This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/6fa51b-812e-4284-9d17-ad51ba216531/1/ZiAi_TdUfMkb3j8gN1a3XiArDYg.roa File: ZiAi_TdUfMkb3j8gN1a3XiArDYg.roa (raw, json) Hash identifier: p3ud5x+KgWlnChdbJ3zLdy64GsE5PLnEtLECSRQZh38= Subject key identifier: 66:20:22:FD:37:54:7C:C9:1B:DE:3F:20:37:56:B7:5E:20:2B:0D:88 Certificate issuer: /CN=df4f720fbbce6b155d7357dbe7126ca56c1ebe75 Certificate serial: 019B76EB763E7F4BBAC22978EA446A14A35D Authority key identifier: DF:4F:72:0F:BB:CE:6B:15:5D:73:57:DB:E7:12:6C:A5:6C:1E:BE:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/309yD7vOaxVdc1fb5xJspWwevnU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/6fa51b-812e-4284-9d17-ad51ba216531/1/ZiAi_TdUfMkb3j8gN1a3XiArDYg.roa Signing time: Thu 01 Jan 2026 00:18:21 +0000 ROA not before: Thu 01 Jan 2026 00:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42109 IP address blocks: 91.208.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/6fa51b-812e-4284-9d17-ad51ba216531/1/309yD7vOaxVdc1fb5xJspWwevnU.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/6fa51b-812e-4284-9d17-ad51ba216531/1/309yD7vOaxVdc1fb5xJspWwevnU.mft rsync://rpki.ripe.net/repository/DEFAULT/309yD7vOaxVdc1fb5xJspWwevnU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:76:3e:7f:4b:ba:c2:29:78:ea:44:6a:14:a3:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df4f720fbbce6b155d7357dbe7126ca56c1ebe75 Validity Not Before: Jan 1 00:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=662022fd37547cc91bde3f203756b75e202b0d88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:33:4d:78:65:c3:99:72:71:25:1c:b7:73:63: c4:bb:47:26:37:8c:ac:f2:a5:3b:17:df:d7:4b:e6: 4f:0d:98:11:7f:1e:cf:d5:62:03:9e:43:f7:f8:65: b3:a8:08:ce:f7:ed:5d:ac:3c:de:55:20:c1:b8:be: 1f:e2:95:1b:99:f5:4e:8f:21:ab:10:de:17:0a:70: aa:a9:38:36:16:e6:eb:4b:6d:89:e9:50:da:ac:c8: c1:a0:03:78:5d:44:05:56:9d:b0:60:d0:87:ce:c9: 4e:d5:ed:9f:fa:6d:ff:7e:6e:02:07:fe:59:58:3c: b6:37:1d:72:9c:42:24:91:42:8e:67:91:bf:89:76: 38:9b:be:d7:12:91:02:75:e0:e3:6f:9c:03:38:f7: cf:23:b1:1d:b0:e7:ec:56:63:6c:7c:b6:24:1d:c5: c1:69:c6:de:0e:e1:34:b4:c7:0f:07:f0:8e:4d:94: 8b:f5:5f:43:82:ad:f8:e3:89:53:18:d0:92:6c:1c: 49:c0:0c:6a:52:84:8d:91:5a:5b:18:1f:b9:8b:85: 1a:a4:73:cd:d6:29:78:99:4d:15:0a:50:a0:37:61: 4c:7c:d7:5c:16:13:f8:59:07:57:1e:03:93:49:80: 81:d7:92:a8:26:7b:91:46:bb:a5:af:19:47:ab:df: 89:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:20:22:FD:37:54:7C:C9:1B:DE:3F:20:37:56:B7:5E:20:2B:0D:88 X509v3 Authority Key Identifier: keyid:DF:4F:72:0F:BB:CE:6B:15:5D:73:57:DB:E7:12:6C:A5:6C:1E:BE:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/309yD7vOaxVdc1fb5xJspWwevnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/6fa51b-812e-4284-9d17-ad51ba216531/1/ZiAi_TdUfMkb3j8gN1a3XiArDYg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/6fa51b-812e-4284-9d17-ad51ba216531/1/309yD7vOaxVdc1fb5xJspWwevnU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.76.0/24 Signature Algorithm: sha256WithRSAEncryption 27:2a:47:ce:17:57:87:99:db:a0:9e:af:b1:29:f0:38:d7:15: 20:b2:78:ff:b9:fc:ef:80:10:b4:69:95:56:11:ed:59:ad:5a: 8c:b6:75:da:ef:a4:15:44:60:6e:a5:3a:84:92:7f:5c:13:fd: 57:c6:1f:65:22:6d:70:7a:1f:ca:cb:e4:04:4a:43:6a:6f:bc: 28:ad:b0:f6:ca:1b:bb:ef:22:07:21:ad:56:0e:10:b0:fe:17: 72:0f:ba:3a:fb:23:a2:04:90:56:4b:83:a1:75:17:c2:4c:35: 47:34:02:0e:87:e0:23:c6:e1:6d:31:79:4b:8f:d5:be:b5:af: 9d:3b:a9:88:35:62:23:49:24:d9:4f:98:ac:33:3f:fb:b2:76: 35:71:9e:aa:b4:22:3a:13:ec:46:cd:09:e2:39:ae:53:b1:ef: ee:77:78:d3:b8:7f:8e:eb:e8:1f:b3:81:56:8a:fd:7f:a9:3a: ad:21:60:46:01:0f:57:43:4d:74:ef:ba:0e:88:8e:73:92:f8: e1:bf:9d:39:24:a3:30:76:b9:b2:d5:d6:36:4b:c6:cb:c0:81: b8:29:04:c0:88:7a:26:1f:23:da:63:d5:ff:a4:f6:46:d1:6f: f8:a9:e4:6f:64:b0:19:7f:9c:0d:d0:6d:d7:5c:8e:e2:24:7c: 95:fe:27:7a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt263Y+f0u6wil46kRqFKNdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmNGY3MjBmYmJjZTZiMTU1ZDczNTdkYmU3MTI2Y2E1NmMx ZWJlNzUwHhcNMjYwMTAxMDAxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjIwMjJmZDM3NTQ3Y2M5MWJkZTNmMjAzNzU2Yjc1ZTIwMmIwZDg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjNNeGXDmXJxJRy3c2PEu0cmN4ys 8qU7F9/XS+ZPDZgRfx7P1WIDnkP3+GWzqAjO9+1drDzeVSDBuL4f4pUbmfVOjyGr EN4XCnCqqTg2FubrS22J6VDarMjBoAN4XUQFVp2wYNCHzslO1e2f+m3/fm4CB/5Z WDy2Nx1ynEIkkUKOZ5G/iXY4m77XEpECdeDjb5wDOPfPI7EdsOfsVmNsfLYkHcXB acbeDuE0tMcPB/COTZSL9V9Dgq3444lTGNCSbBxJwAxqUoSNkVpbGB+5i4UapHPN 1il4mU0VClCgN2FMfNdcFhP4WQdXHgOTSYCB15KoJnuRRrulrxlHq9+JgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGYgIv03VHzJG94/IDdWt14gKw2IMB8GA1UdIwQY MBaAFN9Pcg+7zmsVXXNX2+cSbKVsHr51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzA5eUQ3dk9heFZkYzFmYjV4SnNwV3dldm5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS82ZmE1MWItODEyZS00Mjg0LTlkMTct YWQ1MWJhMjE2NTMxLzEvWmlBaV9UZFVmTWtiM2o4Z04xYTNYaUFyRFlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS82ZmE1MWItODEyZS00Mjg0LTlkMTctYWQ1MWJhMjE2NTMx LzEvMzA5eUQ3dk9heFZkYzFmYjV4SnNwV3dldm5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9BMMA0G CSqGSIb3DQEBCwUAA4IBAQAnKkfOF1eHmdugnq+xKfA41xUgsnj/ufzvgBC0aZVW Ee1ZrVqMtnXa76QVRGBupTqEkn9cE/1Xxh9lIm1weh/Ky+QESkNqb7worbD2yhu7 7yIHIa1WDhCw/hdyD7o6+yOiBJBWS4OhdRfCTDVHNAIOh+AjxuFtMXlLj9W+ta+d O6mINWIjSSTZT5isMz/7snY1cZ6qtCI6E+xGzQniOa5Tse/ud3jTuH+O6+gfs4FW iv1/qTqtIWBGAQ9XQ01077oOiI5zkvjhv505JKMwdrmy1dY2S8bLwIG4KQTAiHom HyPaY9X/pPZG0W/4qeRvZLAZf5wN0G3XXI7iJHyV/id6 -----END CERTIFICATE-----Generated at Mon Jan 26 00:39:23 2026 by rpki-client