6e:56:8a:99:61:12:d7:18:2b:e6: af:78:f2:c1:ff:60:17:19:9a:ef:c6:9f:b5:17:7f:84:c2:bb: 23:31:87:40:32:89:8c:17:45:58:bf:96:e2:8c:29:ed:4b:c5: d0:d3:ad:f1:b8:6f:72:7a:68:fd:e2:ea:b0:a4:79:e0:47:1d: 8a:df:2f:91 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x1/GcqEZzIvJHjEn4PmGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MWVjN2NjZjBmYTc2MWVkOTliYzVhN2E5ZWMwZDBlZWIw YmYwNTUwHhcNMjYwMTAxMDQxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjlmZGQ0MGNjNWUyYjhiMzk3MDUyNTRiM2U0YTQ1MjdlMDU4ZDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxD3npd2eL8zbDUZFOIFPZfr30/wQ jy8gzepqyWRV1TFWq0XJwwmp59OM6IL3Vmslx1KhFhHazFjKmWxC85a1bfROkLfQ xkZtezduN/wWtD6TeajGr7bBCfPNmp9xulJXO0xfF+IRqtkkeJK8cvVK57qddfOE 2ctKQpR6jr/sPHOWem6dAitaakTNTQdXfZvdH3/8OfhDoYOLe+sU57PzpKbE58/m CSvcpGU/domRExZJgEWdLjojh2ySCWocDkuMGHQnRKsyz2LS/eudNANx6UNOA4Td /7TyF/c47l2+9FFRUStSU6M3L37mMcfeXZ1c2o5SfM/IUcmhU32AkH36DQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGaf3UDMXiuLOXBSVLPkpFJ+BY15MB8GA1UdIwQY MBaAFAkex8zw+nYe2ZvFp6nsDQ7rC/BVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQt NDVjZmM4NTdkZGRkLzEvWnBfZFFNeGVLNHM1Y0ZKVXMtU2tVbjRGalhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQtNDVjZmM4NTdkZGRk LzEvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWbscMA0G CSqGSIb3DQEBCwUAA4IBAQAdj4eNvH+D0vJM9aBARXhIqQKBIsH44BqQfymBS6rH vgS6yK02bl0LBBO2HYF6BeDOirLtxqO0YKI7fiHjz18K7HN/psqxCglQQihKOD8i fcptsxMLQf+tQHR1up09lnglTHL01JwsMUwuDV9eq+fkodY/pohiKSg2WVuQ7296 Q98GkkDh/eK7pQQccRxgJFDUu0VlkPqoJtTCFIuJ5X6QKU0vUcNQ8emnesy6GvIP O+oR4Tdtk7R/uV/J3G5WiplhEtcYK+avePLB/2AXGZrvxp+1F3+EwrsjMYdAMomM F0VYv5bijCntS8XQ063xuG9yemj94uqwpHngRx2K3y+R -----END CERTIFICATE-----Generated at Sun Jan 25 08:51:02 2026 by rpki-client