This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/Zi6T14ALAlh6vPIVj-p6wbXoXDI.roa File: Zi6T14ALAlh6vPIVj-p6wbXoXDI.roa (raw, json) Hash identifier: BX99khHc0q72Oz6YygWlNq7UO49uBQ/389b6gOKYPCM= Subject key identifier: 66:2E:93:D7:80:0B:02:58:7A:BC:F2:15:8F:EA:7A:C1:B5:E8:5C:32 Certificate issuer: /CN=b5b0a86659ec314f13a04e3a03dbdb1244a0e0a9 Certificate serial: 019B7DCACA55221FAA89A15426C95EA7E0D6 Authority key identifier: B5:B0:A8:66:59:EC:31:4F:13:A0:4E:3A:03:DB:DB:12:44:A0:E0:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tbCoZlnsMU8ToE46A9vbEkSg4Kk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/Zi6T14ALAlh6vPIVj-p6wbXoXDI.roa Signing time: Fri 02 Jan 2026 08:20:00 +0000 ROA not before: Fri 02 Jan 2026 08:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14537 IP address blocks: 91.206.144.0/23 maxlen: 24 91.223.161.0/24 maxlen: 24 193.28.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.mft rsync://rpki.ripe.net/repository/DEFAULT/tbCoZlnsMU8ToE46A9vbEkSg4Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 14:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:ca:55:22:1f:aa:89:a1:54:26:c9:5e:a7:e0:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5b0a86659ec314f13a04e3a03dbdb1244a0e0a9 Validity Not Before: Jan 2 08:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=662e93d7800b02587abcf2158fea7ac1b5e85c32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8a:ed:c3:33:d4:5c:14:76:76:c3:93:2c:e3: 27:69:56:d2:e7:c2:6d:bc:4a:d1:31:a4:67:8e:cd: 95:b1:fb:8f:34:06:08:9d:8f:8a:19:e3:a9:f4:d5: 76:16:ef:f9:5e:99:67:e5:84:31:85:40:59:87:9f: 9f:25:79:8f:a5:a5:60:97:36:3f:73:6a:74:65:a6: 7a:73:56:ef:77:b3:d8:d5:02:5b:0f:f1:f4:7a:f7: bb:2c:89:17:7f:af:fa:10:30:b1:e7:f1:8f:38:c8: 3c:7e:f5:03:02:87:ff:51:ea:13:f9:21:4f:c7:59: d3:2d:f5:8a:f9:2a:7a:e0:22:d4:d9:2b:74:61:e2: f4:d6:f1:6c:fe:d6:b2:02:0e:29:04:91:67:49:20: 95:02:4f:05:4d:4c:95:01:8c:94:aa:f7:6d:60:cc: 0e:ce:67:e9:7d:03:01:d5:99:e1:1d:3b:48:49:1a: ca:d2:a0:b7:a7:cf:cc:29:5e:35:1f:cb:d3:32:2a: f3:2d:ac:53:b2:8a:ac:a8:d6:00:d3:ed:df:2d:4a: d9:37:fe:db:8a:9b:36:aa:f4:69:2d:71:c9:62:bb: a0:c4:1a:de:82:7a:58:2b:8a:3f:8c:83:bc:92:8f: 62:01:0d:8f:84:1c:90:67:c8:a4:e1:1c:ea:e9:e8: b7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:2E:93:D7:80:0B:02:58:7A:BC:F2:15:8F:EA:7A:C1:B5:E8:5C:32 X509v3 Authority Key Identifier: keyid:B5:B0:A8:66:59:EC:31:4F:13:A0:4E:3A:03:DB:DB:12:44:A0:E0:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbCoZlnsMU8ToE46A9vbEkSg4Kk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/Zi6T14ALAlh6vPIVj-p6wbXoXDI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.206.144.0/23 91.223.161.0/24 193.28.159.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:ca:85:fd:ca:88:c9:c6:3e:df:9c:fd:0c:d3:9d:38:92:1a: 33:2b:54:a7:4c:a9:c8:87:a0:fd:4d:15:99:53:c5:ad:9d:4d: f2:88:19:60:99:06:c5:2a:c9:be:76:d0:86:38:ce:d9:24:81: 58:e7:aa:07:74:4b:3a:e2:8c:f1:6c:59:d3:e8:f9:78:4b:8f: c1:24:62:04:de:7b:ec:75:3c:1e:7b:7d:ab:ed:85:bc:fd:4e: 6c:fa:40:c1:83:52:8c:bb:c6:34:61:7a:17:cd:56:4e:61:88: 67:07:97:74:d6:a6:b1:c5:57:2b:16:00:7e:e0:0a:cb:01:2d: 14:3a:f0:2d:16:4a:ec:2f:a2:c4:7e:37:a0:b3:9d:c2:cc:41: 2c:86:c2:69:89:b3:f6:d9:81:ec:95:82:9d:c0:d2:a7:d1:91: 0f:ae:e0:d8:ec:6b:37:28:20:a7:31:b3:0b:a2:57:e7:84:7a: 83:a0:fd:32:6f:07:3b:ac:49:3f:a8:98:da:b6:ea:a0:53:86: 4a:2c:e1:d5:b2:e8:86:f6:a6:8c:65:33:9b:06:67:04:eb:b9: f2:d6:21:75:04:97:a3:c2:2b:5a:a8:c6:7b:12:93:f9:44:fe: 26:88:f1:95:0d:20:77:10:c8:f3:77:9e:ca:61:9f:01:cc:63: fb:dc:ee:f1 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9yspVIh+qiaFUJslep+DWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1YjBhODY2NTllYzMxNGYxM2EwNGUzYTAzZGJkYjEyNDRh MGUwYTkwHhcNMjYwMTAyMDgyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjJlOTNkNzgwMGIwMjU4N2FiY2YyMTU4ZmVhN2FjMWI1ZTg1YzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4rtwzPUXBR2dsOTLOMnaVbS58Jt vErRMaRnjs2VsfuPNAYInY+KGeOp9NV2Fu/5Xpln5YQxhUBZh5+fJXmPpaVglzY/ c2p0ZaZ6c1bvd7PY1QJbD/H0eve7LIkXf6/6EDCx5/GPOMg8fvUDAof/UeoT+SFP x1nTLfWK+Sp64CLU2St0YeL01vFs/tayAg4pBJFnSSCVAk8FTUyVAYyUqvdtYMwO zmfpfQMB1ZnhHTtISRrK0qC3p8/MKV41H8vTMirzLaxTsoqsqNYA0+3fLUrZN/7b ips2qvRpLXHJYrugxBregnpYK4o/jIO8ko9iAQ2PhByQZ8ik4Rzq6ei31wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFGYuk9eACwJYerzyFY/qesG16FwyMB8GA1UdIwQY MBaAFLWwqGZZ7DFPE6BOOgPb2xJEoOCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGJDb1psbnNNVThUb0U0NkE5dmJFa1NnNEtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8wNDQ0MDItYzRkNC00MjU5LTkzZTIt N2ZiZjVlZTI5MGFjLzEvWmk2VDE0QUxBbGg2dlBJVmotcDZ3YlhvWERJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8wNDQ0MDItYzRkNC00MjU5LTkzZTItN2ZiZjVlZTI5MGFj LzEvdGJDb1psbnNNVThUb0U0NkE5dmJFa1NnNEtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBW86QAwQA W9+hAwQAwRyfMA0GCSqGSIb3DQEBCwUAA4IBAQAryoX9yojJxj7fnP0M0504khoz K1SnTKnIh6D9TRWZU8WtnU3yiBlgmQbFKsm+dtCGOM7ZJIFY56oHdEs64ozxbFnT 6Pl4S4/BJGIE3nvsdTwee32r7YW8/U5s+kDBg1KMu8Y0YXoXzVZOYYhnB5d01qax xVcrFgB+4ArLAS0UOvAtFkrsL6LEfjegs53CzEEshsJpibP22YHslYKdwNKn0ZEP ruDY7Gs3KCCnMbMLolfnhHqDoP0ybwc7rEk/qJjatuqgU4ZKLOHVsuiG9qaMZTOb BmcE67ny1iF1BJejwitaqMZ7EpP5RP4miPGVDSB3EMjzd57KYZ8BzGP73O7x -----END CERTIFICATE-----Generated at Thu Jan 22 19:26:40 2026 by rpki-client