This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/3ZTfJsf9wXjPv1EQBKj-LNSra9A.roa File: 3ZTfJsf9wXjPv1EQBKj-LNSra9A.roa (raw, json) Hash identifier: uxPCNHXytdKge/y9iSVGprZRSTdqYPtpMRkCD655H48= Subject key identifier: DD:94:DF:26:C7:FD:C1:78:CF:BF:51:10:04:A8:FE:2C:D4:AB:6B:D0 Certificate issuer: /CN=773ae663ad0a1a3072dbd867992b7d8df25a449a Certificate serial: 019B791027AC49D164227370855368D317D6 Authority key identifier: 77:3A:E6:63:AD:0A:1A:30:72:DB:D8:67:99:2B:7D:8D:F2:5A:44:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/3ZTfJsf9wXjPv1EQBKj-LNSra9A.roa Signing time: Thu 01 Jan 2026 10:17:40 +0000 ROA not before: Thu 01 Jan 2026 10:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49711 IP address blocks: 91.215.176.0/22 maxlen: 24 91.220.250.0/24 maxlen: 24 176.118.152.0/21 maxlen: 21 2001:67c:57c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.crl rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:27:ac:49:d1:64:22:73:70:85:53:68:d3:17:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=773ae663ad0a1a3072dbd867992b7d8df25a449a Validity Not Before: Jan 1 10:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd94df26c7fdc178cfbf511004a8fe2cd4ab6bd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7f:ee:55:41:71:cb:3d:f7:03:1c:ac:d2:51: 09:47:4b:0f:75:52:c4:70:2c:80:48:ad:e0:5e:e0: 31:88:64:95:e2:27:2c:2c:40:57:e6:46:4a:30:4a: a5:2a:4b:41:05:0d:07:99:e8:79:88:55:a0:b1:1a: b2:10:02:5f:8d:18:e3:dd:02:b5:7b:78:39:1a:2a: ca:65:cf:2c:e9:43:ea:cb:a4:a7:d3:83:4c:55:74: 91:0e:f5:28:ff:49:28:24:b3:ca:32:e2:24:77:be: 1b:9d:76:5e:58:4d:a5:68:ae:af:8f:d5:14:bf:e1: bb:7b:39:aa:45:c5:14:5f:32:3e:42:f1:ce:af:28: 1d:39:2a:60:c8:4c:dc:41:4c:f7:82:d9:41:67:f0: 1e:e9:d8:7b:83:54:55:89:5e:67:9a:03:3a:17:7d: 1c:21:12:b2:55:2d:1b:ea:64:6b:f5:61:35:f1:85: 1b:98:08:a5:40:15:11:8d:3f:e1:4f:81:c0:f1:97: ba:39:f4:f9:ea:68:27:49:92:08:f1:7d:f2:20:47: d3:9a:78:5d:e4:05:e6:52:00:85:a1:37:07:37:68: a4:6b:b9:41:29:31:a0:41:5b:af:66:aa:58:f8:6f: 26:08:28:cd:39:b8:f2:a0:af:4d:3f:ae:29:e5:58: 57:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:94:DF:26:C7:FD:C1:78:CF:BF:51:10:04:A8:FE:2C:D4:AB:6B:D0 X509v3 Authority Key Identifier: keyid:77:3A:E6:63:AD:0A:1A:30:72:DB:D8:67:99:2B:7D:8D:F2:5A:44:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/3ZTfJsf9wXjPv1EQBKj-LNSra9A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.215.176.0/22 91.220.250.0/24 176.118.152.0/21 IPv6: 2001:67c:57c::/48 Signature Algorithm: sha256WithRSAEncryption a0:b7:3e:96:b8:a9:be:b4:fc:35:1f:eb:2e:c4:cb:89:a7:70: 92:37:94:0d:1a:98:ca:fa:23:10:b6:d4:87:d8:45:84:bf:f2: ce:4e:df:fd:33:95:af:d3:7b:c4:17:fe:c3:4b:5d:5c:e2:fa: cb:4a:b0:b8:55:f8:36:b0:54:0d:85:19:86:0e:d2:54:8e:64: 8b:6f:a4:ed:60:49:81:5e:10:2c:f8:c2:2f:68:e8:0f:ed:e0: 3e:2f:38:6f:37:55:48:76:79:49:ad:55:b4:05:5e:2a:8b:1f: 35:96:d2:fe:e8:f0:dd:62:dd:8b:4c:04:2c:ff:23:a0:76:23: 9f:a7:2f:03:54:27:68:80:c4:44:5a:66:96:0c:5e:02:73:27: f1:7b:2e:6f:9e:06:21:e8:2f:f7:65:f8:b7:dc:b7:ca:dd:95: bc:5b:bc:16:9e:0d:c5:e6:ef:8e:ff:4f:c9:ec:0b:2c:e9:a4: 16:7a:ca:59:5a:5e:bc:36:54:6c:0f:ff:37:fd:28:15:e9:a6: 04:86:ec:0b:4d:a0:f9:fe:88:f7:ae:02:df:92:51:6c:64:96: b0:15:ec:8a:af:0e:0c:29:8f:21:d1:6f:e6:b7:8d:24:9f:39: ff:52:b3:c1:69:c6:bd:c7:81:76:21:8c:f4:25:ed:35:5c:bf: 9f:b7:9a:af -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt5ECesSdFkInNwhVNo0xfWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3M2FlNjYzYWQwYTFhMzA3MmRiZDg2Nzk5MmI3ZDhkZjI1 YTQ0OWEwHhcNMjYwMTAxMTAxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDk0ZGYyNmM3ZmRjMTc4Y2ZiZjUxMTAwNGE4ZmUyY2Q0YWI2YmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3/uVUFxyz33Axys0lEJR0sPdVLE cCyASK3gXuAxiGSV4icsLEBX5kZKMEqlKktBBQ0Hmeh5iFWgsRqyEAJfjRjj3QK1 e3g5GirKZc8s6UPqy6Sn04NMVXSRDvUo/0koJLPKMuIkd74bnXZeWE2laK6vj9UU v+G7ezmqRcUUXzI+QvHOrygdOSpgyEzcQUz3gtlBZ/Ae6dh7g1RViV5nmgM6F30c IRKyVS0b6mRr9WE18YUbmAilQBURjT/hT4HA8Ze6OfT56mgnSZII8X3yIEfTmnhd 5AXmUgCFoTcHN2ika7lBKTGgQVuvZqpY+G8mCCjNObjyoK9NP64p5VhXewIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFN2U3ybH/cF4z79REASo/izUq2vQMB8GA1UdIwQY MBaAFHc65mOtChowctvYZ5krfY3yWkSaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHpybVk2MEtHakJ5Mjlobm1TdDlqZkphUkpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8wOTJmZGMtYzMwMC00MWE1LTkwMTUt NjYyZWM4MThkMjNkLzEvM1pUZkpzZjl3WGpQdjFFUUJLai1MTlNyYTlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny8wOTJmZGMtYzMwMC00MWE1LTkwMTUtNjYyZWM4MThkMjNk LzEvZHpybVk2MEtHakJ5Mjlobm1TdDlqZkphUkpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQCW9ewAwQA W9z6AwQDsHaYMA8EAgACMAkDBwAgAQZ8BXwwDQYJKoZIhvcNAQELBQADggEBAKC3 Ppa4qb60/DUf6y7Ey4mncJI3lA0amMr6IxC21IfYRYS/8s5O3/0zla/Te8QX/sNL XVzi+stKsLhV+DawVA2FGYYO0lSOZItvpO1gSYFeECz4wi9o6A/t4D4vOG83VUh2 eUmtVbQFXiqLHzWW0v7o8N1i3YtMBCz/I6B2I5+nLwNUJ2iAxERaZpYMXgJzJ/F7 Lm+eBiHoL/dl+Lfct8rdlbxbvBaeDcXm747/T8nsCyzppBZ6yllaXrw2VGwP/zf9 KBXppgSG7AtNoPn+iPeuAt+SUWxklrAV7IqvDgwpjyHRb+a3jSSfOf9Ss8Fpxr3H gXYhjPQl7TVcv5+3mq8= -----END CERTIFICATE-----Generated at Sun Jan 25 22:15:37 2026 by rpki-client