This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/Zy79mWZxVkZBlZ2rnp-zcouMF8Y.roa File: Zy79mWZxVkZBlZ2rnp-zcouMF8Y.roa (raw, json) Hash identifier: 3dKfDLWPx4SPhtrGmyl80Hv9zqYxVlUTJ6doGiqefpg= Subject key identifier: 67:2E:FD:99:66:71:56:46:41:95:9D:AB:9E:9F:B3:72:8B:8C:17:C6 Certificate issuer: /CN=33f50a8de971f8547f5b56c97c36c287ef54bdb8 Certificate serial: 019B7E3836F686D401507451CAEE7F2C7F14 Authority key identifier: 33:F5:0A:8D:E9:71:F8:54:7F:5B:56:C9:7C:36:C2:87:EF:54:BD:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_UKjelx-FR_W1bJfDbCh-9Uvbg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/Zy79mWZxVkZBlZ2rnp-zcouMF8Y.roa Signing time: Fri 02 Jan 2026 10:19:31 +0000 ROA not before: Fri 02 Jan 2026 10:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59526 IP address blocks: 91.242.44.0/24 maxlen: 24 91.242.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.crl rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft rsync://rpki.ripe.net/repository/DEFAULT/M_UKjelx-FR_W1bJfDbCh-9Uvbg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:36:f6:86:d4:01:50:74:51:ca:ee:7f:2c:7f:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33f50a8de971f8547f5b56c97c36c287ef54bdb8 Validity Not Before: Jan 2 10:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=672efd996671564641959dab9e9fb3728b8c17c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9c:7b:0f:84:c9:a5:d8:98:f9:ef:9c:03:8f: f7:16:d3:94:44:17:a2:44:94:ee:a0:5c:47:aa:5a: ff:97:d3:6c:f0:50:c5:4d:fa:2a:61:9e:85:bf:f0: ac:c1:7c:73:cd:0f:aa:46:c2:65:42:2d:69:3a:b6: ea:b6:3d:d8:ea:df:52:0b:80:db:45:a9:ad:c2:e4: 3c:d9:f8:04:c1:71:ab:39:aa:dd:10:b5:5f:6e:d5: 7c:20:41:dd:7b:80:8e:60:db:d0:c6:02:48:43:c4: 06:6c:f9:44:54:fe:de:62:bb:3f:8d:7c:67:12:3e: de:be:de:e0:72:a8:0a:04:8f:01:60:78:47:bb:bf: 91:74:54:da:ae:42:aa:01:58:22:28:f1:27:29:66: a8:7d:23:67:31:74:33:cb:62:fe:09:b3:88:fa:37: 21:6a:1b:51:30:e1:d8:3a:03:04:cb:0d:65:08:cb: 3a:0f:0f:af:af:d8:3b:54:96:aa:3e:46:8b:3f:4d: 96:88:f3:61:fc:cf:e5:c8:4a:d2:50:b1:6a:e2:05: 6b:47:9d:3c:9a:ef:c3:cd:a0:18:b7:30:63:9f:34: 27:f4:fa:33:9d:11:70:e5:9a:20:73:20:5f:34:0e: 98:5d:53:7b:2a:14:08:7d:f7:25:f6:c8:96:cf:4e: 9b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:2E:FD:99:66:71:56:46:41:95:9D:AB:9E:9F:B3:72:8B:8C:17:C6 X509v3 Authority Key Identifier: keyid:33:F5:0A:8D:E9:71:F8:54:7F:5B:56:C9:7C:36:C2:87:EF:54:BD:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_UKjelx-FR_W1bJfDbCh-9Uvbg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/Zy79mWZxVkZBlZ2rnp-zcouMF8Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.242.44.0/23 Signature Algorithm: sha256WithRSAEncryption 17:28:c4:c5:a4:9c:a1:23:f5:71:28:e0:63:cc:eb:a2:63:50: ee:88:92:77:a0:a3:97:d3:85:5d:8f:19:9c:20:0d:b3:fb:fd: ec:54:f1:b8:25:93:9a:22:69:c6:8d:1d:69:07:ea:3f:a9:79: f7:9b:81:bc:da:db:cc:68:dc:bf:96:1a:dd:d5:3c:98:73:ab: 0b:3c:e8:36:09:2b:bf:20:05:27:53:76:c8:95:0a:86:22:c6: 26:ca:e0:d1:4a:5d:4e:8d:c0:c3:07:df:36:5e:8c:ef:ab:90: a8:62:4b:cd:bd:09:86:57:f2:15:52:bd:b9:dd:07:84:9e:0c: 19:f4:d5:a1:72:0d:80:3c:74:a3:d9:6a:c1:8e:dc:36:76:03: 72:84:31:d9:bc:e5:d1:e8:c0:1e:f4:df:c1:43:2b:4e:91:cd: 1a:19:37:93:3e:7a:fb:31:da:21:e2:68:38:a2:2c:48:bc:7e: c0:54:82:d3:85:e3:d4:68:6f:ce:85:88:f3:86:8d:3f:40:27: af:7a:74:d4:d8:9d:18:26:30:2e:27:6a:dc:a9:cf:3c:14:79: dc:1b:43:02:fa:56:98:60:56:ef:aa:88:9a:8a:ce:90:d4:ef: 8b:7a:46:30:1b:9f:b5:81:52:8b:45:af:09:85:2d:3d:b0:7b: 94:d2:3c:11 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ODb2htQBUHRRyu5/LH8UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzZjUwYThkZTk3MWY4NTQ3ZjViNTZjOTdjMzZjMjg3ZWY1 NGJkYjgwHhcNMjYwMTAyMTAxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NzJlZmQ5OTY2NzE1NjQ2NDE5NTlkYWI5ZTlmYjM3MjhiOGMxN2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJx7D4TJpdiY+e+cA4/3FtOURBei RJTuoFxHqlr/l9Ns8FDFTfoqYZ6Fv/CswXxzzQ+qRsJlQi1pOrbqtj3Y6t9SC4Db RamtwuQ82fgEwXGrOardELVfbtV8IEHde4COYNvQxgJIQ8QGbPlEVP7eYrs/jXxn Ej7evt7gcqgKBI8BYHhHu7+RdFTarkKqAVgiKPEnKWaofSNnMXQzy2L+CbOI+jch ahtRMOHYOgMEyw1lCMs6Dw+vr9g7VJaqPkaLP02WiPNh/M/lyErSULFq4gVrR508 mu/DzaAYtzBjnzQn9PoznRFw5ZogcyBfNA6YXVN7KhQIffcl9siWz06bSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGcu/ZlmcVZGQZWdq56fs3KLjBfGMB8GA1UdIwQY MBaAFDP1Co3pcfhUf1tWyXw2wofvVL24MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTV9VS2plbHgtRlJfVzFiSmZEYkNoLTlVdmJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9jOGZkMDctZDVjNy00ZWQzLTgwNzUt Mjc0ZjEwYTVlMWUzLzEvWnk3OW1XWnhWa1pCbFoycm5wLXpjb3VNRjhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9jOGZkMDctZDVjNy00ZWQzLTgwNzUtMjc0ZjEwYTVlMWUz LzEvTV9VS2plbHgtRlJfVzFiSmZEYkNoLTlVdmJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW/IsMA0G CSqGSIb3DQEBCwUAA4IBAQAXKMTFpJyhI/VxKOBjzOuiY1DuiJJ3oKOX04Vdjxmc IA2z+/3sVPG4JZOaImnGjR1pB+o/qXn3m4G82tvMaNy/lhrd1TyYc6sLPOg2CSu/ IAUnU3bIlQqGIsYmyuDRSl1OjcDDB982Xozvq5CoYkvNvQmGV/IVUr253QeEngwZ 9NWhcg2APHSj2WrBjtw2dgNyhDHZvOXR6MAe9N/BQytOkc0aGTeTPnr7Mdoh4mg4 oixIvH7AVILThePUaG/OhYjzho0/QCevenTU2J0YJjAuJ2rcqc88FHncG0MC+laY YFbvqoiais6Q1O+LekYwG5+1gVKLRa8JhS09sHuU0jwR -----END CERTIFICATE-----Generated at Mon Feb 9 22:17:13 2026 by rpki-client