This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/ZHym1jgmQNO1769mOXVyUNOVMEc.roa File: ZHym1jgmQNO1769mOXVyUNOVMEc.roa (raw, json) Hash identifier: 6HGTh8JhgEJnDcdwwWSa7+oUj2V8bxazwsUi6gBiFdk= Subject key identifier: 64:7C:A6:D6:38:26:40:D3:B5:EF:AF:66:39:75:72:50:D3:95:30:47 Certificate issuer: /CN=1670e1bc5869c602b642449031d4b7116c9dfa26 Certificate serial: 019B7E392A4E330772111B59391CAB839C7E Authority key identifier: 16:70:E1:BC:58:69:C6:02:B6:42:44:90:31:D4:B7:11:6C:9D:FA:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FnDhvFhpxgK2QkSQMdS3EWyd-iY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/ZHym1jgmQNO1769mOXVyUNOVMEc.roa Signing time: Fri 02 Jan 2026 10:20:34 +0000 ROA not before: Fri 02 Jan 2026 10:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56454 IP address blocks: 91.223.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft rsync://rpki.ripe.net/repository/DEFAULT/FnDhvFhpxgK2QkSQMdS3EWyd-iY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:2a:4e:33:07:72:11:1b:59:39:1c:ab:83:9c:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1670e1bc5869c602b642449031d4b7116c9dfa26 Validity Not Before: Jan 2 10:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=647ca6d6382640d3b5efaf6639757250d3953047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d5:5f:65:b0:02:60:8c:5b:02:a0:5d:0b:c5: d6:f6:4a:01:1a:f2:88:fd:ba:5f:fd:8a:4c:25:08: 25:4b:e1:af:21:46:94:c5:02:57:52:8f:4a:d8:37: 7e:25:89:4b:36:64:a9:f9:62:48:c2:26:a1:dd:76: e0:7e:d6:45:61:68:a7:7a:96:3b:93:2b:8e:61:40: f6:20:da:bb:74:94:06:72:58:c8:1b:a9:ec:44:d5: 4e:9e:b5:1b:fc:a3:6b:74:8d:ca:c5:1c:93:6f:de: af:c9:5d:59:6a:21:d6:e2:e2:3b:54:3b:d4:02:51: e5:79:5d:8f:48:5e:d4:83:32:f3:d6:3b:05:8f:48: 36:fa:b6:fd:55:ba:5a:52:0a:08:bc:c1:a1:01:80: f5:7c:f9:90:71:6c:26:c6:f3:3c:45:60:30:67:4f: 15:a5:83:ae:8f:a6:1b:28:7f:10:96:a7:2c:00:9b: 83:41:a1:06:88:4f:0a:77:dc:3c:46:8d:9d:5d:30: 31:ae:a3:3c:fb:22:9c:bc:24:ad:3a:16:83:6f:70: 2a:3a:85:45:dc:07:df:40:c3:22:fb:24:66:de:3b: 3e:4b:0c:79:b8:dc:17:d4:1d:9c:98:12:1b:74:90: 03:0e:5a:18:9d:8c:13:49:9a:48:29:6b:f7:58:02: e6:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:7C:A6:D6:38:26:40:D3:B5:EF:AF:66:39:75:72:50:D3:95:30:47 X509v3 Authority Key Identifier: keyid:16:70:E1:BC:58:69:C6:02:B6:42:44:90:31:D4:B7:11:6C:9D:FA:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnDhvFhpxgK2QkSQMdS3EWyd-iY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/ZHym1jgmQNO1769mOXVyUNOVMEc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.165.0/24 Signature Algorithm: sha256WithRSAEncryption af:40:7c:2d:3a:e9:7c:56:e7:e9:51:be:f0:53:14:23:62:b9: f8:0b:6b:0b:9b:09:c3:4d:2b:24:54:dc:dc:59:af:5d:5e:9b: ce:74:06:5b:9d:f7:d6:52:cc:f2:a0:83:a9:e2:8d:01:b5:7c: b2:a5:d2:bc:7b:8c:bf:15:02:87:40:9a:6f:9e:0c:88:32:2f: 70:1c:fa:95:3f:35:fe:da:1c:4d:1c:3a:17:fa:a6:8f:05:ed: d2:d7:70:93:6c:f2:2b:fe:b3:5f:14:d4:d1:04:4a:3c:65:4a: 5e:c2:e1:19:eb:9c:d1:66:41:49:37:4d:6f:e9:ca:a5:41:c6: 13:0c:63:04:e6:83:d3:99:dd:ed:e5:11:cf:72:b1:51:01:85: 5a:84:7d:39:33:f0:9c:1c:28:1a:e7:78:45:2a:df:12:7a:40: 81:cc:58:c8:34:37:54:f5:6c:84:18:9b:15:e6:23:7b:d2:4f: 9e:70:d0:63:bf:b3:63:14:cb:12:ac:b7:e6:3b:ef:69:aa:76: 7b:54:d2:be:13:68:54:4f:89:18:3b:41:b3:d9:33:b2:ac:66: f2:a7:ba:bf:d2:18:35:07:20:da:aa:d4:79:63:65:65:43:82: 5e:81:87:af:a6:b6:71:d8:e7:bb:73:3a:97:05:87:a0:0e:79: 66:2b:09:04 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OSpOMwdyERtZORyrg5x+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NzBlMWJjNTg2OWM2MDJiNjQyNDQ5MDMxZDRiNzExNmM5 ZGZhMjYwHhcNMjYwMTAyMTAyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDdjYTZkNjM4MjY0MGQzYjVlZmFmNjYzOTc1NzI1MGQzOTUzMDQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtVfZbACYIxbAqBdC8XW9koBGvKI /bpf/YpMJQglS+GvIUaUxQJXUo9K2Dd+JYlLNmSp+WJIwiah3XbgftZFYWinepY7 kyuOYUD2INq7dJQGcljIG6nsRNVOnrUb/KNrdI3KxRyTb96vyV1ZaiHW4uI7VDvU AlHleV2PSF7UgzLz1jsFj0g2+rb9VbpaUgoIvMGhAYD1fPmQcWwmxvM8RWAwZ08V pYOuj6YbKH8QlqcsAJuDQaEGiE8Kd9w8Ro2dXTAxrqM8+yKcvCStOhaDb3AqOoVF 3AffQMMi+yRm3js+Swx5uNwX1B2cmBIbdJADDloYnYwTSZpIKWv3WALmxwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGR8ptY4JkDTte+vZjl1clDTlTBHMB8GA1UdIwQY MBaAFBZw4bxYacYCtkJEkDHUtxFsnfomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm5EaHZGaHB4Z0syUWtTUU1kUzNFV3lkLWlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9lY2IyYWEtNWU1Yy00ZmVmLWJjOGQt YzBlYTI4YWMzNjdhLzEvWkh5bTFqZ21RTk8xNzY5bU9YVnlVTk9WTUVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9lY2IyYWEtNWU1Yy00ZmVmLWJjOGQtYzBlYTI4YWMzNjdh LzEvRm5EaHZGaHB4Z0syUWtTUU1kUzNFV3lkLWlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9+lMA0G CSqGSIb3DQEBCwUAA4IBAQCvQHwtOul8VufpUb7wUxQjYrn4C2sLmwnDTSskVNzc Wa9dXpvOdAZbnffWUszyoIOp4o0BtXyypdK8e4y/FQKHQJpvngyIMi9wHPqVPzX+ 2hxNHDoX+qaPBe3S13CTbPIr/rNfFNTRBEo8ZUpewuEZ65zRZkFJN01v6cqlQcYT DGME5oPTmd3t5RHPcrFRAYVahH05M/CcHCga53hFKt8SekCBzFjINDdU9WyEGJsV 5iN70k+ecNBjv7NjFMsSrLfmO+9pqnZ7VNK+E2hUT4kYO0Gz2TOyrGbyp7q/0hg1 ByDaqtR5Y2VlQ4JegYevprZx2Oe7czqXBYegDnlmKwkE -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:26 2026 by rpki-client