This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/ZZeABTpJzzngeuL-OTKi1sObkvk.roa File: ZZeABTpJzzngeuL-OTKi1sObkvk.roa (raw, json) Hash identifier: LZJnobolr7nVT9FIHfxLJ++YArusGtx4j3xW25plKP8= Subject key identifier: 65:97:80:05:3A:49:CF:39:E0:7A:E2:FE:39:32:A2:D6:C3:9B:92:F9 Certificate issuer: /CN=19139575c401283fff536137b0e83e5415fe18d0 Certificate serial: 019B7B36BAED5CD4B9B72495D58CA13D6856 Authority key identifier: 19:13:95:75:C4:01:28:3F:FF:53:61:37:B0:E8:3E:54:15:FE:18:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GROVdcQBKD__U2E3sOg-VBX-GNA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/ZZeABTpJzzngeuL-OTKi1sObkvk.roa Signing time: Thu 01 Jan 2026 20:19:02 +0000 ROA not before: Thu 01 Jan 2026 20:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44201 IP address blocks: 91.209.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.mft rsync://rpki.ripe.net/repository/DEFAULT/GROVdcQBKD__U2E3sOg-VBX-GNA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:ba:ed:5c:d4:b9:b7:24:95:d5:8c:a1:3d:68:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19139575c401283fff536137b0e83e5415fe18d0 Validity Not Before: Jan 1 20:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=659780053a49cf39e07ae2fe3932a2d6c39b92f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f3:df:75:ad:c7:fc:e5:fa:ae:fd:ec:bb:6f: 11:08:2c:ac:c9:ab:1c:05:68:f4:ba:64:56:8f:5d: 13:86:22:7f:35:99:47:2c:6a:53:f5:e1:f3:77:bc: 54:2e:cf:1a:d8:8c:32:84:72:52:47:c5:7d:bc:ac: ac:48:84:a4:4d:7c:1d:28:1e:26:0e:39:f2:f7:44: 9a:95:e1:21:35:25:61:01:19:f9:9b:2b:da:7a:2e: 9d:fd:83:69:6b:56:59:77:5e:d4:43:e9:06:fe:13: 7c:3d:d6:02:00:21:54:f3:d4:a0:13:47:46:05:8c: 15:94:08:66:08:6a:f7:dd:ae:55:e7:2d:8a:1c:45: 68:c1:80:e7:f6:1d:2f:95:6f:cd:41:3a:de:5e:2b: f0:04:b4:8e:d3:72:56:4b:7d:d6:a8:3b:e4:e6:fd: 43:c3:06:4f:1b:c7:14:8c:31:a1:4c:b9:cf:fa:d8: 3b:0a:19:47:6c:b8:25:bb:f9:4b:f3:cc:13:40:eb: 26:6d:4d:25:17:b3:e8:40:0c:c8:10:cf:2c:c8:86: a9:c3:22:9d:b5:6c:37:42:55:95:52:d2:b3:21:dc: 3f:9c:ed:d9:a9:5e:cf:2f:20:f4:80:9b:c2:a3:12: 38:68:75:78:54:40:3c:a3:4f:a5:6f:06:fc:d7:9b: a2:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:97:80:05:3A:49:CF:39:E0:7A:E2:FE:39:32:A2:D6:C3:9B:92:F9 X509v3 Authority Key Identifier: keyid:19:13:95:75:C4:01:28:3F:FF:53:61:37:B0:E8:3E:54:15:FE:18:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GROVdcQBKD__U2E3sOg-VBX-GNA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/ZZeABTpJzzngeuL-OTKi1sObkvk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.146.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:00:29:49:56:95:4b:10:e7:11:56:97:d6:a1:73:66:01:1c: 08:86:a5:2a:7f:0f:37:f8:f3:af:5a:70:08:3e:54:57:28:49: 67:57:e2:88:cd:25:4e:c0:a6:d5:87:56:00:58:bb:cb:9a:c1: 0f:77:11:a8:4c:11:1f:55:4c:de:a3:6c:6a:1c:f2:b0:32:c7: ea:15:95:4f:6f:bf:cd:80:c5:cc:92:b2:d7:f8:18:f7:67:e2: 60:62:19:c3:43:a1:fc:d7:ee:3c:62:ce:65:50:30:4f:47:cc: 6b:89:a8:1a:56:e0:78:65:96:07:e2:88:b8:04:b5:71:98:ca: 51:6d:d4:02:65:63:78:e8:86:3f:2f:56:bf:12:28:0a:95:cb: 34:21:a3:56:4c:b0:26:ad:7c:7b:58:09:0e:55:da:dc:bc:94: 30:11:ec:75:30:ac:b0:72:96:34:02:43:9f:24:ab:1c:af:18: cd:97:80:8c:71:27:d9:fa:62:4e:35:53:45:b4:11:6a:4f:50: 2f:0a:5a:96:dd:80:e0:93:44:fa:2c:d4:04:20:49:34:0e:7c: 9b:ec:d3:9c:8a:f2:9e:23:ef:2c:e2:ec:f3:da:37:b9:79:5c: 59:ff:8e:90:06:8f:53:27:4a:7c:73:d0:2a:72:7e:f6:e5:be: 60:ca:85:06 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NrrtXNS5tySV1YyhPWhWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MTM5NTc1YzQwMTI4M2ZmZjUzNjEzN2IwZTgzZTU0MTVm ZTE4ZDAwHhcNMjYwMTAxMjAxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTk3ODAwNTNhNDljZjM5ZTA3YWUyZmUzOTMyYTJkNmMzOWI5MmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPPfda3H/OX6rv3su28RCCysyasc BWj0umRWj10ThiJ/NZlHLGpT9eHzd7xULs8a2IwyhHJSR8V9vKysSISkTXwdKB4m Djny90SaleEhNSVhARn5myvaei6d/YNpa1ZZd17UQ+kG/hN8PdYCACFU89SgE0dG BYwVlAhmCGr33a5V5y2KHEVowYDn9h0vlW/NQTreXivwBLSO03JWS33WqDvk5v1D wwZPG8cUjDGhTLnP+tg7ChlHbLglu/lL88wTQOsmbU0lF7PoQAzIEM8syIapwyKd tWw3QlWVUtKzIdw/nO3ZqV7PLyD0gJvCoxI4aHV4VEA8o0+lbwb815uiTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGWXgAU6Sc854Hri/jkyotbDm5L5MB8GA1UdIwQY MBaAFBkTlXXEASg//1NhN7DoPlQV/hjQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1JPVmRjUUJLRF9fVTJFM3NPZy1WQlgtR05BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8zYTA5NGMtZmY4ZS00YjQ0LTgxZjAt OTRjNzYwMWFlZmRhLzEvWlplQUJUcEp6em5nZXVMLU9US2kxc09ia3ZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi8zYTA5NGMtZmY4ZS00YjQ0LTgxZjAtOTRjNzYwMWFlZmRh LzEvR1JPVmRjUUJLRF9fVTJFM3NPZy1WQlgtR05BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9GSMA0G CSqGSIb3DQEBCwUAA4IBAQArAClJVpVLEOcRVpfWoXNmARwIhqUqfw83+POvWnAI PlRXKElnV+KIzSVOwKbVh1YAWLvLmsEPdxGoTBEfVUzeo2xqHPKwMsfqFZVPb7/N gMXMkrLX+Bj3Z+JgYhnDQ6H81+48Ys5lUDBPR8xriagaVuB4ZZYH4oi4BLVxmMpR bdQCZWN46IY/L1a/EigKlcs0IaNWTLAmrXx7WAkOVdrcvJQwEex1MKywcpY0AkOf JKscrxjNl4CMcSfZ+mJONVNFtBFqT1AvClqW3YDgk0T6LNQEIEk0Dnyb7NOcivKe I+8s4uzz2je5eVxZ/46QBo9TJ0p8c9Aqcn725b5gyoUG -----END CERTIFICATE-----Generated at Mon Jan 12 02:17:12 2026 by rpki-client