This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/2-4ZrGQpT0KhwdAqEtwr7VvBLF4.roa File: 2-4ZrGQpT0KhwdAqEtwr7VvBLF4.roa (raw, json) Hash identifier: ZZxmDsOTlkFKhz+gwa9Ymw4vgOjq/wRy+P8gUBbGFBY= Subject key identifier: DB:EE:19:AC:64:29:4F:42:A1:C1:D0:2A:12:DC:2B:ED:5B:C1:2C:5E Certificate issuer: /CN=9514df9fdc3a0b128c20ee8c06628c43c958bbf0 Certificate serial: 019B7E38E84B3261F9C03155F97C5004AA82 Authority key identifier: 95:14:DF:9F:DC:3A:0B:12:8C:20:EE:8C:06:62:8C:43:C9:58:BB:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRTfn9w6CxKMIO6MBmKMQ8lYu_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/2-4ZrGQpT0KhwdAqEtwr7VvBLF4.roa Signing time: Fri 02 Jan 2026 10:20:17 +0000 ROA not before: Fri 02 Jan 2026 10:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42199 IP address blocks: 91.189.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/lRTfn9w6CxKMIO6MBmKMQ8lYu_A.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/lRTfn9w6CxKMIO6MBmKMQ8lYu_A.mft rsync://rpki.ripe.net/repository/DEFAULT/lRTfn9w6CxKMIO6MBmKMQ8lYu_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:e8:4b:32:61:f9:c0:31:55:f9:7c:50:04:aa:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9514df9fdc3a0b128c20ee8c06628c43c958bbf0 Validity Not Before: Jan 2 10:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dbee19ac64294f42a1c1d02a12dc2bed5bc12c5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:85:93:de:1b:b1:b1:6e:32:44:f6:2a:24:ac: 63:10:24:01:0c:e9:f5:78:55:5c:2e:e6:c6:f9:54: 33:3b:19:f1:93:7c:56:2a:1a:38:bf:64:60:ca:61: 4a:ed:57:a7:b9:37:03:b8:61:d9:f7:64:c7:b1:a2: f9:f7:e1:82:a6:b3:96:ed:e6:64:58:63:dd:16:95: ef:e4:21:8e:2a:0c:1a:ab:87:89:fb:b3:87:b8:dc: 7e:60:e2:05:45:d7:45:61:df:ac:0e:88:be:a5:44: 9d:f4:b7:dc:94:93:cc:3f:47:ca:98:37:3f:89:0a: 47:2d:40:ad:a7:c6:0e:07:35:27:88:9e:55:0e:40: d6:d0:77:d4:bf:8a:99:53:c3:fb:38:37:ec:fa:65: 38:26:c5:d3:06:e3:56:95:36:f8:7a:d4:d5:b0:4f: 6d:ae:98:5f:f1:9b:c5:5e:8f:a4:a8:a9:c3:10:bb: 77:d3:c8:35:b4:9c:3f:b7:c0:a4:a0:a2:46:ed:bc: d6:df:a7:c0:6c:aa:5e:e6:08:05:09:a1:79:e5:d1: c3:99:a7:b1:ec:db:ee:77:0d:83:dc:ee:ef:5c:89: 63:f3:56:bf:0a:78:4c:ac:65:22:22:17:24:24:8b: b2:a3:3d:9c:50:a8:13:d1:c3:e1:fe:d3:1c:d6:57: 9f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:EE:19:AC:64:29:4F:42:A1:C1:D0:2A:12:DC:2B:ED:5B:C1:2C:5E X509v3 Authority Key Identifier: keyid:95:14:DF:9F:DC:3A:0B:12:8C:20:EE:8C:06:62:8C:43:C9:58:BB:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRTfn9w6CxKMIO6MBmKMQ8lYu_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/2-4ZrGQpT0KhwdAqEtwr7VvBLF4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/lRTfn9w6CxKMIO6MBmKMQ8lYu_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.189.63.0/24 Signature Algorithm: sha256WithRSAEncryption 89:9a:94:e2:d4:bc:26:63:aa:b9:1e:83:46:c5:84:fc:a3:b0: 18:fa:a0:c2:a8:7a:78:ed:51:f3:2d:73:cd:2d:66:39:40:5a: 71:87:80:a4:a5:d3:5a:cd:c0:24:8f:60:03:c3:eb:bf:02:f1: 6f:f5:ec:23:8b:aa:b4:8e:32:70:9e:6b:3b:89:9c:d6:00:78: 4b:c7:39:32:9f:d0:d4:77:22:91:6e:22:aa:46:3a:ba:15:2b: 91:ca:34:b1:6c:b2:b6:44:1d:9f:cd:ec:71:ae:78:d3:49:d1: a7:dd:fb:e9:da:4f:81:8c:8c:53:81:fb:48:61:fa:c3:16:b6: 75:52:59:55:c2:71:70:29:7c:55:c0:16:99:f4:0e:2b:8f:be: 08:0c:ba:4c:91:a7:a0:89:4d:9d:bf:1c:04:cc:a2:5b:80:be: 9a:d8:ae:78:b6:dc:21:0f:f4:0f:03:ec:55:a5:8a:db:67:74: 38:bf:0a:c0:d6:32:b1:99:e2:a3:39:2c:41:14:80:5a:78:87: 66:3b:26:8e:93:cd:e1:96:ee:76:19:da:0b:f8:44:77:c4:aa: 08:ba:f5:1c:97:58:47:3f:cf:6b:6f:1b:36:c4:00:fd:f7:c7: 18:17:fe:17:94:2d:b0:88:8c:e9:15:d9:be:bf:d6:06:f7:51: 13:6e:af:2b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OOhLMmH5wDFV+XxQBKqCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MTRkZjlmZGMzYTBiMTI4YzIwZWU4YzA2NjI4YzQzYzk1 OGJiZjAwHhcNMjYwMTAyMTAyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYmVlMTlhYzY0Mjk0ZjQyYTFjMWQwMmExMmRjMmJlZDViYzEyYzVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYWT3huxsW4yRPYqJKxjECQBDOn1 eFVcLubG+VQzOxnxk3xWKho4v2RgymFK7VenuTcDuGHZ92THsaL59+GCprOW7eZk WGPdFpXv5CGOKgwaq4eJ+7OHuNx+YOIFRddFYd+sDoi+pUSd9LfclJPMP0fKmDc/ iQpHLUCtp8YOBzUniJ5VDkDW0HfUv4qZU8P7ODfs+mU4JsXTBuNWlTb4etTVsE9t rphf8ZvFXo+kqKnDELt308g1tJw/t8CkoKJG7bzW36fAbKpe5ggFCaF55dHDmaex 7Nvudw2D3O7vXIlj81a/CnhMrGUiIhckJIuyoz2cUKgT0cPh/tMc1lefYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNvuGaxkKU9CocHQKhLcK+1bwSxeMB8GA1UdIwQY MBaAFJUU35/cOgsSjCDujAZijEPJWLvwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFJUZm45dzZDeEtNSU82TUJtS01ROGxZdV9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi85N2ZiMGQtZDc3Zi00NDY3LTg2Mjct ZTIyMmJmODUyOWI4LzEvMi00WnJHUXBUMEtod2RBcUV0d3I3VnZCTEY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi85N2ZiMGQtZDc3Zi00NDY3LTg2MjctZTIyMmJmODUyOWI4 LzEvbFJUZm45dzZDeEtNSU82TUJtS01ROGxZdV9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW70/MA0G CSqGSIb3DQEBCwUAA4IBAQCJmpTi1LwmY6q5HoNGxYT8o7AY+qDCqHp47VHzLXPN LWY5QFpxh4CkpdNazcAkj2ADw+u/AvFv9ewji6q0jjJwnms7iZzWAHhLxzkyn9DU dyKRbiKqRjq6FSuRyjSxbLK2RB2fzexxrnjTSdGn3fvp2k+BjIxTgftIYfrDFrZ1 UllVwnFwKXxVwBaZ9A4rj74IDLpMkaegiU2dvxwEzKJbgL6a2K54ttwhD/QPA+xV pYrbZ3Q4vwrA1jKxmeKjOSxBFIBaeIdmOyaOk83hlu52GdoL+ER3xKoIuvUcl1hH P89rbxs2xAD998cYF/4XlC2wiIzpFdm+v9YG91ETbq8r -----END CERTIFICATE-----Generated at Mon Jan 26 07:08:18 2026 by rpki-client