This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/z6n92NIP1tvVgc0euBLMnBtSoZk.roa
File: z6n92NIP1tvVgc0euBLMnBtSoZk.roa (raw, json)
Hash identifier: Jjy7mkaYofsu+k30uI9CDy57tkSDpiXwny9UHpG3aJ4=
Subject key identifier: CF:A9:FD:D8:D2:0F:D6:DB:D5:81:CD:1E:B8:12:CC:9C:1B:52:A1:99
Certificate issuer: /CN=f11a9a44557d46ff2d8088a228885aff000dc2a2
Certificate serial: 019B79ED1225348DFC5AFB3ACCCD0E08BC6C
Authority key identifier: F1:1A:9A:44:55:7D:46:FF:2D:80:88:A2:28:88:5A:FF:00:0D:C2:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8RqaRFV9Rv8tgIiiKIha_wANwqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/z6n92NIP1tvVgc0euBLMnBtSoZk.roa
Signing time: Thu 01 Jan 2026 14:18:58 +0000
ROA not before: Thu 01 Jan 2026 14:18:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48398
IP address blocks: 91.209.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8RqaRFV9Rv8tgIiiKIha_wANwqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ed:12:25:34:8d:fc:5a:fb:3a:cc:cd:0e:08:bc:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f11a9a44557d46ff2d8088a228885aff000dc2a2
Validity
Not Before: Jan 1 14:18:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cfa9fdd8d20fd6dbd581cd1eb812cc9c1b52a199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1d:7c:f0:c7:d2:7a:04:b2:43:0f:c4:8e:96:
53:75:7d:6b:ca:25:70:f8:85:b2:a3:3f:23:e9:96:
51:90:02:6e:a6:69:49:7e:11:44:be:db:6a:a8:f2:
48:78:64:49:f7:cf:bf:2e:88:2e:67:52:8e:bd:6c:
38:0f:7d:d8:03:dd:76:88:c4:b5:49:50:9f:61:45:
1a:98:99:31:31:8b:dd:3a:f7:d1:c6:b9:ba:69:3b:
f2:66:d0:ca:30:45:8f:55:28:aa:e5:00:c1:fb:c2:
63:fd:c3:cb:f6:3c:fd:35:a7:60:d1:f7:01:6c:46:
5c:cb:5f:c8:60:aa:7c:31:2d:71:dc:a1:68:de:15:
b1:bc:ba:1b:45:2e:1e:62:2e:b4:30:cc:2b:79:66:
20:a2:8b:0b:cd:9e:e6:b7:8d:07:34:45:d3:62:58:
a6:90:f4:96:01:33:31:92:c0:08:b4:59:b3:df:c2:
c5:d7:3b:c2:3f:ef:ae:bc:b0:e5:2f:82:df:a6:72:
cb:51:e6:f4:be:de:84:26:1c:0b:9a:82:df:18:18:
11:a2:4c:83:7d:15:66:1b:f9:4d:a3:55:93:06:13:
a3:ad:d1:5b:42:74:52:11:b4:9b:25:28:6b:70:b9:
87:be:d2:79:7d:4a:97:ac:34:90:9d:5e:5d:55:05:
6b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A9:FD:D8:D2:0F:D6:DB:D5:81:CD:1E:B8:12:CC:9C:1B:52:A1:99
X509v3 Authority Key Identifier:
keyid:F1:1A:9A:44:55:7D:46:FF:2D:80:88:A2:28:88:5A:FF:00:0D:C2:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8RqaRFV9Rv8tgIiiKIha_wANwqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/z6n92NIP1tvVgc0euBLMnBtSoZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.145.0/24
Signature Algorithm: sha256WithRSAEncryption
61:80:bd:bf:64:5d:a1:55:f8:b8:a5:9d:da:d1:43:98:4b:f0:
67:4d:73:7c:f6:f2:9f:83:64:19:f7:14:2c:60:78:0a:74:4f:
b8:aa:e4:7b:f2:ec:a7:a6:d3:80:3e:dc:90:ea:be:f0:61:04:
be:9a:d3:a5:83:c8:61:08:c5:f2:5c:87:2c:b1:ef:d1:15:6a:
35:16:e7:7b:42:4f:e3:09:ed:8e:4c:63:2a:c8:9e:86:48:9b:
3c:91:02:5a:5b:3c:cb:eb:77:95:f7:f7:ea:e7:d5:a7:b3:42:
47:2f:52:b7:84:96:66:d0:48:11:cd:28:7d:c0:a4:b7:c6:c1:
a2:8f:c6:03:a9:8c:65:e2:3e:84:0d:68:68:4e:1b:5f:96:ce:
a9:24:9b:4a:25:cf:01:fb:8a:47:fb:15:9d:65:e6:7c:f1:e2:
92:bb:0d:e0:d0:88:f3:b0:a5:ad:a9:15:76:6e:50:6d:a6:be:
f3:8a:db:40:d5:9e:2b:6c:7c:47:19:4c:73:e3:55:f1:8f:b4:
7e:d3:19:30:ad:bf:99:1e:de:3a:22:b9:e8:6f:fd:73:5e:98:
f8:11:55:74:3b:18:65:42:97:18:54:11:e9:60:7c:ce:fc:c9:
62:07:5f:f1:35:cb:81:ea:e9:0f:92:dc:af:b7:cf:54:4a:f7:
0d:ac:7e:f8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt57RIlNI38Wvs6zM0OCLxsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMWE5YTQ0NTU3ZDQ2ZmYyZDgwODhhMjI4ODg1YWZmMDAw
ZGMyYTIwHhcNMjYwMTAxMTQxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZmE5ZmRkOGQyMGZkNmRiZDU4MWNkMWViODEyY2M5YzFiNTJhMTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqR188MfSegSyQw/EjpZTdX1ryiVw
+IWyoz8j6ZZRkAJupmlJfhFEvttqqPJIeGRJ98+/LoguZ1KOvWw4D33YA912iMS1
SVCfYUUamJkxMYvdOvfRxrm6aTvyZtDKMEWPVSiq5QDB+8Jj/cPL9jz9Nadg0fcB
bEZcy1/IYKp8MS1x3KFo3hWxvLobRS4eYi60MMwreWYgoosLzZ7mt40HNEXTYlim
kPSWATMxksAItFmz38LF1zvCP++uvLDlL4LfpnLLUeb0vt6EJhwLmoLfGBgRokyD
fRVmG/lNo1WTBhOjrdFbQnRSEbSbJShrcLmHvtJ5fUqXrDSQnV5dVQVrmwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM+p/djSD9bb1YHNHrgSzJwbUqGZMB8GA1UdIwQY
MBaAFPEamkRVfUb/LYCIoiiIWv8ADcKiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFJxYVJGVjlSdjh0Z0lpaUtJaGFfd0FOd3FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8wN2U0YjItNmIzOC00YmMwLWE2ODAt
YTYwYmM3ZDA3ODc4LzEvejZuOTJOSVAxdHZWZ2MwZXVCTE1uQnRTb1prLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8wN2U0YjItNmIzOC00YmMwLWE2ODAtYTYwYmM3ZDA3ODc4
LzEvOFJxYVJGVjlSdjh0Z0lpaUtJaGFfd0FOd3FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9GRMA0G
CSqGSIb3DQEBCwUAA4IBAQBhgL2/ZF2hVfi4pZ3a0UOYS/BnTXN89vKfg2QZ9xQs
YHgKdE+4quR78uynptOAPtyQ6r7wYQS+mtOlg8hhCMXyXIcsse/RFWo1Fud7Qk/j
Ce2OTGMqyJ6GSJs8kQJaWzzL63eV9/fq59Wns0JHL1K3hJZm0EgRzSh9wKS3xsGi
j8YDqYxl4j6EDWhoThtfls6pJJtKJc8B+4pH+xWdZeZ88eKSuw3g0IjzsKWtqRV2
blBtpr7zittA1Z4rbHxHGUxz41Xxj7R+0xkwrb+ZHt46Irnob/1zXpj4EVV0Oxhl
QpcYVBHpYHzO/MliB1/xNcuB6ukPktyvt89USvcNrH74
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:27:12 2026 by rpki-client