This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/ZYu3qwDD62OQjK-0MY1GhTTV3L0.roa File: ZYu3qwDD62OQjK-0MY1GhTTV3L0.roa (raw, json) Hash identifier: jwdnKx0rMKE4+yxjFPdAO7oEDuayA2F4huzOqBo8dhI= Subject key identifier: 65:8B:B7:AB:00:C3:EB:63:90:8C:AF:B4:31:8D:46:85:34:D5:DC:BD Certificate issuer: /CN=80f9a24bd26cc8217518a11f598e6372025e8ae9 Certificate serial: 019B7D5CE62B88C2BEC534299FB921F6A53A Authority key identifier: 80:F9:A2:4B:D2:6C:C8:21:75:18:A1:1F:59:8E:63:72:02:5E:8A:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/ZYu3qwDD62OQjK-0MY1GhTTV3L0.roa Signing time: Fri 02 Jan 2026 06:19:58 +0000 ROA not before: Fri 02 Jan 2026 06:19:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51859 IP address blocks: 91.185.199.0/24 maxlen: 24 91.185.218.0/23 maxlen: 24 91.185.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.crl rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.mft rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:e6:2b:88:c2:be:c5:34:29:9f:b9:21:f6:a5:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80f9a24bd26cc8217518a11f598e6372025e8ae9 Validity Not Before: Jan 2 06:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=658bb7ab00c3eb63908cafb4318d468534d5dcbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:56:26:4b:ae:80:75:cd:8b:77:b8:f3:02:62: 72:c4:6d:d1:1f:60:36:b5:26:74:0f:6f:f7:ad:6e: b1:e5:9e:c7:7e:17:00:d8:75:64:e5:52:02:ce:a5: de:34:6d:a4:fe:a9:3c:95:85:e4:f1:ee:f0:9f:fc: 28:c8:ac:2b:4e:6f:bd:96:20:4c:9a:83:8f:2c:27: c4:ee:27:b7:06:3b:fe:08:74:1f:91:e7:55:e6:99: f0:11:f3:6c:78:b0:dd:e4:b2:5b:2f:c3:52:33:9f: ec:cf:df:f5:28:ed:62:d3:6c:f5:67:c1:59:86:db: 52:aa:04:63:2a:ff:f3:97:fb:2c:63:fd:0a:04:fc: 7f:53:20:ee:ef:74:dc:6f:dc:f3:19:1d:6e:1e:ba: 6d:49:86:d2:e1:92:bc:1c:26:ef:78:42:a4:ba:1c: 62:bd:40:21:7e:fc:12:11:40:24:c9:fc:1a:21:85: 4f:8e:17:d9:c1:6c:60:f5:06:96:54:dd:d6:46:e8: 06:43:66:af:be:9e:3a:73:30:61:da:a9:3e:65:ab: ae:19:86:59:77:bd:1e:3d:84:ea:fc:25:7f:ce:9c: cb:58:67:49:a3:9b:94:58:c2:4d:82:7e:07:01:6e: b9:08:5c:16:a0:30:aa:71:d2:97:1d:a9:86:ab:41: aa:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:8B:B7:AB:00:C3:EB:63:90:8C:AF:B4:31:8D:46:85:34:D5:DC:BD X509v3 Authority Key Identifier: keyid:80:F9:A2:4B:D2:6C:C8:21:75:18:A1:1F:59:8E:63:72:02:5E:8A:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/ZYu3qwDD62OQjK-0MY1GhTTV3L0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.185.199.0/24 91.185.218.0/23 91.185.223.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:38:0b:64:f2:26:76:31:ee:f9:91:57:24:ad:43:9a:80:49: cd:dd:13:7f:11:83:b7:a3:91:72:89:69:9b:3a:b4:15:35:ac: 61:39:66:c6:cd:ea:06:83:a5:76:05:0e:19:69:6f:ff:b7:4d: 76:21:cc:43:0a:b6:bb:a9:af:e4:d9:d7:d5:1b:e4:59:f6:98: d3:1d:f8:87:b7:d1:ad:09:2b:d7:7e:29:55:e5:85:a9:b3:08: 38:1b:d2:8f:0e:2a:38:3d:da:9d:e0:23:32:c9:61:9b:05:e9: d4:68:7a:77:3c:c3:70:e9:b0:93:04:ec:33:f2:9f:28:c2:a4: 5c:bf:41:33:79:87:3f:ce:4e:ad:72:9c:e5:b4:91:88:c3:b2: ca:ec:86:eb:d8:95:61:20:f4:75:22:2a:66:7f:de:06:6d:8b: 3d:4a:c3:da:ae:d3:0a:d7:14:4a:f4:e1:48:74:84:29:d7:d1: d3:3a:bf:be:62:b0:99:32:08:8a:54:be:c3:b5:5b:69:28:5f: 9a:aa:b0:d9:51:8a:70:6c:46:79:3a:45:b5:90:fa:82:e3:8f: c0:59:71:4f:8a:62:e6:7e:e6:ba:50:db:af:f4:59:46:e2:35: 78:86:9f:46:ae:b6:fe:b5:1e:12:30:cb:cc:29:34:44:93:75: 7f:8a:69:af -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XOYriMK+xTQpn7kh9qU6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwZjlhMjRiZDI2Y2M4MjE3NTE4YTExZjU5OGU2MzcyMDI1 ZThhZTkwHhcNMjYwMTAyMDYxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NThiYjdhYjAwYzNlYjYzOTA4Y2FmYjQzMThkNDY4NTM0ZDVkY2JkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVYmS66Adc2Ld7jzAmJyxG3RH2A2 tSZ0D2/3rW6x5Z7HfhcA2HVk5VICzqXeNG2k/qk8lYXk8e7wn/woyKwrTm+9liBM moOPLCfE7ie3Bjv+CHQfkedV5pnwEfNseLDd5LJbL8NSM5/sz9/1KO1i02z1Z8FZ httSqgRjKv/zl/ssY/0KBPx/UyDu73Tcb9zzGR1uHrptSYbS4ZK8HCbveEKkuhxi vUAhfvwSEUAkyfwaIYVPjhfZwWxg9QaWVN3WRugGQ2avvp46czBh2qk+ZauuGYZZ d70ePYTq/CV/zpzLWGdJo5uUWMJNgn4HAW65CFwWoDCqcdKXHamGq0GquwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFGWLt6sAw+tjkIyvtDGNRoU01dy9MB8GA1UdIwQY MBaAFID5okvSbMghdRihH1mOY3ICXorpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1BtaVM5SnN5Q0YxR0tFZldZNWpjZ0plaXVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9mYjIxMmEtN2E3Ni00MmUyLTg5ODkt OTY1NTI5ZjIwZDExLzEvWll1M3F3REQ2Mk9RakstME1ZMUdoVFRWM0wwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny9mYjIxMmEtN2E3Ni00MmUyLTg5ODktOTY1NTI5ZjIwZDEx LzEvZ1BtaVM5SnN5Q0YxR0tFZldZNWpjZ0plaXVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW7nHAwQB W7naAwQAW7nfMA0GCSqGSIb3DQEBCwUAA4IBAQBeOAtk8iZ2Me75kVckrUOagEnN 3RN/EYO3o5FyiWmbOrQVNaxhOWbGzeoGg6V2BQ4ZaW//t012IcxDCra7qa/k2dfV G+RZ9pjTHfiHt9GtCSvXfilV5YWpswg4G9KPDio4Pdqd4CMyyWGbBenUaHp3PMNw 6bCTBOwz8p8owqRcv0EzeYc/zk6tcpzltJGIw7LK7Ibr2JVhIPR1Iipmf94GbYs9 SsPartMK1xRK9OFIdIQp19HTOr++YrCZMgiKVL7DtVtpKF+aqrDZUYpwbEZ5OkW1 kPqC44/AWXFPimLmfua6UNuv9FlG4jV4hp9Grrb+tR4SMMvMKTREk3V/immv -----END CERTIFICATE-----Generated at Mon Jan 26 13:10:50 2026 by rpki-client