This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/zUPOhxihYzhbcX4tok2wWWwFbw4.roa File: zUPOhxihYzhbcX4tok2wWWwFbw4.roa (raw, json) Hash identifier: MhLBWRoR0j43G7PjNgF2nCiYDlCAe2m1lXi02+T0zpM= Subject key identifier: CD:43:CE:87:18:A1:63:38:5B:71:7E:2D:A2:4D:B0:59:6C:05:6F:0E Certificate issuer: /CN=5e8e581537e7aa66783c3403822a1181a3168d08 Certificate serial: 019B78A23B0FAFB419B6A17CB68627A04EE5 Authority key identifier: 5E:8E:58:15:37:E7:AA:66:78:3C:34:03:82:2A:11:81:A3:16:8D:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/zUPOhxihYzhbcX4tok2wWWwFbw4.roa Signing time: Thu 01 Jan 2026 08:17:36 +0000 ROA not before: Thu 01 Jan 2026 08:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197929 IP address blocks: 91.230.6.0/23 maxlen: 24 94.158.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft rsync://rpki.ripe.net/repository/DEFAULT/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:3b:0f:af:b4:19:b6:a1:7c:b6:86:27:a0:4e:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e8e581537e7aa66783c3403822a1181a3168d08 Validity Not Before: Jan 1 08:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd43ce8718a163385b717e2da24db0596c056f0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1c:c3:35:31:e1:99:b4:dc:74:34:9a:8d:51: f8:df:f5:8f:82:33:d3:a6:46:1a:8f:de:0e:04:12: ca:5e:c4:06:9c:fe:8a:40:1e:93:ef:53:f7:b9:76: 01:96:76:74:f1:8a:fb:26:03:e9:8e:02:f2:5b:79: fd:0a:21:f0:c8:03:f7:10:2e:6b:e8:bb:6a:6a:21: 02:74:fa:64:8e:38:3b:40:81:d8:01:be:1f:5a:a6: d7:ff:af:d7:30:d4:19:2b:7c:42:0d:14:44:43:1d: 6f:f2:38:85:30:dc:64:6d:35:47:ff:8b:f0:ab:31: 1a:a7:0b:f8:f4:d0:11:bb:a3:fa:c6:84:2b:fa:5f: 3f:1f:7e:2b:31:a7:7b:0a:45:d9:42:cc:cf:c9:c8: 01:ae:6b:6f:30:13:39:8a:62:09:f2:af:cd:f8:f2: 6d:e6:4c:7d:02:52:fe:0c:35:23:64:4a:d6:23:84: 2d:e0:e3:dc:dd:5d:74:8b:1f:bf:9b:60:7f:65:86: 88:00:7f:69:92:86:37:94:ab:7d:8a:a1:65:91:99: 58:5e:4c:17:87:2a:cb:b0:05:ac:35:b2:4d:5a:4d: 03:dc:a5:a0:c1:50:5e:c7:e4:c6:9b:35:91:3c:1b: 62:d0:58:03:7d:e7:b0:de:00:c5:46:e9:de:10:34: 6f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:43:CE:87:18:A1:63:38:5B:71:7E:2D:A2:4D:B0:59:6C:05:6F:0E X509v3 Authority Key Identifier: keyid:5E:8E:58:15:37:E7:AA:66:78:3C:34:03:82:2A:11:81:A3:16:8D:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/zUPOhxihYzhbcX4tok2wWWwFbw4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.230.6.0/23 94.158.24.0/22 Signature Algorithm: sha256WithRSAEncryption 8c:13:9a:d4:86:e7:1f:90:27:64:45:f1:3a:8d:b0:8b:cd:8b: 66:74:7b:d3:5e:93:b0:c6:72:85:f4:a6:35:f2:7e:49:37:75: a9:35:e3:bc:0e:8d:22:88:ae:e1:38:84:07:58:cb:da:ee:c2: dc:ab:9a:28:8a:08:9e:e1:7b:77:66:d8:ee:8a:13:15:e5:0b: 05:21:e9:64:10:37:0e:d0:ad:80:f7:1f:38:f3:5b:50:e9:e7: b3:35:18:3f:b1:97:e0:6a:fc:44:84:24:52:16:82:3d:c6:12: 6a:97:31:0f:9b:d1:10:90:18:71:40:47:51:a0:b3:84:6d:0d: 57:ee:57:72:88:39:c5:c9:38:cf:fb:53:15:1f:10:c5:9f:ac: 64:84:9c:17:52:81:30:8d:73:9e:ff:95:2b:81:5f:53:76:85: ec:79:5d:0b:f1:62:47:d1:b6:09:25:35:2e:37:20:75:86:2e: e8:1f:36:e4:71:22:8b:93:50:02:17:2f:62:d6:01:a7:8a:3c: 22:62:26:56:d5:82:7b:bd:92:5f:e9:60:78:42:a4:35:4d:94: 36:a0:7d:a2:6e:59:b9:2f:b2:74:c1:4b:77:c3:75:d3:5d:84: 20:b2:5b:c9:f0:48:5d:c2:52:c5:f7:9a:ff:f7:90:58:41:32: 16:d7:b4:c3 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4ojsPr7QZtqF8toYnoE7lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlOGU1ODE1MzdlN2FhNjY3ODNjMzQwMzgyMmExMTgxYTMx NjhkMDgwHhcNMjYwMTAxMDgxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDQzY2U4NzE4YTE2MzM4NWI3MTdlMmRhMjRkYjA1OTZjMDU2ZjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBzDNTHhmbTcdDSajVH43/WPgjPT pkYaj94OBBLKXsQGnP6KQB6T71P3uXYBlnZ08Yr7JgPpjgLyW3n9CiHwyAP3EC5r 6LtqaiECdPpkjjg7QIHYAb4fWqbX/6/XMNQZK3xCDRREQx1v8jiFMNxkbTVH/4vw qzEapwv49NARu6P6xoQr+l8/H34rMad7CkXZQszPycgBrmtvMBM5imIJ8q/N+PJt 5kx9AlL+DDUjZErWI4Qt4OPc3V10ix+/m2B/ZYaIAH9pkoY3lKt9iqFlkZlYXkwX hyrLsAWsNbJNWk0D3KWgwVBex+TGmzWRPBti0FgDfeew3gDFRuneEDRvowIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFM1DzocYoWM4W3F+LaJNsFlsBW8OMB8GA1UdIwQY MBaAFF6OWBU356pmeDw0A4IqEYGjFo0IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWG81WUZUZm5xbVo0UERRRGdpb1JnYU1XalFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8zZjQyNGUtMjYyYy00MDc3LTg4NDkt NzQxOGFjMTEwYzgzLzEvelVQT2h4aWhZemhiY1g0dG9rMndXV3dGYnc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi8zZjQyNGUtMjYyYy00MDc3LTg4NDktNzQxOGFjMTEwYzgz LzEvWG81WUZUZm5xbVo0UERRRGdpb1JnYU1XalFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW+YGAwQC Xp4YMA0GCSqGSIb3DQEBCwUAA4IBAQCME5rUhucfkCdkRfE6jbCLzYtmdHvTXpOw xnKF9KY18n5JN3WpNeO8Do0iiK7hOIQHWMva7sLcq5ooigie4Xt3ZtjuihMV5QsF IelkEDcO0K2A9x8481tQ6eezNRg/sZfgavxEhCRSFoI9xhJqlzEPm9EQkBhxQEdR oLOEbQ1X7ldyiDnFyTjP+1MVHxDFn6xkhJwXUoEwjXOe/5UrgV9TdoXseV0L8WJH 0bYJJTUuNyB1hi7oHzbkcSKLk1ACFy9i1gGnijwiYiZW1YJ7vZJf6WB4QqQ1TZQ2 oH2iblm5L7J0wUt3w3XTXYQgslvJ8EhdwlLF95r/95BYQTIW17TD -----END CERTIFICATE-----Generated at Tue Feb 10 06:07:37 2026 by rpki-client