This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/Zu0kk3WOXaDw5gWMP5k-8qCbgec.roa File: Zu0kk3WOXaDw5gWMP5k-8qCbgec.roa (raw, json) Hash identifier: XR0jb+xTVsWguTI1Vj79PXiuVJZlpNZfWK4CtdCSYxg= Subject key identifier: 66:ED:24:93:75:8E:5D:A0:F0:E6:05:8C:3F:99:3E:F2:A0:9B:81:E7 Certificate issuer: /CN=361adf57c8dcb7bfd34e9aecd83e36342ec3a3c9 Certificate serial: 019B797E84AF8ACA0FFB7F9BB7624C3C77FA Authority key identifier: 36:1A:DF:57:C8:DC:B7:BF:D3:4E:9A:EC:D8:3E:36:34:2E:C3:A3:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/Zu0kk3WOXaDw5gWMP5k-8qCbgec.roa Signing time: Thu 01 Jan 2026 12:18:13 +0000 ROA not before: Thu 01 Jan 2026 12:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209975 IP address blocks: 91.239.147.0/24 maxlen: 24 2001:67c:1240::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:84:af:8a:ca:0f:fb:7f:9b:b7:62:4c:3c:77:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=361adf57c8dcb7bfd34e9aecd83e36342ec3a3c9 Validity Not Before: Jan 1 12:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=66ed2493758e5da0f0e6058c3f993ef2a09b81e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b1:95:b5:66:47:42:3b:8c:8c:7d:da:9d:a5: f5:10:61:05:e6:d8:4a:4f:05:13:a7:6b:03:b5:91: d3:23:41:cb:ae:bf:a7:a4:da:12:d9:c0:a9:e4:c3: 56:ce:20:4e:11:8d:25:7b:f8:83:bc:56:df:37:3c: f3:0c:60:eb:7c:ae:e6:21:54:74:c3:62:5a:08:18: b8:aa:a9:01:de:34:18:c7:99:38:2c:5b:14:14:57: f5:6f:61:b5:02:c1:52:64:d2:38:75:16:a7:72:d3: d2:31:72:5c:73:a3:3c:f3:81:50:c6:b9:42:e8:9d: d9:e6:13:76:b4:17:69:f9:16:f3:63:21:78:a6:cc: c3:db:33:75:93:eb:56:cb:58:c5:c9:b5:e9:5d:51: 04:a5:4e:46:2f:7c:06:0d:ea:56:f9:7c:e6:31:3d: d6:50:f1:3f:62:ab:6d:db:e2:c9:34:8a:bb:a2:97: a8:c7:9c:ee:7b:a7:70:af:c5:e4:86:cc:4e:8c:9b: ea:b4:2a:a0:8f:6e:47:ea:06:59:24:34:22:5f:f3: 2a:fc:fa:8e:b7:2c:fc:da:a6:5f:12:95:9b:61:89: 02:ea:19:2c:1a:55:51:3b:7a:5f:07:3d:fe:c6:a9: 58:17:db:88:b5:38:1c:3c:32:0b:d6:55:33:d1:29: 2c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:ED:24:93:75:8E:5D:A0:F0:E6:05:8C:3F:99:3E:F2:A0:9B:81:E7 X509v3 Authority Key Identifier: keyid:36:1A:DF:57:C8:DC:B7:BF:D3:4E:9A:EC:D8:3E:36:34:2E:C3:A3:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/Zu0kk3WOXaDw5gWMP5k-8qCbgec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.239.147.0/24 IPv6: 2001:67c:1240::/48 Signature Algorithm: sha256WithRSAEncryption a6:22:2a:ea:15:c0:a1:90:4c:9e:c3:83:a7:d1:74:2d:c3:ed: f7:d8:82:64:5f:ef:67:d6:79:00:4c:54:ce:14:41:d3:07:db: ff:6f:04:1c:2f:12:b8:76:1f:00:cb:16:cc:3d:6c:d7:cd:03: c9:bc:0b:8c:5d:18:1f:37:6a:44:a3:c7:52:33:db:53:e6:dd: bf:e8:84:51:89:9b:c9:27:fa:1b:f3:c5:36:89:f5:1b:20:4f: 00:05:56:a8:d2:38:b2:35:99:2a:0f:e2:94:d8:68:7f:60:c6: e7:3d:e4:ad:58:1c:af:16:32:a3:d9:9a:fc:d1:a2:e3:74:43: b7:81:7f:c6:67:35:e7:63:9f:b6:67:7f:2d:ce:a2:9d:bd:db: 8e:2b:e5:43:0a:34:50:ef:30:19:eb:53:01:78:a4:67:ca:2c: cc:dc:e9:b5:1e:12:33:8a:85:17:03:a7:fa:b1:e4:9a:b4:93: d2:ac:26:6d:ea:af:00:8c:a3:72:db:ce:30:ac:c9:c9:e8:93: 24:e1:d8:fd:85:c4:66:08:76:01:d1:44:57:39:cf:fc:50:75: fe:ef:68:ed:5d:e7:6c:85:1a:85:4f:43:d4:07:26:b9:b1:2b: dc:9e:79:51:43:b2:be:cb:46:c4:ff:22:7b:6c:65:88:11:fb: 50:8e:83:97 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt5foSvisoP+3+bt2JMPHf6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2MWFkZjU3YzhkY2I3YmZkMzRlOWFlY2Q4M2UzNjM0MmVj M2EzYzkwHhcNMjYwMTAxMTIxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NmVkMjQ5Mzc1OGU1ZGEwZjBlNjA1OGMzZjk5M2VmMmEwOWI4MWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7GVtWZHQjuMjH3anaX1EGEF5thK TwUTp2sDtZHTI0HLrr+npNoS2cCp5MNWziBOEY0le/iDvFbfNzzzDGDrfK7mIVR0 w2JaCBi4qqkB3jQYx5k4LFsUFFf1b2G1AsFSZNI4dRanctPSMXJcc6M884FQxrlC 6J3Z5hN2tBdp+RbzYyF4pszD2zN1k+tWy1jFybXpXVEEpU5GL3wGDepW+XzmMT3W UPE/Yqtt2+LJNIq7opeox5zue6dwr8XkhsxOjJvqtCqgj25H6gZZJDQiX/Mq/PqO tyz82qZfEpWbYYkC6hksGlVRO3pfBz3+xqlYF9uItTgcPDIL1lUz0SksVQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFGbtJJN1jl2g8OYFjD+ZPvKgm4HnMB8GA1UdIwQY MBaAFDYa31fI3Le/006a7Ng+NjQuw6PJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmhyZlY4amN0N19UVHByczJENDJOQzdEbzhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9lMGY4YzYtYWFkYy00YzMxLWI5MmIt MWExODczOGI0NzQxLzEvWnUwa2szV09YYUR3NWdXTVA1ay04cUNiZ2VjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9lMGY4YzYtYWFkYy00YzMxLWI5MmItMWExODczOGI0NzQx LzEvTmhyZlY4amN0N19UVHByczJENDJOQzdEbzhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW++TMA8E AgACMAkDBwAgAQZ8EkAwDQYJKoZIhvcNAQELBQADggEBAKYiKuoVwKGQTJ7Dg6fR dC3D7ffYgmRf72fWeQBMVM4UQdMH2/9vBBwvErh2HwDLFsw9bNfNA8m8C4xdGB83 akSjx1Iz21Pm3b/ohFGJm8kn+hvzxTaJ9RsgTwAFVqjSOLI1mSoP4pTYaH9gxuc9 5K1YHK8WMqPZmvzRouN0Q7eBf8ZnNedjn7Znfy3Oop29244r5UMKNFDvMBnrUwF4 pGfKLMzc6bUeEjOKhRcDp/qx5Jq0k9KsJm3qrwCMo3LbzjCsycnokyTh2P2FxGYI dgHRRFc5z/xQdf7vaO1d52yFGoVPQ9QHJrmxK9yeeVFDsr7LRsT/IntsZYgR+1CO g5c= -----END CERTIFICATE-----Generated at Sun Jan 25 13:32:50 2026 by rpki-client