This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/A_z7T-9m7d_9cFuD6RzeeqQuAAo.roa File: A_z7T-9m7d_9cFuD6RzeeqQuAAo.roa (raw, json) Hash identifier: CndX469kMgFnIGnFVgAv1uwBMzZ+jqdPFxwbzTu/wnQ= Subject key identifier: 03:FC:FB:4F:EF:66:ED:DF:FD:70:5B:83:E9:1C:DE:7A:A4:2E:00:0A Certificate issuer: /CN=aea03201cda6a8adbde4fe8046ec65f96ac6a96c Certificate serial: 019B79EC2174D4F0CDA4F1281D16649EB066 Authority key identifier: AE:A0:32:01:CD:A6:A8:AD:BD:E4:FE:80:46:EC:65:F9:6A:C6:A9:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/A_z7T-9m7d_9cFuD6RzeeqQuAAo.roa Signing time: Thu 01 Jan 2026 14:17:56 +0000 ROA not before: Thu 01 Jan 2026 14:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47274 IP address blocks: 91.204.8.0/22 maxlen: 22 195.62.80.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:21:74:d4:f0:cd:a4:f1:28:1d:16:64:9e:b0:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aea03201cda6a8adbde4fe8046ec65f96ac6a96c Validity Not Before: Jan 1 14:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=03fcfb4fef66eddffd705b83e91cde7aa42e000a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1e:7c:d8:ef:29:8e:9b:19:ab:3a:78:e3:9a: 11:f7:ce:90:8f:55:71:40:c0:eb:bc:e0:c2:1a:f7: f2:f6:36:f2:e4:42:72:d1:fc:cc:8e:80:18:7c:26: c3:ff:87:2e:65:f9:11:24:25:10:14:dd:e7:11:f0: b8:d8:c3:c4:5e:9d:40:ea:9a:cb:46:ea:b5:3f:d3: d4:d5:76:94:d4:82:a5:8f:39:af:97:80:e4:64:c4: b6:55:9d:e5:05:46:91:50:c7:03:c4:b9:25:1d:b8: 6b:67:1e:1a:04:35:1f:88:de:7a:4b:4f:cc:34:20: d2:34:aa:ab:09:67:3f:17:b0:a9:b4:35:92:62:d6: 8e:9f:72:29:dc:96:30:41:75:19:ad:19:77:dc:e1: 0e:d0:2c:fe:59:f0:17:a1:32:ed:33:cd:b5:15:12: 61:80:db:6e:4b:38:38:2b:e8:d1:7d:d5:ed:97:09: e7:c9:6d:51:64:79:85:ea:10:0b:47:c5:37:d0:af: 13:aa:15:87:11:09:df:1f:18:82:08:b7:9c:cd:91: 57:a9:94:9e:bb:2a:62:e7:57:25:81:9d:81:23:ad: 75:08:2a:88:2e:bc:60:01:15:22:b5:b9:3d:d5:cc: 2c:95:bf:35:07:ca:32:4c:5f:d9:b6:72:ea:28:91: b4:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:FC:FB:4F:EF:66:ED:DF:FD:70:5B:83:E9:1C:DE:7A:A4:2E:00:0A X509v3 Authority Key Identifier: keyid:AE:A0:32:01:CD:A6:A8:AD:BD:E4:FE:80:46:EC:65:F9:6A:C6:A9:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/A_z7T-9m7d_9cFuD6RzeeqQuAAo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.204.8.0/22 195.62.80.0/23 Signature Algorithm: sha256WithRSAEncryption 89:a8:72:1b:06:13:5b:f1:dd:e0:8b:31:59:84:f1:dc:cf:03: b2:35:cd:4f:b3:36:c8:84:30:71:22:93:11:5e:a9:bd:fe:85: 57:83:34:38:cd:91:20:88:ce:12:e5:3a:c4:99:5b:fe:b0:de: 6d:44:9e:ed:cf:8f:a4:24:5c:cb:1e:34:e2:c4:b1:0b:c6:99: 3c:d1:52:11:17:3c:e1:51:36:89:20:e8:01:c7:4c:c2:0e:67: 79:a6:53:e4:7d:c3:3b:79:ce:5b:35:ff:e6:b1:42:97:73:ed: 40:3a:d0:f6:f3:1c:b6:c9:59:bd:58:32:ec:45:a0:9b:3e:81: ff:ac:20:31:29:f0:81:d0:80:38:87:0b:64:9f:04:7d:4f:ce: 54:33:df:ae:3d:3c:75:0b:c1:7e:2c:d5:f1:01:17:e4:7c:3e: 40:21:ad:61:7e:5e:7b:dc:54:55:9d:e5:0d:23:7a:d8:08:0e: 94:e6:31:41:fb:17:84:a0:a2:e3:28:ca:a2:75:2e:34:5a:68: 28:7b:f0:29:98:4f:e6:62:0a:fe:76:53:3f:75:47:01:7e:d6: ce:c1:66:bb:b8:ef:ff:79:8a:a4:48:96:7f:a6:f9:61:82:7e: 0e:8f:43:2c:01:f3:cd:87:98:70:fa:d0:ea:ab:e8:1f:d6:15: db:92:2f:ef -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57CF01PDNpPEoHRZknrBmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYTAzMjAxY2RhNmE4YWRiZGU0ZmU4MDQ2ZWM2NWY5NmFj NmE5NmMwHhcNMjYwMTAxMTQxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwM2ZjZmI0ZmVmNjZlZGRmZmQ3MDViODNlOTFjZGU3YWE0MmUwMDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2B582O8pjpsZqzp445oR986Qj1Vx QMDrvODCGvfy9jby5EJy0fzMjoAYfCbD/4cuZfkRJCUQFN3nEfC42MPEXp1A6prL Ruq1P9PU1XaU1IKljzmvl4DkZMS2VZ3lBUaRUMcDxLklHbhrZx4aBDUfiN56S0/M NCDSNKqrCWc/F7CptDWSYtaOn3Ip3JYwQXUZrRl33OEO0Cz+WfAXoTLtM821FRJh gNtuSzg4K+jRfdXtlwnnyW1RZHmF6hALR8U30K8TqhWHEQnfHxiCCLeczZFXqZSe uypi51clgZ2BI611CCqILrxgARUitbk91cwslb81B8oyTF/ZtnLqKJG0bQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAP8+0/vZu3f/XBbg+kc3nqkLgAKMB8GA1UdIwQY MBaAFK6gMgHNpqitveT+gEbsZflqxqlsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnFBeUFjMm1xSzI5NVA2QVJ1eGwtV3JHcVd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9kZDA5ZGMtMjQ3Mi00NTE3LTllMmQt ZWE0MTJmMjFlMjMwLzEvQV96N1QtOW03ZF85Y0Z1RDZSemVlcVF1QUFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9kZDA5ZGMtMjQ3Mi00NTE3LTllMmQtZWE0MTJmMjFlMjMw LzEvcnFBeUFjMm1xSzI5NVA2QVJ1eGwtV3JHcVd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW8wIAwQB wz5QMA0GCSqGSIb3DQEBCwUAA4IBAQCJqHIbBhNb8d3gizFZhPHczwOyNc1PszbI hDBxIpMRXqm9/oVXgzQ4zZEgiM4S5TrEmVv+sN5tRJ7tz4+kJFzLHjTixLELxpk8 0VIRFzzhUTaJIOgBx0zCDmd5plPkfcM7ec5bNf/msUKXc+1AOtD28xy2yVm9WDLs RaCbPoH/rCAxKfCB0IA4hwtknwR9T85UM9+uPTx1C8F+LNXxARfkfD5AIa1hfl57 3FRVneUNI3rYCA6U5jFB+xeEoKLjKMqidS40Wmgoe/ApmE/mYgr+dlM/dUcBftbO wWa7uO//eYqkSJZ/pvlhgn4Oj0MsAfPNh5hw+tDqq+gf1hXbki/v -----END CERTIFICATE-----Generated at Mon Jan 26 07:40:24 2026 by rpki-client