This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/_X7djEtEeel6rznCy89Da-wo810.roa File: _X7djEtEeel6rznCy89Da-wo810.roa (raw, json) Hash identifier: MybIr2vIo4CNJaPziQgcTc/X4EYFmstJ5wpm8V4UqW0= Subject key identifier: FD:7E:DD:8C:4B:44:79:E9:7A:AF:39:C2:CB:CF:43:6B:EC:28:F3:5D Certificate issuer: /CN=67af9014b0dedd2c04840ae385b5339f6c6790f5 Certificate serial: 019B7758A8A23B71FE874233BAF525570973 Authority key identifier: 67:AF:90:14:B0:DE:DD:2C:04:84:0A:E3:85:B5:33:9F:6C:67:90:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z6-QFLDe3SwEhArjhbUzn2xnkPU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/_X7djEtEeel6rznCy89Da-wo810.roa Signing time: Thu 01 Jan 2026 02:17:37 +0000 ROA not before: Thu 01 Jan 2026 02:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51957 IP address blocks: 91.221.156.0/23 maxlen: 23 2a00:5180::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.crl rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.mft rsync://rpki.ripe.net/repository/DEFAULT/Z6-QFLDe3SwEhArjhbUzn2xnkPU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:a8:a2:3b:71:fe:87:42:33:ba:f5:25:57:09:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67af9014b0dedd2c04840ae385b5339f6c6790f5 Validity Not Before: Jan 1 02:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fd7edd8c4b4479e97aaf39c2cbcf436bec28f35d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:22:8b:2b:3e:38:e4:ac:66:0c:fa:56:09:1e: 75:af:ff:bc:d3:89:e9:bd:eb:86:1e:c5:fb:f4:e9: 9d:91:04:ff:d9:5c:28:76:19:8e:a4:22:50:51:63: 99:80:61:12:16:05:55:18:67:3e:c7:6a:b7:f4:a7: 29:1d:fb:74:0d:5a:44:2f:c4:80:40:9f:07:ed:41: 97:4a:5b:77:eb:1c:83:8b:23:cf:1b:65:b0:b5:42: d2:af:b4:0d:d4:59:3e:f7:4e:27:41:55:c2:f7:9f: fe:15:20:e4:cf:a6:b4:f0:79:0f:75:d3:f2:dd:b5: e1:af:e7:fb:16:3e:41:0c:bd:fb:33:69:7f:9f:40: cf:fb:89:08:37:bc:69:0a:84:27:94:7d:9e:42:ec: 57:5c:a1:3d:e1:43:05:69:8a:be:05:24:67:f1:3f: 9b:68:76:33:2b:56:e1:0f:eb:ad:45:0b:83:54:c6: 5c:fe:63:23:bf:f0:42:d3:67:79:22:ea:82:29:8d: e1:79:54:5e:0c:38:3b:e5:76:cc:98:b4:97:81:38: 4d:95:95:5f:58:26:18:30:15:f1:a4:cc:84:a9:d0: 21:4c:f9:82:af:06:3c:90:2e:c8:41:ea:fc:75:aa: 31:a4:d7:9a:5f:fe:dd:e0:c4:50:81:97:11:f6:a3: 54:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:7E:DD:8C:4B:44:79:E9:7A:AF:39:C2:CB:CF:43:6B:EC:28:F3:5D X509v3 Authority Key Identifier: keyid:67:AF:90:14:B0:DE:DD:2C:04:84:0A:E3:85:B5:33:9F:6C:67:90:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z6-QFLDe3SwEhArjhbUzn2xnkPU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/_X7djEtEeel6rznCy89Da-wo810.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.221.156.0/23 IPv6: 2a00:5180::/48 Signature Algorithm: sha256WithRSAEncryption 8a:51:ee:9f:68:44:f9:28:ec:ec:65:63:52:f7:27:dd:34:d7: 14:b8:00:fe:07:bb:f1:5e:09:b9:e8:4e:d4:d5:a5:f3:9a:dc: 41:fe:71:d2:e4:2f:92:49:89:2c:c1:ad:82:f5:74:9f:14:c5: 32:23:7b:74:7a:4e:c3:01:32:02:66:22:49:75:7e:d8:8e:78: ba:be:41:e0:53:b7:07:c0:ad:87:4b:43:00:66:60:a6:82:95: e2:c5:af:71:d6:7d:32:c0:f7:c0:c3:b4:2e:33:a3:06:20:af: 9c:74:28:34:f3:90:13:8a:d3:0f:da:fd:9d:d0:4c:95:42:e5: 6d:70:82:78:a5:5e:6d:fb:5e:e9:38:64:de:eb:66:21:39:79: dd:a0:93:2b:1f:15:9c:04:f5:b3:e6:f7:e2:98:ec:e5:27:ec: e7:82:37:ce:78:2c:e2:4c:4e:ea:1d:4b:c2:c7:f2:2a:7c:80: 84:bf:6c:4f:a4:8f:39:d1:2f:53:d3:d7:6b:3b:71:5d:cf:7b: 31:fe:69:95:86:b5:c1:82:37:d9:88:05:f5:4c:25:72:52:72: 91:ef:58:82:51:fd:b0:da:6c:82:fc:2a:3b:3e:08:a5:06:2f: 3a:02:f7:82:82:59:5e:e9:e7:3c:10:65:1c:06:4e:12:bf:2b: 94:44:a9:98 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt3WKiiO3H+h0IzuvUlVwlzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3YWY5MDE0YjBkZWRkMmMwNDg0MGFlMzg1YjUzMzlmNmM2 NzkwZjUwHhcNMjYwMTAxMDIxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDdlZGQ4YzRiNDQ3OWU5N2FhZjM5YzJjYmNmNDM2YmVjMjhmMzVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSKLKz445KxmDPpWCR51r/+804np veuGHsX79OmdkQT/2VwodhmOpCJQUWOZgGESFgVVGGc+x2q39KcpHft0DVpEL8SA QJ8H7UGXSlt36xyDiyPPG2WwtULSr7QN1Fk+904nQVXC95/+FSDkz6a08HkPddPy 3bXhr+f7Fj5BDL37M2l/n0DP+4kIN7xpCoQnlH2eQuxXXKE94UMFaYq+BSRn8T+b aHYzK1bhD+utRQuDVMZc/mMjv/BC02d5IuqCKY3heVReDDg75XbMmLSXgThNlZVf WCYYMBXxpMyEqdAhTPmCrwY8kC7IQer8daoxpNeaX/7d4MRQgZcR9qNUnwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFP1+3YxLRHnpeq85wsvPQ2vsKPNdMB8GA1UdIwQY MBaAFGevkBSw3t0sBIQK44W1M59sZ5D1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjYtUUZMRGUzU3dFaEFyamhiVXpuMnhua1BVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC83YzY2YjAtYzgwOC00NWExLTliNTAt NWU3NThlODFlZmY2LzEvX1g3ZGpFdEVlZWw2cnpuQ3k4OURhLXdvODEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC83YzY2YjAtYzgwOC00NWExLTliNTAtNWU3NThlODFlZmY2 LzEvWjYtUUZMRGUzU3dFaEFyamhiVXpuMnhua1BVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBW92cMA8E AgACMAkDBwAqAFGAAAAwDQYJKoZIhvcNAQELBQADggEBAIpR7p9oRPko7OxlY1L3 J9001xS4AP4Hu/FeCbnoTtTVpfOa3EH+cdLkL5JJiSzBrYL1dJ8UxTIje3R6TsMB MgJmIkl1ftiOeLq+QeBTtwfArYdLQwBmYKaCleLFr3HWfTLA98DDtC4zowYgr5x0 KDTzkBOK0w/a/Z3QTJVC5W1wgnilXm37Xuk4ZN7rZiE5ed2gkysfFZwE9bPm9+KY 7OUn7OeCN854LOJMTuodS8LH8ip8gIS/bE+kjznRL1PT12s7cV3PezH+aZWGtcGC N9mIBfVMJXJScpHvWIJR/bDabIL8Kjs+CKUGLzoC94KCWV7p5zwQZRwGThK/K5RE qZg= -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:49 2026 by rpki-client