This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/zXQ0dRei-4J6oVgi64knRZVxg6Y.roa File: zXQ0dRei-4J6oVgi64knRZVxg6Y.roa (raw, json) Hash identifier: CX/+K7nEQxigjVZ94Wfur8I6pijlI/U6gidD/7gn1ME= Subject key identifier: CD:74:34:75:17:A2:FB:82:7A:A1:58:22:EB:89:27:45:95:71:83:A6 Certificate issuer: /CN=31252ce307781d0319fcd7494fa64f26045016ac Certificate serial: 019BFFE1F485BAE3D3BADD5A036529FC3990 Authority key identifier: 31:25:2C:E3:07:78:1D:03:19:FC:D7:49:4F:A6:4F:26:04:50:16:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/zXQ0dRei-4J6oVgi64knRZVxg6Y.roa Signing time: Tue 27 Jan 2026 14:35:56 +0000 ROA not before: Tue 27 Jan 2026 14:35:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 224 IP address blocks: 78.91.0.0/16 maxlen: 16 158.36.0.0/14 maxlen: 14 158.36.5.90/31 maxlen: 31 193.156.0.0/15 maxlen: 15 2001:700::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.crl rsync://rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.mft rsync://rpki.ripe.net/repository/DEFAULT/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ff:e1:f4:85:ba:e3:d3:ba:dd:5a:03:65:29:fc:39:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31252ce307781d0319fcd7494fa64f26045016ac Validity Not Before: Jan 27 14:35:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd74347517a2fb827aa15822eb892745957183a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f4:e3:15:03:17:16:16:d0:b4:e7:98:2d:cc: b2:12:97:0e:cb:72:57:23:31:a6:f2:44:a6:33:b4: d6:77:00:90:24:af:46:a4:a9:47:5b:68:0e:a1:bf: a0:d7:ea:5d:9c:00:81:b6:d5:11:81:55:bd:11:e2: 22:bd:8f:df:15:58:17:35:26:e5:f4:e7:61:bc:b6: 40:63:3c:1c:96:5f:9c:05:db:81:b9:40:0f:a3:87: a7:21:ef:05:62:20:86:d6:95:45:db:54:da:c0:9c: 44:2b:b0:5b:58:a5:43:8a:3e:3d:fb:5c:8d:fe:f7: 44:2e:27:da:1f:d2:a3:2e:95:90:ae:94:b1:c7:97: c1:c8:6f:06:d1:2e:f1:de:c0:ce:34:a9:0e:bf:8e: 7b:e4:31:68:66:7a:c3:2d:8a:f8:dc:9e:1b:00:dc: 13:82:7a:a3:6c:a1:ff:35:ce:8c:3b:c5:62:95:10: 26:8a:bc:c8:40:f5:dd:d1:e8:a6:19:09:ce:ee:64: c3:4d:0b:d7:3d:6f:3c:bc:c4:cf:17:1b:73:8b:1d: 43:39:9a:2f:29:f6:03:f0:bf:82:fc:47:e8:bd:71: ca:96:ad:2a:4b:9f:5f:26:a2:46:24:50:1c:4a:30: f8:cf:7b:5a:aa:8a:8a:f4:36:64:38:c2:fe:21:bd: 71:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:74:34:75:17:A2:FB:82:7A:A1:58:22:EB:89:27:45:95:71:83:A6 X509v3 Authority Key Identifier: keyid:31:25:2C:E3:07:78:1D:03:19:FC:D7:49:4F:A6:4F:26:04:50:16:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/zXQ0dRei-4J6oVgi64knRZVxg6Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.91.0.0/16 158.36.0.0/14 193.156.0.0/15 IPv6: 2001:700::/32 Signature Algorithm: sha256WithRSAEncryption b5:5f:50:22:40:41:db:69:3b:a5:d4:e1:6c:9c:67:fc:d1:5f: 84:e8:2b:c1:4b:60:9b:eb:7b:22:7a:81:ab:39:45:89:70:dc: ab:d8:eb:ea:e3:8a:a2:94:0b:53:2b:eb:00:bc:7c:f5:35:b1: 19:c0:30:73:6c:06:41:74:a0:17:5f:1a:92:79:55:5d:9d:ed: 68:ad:ea:4f:fd:bb:ae:b4:3e:0c:4a:43:63:d6:23:04:4a:99: 09:8c:7f:1a:a8:f1:9e:ed:c8:a6:d1:24:90:66:c6:bc:a7:66: 27:5e:dc:4e:6c:1c:6c:63:89:b0:69:ce:77:da:53:69:cb:f2: 24:f5:d4:ad:1a:2e:6a:5d:ea:32:37:17:da:10:ba:26:70:0e: d3:1c:20:eb:ea:9f:39:78:3a:a8:f7:86:e5:46:08:16:dd:f1: 14:c0:d0:61:ba:8c:02:0a:99:b8:a3:4f:46:c5:0a:01:d2:72: 42:9b:b2:31:36:76:6b:78:c0:fe:39:cf:bb:2e:b5:79:59:fb: f5:9d:41:16:94:37:b8:29:ec:b6:8f:f1:e9:ee:99:9b:da:26: 95:35:2b:56:79:01:25:93:b1:8f:8e:44:44:76:83:82:0d:bf: a8:03:42:62:76:12:2e:3a:dc:ac:38:f6:27:6f:63:92:6b:92: 4e:79:11:68 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZv/4fSFuuPTut1aA2Up/DmQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxMjUyY2UzMDc3ODFkMDMxOWZjZDc0OTRmYTY0ZjI2MDQ1 MDE2YWMwHhcNMjYwMTI3MTQzNTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDc0MzQ3NTE3YTJmYjgyN2FhMTU4MjJlYjg5Mjc0NTk1NzE4M2E2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvTjFQMXFhbQtOeYLcyyEpcOy3JX IzGm8kSmM7TWdwCQJK9GpKlHW2gOob+g1+pdnACBttURgVW9EeIivY/fFVgXNSbl 9OdhvLZAYzwcll+cBduBuUAPo4enIe8FYiCG1pVF21TawJxEK7BbWKVDij49+1yN /vdELifaH9KjLpWQrpSxx5fByG8G0S7x3sDONKkOv4575DFoZnrDLYr43J4bANwT gnqjbKH/Nc6MO8VilRAmirzIQPXd0eimGQnO7mTDTQvXPW88vMTPFxtzix1DOZov KfYD8L+C/EfovXHKlq0qS59fJqJGJFAcSjD4z3taqoqK9DZkOML+Ib1xwwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFM10NHUXovuCeqFYIuuJJ0WVcYOmMB8GA1UdIwQY MBaAFDElLOMHeB0DGfzXSU+mTyYEUBasMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVNVczR3ZDRIUU1aX05kSlQ2WlBKZ1JRRnF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My84NTVhZDYtYTg0Zi00ZjAxLWJmYzgt ZDNmZDkxYWM3YzlmLzEvelhRMGRSZWktNEo2b1ZnaTY0a25SWlZ4ZzZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My84NTVhZDYtYTg0Zi00ZjAxLWJmYzgtZDNmZDkxYWM3Yzlm LzEvTVNVczR3ZDRIUU1aX05kSlQ2WlBKZ1JRRnF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAVBAIAATAPAwMATlsDAwKe JAMDAcGcMA0EAgACMAcDBQAgAQcAMA0GCSqGSIb3DQEBCwUAA4IBAQC1X1AiQEHb aTul1OFsnGf80V+E6CvBS2Cb63sieoGrOUWJcNyr2Ovq44qilAtTK+sAvHz1NbEZ wDBzbAZBdKAXXxqSeVVdne1orepP/buutD4MSkNj1iMESpkJjH8aqPGe7cim0SSQ Zsa8p2YnXtxObBxsY4mwac532lNpy/Ik9dStGi5qXeoyNxfaELomcA7THCDr6p85 eDqo94blRggW3fEUwNBhuowCCpm4o09GxQoB0nJCm7IxNnZreMD+Oc+7LrV5Wfv1 nUEWlDe4Key2j/Hp7pmb2iaVNStWeQElk7GPjkREdoOCDb+oA0JidhIuOtysOPYn b2OSa5JOeRFo -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:09 2026 by rpki-client