This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/Z07tktorOBcHfE3hsn2N89eRrmM.roa File: Z07tktorOBcHfE3hsn2N89eRrmM.roa (raw, json) Hash identifier: 7mXHoHwif1lVmpqWPvn8rNFkNTwiLeFAHtrPjsutn9A= Subject key identifier: 67:4E:ED:92:DA:2B:38:17:07:7C:4D:E1:B2:7D:8D:F3:D7:91:AE:63 Certificate issuer: /CN=3e25ab6985f79ca9de06e98e8b9da245d8559ab6 Certificate serial: 019B79ED021CE5AE90D75DEFB1C671464B67 Authority key identifier: 3E:25:AB:69:85:F7:9C:A9:DE:06:E9:8E:8B:9D:A2:45:D8:55:9A:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/Z07tktorOBcHfE3hsn2N89eRrmM.roa Signing time: Thu 01 Jan 2026 14:18:54 +0000 ROA not before: Thu 01 Jan 2026 14:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211560 IP address blocks: 91.151.94.0/24 maxlen: 24 185.137.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.crl rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:02:1c:e5:ae:90:d7:5d:ef:b1:c6:71:46:4b:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e25ab6985f79ca9de06e98e8b9da245d8559ab6 Validity Not Before: Jan 1 14:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=674eed92da2b3817077c4de1b27d8df3d791ae63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:69:d2:d7:4f:a1:56:0a:da:52:c1:0b:69:9e: 96:9c:6d:ba:9d:fa:29:ab:89:cb:f6:22:22:9e:15: 07:19:64:00:fb:2d:06:2a:ec:be:78:8b:07:17:db: f7:50:6f:57:66:b0:20:35:52:59:aa:12:f2:85:17: 19:46:15:3b:2f:0c:83:83:e2:46:6d:27:cf:e3:23: 97:38:13:3b:f1:10:90:cb:24:2a:51:43:7a:b0:2d: d8:d9:32:02:9f:44:5c:76:3f:76:35:d0:c6:72:b7: b8:43:fd:88:22:14:ac:b7:2d:fa:fc:40:fa:75:f4: 37:6f:8d:97:88:e9:36:e4:7e:84:be:97:21:68:29: 09:e0:a3:23:34:70:fc:b1:1c:25:d6:ce:b3:30:a7: 9d:cc:f9:a5:6a:3b:6d:3e:ad:c6:5f:d5:ca:cb:54: 53:e0:78:5f:3f:b1:ad:8b:8e:ab:e9:13:d7:b2:74: 67:14:d1:f9:3e:6a:c3:9b:70:e9:db:c5:b2:9e:dd: bc:27:64:c9:da:8c:51:59:b2:ae:0e:b8:cb:03:d6: fc:dd:74:60:0f:48:77:ca:16:07:60:99:e2:db:93: 76:4e:27:d6:07:94:c5:f6:15:98:fd:a4:3b:99:cb: 36:8e:15:30:52:f4:12:52:2c:48:fb:64:54:63:78: dd:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:4E:ED:92:DA:2B:38:17:07:7C:4D:E1:B2:7D:8D:F3:D7:91:AE:63 X509v3 Authority Key Identifier: keyid:3E:25:AB:69:85:F7:9C:A9:DE:06:E9:8E:8B:9D:A2:45:D8:55:9A:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/Z07tktorOBcHfE3hsn2N89eRrmM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.151.94.0/24 185.137.98.0/24 Signature Algorithm: sha256WithRSAEncryption 00:fd:0d:59:84:6c:62:d3:d6:9a:25:89:e1:0a:c1:b9:fc:01: f6:ac:be:fb:a8:74:df:75:dd:d4:c7:80:f4:ec:4d:68:44:17: ab:15:f2:9f:e6:ed:e6:60:d4:27:be:fe:01:ec:4f:05:36:af: 6a:d1:1e:d2:d6:4b:ee:cc:8e:c7:7c:36:63:23:c6:b6:e0:1c: e2:65:59:53:a4:f9:8a:68:cc:f7:07:49:05:b9:70:8e:1a:72: 4f:fe:13:3a:bb:4c:90:8e:a2:72:c0:73:f1:0d:47:f8:58:fc: b1:99:af:cf:dc:c7:a6:73:af:7f:68:37:69:83:92:12:b5:ef: 97:5a:e7:03:69:37:96:2d:2a:dc:2e:7d:d4:76:eb:6f:3f:14: 68:de:02:27:ec:b3:e2:61:b9:db:6a:60:fa:da:99:f2:6a:04: b8:ce:c4:e3:74:84:5a:d6:e1:c0:2d:1f:1d:ee:97:bd:cf:b8: ce:1f:d6:54:f3:2f:0b:0d:51:cb:04:11:61:75:80:f8:1e:83: ef:73:7c:19:bd:eb:11:e7:fd:68:5e:01:86:d9:8d:76:6b:60: 30:c5:b7:05:eb:48:fe:d4:a3:3b:1a:1c:e1:5d:e5:07:17:74: 09:ea:16:81:4c:04:0a:95:95:d9:c3:c5:93:1b:29:98:f3:95: 71:36:8b:a1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57QIc5a6Q113vscZxRktnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMjVhYjY5ODVmNzljYTlkZTA2ZTk4ZThiOWRhMjQ1ZDg1 NTlhYjYwHhcNMjYwMTAxMTQxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NzRlZWQ5MmRhMmIzODE3MDc3YzRkZTFiMjdkOGRmM2Q3OTFhZTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7WnS10+hVgraUsELaZ6WnG26nfop q4nL9iIinhUHGWQA+y0GKuy+eIsHF9v3UG9XZrAgNVJZqhLyhRcZRhU7LwyDg+JG bSfP4yOXOBM78RCQyyQqUUN6sC3Y2TICn0Rcdj92NdDGcre4Q/2IIhSsty36/ED6 dfQ3b42XiOk25H6EvpchaCkJ4KMjNHD8sRwl1s6zMKedzPmlajttPq3GX9XKy1RT 4HhfP7Gti46r6RPXsnRnFNH5PmrDm3Dp28Wynt28J2TJ2oxRWbKuDrjLA9b83XRg D0h3yhYHYJni25N2TifWB5TF9hWY/aQ7mcs2jhUwUvQSUixI+2RUY3jd6wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGdO7ZLaKzgXB3xN4bJ9jfPXka5jMB8GA1UdIwQY MBaAFD4lq2mF95yp3gbpjoudokXYVZq2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGlXcmFZWDNuS25lQnVtT2k1MmlSZGhWbXJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8yMmQxNzUtYzcxZC00NjM3LWEwOTAt YjE5YWQ1NDU1YmZkLzEvWjA3dGt0b3JPQmNIZkUzaHNuMk44OWVScm1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS8yMmQxNzUtYzcxZC00NjM3LWEwOTAtYjE5YWQ1NDU1YmZk LzEvUGlXcmFZWDNuS25lQnVtT2k1MmlSZGhWbXJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW5deAwQA uYliMA0GCSqGSIb3DQEBCwUAA4IBAQAA/Q1ZhGxi09aaJYnhCsG5/AH2rL77qHTf dd3Ux4D07E1oRBerFfKf5u3mYNQnvv4B7E8FNq9q0R7S1kvuzI7HfDZjI8a24Bzi ZVlTpPmKaMz3B0kFuXCOGnJP/hM6u0yQjqJywHPxDUf4WPyxma/P3Memc69/aDdp g5ISte+XWucDaTeWLSrcLn3UdutvPxRo3gIn7LPiYbnbamD62pnyagS4zsTjdIRa 1uHALR8d7pe9z7jOH9ZU8y8LDVHLBBFhdYD4HoPvc3wZvesR5/1oXgGG2Y12a2Aw xbcF60j+1KM7GhzhXeUHF3QJ6haBTAQKlZXZw8WTGymY85VxNouh -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:12 2026 by rpki-client