This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/zsdJZUldlA-BFzOhthPLWXRLgEI.roa File: zsdJZUldlA-BFzOhthPLWXRLgEI.roa (raw, json) Hash identifier: Sypmwqvmj2LaD8yZHW8vWCF/BdDBGMx6jmdLt8+KGWw= Subject key identifier: CE:C7:49:65:49:5D:94:0F:81:17:33:A1:B6:13:CB:59:74:4B:80:42 Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d Certificate serial: 019B77C770B03E182E2F168E63BCA10422E7 Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/zsdJZUldlA-BFzOhthPLWXRLgEI.roa Signing time: Thu 01 Jan 2026 04:18:37 +0000 ROA not before: Thu 01 Jan 2026 04:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29802 IP address blocks: 91.147.124.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 16:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:70:b0:3e:18:2e:2f:16:8e:63:bc:a1:04:22:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d Validity Not Before: Jan 1 04:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cec74965495d940f811733a1b613cb59744b8042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d1:ed:85:8f:d3:c7:c2:ed:56:98:f6:8a:04: ef:5d:80:fe:73:90:05:c7:f9:bb:10:9d:87:6b:8a: 32:5f:b9:d7:a3:a8:63:4f:ae:19:73:59:b7:6b:09: a9:4d:55:ce:37:af:78:40:78:d1:42:89:79:4d:ce: d1:f9:15:07:60:ac:f4:ec:53:a4:a0:1d:36:36:9a: 83:b8:2f:57:bb:f4:4a:65:e3:fb:b6:76:f3:95:c2: 00:d7:ec:e0:29:98:3e:cf:57:e9:fa:51:d8:6c:69: 95:9e:f0:5f:c1:81:00:7a:83:6a:0a:c2:7a:0c:6d: c6:52:8e:28:15:ce:18:de:aa:bd:34:37:8a:68:4c: c7:14:86:d0:71:8b:d3:bd:4f:03:96:40:da:2b:5b: c7:83:75:1a:9a:8a:7f:7d:12:7d:ad:ce:e4:ab:bc: 8a:64:6c:d0:5e:83:01:83:56:88:b3:9c:1a:81:b5: f9:2f:6a:aa:a7:02:45:5d:d9:70:a3:c4:68:79:77: 4a:2b:94:70:4a:f2:95:1e:cd:c5:42:ad:ce:da:cb: 91:06:2f:c4:ac:a3:47:81:20:97:07:f3:17:77:27: e7:71:9a:8b:af:6a:cf:6c:ac:db:07:35:44:f8:d1: f8:0e:31:a9:43:68:e6:bf:3a:31:1e:7c:03:8c:49: 03:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:C7:49:65:49:5D:94:0F:81:17:33:A1:B6:13:CB:59:74:4B:80:42 X509v3 Authority Key Identifier: keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/zsdJZUldlA-BFzOhthPLWXRLgEI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.147.124.0/23 Signature Algorithm: sha256WithRSAEncryption 85:d4:81:3f:29:06:f9:43:f4:da:8c:f6:95:a9:fc:2e:8a:0d: 8f:ef:ab:f8:cc:74:30:61:61:3f:a7:b2:19:24:d1:1f:73:07: 10:71:b3:c2:cb:5f:f2:d5:c8:3e:1a:44:5a:c3:6b:a0:f0:c0: cc:c2:0e:11:2d:41:9c:ac:96:bc:89:8a:38:c8:12:ec:10:7f: 96:e7:2c:db:e6:d7:de:a5:98:c8:72:83:d0:b2:38:88:c2:63: 4f:d1:d3:12:60:16:24:b1:af:ac:4c:40:10:12:e8:86:ce:c6: 7a:cf:65:aa:13:f6:17:19:92:56:4e:7f:47:60:e9:98:1b:26: 80:3d:86:d4:d8:7d:ee:e1:6f:fd:a6:36:35:09:4e:72:e9:8f: 51:7b:52:5b:19:4a:9b:8e:4d:df:c1:82:db:ce:2b:aa:34:e8: db:64:02:7c:63:cb:53:8d:71:9c:6a:61:58:17:26:21:d2:d8: 29:6c:16:3f:40:97:41:e7:68:33:c4:e4:2d:90:a0:75:e4:fb: c8:29:8f:07:70:10:e8:0e:81:b1:da:1e:e7:4e:2c:ce:ed:23: e8:dc:31:5b:0d:49:bf:65:a1:da:de:e0:12:d3:b6:5e:e2:d0: 39:4c:6e:71:e9:98:91:8f:fa:6e:83:2c:52:47:c7:b2:e8:b0: 12:97:a3:d6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x3CwPhguLxaOY7yhBCLnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiMDk4ZTQ1ZWY0YmI1ZDE4ZGJjODZjNWExMzVmNTdlYmNi ZTAwNWQwHhcNMjYwMTAxMDQxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZWM3NDk2NTQ5NWQ5NDBmODExNzMzYTFiNjEzY2I1OTc0NGI4MDQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNHthY/Tx8LtVpj2igTvXYD+c5AF x/m7EJ2Ha4oyX7nXo6hjT64Zc1m3awmpTVXON694QHjRQol5Tc7R+RUHYKz07FOk oB02NpqDuC9Xu/RKZeP7tnbzlcIA1+zgKZg+z1fp+lHYbGmVnvBfwYEAeoNqCsJ6 DG3GUo4oFc4Y3qq9NDeKaEzHFIbQcYvTvU8DlkDaK1vHg3Uamop/fRJ9rc7kq7yK ZGzQXoMBg1aIs5wagbX5L2qqpwJFXdlwo8RoeXdKK5RwSvKVHs3FQq3O2suRBi/E rKNHgSCXB/MXdyfncZqLr2rPbKzbBzVE+NH4DjGpQ2jmvzoxHnwDjEkDiQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM7HSWVJXZQPgRczobYTy1l0S4BCMB8GA1UdIwQY MBaAFDsJjkXvS7XRjbyGxaE19X68vgBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMt ZTEyYjE2NDIxNWI5LzEvenNkSlpVbGRsQS1CRnpPaHRoUExXWFJMZ0VJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMtZTEyYjE2NDIxNWI5 LzEvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW5N8MA0G CSqGSIb3DQEBCwUAA4IBAQCF1IE/KQb5Q/TajPaVqfwuig2P76v4zHQwYWE/p7IZ JNEfcwcQcbPCy1/y1cg+GkRaw2ug8MDMwg4RLUGcrJa8iYo4yBLsEH+W5yzb5tfe pZjIcoPQsjiIwmNP0dMSYBYksa+sTEAQEuiGzsZ6z2WqE/YXGZJWTn9HYOmYGyaA PYbU2H3u4W/9pjY1CU5y6Y9Re1JbGUqbjk3fwYLbziuqNOjbZAJ8Y8tTjXGcamFY FyYh0tgpbBY/QJdB52gzxOQtkKB15PvIKY8HcBDoDoGx2h7nTizO7SPo3DFbDUm/ ZaHa3uAS07Ze4tA5TG5x6ZiRj/pugyxSR8ey6LASl6PW -----END CERTIFICATE-----Generated at Fri Jan 23 00:33:00 2026 by rpki-client