This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/_0309cZ1kikOxbfzcD2XJAY-ldA.roa File: _0309cZ1kikOxbfzcD2XJAY-ldA.roa (raw, json) Hash identifier: cZXM6KU83tIxyiRuWRs4jXSNFO8qUxYJiHjRIWvBrHc= Subject key identifier: FF:4D:F4:F5:C6:75:92:29:0E:C5:B7:F3:70:3D:97:24:06:3E:95:D0 Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f Certificate serial: 019B76EB2FAE187B76504A9E7AEC6855E136 Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/_0309cZ1kikOxbfzcD2XJAY-ldA.roa Signing time: Thu 01 Jan 2026 00:18:03 +0000 ROA not before: Thu 01 Jan 2026 00:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210512 IP address blocks: 91.195.125.0/24 maxlen: 24 91.229.112.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:2f:ae:18:7b:76:50:4a:9e:7a:ec:68:55:e1:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f Validity Not Before: Jan 1 00:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff4df4f5c67592290ec5b7f3703d9724063e95d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:25:df:39:2e:8c:43:2a:55:17:08:d7:da:f1: 9f:03:55:c4:23:95:15:65:b3:1b:7b:1c:45:61:ed: ad:af:69:1c:ab:3d:64:3f:34:bd:d8:63:db:2f:ba: 1d:f6:4c:53:58:d8:bc:a9:d6:df:df:c9:3b:73:21: 33:bd:f2:07:e1:91:c3:e0:23:79:8f:ca:25:95:df: c4:c8:47:ab:eb:7c:bc:6b:b1:5b:85:e5:75:ec:2a: 6e:45:31:7b:82:75:75:0d:cb:7b:39:97:3f:71:1c: 7e:80:e3:20:44:5e:18:8e:b7:ac:7b:ee:09:70:06: bc:2d:82:ba:37:0d:1b:46:cf:2e:58:5c:2e:ce:af: 13:16:4f:c7:eb:c9:0c:3b:dc:ae:10:a1:53:eb:bd: cd:be:57:69:32:5f:35:d9:78:06:84:23:9f:a3:f9: ae:2e:9f:04:24:68:b4:1f:03:02:73:da:cd:65:5c: 75:27:c7:8a:ee:fa:24:cd:a5:f3:85:68:73:f7:0a: 9c:fd:f6:f2:d5:57:9e:0c:6a:50:bb:e7:19:66:d4: 04:cd:3a:54:9a:4e:0a:49:0e:1d:55:df:08:66:27: 11:90:ae:58:df:8f:cc:df:b2:71:16:d6:89:2b:fc: b3:b5:e7:06:a7:ed:9d:83:59:1b:c0:8f:0a:32:51: 14:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:4D:F4:F5:C6:75:92:29:0E:C5:B7:F3:70:3D:97:24:06:3E:95:D0 X509v3 Authority Key Identifier: keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/_0309cZ1kikOxbfzcD2XJAY-ldA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.195.125.0/24 91.229.112.0/23 Signature Algorithm: sha256WithRSAEncryption 83:40:c5:29:bc:98:7b:f9:0b:f1:01:83:36:81:06:b7:2b:3c: b2:b6:22:42:5d:e5:f9:9c:6b:de:7a:bb:ca:e2:af:7d:ab:2c: ad:e2:be:3c:97:4c:ab:3c:53:cc:f1:40:a1:b5:50:7c:49:f6: e6:a3:cf:8a:db:d1:f8:bb:48:9c:1f:73:76:d5:1f:7a:b1:72: 72:bf:d6:de:7b:63:24:49:4b:82:8e:59:4a:97:93:11:34:38: fd:aa:18:a8:90:06:3c:da:8f:e6:29:80:13:03:ff:7b:84:8c: f4:15:1d:6a:01:67:56:11:1f:90:9d:c5:be:75:59:5c:be:f0: 19:14:c7:40:57:46:c4:a6:1b:75:50:bd:94:b3:c9:d2:49:9b: 69:e0:83:23:79:a1:64:77:96:ef:d3:3e:5d:06:56:4e:2f:b7: 46:6f:57:dc:8d:c6:02:24:54:bf:42:86:3f:b5:10:2f:39:6e: bf:c2:4f:73:62:f4:4a:45:37:00:ef:fd:d4:1c:09:9d:09:de: 56:78:58:0f:e1:75:c5:43:f9:70:8c:df:ab:ee:47:3e:1f:3d: 68:da:15:e2:3e:c8:0d:fc:0a:90:07:e8:f9:66:f4:6a:fa:4d: c4:f6:05:56:8a:9c:b1:bc:51:2b:ac:c6:91:f0:37:bd:a2:3f: 56:dc:e3:4d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt26y+uGHt2UEqeeuxoVeE2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3OTU1YjFhYTFjMDI4NGQyODQzYjk2ZjI2YzVmZTc1MWU2 Njk0NmYwHhcNMjYwMTAxMDAxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjRkZjRmNWM2NzU5MjI5MGVjNWI3ZjM3MDNkOTcyNDA2M2U5NWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyXfOS6MQypVFwjX2vGfA1XEI5UV ZbMbexxFYe2tr2kcqz1kPzS92GPbL7od9kxTWNi8qdbf38k7cyEzvfIH4ZHD4CN5 j8olld/EyEer63y8a7FbheV17CpuRTF7gnV1Dct7OZc/cRx+gOMgRF4Yjrese+4J cAa8LYK6Nw0bRs8uWFwuzq8TFk/H68kMO9yuEKFT673NvldpMl812XgGhCOfo/mu Lp8EJGi0HwMCc9rNZVx1J8eK7vokzaXzhWhz9wqc/fby1VeeDGpQu+cZZtQEzTpU mk4KSQ4dVd8IZicRkK5Y34/M37JxFtaJK/yztecGp+2dg1kbwI8KMlEU1wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFP9N9PXGdZIpDsW383A9lyQGPpXQMB8GA1UdIwQY MBaAFGeVWxqhwChNKEO5bybF/nUeZpRvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDct MDhhZDk0MTAxZDdlLzEvXzAzMDljWjFraWtPeGJmemNEMlhKQVktbGRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDctMDhhZDk0MTAxZDdl LzEvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW8N9AwQB W+VwMA0GCSqGSIb3DQEBCwUAA4IBAQCDQMUpvJh7+QvxAYM2gQa3KzyytiJCXeX5 nGveervK4q99qyyt4r48l0yrPFPM8UChtVB8Sfbmo8+K29H4u0icH3N21R96sXJy v9bee2MkSUuCjllKl5MRNDj9qhiokAY82o/mKYATA/97hIz0FR1qAWdWER+QncW+ dVlcvvAZFMdAV0bEpht1UL2Us8nSSZtp4IMjeaFkd5bv0z5dBlZOL7dGb1fcjcYC JFS/QoY/tRAvOW6/wk9zYvRKRTcA7/3UHAmdCd5WeFgP4XXFQ/lwjN+r7kc+Hz1o 2hXiPsgN/AqQB+j5ZvRq+k3E9gVWipyxvFErrMaR8De9oj9W3ONN -----END CERTIFICATE-----Generated at Sun Jan 25 18:05:19 2026 by rpki-client