This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/0fZE0uIvZ6ZkQgfjfFBSc-iQ15Q.roa File: 0fZE0uIvZ6ZkQgfjfFBSc-iQ15Q.roa (raw, json) Hash identifier: XBQwm3jQjgkMj0LZQlnffF8nBMAdgqCU7K93V782wzA= Subject key identifier: D1:F6:44:D2:E2:2F:67:A6:64:42:07:E3:7C:50:52:73:E8:90:D7:94 Certificate issuer: /CN=4166c06ff49e0534809e234005baa5cca7e146a8 Certificate serial: 019B7F83A165486381F733D70C5C0C4869A3 Authority key identifier: 41:66:C0:6F:F4:9E:05:34:80:9E:23:40:05:BA:A5:CC:A7:E1:46:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/0fZE0uIvZ6ZkQgfjfFBSc-iQ15Q.roa Signing time: Fri 02 Jan 2026 16:21:31 +0000 ROA not before: Fri 02 Jan 2026 16:21:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197421 IP address blocks: 87.236.149.0/24 maxlen: 24 91.217.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.crl rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:a1:65:48:63:81:f7:33:d7:0c:5c:0c:48:69:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4166c06ff49e0534809e234005baa5cca7e146a8 Validity Not Before: Jan 2 16:21:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d1f644d2e22f67a6644207e37c505273e890d794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ed:d5:7c:e6:70:21:f6:04:da:85:59:4e:96: 7a:16:0b:90:47:be:73:b9:01:bb:fe:bc:83:89:3d: 10:e3:cf:bc:02:78:20:9e:96:da:45:47:87:11:08: 51:c9:8b:64:1e:10:f7:e2:be:ba:05:aa:9c:16:fd: 85:95:3c:17:f0:f1:1b:71:0c:86:aa:53:72:b0:c9: e8:aa:53:3c:b5:38:4a:53:aa:b2:1a:3d:58:be:02: 04:6f:a9:02:bf:54:6f:31:ba:e1:c8:be:e9:c9:ba: 6e:d9:e5:bc:f8:36:1c:b3:96:cf:a7:88:7c:50:85: 49:80:e5:8a:65:26:99:1d:f8:73:b0:99:dd:0d:93: 3d:0e:60:96:58:bf:77:33:77:2d:22:96:f9:e7:72: 0a:0e:7d:f5:84:36:d1:f5:2c:ed:2d:62:38:75:c8: 6f:d0:58:79:d6:7f:01:03:6f:bd:9f:57:ee:0b:39: 84:74:d6:53:07:53:d1:e8:a7:fb:16:36:31:c1:c1: 9b:b4:05:43:a7:69:75:e6:d5:91:48:18:cd:1b:7a: 7b:ad:40:a2:a0:14:e0:33:df:37:87:f1:b9:f2:bd: b1:a1:70:e2:32:a4:54:8f:ab:19:65:42:90:2b:73: 94:aa:7b:a0:45:ee:ce:cc:07:9e:65:c3:15:85:71: 13:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:F6:44:D2:E2:2F:67:A6:64:42:07:E3:7C:50:52:73:E8:90:D7:94 X509v3 Authority Key Identifier: keyid:41:66:C0:6F:F4:9E:05:34:80:9E:23:40:05:BA:A5:CC:A7:E1:46:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/0fZE0uIvZ6ZkQgfjfFBSc-iQ15Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.236.149.0/24 91.217.133.0/24 Signature Algorithm: sha256WithRSAEncryption 92:5b:7f:56:85:91:ac:41:1a:d4:80:3d:84:29:b0:d6:e8:94: d7:9a:1b:47:d9:cf:df:73:b5:a6:66:ef:0d:c8:49:87:ec:81: f8:26:b0:72:95:7b:07:ae:86:b9:45:b0:46:10:9a:24:5a:9f: 53:ef:43:c3:5d:36:64:d4:9d:21:d2:e8:6f:56:ca:3a:1f:54: 14:23:1c:dd:ac:ab:d5:0f:63:9c:b1:12:24:f7:a1:eb:a7:9a: 1f:6d:f6:31:c5:07:04:ac:42:9e:4e:37:47:9a:bd:ff:21:92: 56:98:16:4f:bd:55:0e:39:dd:21:71:ca:54:96:ba:01:c7:6d: 6b:76:20:53:3b:a8:88:2e:16:3f:e7:25:d9:7f:62:c8:54:6e: aa:ae:75:6a:e0:86:33:70:52:45:1e:a2:20:57:00:11:af:13: 38:05:62:5b:40:e9:90:0c:39:f8:aa:fd:3b:42:d3:1b:bb:e4: ac:d2:9a:7b:77:34:b1:61:19:23:48:42:e5:7b:cf:ff:7e:00: 2c:8d:a3:7f:bd:ac:e9:5f:02:ba:9c:1e:1a:af:bd:88:90:25: cf:d2:ba:77:92:a3:8b:2e:f5:e7:10:60:4b:ea:30:c6:48:6b: 6f:3e:87:1d:c1:e9:d9:4b:34:d5:cf:0f:5f:8d:39:ca:ed:77: 5e:77:46:1b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/g6FlSGOB9zPXDFwMSGmjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxNjZjMDZmZjQ5ZTA1MzQ4MDllMjM0MDA1YmFhNWNjYTdl MTQ2YTgwHhcNMjYwMTAyMTYyMTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMWY2NDRkMmUyMmY2N2E2NjQ0MjA3ZTM3YzUwNTI3M2U4OTBkNzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+3VfOZwIfYE2oVZTpZ6FguQR75z uQG7/ryDiT0Q48+8AnggnpbaRUeHEQhRyYtkHhD34r66BaqcFv2FlTwX8PEbcQyG qlNysMnoqlM8tThKU6qyGj1YvgIEb6kCv1RvMbrhyL7pybpu2eW8+DYcs5bPp4h8 UIVJgOWKZSaZHfhzsJndDZM9DmCWWL93M3ctIpb553IKDn31hDbR9SztLWI4dchv 0Fh51n8BA2+9n1fuCzmEdNZTB1PR6Kf7FjYxwcGbtAVDp2l15tWRSBjNG3p7rUCi oBTgM983h/G58r2xoXDiMqRUj6sZZUKQK3OUqnugRe7OzAeeZcMVhXETrQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNH2RNLiL2emZEIH43xQUnPokNeUMB8GA1UdIwQY MBaAFEFmwG/0ngU0gJ4jQAW6pcyn4UaoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVdiQWJfU2VCVFNBbmlOQUJicWx6S2ZoUnFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC83MGQyZDQtMzU0YS00YTg5LTkzMWUt ODgyNmU4NzdkMTQzLzEvMGZaRTB1SXZaNlprUWdmamZGQlNjLWlRMTVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC83MGQyZDQtMzU0YS00YTg5LTkzMWUtODgyNmU4NzdkMTQz LzEvUVdiQWJfU2VCVFNBbmlOQUJicWx6S2ZoUnFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAV+yVAwQA W9mFMA0GCSqGSIb3DQEBCwUAA4IBAQCSW39WhZGsQRrUgD2EKbDW6JTXmhtH2c/f c7WmZu8NyEmH7IH4JrBylXsHroa5RbBGEJokWp9T70PDXTZk1J0h0uhvVso6H1QU IxzdrKvVD2OcsRIk96Hrp5ofbfYxxQcErEKeTjdHmr3/IZJWmBZPvVUOOd0hccpU lroBx21rdiBTO6iILhY/5yXZf2LIVG6qrnVq4IYzcFJFHqIgVwARrxM4BWJbQOmQ DDn4qv07QtMbu+Ss0pp7dzSxYRkjSELle8//fgAsjaN/vazpXwK6nB4ar72IkCXP 0rp3kqOLLvXnEGBL6jDGSGtvPocdwenZSzTVzw9fjTnK7Xded0Yb -----END CERTIFICATE-----Generated at Mon Feb 2 08:09:14 2026 by rpki-client