This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/kjzLCEj1tYw7sDbLWbp9V6YxOOM.roa File: kjzLCEj1tYw7sDbLWbp9V6YxOOM.roa (raw, json) Hash identifier: qZYqyURYcynOIWE252O3MtzO4WaOHKWvGwoZG8pxdGk= Subject key identifier: 92:3C:CB:08:48:F5:B5:8C:3B:B0:36:CB:59:BA:7D:57:A6:31:38:E3 Certificate issuer: /CN=4166c06ff49e0534809e234005baa5cca7e146a8 Certificate serial: 019B7F83A1B22F4B61AB6F1B599C80F84907 Authority key identifier: 41:66:C0:6F:F4:9E:05:34:80:9E:23:40:05:BA:A5:CC:A7:E1:46:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/kjzLCEj1tYw7sDbLWbp9V6YxOOM.roa Signing time: Fri 02 Jan 2026 16:21:31 +0000 ROA not before: Fri 02 Jan 2026 16:21:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207281 IP address blocks: 91.217.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.crl rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 23:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:a1:b2:2f:4b:61:ab:6f:1b:59:9c:80:f8:49:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4166c06ff49e0534809e234005baa5cca7e146a8 Validity Not Before: Jan 2 16:21:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=923ccb0848f5b58c3bb036cb59ba7d57a63138e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:78:dc:a6:8b:f5:3e:e1:3c:d4:7c:d7:87:ec: 45:01:88:0f:12:94:3a:0b:f1:76:d8:87:13:98:b5: 99:ba:4a:af:b5:64:c6:36:38:a0:1d:30:91:90:e2: a1:7b:8f:33:0c:8b:be:8d:dd:71:6d:7c:15:92:16: cf:f3:34:b5:72:1b:41:68:3e:48:53:3b:b6:55:fc: 97:2c:fb:05:e2:9d:7b:e0:c4:95:63:c1:63:ce:a9: d8:6c:8f:e7:8a:f3:93:ba:55:61:13:1a:c8:8a:c8: 3a:93:dd:5e:e2:15:b5:ae:4b:ae:94:fa:79:01:d9: 1e:e4:78:fd:df:e9:1e:b2:65:2c:17:43:2d:7e:44: 19:f8:c9:4d:18:a6:39:96:97:65:65:ac:88:1d:04: 5e:65:7c:77:e2:b2:ee:81:c6:77:6e:9f:71:d6:05: 06:07:a1:87:8f:ca:c4:bd:39:ed:fd:2b:a0:67:34: be:69:cf:06:59:aa:42:36:de:e2:ce:0b:10:27:ad: 7b:05:c6:08:31:ab:11:b7:87:82:65:20:8c:a5:30: 6d:63:44:1f:a2:2c:c5:9c:79:27:e6:b3:01:b4:5d: 16:c2:7c:80:59:5e:c7:0c:99:89:85:96:5f:e7:81: 48:06:89:2c:3e:24:4a:32:23:87:05:19:c0:03:fc: f0:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:3C:CB:08:48:F5:B5:8C:3B:B0:36:CB:59:BA:7D:57:A6:31:38:E3 X509v3 Authority Key Identifier: keyid:41:66:C0:6F:F4:9E:05:34:80:9E:23:40:05:BA:A5:CC:A7:E1:46:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/kjzLCEj1tYw7sDbLWbp9V6YxOOM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.217.133.0/24 Signature Algorithm: sha256WithRSAEncryption 96:e9:3f:4c:41:9e:31:ad:cc:aa:78:d6:27:c8:7b:f6:2f:af: 31:15:a4:c4:84:02:03:da:dc:1f:14:04:31:57:26:a6:1b:91: 99:3b:62:67:92:a3:54:9b:94:0f:f3:70:59:07:91:9e:ab:e7: 69:e9:8a:d5:67:8b:87:cb:f8:ba:8c:3f:ea:ba:16:18:f8:02: b1:a0:42:33:77:ba:71:cb:70:66:18:fa:db:48:06:ac:57:44: bb:8a:31:d1:d4:43:f0:13:c4:dc:7b:fc:3a:e0:b4:64:aa:10: a4:35:26:25:79:e2:90:10:86:6c:a4:dd:a7:5c:8c:75:e1:e8: d5:5c:a8:38:19:a4:09:68:0b:7e:91:0f:b0:5e:47:85:ab:e4: c6:ab:9d:cd:9c:3b:d7:95:08:55:c5:65:a8:50:b3:b9:01:cd: 62:7c:5b:2e:89:85:be:d0:86:8d:4c:15:98:05:dc:c4:22:2a: 59:94:04:87:57:75:12:88:30:8f:d0:09:8c:b6:39:45:75:17: 89:cb:67:2e:1e:25:bb:68:94:cf:e9:15:aa:1a:cb:81:ef:16: 9f:f3:6d:0d:42:db:04:4e:d5:ee:d1:f8:3b:d8:4c:c0:a1:07: 86:d7:56:9b:e9:c2:84:10:11:fd:81:f3:62:8b:f8:f6:2b:4f: 79:91:4b:5d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g6GyL0thq28bWZyA+EkHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxNjZjMDZmZjQ5ZTA1MzQ4MDllMjM0MDA1YmFhNWNjYTdl MTQ2YTgwHhcNMjYwMTAyMTYyMTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjNjY2IwODQ4ZjViNThjM2JiMDM2Y2I1OWJhN2Q1N2E2MzEzOGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3jcpov1PuE81HzXh+xFAYgPEpQ6 C/F22IcTmLWZukqvtWTGNjigHTCRkOKhe48zDIu+jd1xbXwVkhbP8zS1chtBaD5I Uzu2VfyXLPsF4p174MSVY8FjzqnYbI/nivOTulVhExrIisg6k91e4hW1rkuulPp5 Adke5Hj93+kesmUsF0MtfkQZ+MlNGKY5lpdlZayIHQReZXx34rLugcZ3bp9x1gUG B6GHj8rEvTnt/SugZzS+ac8GWapCNt7izgsQJ617BcYIMasRt4eCZSCMpTBtY0Qf oizFnHkn5rMBtF0WwnyAWV7HDJmJhZZf54FIBoksPiRKMiOHBRnAA/zwEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJI8ywhI9bWMO7A2y1m6fVemMTjjMB8GA1UdIwQY MBaAFEFmwG/0ngU0gJ4jQAW6pcyn4UaoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVdiQWJfU2VCVFNBbmlOQUJicWx6S2ZoUnFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC83MGQyZDQtMzU0YS00YTg5LTkzMWUt ODgyNmU4NzdkMTQzLzEva2p6TENFajF0WXc3c0RiTFdicDlWNll4T09NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC83MGQyZDQtMzU0YS00YTg5LTkzMWUtODgyNmU4NzdkMTQz LzEvUVdiQWJfU2VCVFNBbmlOQUJicWx6S2ZoUnFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9mFMA0G CSqGSIb3DQEBCwUAA4IBAQCW6T9MQZ4xrcyqeNYnyHv2L68xFaTEhAID2twfFAQx VyamG5GZO2JnkqNUm5QP83BZB5Geq+dp6YrVZ4uHy/i6jD/quhYY+AKxoEIzd7px y3BmGPrbSAasV0S7ijHR1EPwE8Tce/w64LRkqhCkNSYleeKQEIZspN2nXIx14ejV XKg4GaQJaAt+kQ+wXkeFq+TGq53NnDvXlQhVxWWoULO5Ac1ifFsuiYW+0IaNTBWY BdzEIipZlASHV3USiDCP0AmMtjlFdReJy2cuHiW7aJTP6RWqGsuB7xaf820NQtsE TtXu0fg72EzAoQeG11ab6cKEEBH9gfNii/j2K095kUtd -----END CERTIFICATE-----Generated at Mon Feb 2 09:40:37 2026 by rpki-client