This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/_8ZFO9ocBpb_Ph-40yN6ACd4c-s.roa File: _8ZFO9ocBpb_Ph-40yN6ACd4c-s.roa (raw, json) Hash identifier: nv3UD4Bh28t9KPR31Vxom/hj2bFKQ3slvDA/BYva5PI= Subject key identifier: FF:C6:45:3B:DA:1C:06:96:FF:3E:1F:B8:D3:23:7A:00:27:78:73:EB Certificate issuer: /CN=cdda5b4ce95fa0bdf6054169e77aefc8265ddbc4 Certificate serial: 019B78A224082085C9F58FD6577A25B8D58A Authority key identifier: CD:DA:5B:4C:E9:5F:A0:BD:F6:05:41:69:E7:7A:EF:C8:26:5D:DB:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zdpbTOlfoL32BUFp53rvyCZd28Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/_8ZFO9ocBpb_Ph-40yN6ACd4c-s.roa Signing time: Thu 01 Jan 2026 08:17:30 +0000 ROA not before: Thu 01 Jan 2026 08:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25581 IP address blocks: 91.224.94.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/zdpbTOlfoL32BUFp53rvyCZd28Q.crl rsync://rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/zdpbTOlfoL32BUFp53rvyCZd28Q.mft rsync://rpki.ripe.net/repository/DEFAULT/zdpbTOlfoL32BUFp53rvyCZd28Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 11:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:24:08:20:85:c9:f5:8f:d6:57:7a:25:b8:d5:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdda5b4ce95fa0bdf6054169e77aefc8265ddbc4 Validity Not Before: Jan 1 08:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ffc6453bda1c0696ff3e1fb8d3237a00277873eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7f:f0:1a:bc:bd:e0:2a:86:e1:a1:70:74:6b: f5:70:af:38:d5:30:34:da:4d:ee:86:83:50:fd:03: a1:50:1a:a6:6c:d2:3c:27:77:df:c4:65:7d:87:58: bd:f4:80:c6:b0:96:ec:a7:00:b9:9b:9d:72:20:5e: 17:70:0a:ad:75:0a:d8:43:d0:3a:55:db:71:6f:ed: a6:d5:47:7e:93:73:f7:3d:16:54:30:e6:77:c0:32: ff:a7:00:61:98:9d:6d:fe:6e:f0:de:9e:12:ef:1b: 75:34:04:4c:c3:02:77:0d:31:1f:10:01:aa:5d:04: 5c:a6:87:9e:7b:35:2d:35:91:64:cc:ef:47:de:de: 79:2a:cc:d0:49:5c:df:da:38:fe:39:38:c5:a5:3c: 9a:f1:4c:c7:6f:62:c7:ec:fd:30:90:ba:a0:ce:de: 7f:dc:98:9d:35:bc:8e:86:63:56:83:1d:ad:b9:56: 32:f2:97:3e:b7:ed:a0:ca:6a:fe:9b:f7:53:ce:a6: 4e:c0:a6:47:7c:93:87:1c:ec:85:a1:cf:7e:4c:fa: 9e:44:33:a1:7d:f4:7d:b9:43:74:15:ec:4b:1a:c7: 4f:af:90:a6:c7:93:95:15:19:34:bd:76:52:a3:b6: 1a:b4:4c:d8:41:c1:1a:bc:a5:85:2f:23:96:aa:54: 92:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:C6:45:3B:DA:1C:06:96:FF:3E:1F:B8:D3:23:7A:00:27:78:73:EB X509v3 Authority Key Identifier: keyid:CD:DA:5B:4C:E9:5F:A0:BD:F6:05:41:69:E7:7A:EF:C8:26:5D:DB:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdpbTOlfoL32BUFp53rvyCZd28Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/_8ZFO9ocBpb_Ph-40yN6ACd4c-s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/zdpbTOlfoL32BUFp53rvyCZd28Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.224.94.0/23 Signature Algorithm: sha256WithRSAEncryption 05:9f:28:4a:86:90:53:6f:68:c4:30:30:8e:91:e4:8b:e4:5d: d1:70:9d:5a:4f:07:10:5c:fa:92:fb:e3:c3:33:7f:76:48:d3: 27:40:13:58:76:37:1f:7d:a2:06:46:c2:aa:e0:3b:83:11:0f: 74:d9:99:4a:7d:e3:bc:72:82:58:dc:b1:6f:9d:2e:71:c1:ae: 2b:fa:76:17:52:e9:5a:98:f6:dc:1c:a1:4f:20:f3:c2:61:5a: 07:4c:ac:49:77:bb:92:0d:de:6b:43:8d:d4:46:d2:cd:02:cd: 1b:b8:d1:91:6c:b1:93:26:5c:25:dc:04:58:8b:ab:86:50:f1: e8:b9:af:76:08:59:bb:c0:ae:0b:30:01:58:4a:12:da:3e:36: 58:74:cc:6e:b7:4a:b7:62:ce:f3:a8:9f:29:c2:d0:00:2f:81: 47:29:51:48:82:91:99:95:3d:71:8e:c4:64:60:37:76:25:0a: 9c:52:a4:ba:d2:e8:f5:3f:98:2b:17:ad:d3:36:a8:2b:cf:c4: 15:6b:c4:63:8c:e9:d7:a4:ad:e2:de:3c:c2:81:32:88:47:7d: ba:af:3b:95:e5:24:a5:07:05:83:e7:dd:8b:3f:af:28:83:26: c8:61:0d:c4:fa:de:6b:e3:a2:ed:c8:8e:63:ff:d3:15:ed:d7: 7c:ac:cf:19 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oiQIIIXJ9Y/WV3oluNWKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkZGE1YjRjZTk1ZmEwYmRmNjA1NDE2OWU3N2FlZmM4MjY1 ZGRiYzQwHhcNMjYwMTAxMDgxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZmM2NDUzYmRhMWMwNjk2ZmYzZTFmYjhkMzIzN2EwMDI3Nzg3M2ViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtH/wGry94CqG4aFwdGv1cK841TA0 2k3uhoNQ/QOhUBqmbNI8J3ffxGV9h1i99IDGsJbspwC5m51yIF4XcAqtdQrYQ9A6 Vdtxb+2m1Ud+k3P3PRZUMOZ3wDL/pwBhmJ1t/m7w3p4S7xt1NARMwwJ3DTEfEAGq XQRcpoeeezUtNZFkzO9H3t55KszQSVzf2jj+OTjFpTya8UzHb2LH7P0wkLqgzt5/ 3JidNbyOhmNWgx2tuVYy8pc+t+2gymr+m/dTzqZOwKZHfJOHHOyFoc9+TPqeRDOh ffR9uUN0FexLGsdPr5Cmx5OVFRk0vXZSo7YatEzYQcEavKWFLyOWqlSSXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP/GRTvaHAaW/z4fuNMjegAneHPrMB8GA1UdIwQY MBaAFM3aW0zpX6C99gVBaed678gmXdvEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemRwYlRPbGZvTDMyQlVGcDUzcnZ5Q1pkMjhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC84ZTIzZTUtZGIyOC00NWVkLWI2N2Yt MmFkZDVlNzk3Yzc1LzEvXzhaRk85b2NCcGJfUGgtNDB5TjZBQ2Q0Yy1zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC84ZTIzZTUtZGIyOC00NWVkLWI2N2YtMmFkZDVlNzk3Yzc1 LzEvemRwYlRPbGZvTDMyQlVGcDUzcnZ5Q1pkMjhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+BeMA0G CSqGSIb3DQEBCwUAA4IBAQAFnyhKhpBTb2jEMDCOkeSL5F3RcJ1aTwcQXPqS++PD M392SNMnQBNYdjcffaIGRsKq4DuDEQ902ZlKfeO8coJY3LFvnS5xwa4r+nYXUula mPbcHKFPIPPCYVoHTKxJd7uSDd5rQ43URtLNAs0buNGRbLGTJlwl3ARYi6uGUPHo ua92CFm7wK4LMAFYShLaPjZYdMxut0q3Ys7zqJ8pwtAAL4FHKVFIgpGZlT1xjsRk YDd2JQqcUqS60uj1P5grF63TNqgrz8QVa8RjjOnXpK3i3jzCgTKIR326rzuV5SSl BwWD592LP68ogybIYQ3E+t5r46LtyI5j/9MV7dd8rM8Z -----END CERTIFICATE-----Generated at Mon Jan 26 18:55:07 2026 by rpki-client