This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/RVZUdfQPJyyIdNmA87Ans0ruEWw.roa File: RVZUdfQPJyyIdNmA87Ans0ruEWw.roa (raw, json) Hash identifier: vS5f2EeI1QR5TcdPUA4xOkX9GR287E/ZEWXJEXLTjpk= Subject key identifier: 45:56:54:75:F4:0F:27:2C:88:74:D9:80:F3:B0:27:B3:4A:EE:11:6C Certificate issuer: /CN=975c9ffa65c3c9b57c549e72cd6dc703005b2e0e Certificate serial: 019B7C123F6FBED4F1BB1FE518C23EC32F56 Authority key identifier: 97:5C:9F:FA:65:C3:C9:B5:7C:54:9E:72:CD:6D:C7:03:00:5B:2E:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/RVZUdfQPJyyIdNmA87Ans0ruEWw.roa Signing time: Fri 02 Jan 2026 00:18:49 +0000 ROA not before: Fri 02 Jan 2026 00:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29196 IP address blocks: 91.239.112.0/24 maxlen: 24 195.69.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:3f:6f:be:d4:f1:bb:1f:e5:18:c2:3e:c3:2f:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=975c9ffa65c3c9b57c549e72cd6dc703005b2e0e Validity Not Before: Jan 2 00:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=45565475f40f272c8874d980f3b027b34aee116c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ab:b7:70:de:2f:a1:4a:89:72:f3:34:6a:e4: f5:aa:ab:58:04:5a:ba:b0:04:42:43:77:63:7d:c1: 16:6d:ac:26:31:f3:fa:8c:4f:22:69:35:6e:62:90: 7f:26:aa:95:20:e7:f7:7e:04:b7:45:4b:dd:ea:cc: fc:8e:38:62:59:0f:ee:45:98:ee:2e:37:9d:76:49: 90:f8:6d:2a:b9:0a:4b:5b:f2:79:ec:fd:16:6f:95: ba:62:7d:be:8e:47:8a:62:20:d5:37:82:c6:6b:89: 2f:0f:cf:33:4f:f8:d2:ee:49:53:5a:56:ce:b1:e6: cf:ac:e3:63:23:75:34:11:9b:67:81:b8:12:17:bd: cd:18:97:1d:69:39:ca:56:e8:f2:d5:86:3e:2e:62: 95:1a:ca:95:e2:2e:09:ae:a7:04:ab:ab:34:d7:29: d9:ef:b7:02:73:5f:00:96:67:0e:49:75:6e:3b:24: fc:15:0b:7c:2b:43:4d:0d:1e:1b:1e:34:39:80:39: dd:03:c9:46:2e:6c:f0:39:98:dc:ad:27:f8:91:d0: 67:51:ed:4d:d1:fb:95:a1:25:7c:81:6d:cb:00:d9: 8d:60:92:7a:26:48:f3:b9:0e:55:5c:03:7b:52:25: 85:01:c5:7b:6d:22:9a:a1:80:e6:52:bd:45:70:1a: d7:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:56:54:75:F4:0F:27:2C:88:74:D9:80:F3:B0:27:B3:4A:EE:11:6C X509v3 Authority Key Identifier: keyid:97:5C:9F:FA:65:C3:C9:B5:7C:54:9E:72:CD:6D:C7:03:00:5B:2E:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/RVZUdfQPJyyIdNmA87Ans0ruEWw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.239.112.0/24 195.69.216.0/22 Signature Algorithm: sha256WithRSAEncryption 42:e0:d7:44:5a:e7:c3:4c:1f:3c:2b:89:3f:ff:9f:2c:14:e1: d7:ea:01:e6:05:87:55:a8:d5:05:d7:15:26:55:87:6a:e4:a0: 99:41:0d:62:be:63:e5:3c:c2:fc:02:a4:a7:f7:5b:b9:de:6e: 0d:c4:5c:e7:a5:34:24:11:60:8b:65:cb:94:89:93:0d:92:11: 81:94:4b:d2:12:e9:4a:a7:73:e1:f6:d8:a1:b2:8d:c2:db:ff: e6:00:9a:c2:e3:90:c1:69:8f:63:35:b0:d9:0c:92:13:cb:ba: 8b:96:7f:3c:00:4c:1a:6f:c0:89:58:d9:18:8f:e7:ac:a9:78: c4:f6:0c:0b:93:b0:8e:83:b4:9b:46:28:e6:6d:44:9d:13:43: 29:eb:de:dc:bc:78:c9:8d:52:8b:8c:fd:eb:0b:0e:f8:15:c2: 28:ea:7a:e6:ca:3a:1c:4f:a5:04:d5:e4:64:87:74:d6:2f:75: 43:b1:95:73:b0:2b:28:71:d3:52:f2:87:1e:76:43:08:cc:98: c8:41:5f:fb:8c:3e:21:28:bd:aa:b6:51:fb:5c:02:3c:b1:17: 5c:55:8f:50:29:26:fa:50:89:eb:5d:ba:11:e1:e0:ab:cb:cc: 6a:e1:35:2d:d9:64:99:29:b4:71:1f:53:da:be:1e:39:6a:32: 0e:8e:dd:3f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8Ej9vvtTxux/lGMI+wy9WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NWM5ZmZhNjVjM2M5YjU3YzU0OWU3MmNkNmRjNzAzMDA1 YjJlMGUwHhcNMjYwMTAyMDAxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTU2NTQ3NWY0MGYyNzJjODg3NGQ5ODBmM2IwMjdiMzRhZWUxMTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqu3cN4voUqJcvM0auT1qqtYBFq6 sARCQ3djfcEWbawmMfP6jE8iaTVuYpB/JqqVIOf3fgS3RUvd6sz8jjhiWQ/uRZju LjeddkmQ+G0quQpLW/J57P0Wb5W6Yn2+jkeKYiDVN4LGa4kvD88zT/jS7klTWlbO sebPrONjI3U0EZtngbgSF73NGJcdaTnKVujy1YY+LmKVGsqV4i4JrqcEq6s01ynZ 77cCc18AlmcOSXVuOyT8FQt8K0NNDR4bHjQ5gDndA8lGLmzwOZjcrSf4kdBnUe1N 0fuVoSV8gW3LANmNYJJ6JkjzuQ5VXAN7UiWFAcV7bSKaoYDmUr1FcBrXtQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEVWVHX0DycsiHTZgPOwJ7NK7hFsMB8GA1UdIwQY MBaAFJdcn/plw8m1fFSecs1txwMAWy4OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDF5Zi1tWER5YlY4Vko1eXpXM0hBd0JiTGc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC85MmVjZWEtM2YzYy00YmFhLTgzNGIt MTI2YzdiNDhiODQ3LzEvUlZaVWRmUVBKeXlJZE5tQTg3QW5zMHJ1RVd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC85MmVjZWEtM2YzYy00YmFhLTgzNGItMTI2YzdiNDhiODQ3 LzEvbDF5Zi1tWER5YlY4Vko1eXpXM0hBd0JiTGc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW+9wAwQC w0XYMA0GCSqGSIb3DQEBCwUAA4IBAQBC4NdEWufDTB88K4k//58sFOHX6gHmBYdV qNUF1xUmVYdq5KCZQQ1ivmPlPML8AqSn91u53m4NxFznpTQkEWCLZcuUiZMNkhGB lEvSEulKp3Ph9tihso3C2//mAJrC45DBaY9jNbDZDJITy7qLln88AEwab8CJWNkY j+esqXjE9gwLk7COg7SbRijmbUSdE0Mp697cvHjJjVKLjP3rCw74FcIo6nrmyjoc T6UE1eRkh3TWL3VDsZVzsCsocdNS8ocedkMIzJjIQV/7jD4hKL2qtlH7XAI8sRdc VY9QKSb6UInrXboR4eCry8xq4TUt2WSZKbRxH1Pavh45ajIOjt0/ -----END CERTIFICATE-----Generated at Mon Jan 26 09:22:48 2026 by rpki-client