This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/kzJmJeIzYK-uABy4gPDlGybg7UM.roa File: kzJmJeIzYK-uABy4gPDlGybg7UM.roa (raw, json) Hash identifier: 1fLld3TaRC0xWtpNDMUlOBBVpSlt5nimLcyX9NO1jT0= Subject key identifier: 93:32:66:25:E2:33:60:AF:AE:00:1C:B8:80:F0:E5:1B:26:E0:ED:43 Certificate issuer: /CN=5d16dccfb2e2c88cf09f487c421fc8af7bbd3574 Certificate serial: 019B76EAC815883D230FD32D182B3C7F9BA2 Authority key identifier: 5D:16:DC:CF:B2:E2:C8:8C:F0:9F:48:7C:42:1F:C8:AF:7B:BD:35:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/kzJmJeIzYK-uABy4gPDlGybg7UM.roa Signing time: Thu 01 Jan 2026 00:17:36 +0000 ROA not before: Thu 01 Jan 2026 00:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200931 IP address blocks: 185.91.4.0/22 maxlen: 22 185.91.4.0/24 maxlen: 24 185.91.5.0/24 maxlen: 24 185.91.6.0/24 maxlen: 24 2a03:8860::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.crl rsync://rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:c8:15:88:3d:23:0f:d3:2d:18:2b:3c:7f:9b:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d16dccfb2e2c88cf09f487c421fc8af7bbd3574 Validity Not Before: Jan 1 00:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=93326625e23360afae001cb880f0e51b26e0ed43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:30:60:ab:0e:b1:a1:6b:be:30:6a:7e:15:f4: ff:e6:9f:b2:36:57:3a:35:23:c7:11:ab:63:4e:cb: b4:ec:b6:eb:3b:11:c2:b0:05:ec:04:1d:13:45:7c: bc:1d:c8:28:f0:58:93:2e:66:99:5b:e0:fb:7d:56: 06:be:e4:25:46:1d:ac:b8:4e:4f:dd:47:ad:93:8e: 3d:76:d1:e2:aa:f4:7d:86:b3:11:b7:7a:45:40:27: d0:f3:f6:6f:63:e7:5a:fe:70:19:af:96:8e:87:fc: 26:78:04:d9:25:5b:95:fa:99:21:2f:a9:49:20:71: 1e:75:c2:23:14:a7:cb:f2:4c:c8:fb:88:d2:55:99: ff:85:66:9a:8f:5f:f1:75:80:df:e1:c6:91:a8:34: 91:0f:fb:2c:f9:6b:cc:de:92:bf:60:97:64:6c:87: cc:6c:2d:12:ec:a3:2c:30:57:51:ec:72:22:df:69: 60:b5:96:d0:40:48:09:e9:6c:04:b3:b2:e6:9a:41: d2:af:01:cd:3d:de:24:78:7a:34:df:6f:d2:7a:ae: 53:4d:40:1e:4b:52:ef:f2:bf:be:47:af:4f:37:d3: 08:0e:b0:e0:18:d7:08:4e:6a:4c:ea:80:08:47:20: 9d:1f:fc:d4:1d:b6:dd:7a:cf:22:fc:44:b3:68:fe: 2d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:32:66:25:E2:33:60:AF:AE:00:1C:B8:80:F0:E5:1B:26:E0:ED:43 X509v3 Authority Key Identifier: keyid:5D:16:DC:CF:B2:E2:C8:8C:F0:9F:48:7C:42:1F:C8:AF:7B:BD:35:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/kzJmJeIzYK-uABy4gPDlGybg7UM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.91.4.0/22 IPv6: 2a03:8860::/32 Signature Algorithm: sha256WithRSAEncryption 1b:3f:81:f2:e6:9d:fc:f9:92:c3:dc:51:1a:ca:ab:49:42:32: e4:0f:89:30:48:81:83:c7:c2:9f:dc:af:06:5c:e0:ae:16:9c: 22:f3:b8:a3:af:b3:18:9a:e3:e7:33:67:62:90:8a:15:d6:75: af:80:0a:de:a3:a5:6a:80:d0:b1:23:11:ed:1d:a0:b6:7a:83: 94:dd:3a:16:99:dd:e6:29:45:a8:96:b7:96:43:7b:43:dd:e9: 8a:9e:e0:cc:76:08:f2:43:b7:c7:44:d7:49:5e:8d:38:a2:5f: e0:29:0c:87:f3:bd:a0:e5:82:d8:86:de:ac:b6:16:98:6a:da: 58:69:b9:34:4e:cb:8f:bb:9e:b8:a9:40:e1:fb:19:eb:32:af: 6d:39:1e:11:3f:79:49:ab:14:fb:ed:88:66:d9:cb:0f:23:c1: d7:6a:84:a5:13:9f:a4:92:11:ee:61:17:86:a4:f5:99:08:98: 1b:d2:af:ae:2f:ea:24:20:a4:07:14:8c:c6:97:8c:be:f5:8f: 8e:95:df:7a:77:64:e0:23:89:16:c3:d3:1f:94:70:5b:ed:6a: e2:25:7d:ed:ac:d8:5d:d9:f4:2c:45:28:b6:42:f4:1f:9d:4b: b3:25:78:3f:66:46:81:f2:1d:3d:84:37:85:9d:76:65:22:4a: df:87:dc:15 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt26sgViD0jD9MtGCs8f5uiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkMTZkY2NmYjJlMmM4OGNmMDlmNDg3YzQyMWZjOGFmN2Ji ZDM1NzQwHhcNMjYwMTAxMDAxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MzMyNjYyNWUyMzM2MGFmYWUwMDFjYjg4MGYwZTUxYjI2ZTBlZDQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zBgqw6xoWu+MGp+FfT/5p+yNlc6 NSPHEatjTsu07LbrOxHCsAXsBB0TRXy8Hcgo8FiTLmaZW+D7fVYGvuQlRh2suE5P 3Uetk449dtHiqvR9hrMRt3pFQCfQ8/ZvY+da/nAZr5aOh/wmeATZJVuV+pkhL6lJ IHEedcIjFKfL8kzI+4jSVZn/hWaaj1/xdYDf4caRqDSRD/ss+WvM3pK/YJdkbIfM bC0S7KMsMFdR7HIi32lgtZbQQEgJ6WwEs7LmmkHSrwHNPd4keHo032/Seq5TTUAe S1Lv8r++R69PN9MIDrDgGNcITmpM6oAIRyCdH/zUHbbdes8i/ESzaP4tuQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJMyZiXiM2CvrgAcuIDw5Rsm4O1DMB8GA1UdIwQY MBaAFF0W3M+y4siM8J9IfEIfyK97vTV0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFJiY3o3TGl5SXp3bjBoOFFoX0lyM3U5TlhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9hZDAyNDEtMWFlMy00ZDViLWIwZDEt ODVjNWQ1MzAyZDg4LzEva3pKbUplSXpZSy11QUJ5NGdQRGxHeWJnN1VNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9hZDAyNDEtMWFlMy00ZDViLWIwZDEtODVjNWQ1MzAyZDg4 LzEvWFJiY3o3TGl5SXp3bjBoOFFoX0lyM3U5TlhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuVsEMA0E AgACMAcDBQAqA4hgMA0GCSqGSIb3DQEBCwUAA4IBAQAbP4Hy5p38+ZLD3FEayqtJ QjLkD4kwSIGDx8Kf3K8GXOCuFpwi87ijr7MYmuPnM2dikIoV1nWvgAreo6VqgNCx IxHtHaC2eoOU3ToWmd3mKUWolreWQ3tD3emKnuDMdgjyQ7fHRNdJXo04ol/gKQyH 872g5YLYht6sthaYatpYabk0TsuPu564qUDh+xnrMq9tOR4RP3lJqxT77Yhm2csP I8HXaoSlE5+kkhHuYReGpPWZCJgb0q+uL+okIKQHFIzGl4y+9Y+Old96d2TgI4kW w9MflHBb7WriJX3trNhd2fQsRSi2QvQfnUuzJXg/ZkaB8h09hDeFnXZlIkrfh9wV -----END CERTIFICATE-----Generated at Tue Feb 10 02:47:38 2026 by rpki-client