This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/zTqwVEZEkJ2o5vXaLHz2zvS-PCU.roa File: zTqwVEZEkJ2o5vXaLHz2zvS-PCU.roa (raw, json) Hash identifier: 3m9rp/jqInhSmfaVC+tbC+fcAxs/SBMNeqBaNmCor5E= Subject key identifier: CD:3A:B0:54:46:44:90:9D:A8:E6:F5:DA:2C:7C:F6:CE:F4:BE:3C:25 Certificate issuer: /CN=19a6046e37c7e2075b41d6fef70d2312303c5f39 Certificate serial: 019B7910B8477DF2E289D5309D8B72E6DF34 Authority key identifier: 19:A6:04:6E:37:C7:E2:07:5B:41:D6:FE:F7:0D:23:12:30:3C:5F:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/zTqwVEZEkJ2o5vXaLHz2zvS-PCU.roa Signing time: Thu 01 Jan 2026 10:18:17 +0000 ROA not before: Thu 01 Jan 2026 10:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44827 IP address blocks: 91.203.24.0/22 maxlen: 22 91.203.24.0/24 maxlen: 24 91.203.25.0/24 maxlen: 24 91.203.26.0/24 maxlen: 24 91.203.27.0/24 maxlen: 24 109.95.40.0/21 maxlen: 21 109.95.40.0/24 maxlen: 24 109.95.42.0/24 maxlen: 24 109.95.43.0/24 maxlen: 24 109.95.44.0/24 maxlen: 24 109.95.45.0/24 maxlen: 24 109.95.46.0/24 maxlen: 24 109.95.47.0/24 maxlen: 24 176.120.112.0/21 maxlen: 21 176.120.112.0/24 maxlen: 24 176.120.113.0/24 maxlen: 24 176.120.114.0/24 maxlen: 24 176.120.115.0/24 maxlen: 24 176.120.116.0/24 maxlen: 24 176.120.117.0/24 maxlen: 24 176.120.118.0/24 maxlen: 24 176.120.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:b8:47:7d:f2:e2:89:d5:30:9d:8b:72:e6:df:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19a6046e37c7e2075b41d6fef70d2312303c5f39 Validity Not Before: Jan 1 10:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd3ab0544644909da8e6f5da2c7cf6cef4be3c25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:55:da:cd:07:84:e8:e7:7d:a3:61:11:a8:46: 23:c2:75:d3:40:a0:c2:2c:bc:1c:27:c5:d6:9c:a8: 20:2b:48:07:96:f5:e1:72:ce:60:04:e0:86:14:6b: cf:15:67:ab:d6:fd:f3:09:cb:f7:d5:f9:2d:b3:28: 18:0b:7b:48:14:90:bc:fb:b6:fe:78:5c:d6:89:9d: da:56:d5:56:48:90:7f:31:66:f6:46:da:ba:18:8a: 19:c7:10:07:3d:f8:8a:54:10:fb:bc:e8:c8:78:99: ca:17:0a:af:ba:a8:f3:58:ff:3c:1e:f5:00:cb:77: 5b:c0:0a:3b:9c:e8:cc:ff:5e:a1:2a:6d:c0:e7:c3: 89:bb:16:11:d0:32:44:ed:88:05:98:19:cd:d4:dc: 9b:be:8d:3e:03:fa:62:7c:05:d8:ab:59:76:3b:69: 94:b4:c3:cb:4c:75:b9:18:72:cf:e6:9c:be:e1:a3: 86:ab:b2:df:27:97:19:1d:6f:0b:e7:e6:4c:fc:46: f6:8f:01:93:16:68:bb:91:f7:83:b6:a2:e8:d5:48: ce:59:bf:e3:12:4f:93:b8:ec:71:c3:f9:4e:de:0c: 4b:43:57:72:4f:fa:1c:2c:34:34:39:7e:18:6c:0f: ae:fb:8b:35:b8:70:66:04:6a:2b:56:fd:7b:ba:4f: a2:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:3A:B0:54:46:44:90:9D:A8:E6:F5:DA:2C:7C:F6:CE:F4:BE:3C:25 X509v3 Authority Key Identifier: keyid:19:A6:04:6E:37:C7:E2:07:5B:41:D6:FE:F7:0D:23:12:30:3C:5F:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/zTqwVEZEkJ2o5vXaLHz2zvS-PCU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.203.24.0/22 109.95.40.0/21 176.120.112.0/21 Signature Algorithm: sha256WithRSAEncryption 43:8e:32:47:f2:78:9f:3e:7e:38:b7:ab:ad:02:32:df:50:a5: d0:af:2b:a9:bb:08:51:fc:6e:08:1f:49:1f:eb:31:28:a8:27: 51:40:ce:dd:20:73:31:3c:9a:36:47:61:db:7d:31:91:e6:2f: a6:3a:77:27:3a:da:2d:68:98:4e:5a:1c:0b:f4:42:03:35:4c: 0c:c8:79:fc:70:b1:fe:e7:5e:99:29:92:68:3f:ad:21:be:96: 25:e8:22:eb:fa:ea:44:d2:3c:03:4e:d0:af:75:dc:2e:64:38: ca:da:fd:4c:ec:e1:2a:ab:87:26:30:1f:94:9a:b6:a0:75:71: cd:c7:83:0d:a1:6c:4d:06:73:a6:e9:ff:ea:0c:cb:b3:e0:b7: 7d:4a:63:f6:c9:77:20:b9:ef:4b:fc:9a:3e:1e:56:6b:45:f4: 8a:b4:30:2a:25:c9:e0:04:a7:67:8f:cb:12:1f:d7:90:09:99: 18:39:db:f0:71:96:a4:9f:73:f5:8a:78:8a:23:b7:71:ff:2a: ca:23:f0:dc:00:21:98:0b:8f:8f:63:58:79:89:e4:bd:68:29: bc:bc:7e:3c:90:b8:1f:8e:8f:01:5d:21:fd:f4:0f:67:3a:17: ee:c7:93:b0:5f:03:26:ed:22:06:84:f1:a4:b3:f5:27:bb:04: 6f:5a:e6:4e -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5ELhHffLiidUwnYty5t80MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5YTYwNDZlMzdjN2UyMDc1YjQxZDZmZWY3MGQyMzEyMzAz YzVmMzkwHhcNMjYwMTAxMTAxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDNhYjA1NDQ2NDQ5MDlkYThlNmY1ZGEyYzdjZjZjZWY0YmUzYzI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FXazQeE6Od9o2ERqEYjwnXTQKDC LLwcJ8XWnKggK0gHlvXhcs5gBOCGFGvPFWer1v3zCcv31fktsygYC3tIFJC8+7b+ eFzWiZ3aVtVWSJB/MWb2Rtq6GIoZxxAHPfiKVBD7vOjIeJnKFwqvuqjzWP88HvUA y3dbwAo7nOjM/16hKm3A58OJuxYR0DJE7YgFmBnN1Nybvo0+A/pifAXYq1l2O2mU tMPLTHW5GHLP5py+4aOGq7LfJ5cZHW8L5+ZM/Eb2jwGTFmi7kfeDtqLo1UjOWb/j Ek+TuOxxw/lO3gxLQ1dyT/ocLDQ0OX4YbA+u+4s1uHBmBGorVv17uk+i4wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFM06sFRGRJCdqOb12ix89s70vjwlMB8GA1UdIwQY MBaAFBmmBG43x+IHW0HW/vcNIxIwPF85MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2FZRWJqZkg0Z2RiUWRiLTl3MGpFakE4WHprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83OTllNWMtMTU5NC00MDlmLThjNTQt M2ZlYzU4NjE0YzRiLzEvelRxd1ZFWkVrSjJvNXZYYUxIejJ6dlMtUENVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC83OTllNWMtMTU5NC00MDlmLThjNTQtM2ZlYzU4NjE0YzRi LzEvR2FZRWJqZkg0Z2RiUWRiLTl3MGpFakE4WHprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCW8sYAwQD bV8oAwQDsHhwMA0GCSqGSIb3DQEBCwUAA4IBAQBDjjJH8nifPn44t6utAjLfUKXQ ryupuwhR/G4IH0kf6zEoqCdRQM7dIHMxPJo2R2HbfTGR5i+mOncnOtotaJhOWhwL 9EIDNUwMyHn8cLH+516ZKZJoP60hvpYl6CLr+upE0jwDTtCvddwuZDjK2v1M7OEq q4cmMB+UmragdXHNx4MNoWxNBnOm6f/qDMuz4Ld9SmP2yXcgue9L/Jo+HlZrRfSK tDAqJcngBKdnj8sSH9eQCZkYOdvwcZakn3P1iniKI7dx/yrKI/DcACGYC4+PY1h5 ieS9aCm8vH48kLgfjo8BXSH99A9nOhfux5OwXwMm7SIGhPGks/UnuwRvWuZO -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:05 2026 by rpki-client