This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/zd2DmvZ3rZnlw6hBIE9iR45lGwY.roa File: zd2DmvZ3rZnlw6hBIE9iR45lGwY.roa (raw, json) Hash identifier: 37RUfr7BG9hoMLliPRbGltA78nwXlAxk08QWkE0P3T0= Subject key identifier: CD:DD:83:9A:F6:77:AD:99:E5:C3:A8:41:20:4F:62:47:8E:65:1B:06 Certificate issuer: /CN=571cb51cba68eb7ef9867a75d17ab28018196aa1 Certificate serial: 019B7F15DE47C2DC9E53E0F25884D1E4ED38 Authority key identifier: 57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/zd2DmvZ3rZnlw6hBIE9iR45lGwY.roa Signing time: Fri 02 Jan 2026 14:21:38 +0000 ROA not before: Fri 02 Jan 2026 14:21:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397477 IP address blocks: 91.200.138.0/23 maxlen: 23 193.33.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 02:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:de:47:c2:dc:9e:53:e0:f2:58:84:d1:e4:ed:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=571cb51cba68eb7ef9867a75d17ab28018196aa1 Validity Not Before: Jan 2 14:21:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cddd839af677ad99e5c3a841204f62478e651b06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:4a:55:d3:ec:df:99:45:62:ed:23:fe:69:e2: 7b:4b:1b:7c:87:af:4d:50:a3:9d:b0:d0:9c:40:aa: 35:88:08:73:b5:2e:a9:e8:40:25:3a:7f:93:ba:9f: 92:e9:31:c9:24:c0:3e:72:d6:3e:74:a0:ef:30:fa: 12:db:29:1b:11:24:50:67:20:4b:0b:19:d6:fd:d0: 2f:2a:91:bf:28:8d:00:77:9b:ad:a2:47:f2:9e:87: 03:32:54:c6:87:71:c6:05:b6:c1:69:22:58:85:8f: 2e:d6:d7:cd:30:dd:d7:a1:0d:41:ab:60:e0:12:06: df:20:3a:e8:a9:08:52:56:2c:73:ab:f6:89:6e:d6: d0:fd:d9:1b:49:1a:3f:42:bd:c2:48:d6:a7:36:ac: 14:1b:64:b1:c6:19:e8:5a:08:33:cd:aa:a0:c9:b0: 44:26:3a:f7:23:44:f5:8f:aa:50:78:35:88:be:53: 40:47:07:80:99:04:72:d1:c0:2d:7e:99:99:a7:18: f0:bc:6b:4f:12:08:2d:f6:25:c2:5e:f6:5e:0e:22: 52:13:c4:57:8d:fe:5e:b3:00:eb:1e:56:29:7f:89: dd:d4:1a:9d:1d:a2:f6:bd:2f:18:ec:9d:74:f1:65: 19:12:47:cc:c9:cf:44:b2:2e:56:80:97:66:1f:a5: 8f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:DD:83:9A:F6:77:AD:99:E5:C3:A8:41:20:4F:62:47:8E:65:1B:06 X509v3 Authority Key Identifier: keyid:57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/zd2DmvZ3rZnlw6hBIE9iR45lGwY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.200.138.0/23 193.33.236.0/23 Signature Algorithm: sha256WithRSAEncryption 57:3a:fb:2e:3f:b4:f4:71:9f:e1:65:1a:d1:8e:21:f8:25:e3: 48:9e:dc:1a:ab:86:ce:ad:44:a5:f1:fd:9b:d1:ca:91:1e:30: 04:81:47:0f:52:3a:4b:18:cb:5a:f4:7b:aa:16:b8:c4:95:96: 01:d6:c9:8e:68:26:1c:e8:c4:d6:7d:9a:84:78:5c:74:8d:8d: f6:b6:37:5c:15:c6:40:0b:12:44:bb:96:a7:54:85:e7:2b:51: b8:14:d2:ec:51:26:ca:d2:da:9a:91:f2:91:90:e7:b4:bd:35: 60:c7:d7:c9:ef:a9:61:d3:12:37:ff:76:e4:f5:35:8a:41:11: 7f:1b:f6:97:cc:cc:d9:a6:5a:3d:f5:a4:2d:11:7b:57:76:0b: 41:03:35:03:a2:75:06:b1:9a:f5:c6:96:0d:19:6f:96:a2:bd: fb:ca:8a:40:d2:84:36:13:63:48:a8:2f:e3:bf:a8:f6:9b:ed: 4f:25:82:41:89:e3:0f:24:c3:b3:2c:42:f7:27:fc:a5:ef:6b: ce:15:bc:a6:2f:0d:ee:b1:62:59:be:07:07:ec:58:84:4a:46: a9:ad:0a:20:f6:36:1b:20:31:d6:c0:dc:3e:98:bb:59:6d:7d: 42:94:fa:ea:5a:bd:de:de:72:02:d8:50:ce:3f:a9:c5:59:4c: ba:08:07:a5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/Fd5HwtyeU+DyWITR5O04MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MWNiNTFjYmE2OGViN2VmOTg2N2E3NWQxN2FiMjgwMTgx OTZhYTEwHhcNMjYwMTAyMTQyMTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZGRkODM5YWY2NzdhZDk5ZTVjM2E4NDEyMDRmNjI0NzhlNjUxYjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEpV0+zfmUVi7SP+aeJ7Sxt8h69N UKOdsNCcQKo1iAhztS6p6EAlOn+Tup+S6THJJMA+ctY+dKDvMPoS2ykbESRQZyBL CxnW/dAvKpG/KI0Ad5utokfynocDMlTGh3HGBbbBaSJYhY8u1tfNMN3XoQ1Bq2Dg EgbfIDroqQhSVixzq/aJbtbQ/dkbSRo/Qr3CSNanNqwUG2SxxhnoWggzzaqgybBE Jjr3I0T1j6pQeDWIvlNARweAmQRy0cAtfpmZpxjwvGtPEggt9iXCXvZeDiJSE8RX jf5eswDrHlYpf4nd1BqdHaL2vS8Y7J108WUZEkfMyc9Esi5WgJdmH6WPOQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFM3dg5r2d62Z5cOoQSBPYkeOZRsGMB8GA1UdIwQY MBaAFFcctRy6aOt++YZ6ddF6soAYGWqhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnh5MUhMcG82Mzc1aG5wMTBYcXlnQmdaYXFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9iOGQyYTgtNTNhOS00MmMwLWI3Yzkt ZGQ4NjI3NzRhMDkyLzEvemQyRG12WjNyWm5sdzZoQklFOWlSNDVsR3dZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9iOGQyYTgtNTNhOS00MmMwLWI3YzktZGQ4NjI3NzRhMDky LzEvVnh5MUhMcG82Mzc1aG5wMTBYcXlnQmdaYXFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW8iKAwQB wSHsMA0GCSqGSIb3DQEBCwUAA4IBAQBXOvsuP7T0cZ/hZRrRjiH4JeNIntwaq4bO rUSl8f2b0cqRHjAEgUcPUjpLGMta9HuqFrjElZYB1smOaCYc6MTWfZqEeFx0jY32 tjdcFcZACxJEu5anVIXnK1G4FNLsUSbK0tqakfKRkOe0vTVgx9fJ76lh0xI3/3bk 9TWKQRF/G/aXzMzZplo99aQtEXtXdgtBAzUDonUGsZr1xpYNGW+Wor37yopA0oQ2 E2NIqC/jv6j2m+1PJYJBieMPJMOzLEL3J/yl72vOFbymLw3usWJZvgcH7FiESkap rQog9jYbIDHWwNw+mLtZbX1ClPrqWr3e3nIC2FDOP6nFWUy6CAel -----END CERTIFICATE-----Generated at Sun Jan 25 11:42:38 2026 by rpki-client