This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/zV7jhZ7JErc_V47qqL5sUDVuwgc.roa File: zV7jhZ7JErc_V47qqL5sUDVuwgc.roa (raw, json) Hash identifier: p3J07ABPcXO+j+xHbIKxrlq0zZrwta9XC2iciwkxeDg= Subject key identifier: CD:5E:E3:85:9E:C9:12:B7:3F:57:8E:EA:A8:BE:6C:50:35:6E:C2:07 Certificate issuer: /CN=d5ee40f4589d6a11b24f7bbcc29ab9f9ae689719 Certificate serial: 019B797E1BBDC28AB6BB15C281F42ECCC523 Authority key identifier: D5:EE:40:F4:58:9D:6A:11:B2:4F:7B:BC:C2:9A:B9:F9:AE:68:97:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1e5A9FidahGyT3u8wpq5-a5olxk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/zV7jhZ7JErc_V47qqL5sUDVuwgc.roa Signing time: Thu 01 Jan 2026 12:17:46 +0000 ROA not before: Thu 01 Jan 2026 12:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49321 IP address blocks: 91.196.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.mft rsync://rpki.ripe.net/repository/DEFAULT/1e5A9FidahGyT3u8wpq5-a5olxk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:1b:bd:c2:8a:b6:bb:15:c2:81:f4:2e:cc:c5:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5ee40f4589d6a11b24f7bbcc29ab9f9ae689719 Validity Not Before: Jan 1 12:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd5ee3859ec912b73f578eeaa8be6c50356ec207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:95:ad:ce:ca:e4:21:54:4d:6b:64:b9:c5:4d: 89:b1:4d:07:09:e4:29:36:14:fa:d4:b7:d9:61:6b: dd:63:19:84:79:f8:f3:8d:a5:fb:07:fd:4c:60:66: 58:ef:63:26:e6:18:d8:61:cc:27:0c:dc:f0:f0:a8: 40:78:cc:a8:d6:0a:06:f3:2b:8c:2c:1a:22:8f:a8: 88:32:76:97:1d:87:34:bc:81:64:48:17:d4:70:48: 2a:fe:8c:a1:11:7d:7d:47:63:a3:c9:2c:b9:34:e5: 76:6f:a0:f6:55:0d:59:f6:6e:eb:61:1c:92:0b:8a: 4d:ed:7a:09:ec:20:da:47:7b:38:cf:b4:bc:b9:37: ef:62:10:e3:52:6b:5a:c9:d2:67:d6:8c:73:30:27: 2b:23:b8:a3:0b:e8:50:0a:e5:e5:98:3a:40:4b:42: 51:7b:8f:4a:37:05:34:ec:7a:f6:bd:9a:eb:4a:10: 69:10:63:6a:aa:a0:8c:98:64:c4:5e:28:33:55:c4: ae:41:77:b8:6f:bb:f2:51:92:a5:73:94:69:4c:64: 87:5e:3b:5f:51:60:6f:49:0a:0e:89:eb:90:1b:bc: be:3a:44:2b:c0:39:ba:03:41:07:86:d6:da:91:d5: c0:b2:16:da:ac:6f:4a:7a:36:74:be:bb:0f:43:e1: 11:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:5E:E3:85:9E:C9:12:B7:3F:57:8E:EA:A8:BE:6C:50:35:6E:C2:07 X509v3 Authority Key Identifier: keyid:D5:EE:40:F4:58:9D:6A:11:B2:4F:7B:BC:C2:9A:B9:F9:AE:68:97:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e5A9FidahGyT3u8wpq5-a5olxk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/zV7jhZ7JErc_V47qqL5sUDVuwgc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.196.155.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:5e:7b:9b:71:2b:ef:d5:5d:a4:c1:1d:1b:47:6a:11:e5:26: ba:48:32:29:37:c3:e4:62:10:50:7f:fc:c7:a3:2a:1d:00:de: 2c:bb:47:e3:ce:67:45:6a:0e:88:f9:2a:0f:dd:70:3b:06:5e: a2:ae:18:4d:cd:39:86:e8:b5:73:69:aa:c5:e5:fe:ff:d9:71: 72:3e:88:ed:d9:3a:fe:fb:67:95:43:9d:f4:48:9b:d4:81:91: e0:12:d6:0d:5d:4c:d7:5b:c8:ad:5a:9a:b0:7d:02:9f:68:c0: 22:c6:21:5a:43:16:70:84:0b:12:d4:1f:7d:74:89:82:ef:2f: 5a:fd:17:1a:c5:e6:8a:a6:07:55:66:56:48:d5:06:de:b8:d8: 89:b3:00:92:34:9b:ea:88:c6:9b:78:4c:48:46:1c:09:f2:7b: 64:c8:e0:65:8f:43:34:38:d4:39:86:21:fd:75:2d:10:75:0a: bf:ae:1b:55:7b:9a:17:cf:ca:17:21:86:39:5b:ba:bc:4f:59: 7e:c5:77:f0:7f:bc:c2:a8:e4:5b:59:49:2d:4e:8d:03:08:89: d5:39:f8:d3:7e:a6:7b:b8:49:36:11:ee:5f:67:ad:f6:6c:2d: 7c:86:d7:0f:43:b0:7d:f0:c2:c7:ad:1c:dd:5f:98:00:a4:dd: b7:81:65:b4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fhu9woq2uxXCgfQuzMUjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ZWU0MGY0NTg5ZDZhMTFiMjRmN2JiY2MyOWFiOWY5YWU2 ODk3MTkwHhcNMjYwMTAxMTIxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDVlZTM4NTllYzkxMmI3M2Y1NzhlZWFhOGJlNmM1MDM1NmVjMjA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZWtzsrkIVRNa2S5xU2JsU0HCeQp NhT61LfZYWvdYxmEefjzjaX7B/1MYGZY72Mm5hjYYcwnDNzw8KhAeMyo1goG8yuM LBoij6iIMnaXHYc0vIFkSBfUcEgq/oyhEX19R2OjySy5NOV2b6D2VQ1Z9m7rYRyS C4pN7XoJ7CDaR3s4z7S8uTfvYhDjUmtaydJn1oxzMCcrI7ijC+hQCuXlmDpAS0JR e49KNwU07Hr2vZrrShBpEGNqqqCMmGTEXigzVcSuQXe4b7vyUZKlc5RpTGSHXjtf UWBvSQoOieuQG7y+OkQrwDm6A0EHhtbakdXAshbarG9KejZ0vrsPQ+ERBQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM1e44WeyRK3P1eO6qi+bFA1bsIHMB8GA1UdIwQY MBaAFNXuQPRYnWoRsk97vMKaufmuaJcZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWU1QTlGaWRhaEd5VDN1OHdwcTUtYTVvbHhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy84YzEzMDYtNzgwNS00MTdkLWJlNjMt OWVhMmE2ZmI2YTgxLzEvelY3amhaN0pFcmNfVjQ3cXFMNXNVRFZ1d2djLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy84YzEzMDYtNzgwNS00MTdkLWJlNjMtOWVhMmE2ZmI2YTgx LzEvMWU1QTlGaWRhaEd5VDN1OHdwcTUtYTVvbHhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8SbMA0G CSqGSIb3DQEBCwUAA4IBAQBsXnubcSvv1V2kwR0bR2oR5Sa6SDIpN8PkYhBQf/zH oyodAN4su0fjzmdFag6I+SoP3XA7Bl6irhhNzTmG6LVzaarF5f7/2XFyPojt2Tr+ +2eVQ530SJvUgZHgEtYNXUzXW8itWpqwfQKfaMAixiFaQxZwhAsS1B99dImC7y9a /RcaxeaKpgdVZlZI1QbeuNiJswCSNJvqiMabeExIRhwJ8ntkyOBlj0M0ONQ5hiH9 dS0QdQq/rhtVe5oXz8oXIYY5W7q8T1l+xXfwf7zCqORbWUktTo0DCInVOfjTfqZ7 uEk2Ee5fZ632bC18htcPQ7B98MLHrRzdX5gApN23gWW0 -----END CERTIFICATE-----Generated at Sun Jan 25 21:06:55 2026 by rpki-client