This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/ZZ8EJAvAm0C06wzFaBzSONJZFPk.roa File: ZZ8EJAvAm0C06wzFaBzSONJZFPk.roa (raw, json) Hash identifier: HIvZs/TkMx+bymwhUhZwvlQVHu6QM24ito4FjiIQX2c= Subject key identifier: 65:9F:04:24:0B:C0:9B:40:B4:EB:0C:C5:68:1C:D2:38:D2:59:14:F9 Certificate issuer: /CN=f2e160f0ce5e035af3cb21f4dfd04eab9ea7ee51 Certificate serial: 019BE0A0C64E3BE5C382D54F095954DD9CAA Authority key identifier: F2:E1:60:F0:CE:5E:03:5A:F3:CB:21:F4:DF:D0:4E:AB:9E:A7:EE:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/ZZ8EJAvAm0C06wzFaBzSONJZFPk.roa Signing time: Wed 21 Jan 2026 12:56:31 +0000 ROA not before: Wed 21 Jan 2026 12:56:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215730 IP address blocks: 77.91.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.mft rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:a0:c6:4e:3b:e5:c3:82:d5:4f:09:59:54:dd:9c:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2e160f0ce5e035af3cb21f4dfd04eab9ea7ee51 Validity Not Before: Jan 21 12:56:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=659f04240bc09b40b4eb0cc5681cd238d25914f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b1:6f:2a:9b:5b:a1:a7:63:7c:86:70:8e:95: c3:cb:f7:dc:7d:34:c6:52:a5:e4:72:b4:e0:b5:d7: b5:7a:75:dd:48:32:20:ae:1f:12:8d:09:a5:a7:22: d2:d7:64:ee:93:77:26:ca:13:86:34:b3:7f:46:e4: d2:d6:51:ca:6f:b1:60:17:23:57:67:d5:e0:0c:0b: c3:a2:06:38:6e:fb:72:13:27:08:00:44:dc:17:89: 37:13:ad:6d:cb:30:8e:e2:fa:52:81:2d:26:e4:04: 9a:bb:85:b4:7e:36:87:c6:75:5e:61:bb:30:39:dd: b0:cf:a4:49:3c:6c:02:89:61:6f:60:99:98:12:e7: da:74:a3:12:59:b5:cb:76:1a:6f:cf:7c:f3:8e:5a: a2:82:5b:42:31:5b:1f:f5:74:36:5d:e2:db:5f:7d: e3:25:d0:c6:00:98:5e:cd:ce:4d:44:48:0d:69:59: 45:97:ea:e7:3a:57:a2:e0:a5:c2:5b:b0:a1:48:9a: 7b:69:3e:06:7a:f9:f3:a8:2c:48:54:35:8c:c1:ee: a6:1a:3d:b7:20:51:7d:fe:e4:8b:e1:70:49:bc:65: 2b:f2:43:f5:ae:e8:28:a7:65:e9:e9:41:87:83:c3: ba:23:fc:c8:82:10:4d:d8:1b:b2:c3:ed:3c:13:d3: 5b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:9F:04:24:0B:C0:9B:40:B4:EB:0C:C5:68:1C:D2:38:D2:59:14:F9 X509v3 Authority Key Identifier: keyid:F2:E1:60:F0:CE:5E:03:5A:F3:CB:21:F4:DF:D0:4E:AB:9E:A7:EE:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/ZZ8EJAvAm0C06wzFaBzSONJZFPk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.91.124.0/24 Signature Algorithm: sha256WithRSAEncryption ba:5b:5e:83:c4:b3:8f:64:cf:9e:71:2d:71:67:7d:4e:9c:43: 57:e3:f0:28:74:27:49:8f:64:04:77:a6:1e:7f:3b:5f:a9:1b: d7:11:77:6c:f5:23:d9:14:33:6c:2e:40:74:85:d3:bf:c1:1e: 32:e0:53:b1:e0:48:b4:ec:43:66:c0:02:1c:21:04:e8:d7:5e: 09:04:47:7c:37:67:44:4a:23:c7:f0:62:8b:11:65:32:9e:b2: 50:02:5e:5e:d2:c8:3a:a0:1c:80:ec:64:49:d8:db:b1:8f:e7: 54:6f:cd:46:7b:e4:39:b4:db:6e:39:cd:7d:58:8b:a7:8b:3d: 2a:68:11:00:6e:6c:e1:84:fc:9f:c1:68:d3:01:44:58:06:3b: ae:59:e0:a0:1e:a3:29:a0:d8:ac:48:b6:2f:75:e6:52:ca:1d: 4a:6b:b9:76:1b:e6:40:0a:5f:32:73:83:1b:f4:0a:25:a6:81: 82:e2:d9:15:95:86:86:d9:85:0b:39:75:d7:80:2c:5c:20:3f: 98:7f:23:00:0f:23:1a:26:7c:24:ea:7c:90:44:bb:9c:06:a9: 69:f7:94:b3:c7:fb:fe:b1:b5:ba:a4:7b:ad:03:a3:e4:c0:c5: 89:17:b3:d8:aa:cb:a5:21:5e:3a:f5:be:8f:07:12:5d:7b:ef: c4:cf:57:e4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvgoMZOO+XDgtVPCVlU3ZyqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyZTE2MGYwY2U1ZTAzNWFmM2NiMjFmNGRmZDA0ZWFiOWVh N2VlNTEwHhcNMjYwMTIxMTI1NjMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTlmMDQyNDBiYzA5YjQwYjRlYjBjYzU2ODFjZDIzOGQyNTkxNGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7FvKptboadjfIZwjpXDy/fcfTTG UqXkcrTgtde1enXdSDIgrh8SjQmlpyLS12Tuk3cmyhOGNLN/RuTS1lHKb7FgFyNX Z9XgDAvDogY4bvtyEycIAETcF4k3E61tyzCO4vpSgS0m5ASau4W0fjaHxnVeYbsw Od2wz6RJPGwCiWFvYJmYEufadKMSWbXLdhpvz3zzjlqigltCMVsf9XQ2XeLbX33j JdDGAJhezc5NREgNaVlFl+rnOlei4KXCW7ChSJp7aT4GevnzqCxIVDWMwe6mGj23 IFF9/uSL4XBJvGUr8kP1rugop2Xp6UGHg8O6I/zIghBN2Buyw+08E9NbBQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGWfBCQLwJtAtOsMxWgc0jjSWRT5MB8GA1UdIwQY MBaAFPLhYPDOXgNa88sh9N/QTquep+5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHVGZzhNNWVBMXJ6eXlIMDM5Qk9xNTZuN2xFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8zYjE1NDQtNGI1MC00Njg0LWFiNzUt ZmNlMjE0YzZmZmRhLzEvWlo4RUpBdkFtMEMwNnd6RmFCelNPTkpaRlBrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS8zYjE1NDQtNGI1MC00Njg0LWFiNzUtZmNlMjE0YzZmZmRh LzEvOHVGZzhNNWVBMXJ6eXlIMDM5Qk9xNTZuN2xFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVt8MA0G CSqGSIb3DQEBCwUAA4IBAQC6W16DxLOPZM+ecS1xZ31OnENX4/AodCdJj2QEd6Ye fztfqRvXEXds9SPZFDNsLkB0hdO/wR4y4FOx4Ei07ENmwAIcIQTo114JBEd8N2dE SiPH8GKLEWUynrJQAl5e0sg6oByA7GRJ2Nuxj+dUb81Ge+Q5tNtuOc19WIuniz0q aBEAbmzhhPyfwWjTAURYBjuuWeCgHqMpoNisSLYvdeZSyh1Ka7l2G+ZACl8yc4Mb 9AolpoGC4tkVlYaG2YULOXXXgCxcID+YfyMADyMaJnwk6nyQRLucBqlp95Szx/v+ sbW6pHutA6PkwMWJF7PYqsulIV469b6PBxJde+/Ez1fk -----END CERTIFICATE-----Generated at Sun Jan 25 20:50:07 2026 by rpki-client