This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/z6fjFNC5yY7s5rVC_18gdfOPVm4.roa File: z6fjFNC5yY7s5rVC_18gdfOPVm4.roa (raw, json) Hash identifier: UsutNgSzfSxKpzDA+6kQmVSCK+R6MBOFNeCYRGmkXwo= Subject key identifier: CF:A7:E3:14:D0:B9:C9:8E:EC:E6:B5:42:FF:5F:20:75:F3:8F:56:6E Certificate issuer: /CN=ece6498d174adf5c89a365c2d1e477dcf24f982e Certificate serial: 019B78A262732F3B86D3CE652E9AA0139B80 Authority key identifier: EC:E6:49:8D:17:4A:DF:5C:89:A3:65:C2:D1:E4:77:DC:F2:4F:98:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7OZJjRdK31yJo2XC0eR33PJPmC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/z6fjFNC5yY7s5rVC_18gdfOPVm4.roa Signing time: Thu 01 Jan 2026 08:17:46 +0000 ROA not before: Thu 01 Jan 2026 08:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49308 IP address blocks: 91.212.189.0/24 maxlen: 24 198.202.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.mft rsync://rpki.ripe.net/repository/DEFAULT/7OZJjRdK31yJo2XC0eR33PJPmC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:62:73:2f:3b:86:d3:ce:65:2e:9a:a0:13:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ece6498d174adf5c89a365c2d1e477dcf24f982e Validity Not Before: Jan 1 08:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cfa7e314d0b9c98eece6b542ff5f2075f38f566e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a9:d7:b5:b7:78:77:a3:32:04:5a:67:a2:39: c0:90:c4:48:b0:4d:8e:d4:ca:c4:fa:e5:93:92:2f: 29:c4:01:08:81:09:06:c0:25:d0:14:39:f4:ee:ab: 08:49:95:15:47:4b:11:b4:75:ea:0e:ef:13:ae:f6: 1e:3a:26:45:47:34:fd:18:0a:3f:87:e8:04:05:9c: 6d:e4:3e:61:fd:8e:0c:cf:2a:ca:b7:2f:35:9a:cc: b1:51:f5:43:dd:88:d4:cd:3d:a0:57:aa:bd:ed:ae: 6b:01:62:af:c8:ba:fd:56:40:f6:dc:06:fb:b6:3b: 54:3e:e4:10:4a:5f:05:bb:3e:0c:7f:e2:30:24:f2: 75:d5:13:57:74:69:8f:9e:d3:d7:59:ac:21:fe:3e: ca:0a:7c:0b:b4:a5:01:d1:22:2e:d0:f6:c8:98:df: 13:88:12:ac:78:37:b3:62:2e:55:d6:65:b8:13:18: 20:81:1c:e2:85:e8:e6:4b:53:43:8b:a9:11:7b:32: 8a:c8:74:eb:71:8f:d5:11:01:85:cd:3b:79:e9:26: b1:19:e9:6d:8b:93:b2:be:b5:d9:84:e9:fa:96:f3: 36:cd:73:4b:3a:70:e4:23:ac:c7:d6:56:48:7e:4a: 32:8a:06:dc:69:cc:61:32:3c:ee:f1:43:80:06:b7: e3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:A7:E3:14:D0:B9:C9:8E:EC:E6:B5:42:FF:5F:20:75:F3:8F:56:6E X509v3 Authority Key Identifier: keyid:EC:E6:49:8D:17:4A:DF:5C:89:A3:65:C2:D1:E4:77:DC:F2:4F:98:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7OZJjRdK31yJo2XC0eR33PJPmC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/z6fjFNC5yY7s5rVC_18gdfOPVm4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.189.0/24 198.202.22.0/24 Signature Algorithm: sha256WithRSAEncryption a9:ad:bd:a1:1b:48:0f:92:bd:76:bf:b1:3b:54:4b:15:54:e9: 0b:79:48:cf:dc:d7:c6:53:23:e0:40:e2:b1:a9:09:19:ed:0c: a2:8c:f4:54:cd:ab:e1:82:3a:be:48:f9:8a:7c:b4:61:d3:21: 39:80:d0:03:97:52:c8:f8:7c:7d:cf:19:91:2d:44:c0:8a:21: f5:e4:b6:1d:ff:44:77:be:4b:ae:b7:54:eb:e7:62:56:b3:0a: e6:0c:1b:6a:e1:b4:80:b7:6c:63:5f:95:f2:9d:37:06:50:e1: 4f:48:2b:b1:bb:0d:00:46:fe:b7:98:f9:9e:3b:0e:1a:36:ce: 88:f3:a2:74:09:f5:ad:a2:9b:d1:c3:36:47:a0:67:b0:ad:07: e6:d7:ba:9c:0a:2e:9c:6d:f0:1a:12:84:6e:9b:a2:a9:34:00: 9e:b9:a3:79:53:35:4e:84:27:ca:d2:bd:60:f2:be:53:08:ee: 5c:ff:38:22:e9:93:af:25:78:e9:4d:28:86:6c:ba:4d:46:1b: 22:1e:11:4f:3f:d6:42:cb:7f:06:b0:c4:f0:10:20:ed:53:32: 19:55:99:88:53:db:4c:5b:c7:75:68:ac:bc:53:50:1b:66:81: 7f:e4:9e:85:d8:fa:91:13:7c:44:c4:1a:00:4e:75:81:fc:9a: 41:40:a2:c5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4omJzLzuG085lLpqgE5uAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjZTY0OThkMTc0YWRmNWM4OWEzNjVjMmQxZTQ3N2RjZjI0 Zjk4MmUwHhcNMjYwMTAxMDgxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZmE3ZTMxNGQwYjljOThlZWNlNmI1NDJmZjVmMjA3NWYzOGY1NjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKnXtbd4d6MyBFpnojnAkMRIsE2O 1MrE+uWTki8pxAEIgQkGwCXQFDn07qsISZUVR0sRtHXqDu8TrvYeOiZFRzT9GAo/ h+gEBZxt5D5h/Y4MzyrKty81msyxUfVD3YjUzT2gV6q97a5rAWKvyLr9VkD23Ab7 tjtUPuQQSl8Fuz4Mf+IwJPJ11RNXdGmPntPXWawh/j7KCnwLtKUB0SIu0PbImN8T iBKseDezYi5V1mW4ExgggRzihejmS1NDi6kRezKKyHTrcY/VEQGFzTt56SaxGelt i5OyvrXZhOn6lvM2zXNLOnDkI6zH1lZIfkoyigbcacxhMjzu8UOABrfj4QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFM+n4xTQucmO7Oa1Qv9fIHXzj1ZuMB8GA1UdIwQY MBaAFOzmSY0XSt9ciaNlwtHkd9zyT5guMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN09aSmpSZEszMXlKbzJYQzBlUjMzUEpQbUM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy84YWJiNTgtZjMwYy00ZjNiLWI5OTIt OWJlY2MxMzZjYzcxLzEvejZmakZOQzV5WTdzNXJWQ18xOGdkZk9QVm00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy84YWJiNTgtZjMwYy00ZjNiLWI5OTItOWJlY2MxMzZjYzcx LzEvN09aSmpSZEszMXlKbzJYQzBlUjMzUEpQbUM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9S9AwQA xsoWMA0GCSqGSIb3DQEBCwUAA4IBAQCprb2hG0gPkr12v7E7VEsVVOkLeUjP3NfG UyPgQOKxqQkZ7QyijPRUzavhgjq+SPmKfLRh0yE5gNADl1LI+Hx9zxmRLUTAiiH1 5LYd/0R3vkuut1Tr52JWswrmDBtq4bSAt2xjX5XynTcGUOFPSCuxuw0ARv63mPme Ow4aNs6I86J0CfWtopvRwzZHoGewrQfm17qcCi6cbfAaEoRum6KpNACeuaN5UzVO hCfK0r1g8r5TCO5c/zgi6ZOvJXjpTSiGbLpNRhsiHhFPP9ZCy38GsMTwECDtUzIZ VZmIU9tMW8d1aKy8U1AbZoF/5J6F2PqRE3xExBoATnWB/JpBQKLF -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:02 2026 by rpki-client