This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/sizGPo8KqP7LWpt91yMVuV_G2qY.roa File: sizGPo8KqP7LWpt91yMVuV_G2qY.roa (raw, json) Hash identifier: LlMndqzEsit0QQGqlcQ6a+BkfwsI2hJIMaOg8c0+sWY= Subject key identifier: B2:2C:C6:3E:8F:0A:A8:FE:CB:5A:9B:7D:D7:23:15:B9:5F:C6:DA:A6 Certificate issuer: /CN=f310c50d2cc87bdbfa5bb511a18a2277ba00ba68 Certificate serial: 019B7B35D9C5723550EBB6507E3BA1E1D943 Authority key identifier: F3:10:C5:0D:2C:C8:7B:DB:FA:5B:B5:11:A1:8A:22:77:BA:00:BA:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/sizGPo8KqP7LWpt91yMVuV_G2qY.roa Signing time: Thu 01 Jan 2026 20:18:05 +0000 ROA not before: Thu 01 Jan 2026 20:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41568 IP address blocks: 91.192.104.0/24 maxlen: 24 91.192.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:d9:c5:72:35:50:eb:b6:50:7e:3b:a1:e1:d9:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f310c50d2cc87bdbfa5bb511a18a2277ba00ba68 Validity Not Before: Jan 1 20:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b22cc63e8f0aa8fecb5a9b7dd72315b95fc6daa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:7e:de:42:28:d0:fc:4f:15:d3:87:b2:25:f0: 4f:8f:84:09:ba:2f:3f:31:d1:5f:e5:58:76:d1:06: 4f:b4:7b:54:1e:2b:b3:a2:e6:8a:df:bd:c1:ad:e1: 68:3b:6d:90:44:59:87:b4:6e:28:0d:da:7e:52:b8: b0:f3:f9:b2:ea:23:d2:af:91:41:28:54:9d:80:2c: 20:56:09:f2:00:2f:8d:d4:24:90:8b:64:d0:53:c5: 6c:7f:92:7e:8d:9e:3b:10:3c:63:16:4a:22:a0:65: 3f:e8:01:95:bd:3f:0d:21:d7:10:57:21:ce:a7:67: c8:6c:cd:0b:4c:03:0c:bb:88:10:dc:43:0e:27:04: 54:3a:b0:0b:ab:af:7f:ab:eb:fc:0b:fe:c3:10:fa: dc:c4:59:60:14:d0:f9:1f:20:6e:a7:7b:d6:50:f2: d8:78:52:63:c5:06:fb:e0:e9:d5:5b:11:c1:62:66: fb:45:a9:1d:e6:32:28:7f:56:ff:47:38:ef:f1:ba: 25:c0:f8:0e:85:fd:7b:83:84:ba:ae:bc:e8:96:ed: 3f:0a:b3:54:5b:48:fb:86:40:9d:7a:75:28:70:f0: 7c:18:cd:1c:dc:de:44:ea:08:20:bd:ff:4c:61:bf: bf:7e:49:16:71:b7:87:d6:ea:b6:c6:70:9d:43:8f: c0:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:2C:C6:3E:8F:0A:A8:FE:CB:5A:9B:7D:D7:23:15:B9:5F:C6:DA:A6 X509v3 Authority Key Identifier: keyid:F3:10:C5:0D:2C:C8:7B:DB:FA:5B:B5:11:A1:8A:22:77:BA:00:BA:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/sizGPo8KqP7LWpt91yMVuV_G2qY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.192.104.0/23 Signature Algorithm: sha256WithRSAEncryption 92:09:cd:fd:c9:73:c2:39:91:91:6d:32:af:a6:9d:89:b3:38: 73:d1:82:8f:22:08:d9:7a:36:af:ad:25:37:9d:95:72:4f:b6: 1e:b1:a2:17:a2:f2:d3:92:7e:36:0e:a0:31:58:d2:f7:0f:b8: 48:80:33:61:ea:8e:8d:a1:ec:05:f8:c6:8c:a8:88:dd:63:18: fc:fb:c3:b3:93:7a:be:99:60:f9:ed:72:2e:17:6b:49:4f:a3: 43:77:e1:a0:f4:82:f4:d2:f5:3a:2f:5d:78:28:59:e4:0a:c6: 5d:cc:71:79:e2:55:54:bb:15:a2:bf:8d:66:9b:2a:7e:1d:ad: 7b:5f:66:eb:89:d3:87:e9:ff:9f:9e:28:b2:47:44:b9:3f:ee: 47:2b:a8:7d:35:51:64:26:56:c5:11:22:bd:66:22:5e:d4:72: 82:9c:db:97:46:50:b3:ce:d8:19:bc:78:ac:05:7f:06:57:c4: 2c:b5:50:01:e3:54:0c:23:43:1a:b5:fe:4e:71:89:80:f4:85: 5b:f2:5c:e4:95:b1:ce:e7:22:b8:9d:e3:8f:ac:7b:a5:ba:2a: c7:7c:b6:d3:27:b6:99:13:23:e7:3e:28:c5:be:a4:5f:b4:36: 85:63:55:84:7f:eb:f1:cd:cb:dd:f6:71:c3:04:91:09:b7:47: f6:ce:8b:cf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NdnFcjVQ67ZQfjuh4dlDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzMTBjNTBkMmNjODdiZGJmYTViYjUxMWExOGEyMjc3YmEw MGJhNjgwHhcNMjYwMTAxMjAxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjJjYzYzZThmMGFhOGZlY2I1YTliN2RkNzIzMTViOTVmYzZkYWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7n7eQijQ/E8V04eyJfBPj4QJui8/ MdFf5Vh20QZPtHtUHiuzouaK373BreFoO22QRFmHtG4oDdp+Uriw8/my6iPSr5FB KFSdgCwgVgnyAC+N1CSQi2TQU8Vsf5J+jZ47EDxjFkoioGU/6AGVvT8NIdcQVyHO p2fIbM0LTAMMu4gQ3EMOJwRUOrALq69/q+v8C/7DEPrcxFlgFND5HyBup3vWUPLY eFJjxQb74OnVWxHBYmb7Rakd5jIof1b/Rzjv8bolwPgOhf17g4S6rrzolu0/CrNU W0j7hkCdenUocPB8GM0c3N5E6gggvf9MYb+/fkkWcbeH1uq2xnCdQ4/A7QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLIsxj6PCqj+y1qbfdcjFblfxtqmMB8GA1UdIwQY MBaAFPMQxQ0syHvb+lu1EaGKIne6ALpoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHhERkRTekllOXY2VzdVUm9Zb2lkN29BdW1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8wZWE0YTQtMjc3NC00NTQ1LTgwNWYt MWU5ZjBiZGViNTMyLzEvc2l6R1BvOEtxUDdMV3B0OTF5TVZ1Vl9HMnFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8wZWE0YTQtMjc3NC00NTQ1LTgwNWYtMWU5ZjBiZGViNTMy LzEvOHhERkRTekllOXY2VzdVUm9Zb2lkN29BdW1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW8BoMA0G CSqGSIb3DQEBCwUAA4IBAQCSCc39yXPCOZGRbTKvpp2Jszhz0YKPIgjZejavrSU3 nZVyT7YesaIXovLTkn42DqAxWNL3D7hIgDNh6o6NoewF+MaMqIjdYxj8+8Ozk3q+ mWD57XIuF2tJT6NDd+Gg9IL00vU6L114KFnkCsZdzHF54lVUuxWiv41mmyp+Ha17 X2bridOH6f+fniiyR0S5P+5HK6h9NVFkJlbFESK9ZiJe1HKCnNuXRlCzztgZvHis BX8GV8QstVAB41QMI0Matf5OcYmA9IVb8lzklbHO5yK4neOPrHuluirHfLbTJ7aZ EyPnPijFvqRftDaFY1WEf+vxzcvd9nHDBJEJt0f2zovP -----END CERTIFICATE-----Generated at Sun Jan 25 19:38:21 2026 by rpki-client