This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/zXN2_wYgwI6PDqftPeFqf6vyJhA.roa File: zXN2_wYgwI6PDqftPeFqf6vyJhA.roa (raw, json) Hash identifier: +ACIhEpK9FdviN7dvinvYgo97L9G6OP8mQIkUkahIdM= Subject key identifier: CD:73:76:FF:06:20:C0:8E:8F:0E:A7:ED:3D:E1:6A:7F:AB:F2:26:10 Certificate issuer: /CN=07c9ca1e278307bae2405a4834af447c06414701 Certificate serial: 019B7910B604F261D3394DC5F4DDD07BEAE9 Authority key identifier: 07:C9:CA:1E:27:83:07:BA:E2:40:5A:48:34:AF:44:7C:06:41:47:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8nKHieDB7riQFpINK9EfAZBRwE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/zXN2_wYgwI6PDqftPeFqf6vyJhA.roa Signing time: Thu 01 Jan 2026 10:18:16 +0000 ROA not before: Thu 01 Jan 2026 10:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49504 IP address blocks: 91.217.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.crl rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.mft rsync://rpki.ripe.net/repository/DEFAULT/B8nKHieDB7riQFpINK9EfAZBRwE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:b6:04:f2:61:d3:39:4d:c5:f4:dd:d0:7b:ea:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07c9ca1e278307bae2405a4834af447c06414701 Validity Not Before: Jan 1 10:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd7376ff0620c08e8f0ea7ed3de16a7fabf22610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:10:47:4e:46:d8:42:e6:11:43:05:4e:87:45: fc:33:5f:a0:1a:04:39:14:3c:2a:fb:3b:8a:74:b8: 69:6b:e0:46:a8:0b:ab:ba:b9:5e:f2:09:8e:d3:3e: 7a:14:a5:5d:cb:94:22:be:71:ba:e5:ac:c8:cf:1a: 37:a8:40:47:8e:87:da:80:68:48:ab:60:53:62:b6: 23:df:5c:cc:7f:46:0a:ec:62:a4:2e:fe:e9:1a:8a: 0b:0e:94:bb:cd:2e:bb:96:23:21:26:a1:06:72:6b: d8:d8:cd:90:70:e4:db:8a:30:81:ed:51:56:21:4e: 3e:48:c1:94:1e:0f:f4:e9:07:69:4a:39:06:0b:3a: 1f:88:45:4e:f2:e4:fd:55:64:e4:17:94:9f:93:6a: 7c:01:10:5a:3d:fb:ef:e0:16:14:90:92:fc:6f:9a: 45:64:ee:c1:6e:87:32:40:fa:47:72:3c:26:b0:fd: 30:b9:84:0a:6e:99:0c:2d:ba:72:9e:36:43:18:78: 1d:d6:da:99:57:eb:9e:f7:ed:7a:3c:79:b5:9d:dd: bc:9a:04:1e:46:e1:59:e7:5a:db:e8:c5:4b:19:94: 72:b8:27:07:4b:ca:bb:2e:d0:07:55:7c:3d:a6:22: 8e:0c:7f:1c:78:46:bf:79:12:fa:f0:bd:93:31:6c: 8d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:73:76:FF:06:20:C0:8E:8F:0E:A7:ED:3D:E1:6A:7F:AB:F2:26:10 X509v3 Authority Key Identifier: keyid:07:C9:CA:1E:27:83:07:BA:E2:40:5A:48:34:AF:44:7C:06:41:47:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8nKHieDB7riQFpINK9EfAZBRwE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/zXN2_wYgwI6PDqftPeFqf6vyJhA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.217.154.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:cd:91:03:56:cf:86:f2:4f:2f:79:9a:2c:b4:77:b3:3f:4b: 9b:7e:e6:cd:a2:eb:48:d1:bf:ab:a0:e1:3a:9c:e2:68:92:c4: 0e:6b:31:d2:29:df:26:7a:06:58:4d:f0:28:f5:01:3f:5d:37: c7:b5:5f:0d:81:60:3a:f5:fc:ff:67:ef:b1:be:4f:cd:48:94: d6:13:08:46:97:74:6d:6d:a1:2e:77:f4:df:9c:2c:06:bf:71: c7:56:74:4d:78:a3:42:63:e5:ed:79:fb:b3:01:1d:b7:4f:cf: 46:7f:81:6d:7c:f8:06:a1:a9:57:40:79:ea:75:68:48:a0:84: b4:05:74:15:6e:92:d8:51:6d:4f:e8:6d:0a:ab:3d:85:90:28: 7b:2a:71:56:7d:fe:72:fc:d4:f9:84:b5:a1:7d:8e:ce:f7:3d: 2b:4c:15:1b:5d:b0:cb:63:54:d6:1a:d6:00:92:44:6e:7f:05: 49:9a:f6:81:0c:7d:0d:b6:46:1c:45:ef:b2:11:75:9f:10:91: 8b:93:b2:fe:62:2a:7d:44:ae:6e:2b:d9:f9:ac:8a:a5:29:17: d6:1f:9e:68:27:f7:b7:e4:e4:42:94:7d:f8:9a:73:53:35:b7: 1d:79:07:84:84:16:0f:93:2c:bc:c6:fa:9b:17:31:c7:c1:40: ac:05:bb:78 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ELYE8mHTOU3F9N3Qe+rpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3YzljYTFlMjc4MzA3YmFlMjQwNWE0ODM0YWY0NDdjMDY0 MTQ3MDEwHhcNMjYwMTAxMTAxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDczNzZmZjA2MjBjMDhlOGYwZWE3ZWQzZGUxNmE3ZmFiZjIyNjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBBHTkbYQuYRQwVOh0X8M1+gGgQ5 FDwq+zuKdLhpa+BGqAururle8gmO0z56FKVdy5QivnG65azIzxo3qEBHjofagGhI q2BTYrYj31zMf0YK7GKkLv7pGooLDpS7zS67liMhJqEGcmvY2M2QcOTbijCB7VFW IU4+SMGUHg/06QdpSjkGCzofiEVO8uT9VWTkF5Sfk2p8ARBaPfvv4BYUkJL8b5pF ZO7BbocyQPpHcjwmsP0wuYQKbpkMLbpynjZDGHgd1tqZV+ue9+16PHm1nd28mgQe RuFZ51rb6MVLGZRyuCcHS8q7LtAHVXw9piKODH8ceEa/eRL68L2TMWyNMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM1zdv8GIMCOjw6n7T3han+r8iYQMB8GA1UdIwQY MBaAFAfJyh4ngwe64kBaSDSvRHwGQUcBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjhuS0hpZURCN3JpUUZwSU5LOUVmQVpCUndFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8yNjNjMjYtN2RjYS00NTEyLTgzNGYt MDA1ZWRmYjc2MWM2LzEvelhOMl93WWd3STZQRHFmdFBlRnFmNnZ5SmhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8yNjNjMjYtN2RjYS00NTEyLTgzNGYtMDA1ZWRmYjc2MWM2 LzEvQjhuS0hpZURCN3JpUUZwSU5LOUVmQVpCUndFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9maMA0G CSqGSIb3DQEBCwUAA4IBAQAOzZEDVs+G8k8veZostHezP0ubfubNoutI0b+roOE6 nOJoksQOazHSKd8megZYTfAo9QE/XTfHtV8NgWA69fz/Z++xvk/NSJTWEwhGl3Rt baEud/TfnCwGv3HHVnRNeKNCY+XtefuzAR23T89Gf4FtfPgGoalXQHnqdWhIoIS0 BXQVbpLYUW1P6G0Kqz2FkCh7KnFWff5y/NT5hLWhfY7O9z0rTBUbXbDLY1TWGtYA kkRufwVJmvaBDH0NtkYcRe+yEXWfEJGLk7L+Yip9RK5uK9n5rIqlKRfWH55oJ/e3 5ORClH34mnNTNbcdeQeEhBYPkyy8xvqbFzHHwUCsBbt4 -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:35 2026 by rpki-client