This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/G7RZoTOwTcKPekHKI4U7pubMxTo.roa File: G7RZoTOwTcKPekHKI4U7pubMxTo.roa (raw, json) Hash identifier: hkFq7H3atVzzygJHfrNdoE+NINNolqqepS5P7kn64YA= Subject key identifier: 1B:B4:59:A1:33:B0:4D:C2:8F:7A:41:CA:23:85:3B:A6:E6:CC:C5:3A Certificate issuer: /CN=5a4c4f96aa5a02cada83d4b88d49e6a73abd25f0 Certificate serial: 019B7F15A6BF56AC314DD3904BF949301ECD Authority key identifier: 5A:4C:4F:96:AA:5A:02:CA:DA:83:D4:B8:8D:49:E6:A7:3A:BD:25:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WkxPlqpaAsrag9S4jUnmpzq9JfA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/G7RZoTOwTcKPekHKI4U7pubMxTo.roa Signing time: Fri 02 Jan 2026 14:21:23 +0000 ROA not before: Fri 02 Jan 2026 14:21:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43522 IP address blocks: 91.198.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.crl rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.mft rsync://rpki.ripe.net/repository/DEFAULT/WkxPlqpaAsrag9S4jUnmpzq9JfA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:a6:bf:56:ac:31:4d:d3:90:4b:f9:49:30:1e:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a4c4f96aa5a02cada83d4b88d49e6a73abd25f0 Validity Not Before: Jan 2 14:21:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1bb459a133b04dc28f7a41ca23853ba6e6ccc53a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:07:0c:b4:4c:87:f1:45:6a:1b:4e:42:8b:14: 70:e7:6e:c5:01:75:86:cd:3d:dd:e1:b6:c9:45:3f: 72:ed:29:87:ab:c0:89:cc:44:8d:f8:af:bf:20:4e: bc:13:30:6f:0f:aa:bf:85:f0:9c:cc:66:1d:7d:3c: e6:83:59:26:36:fc:4d:e8:44:dd:05:ac:f1:dc:c3: 19:c3:3a:ae:34:18:1b:d5:36:1e:51:7b:aa:d8:1d: 11:cb:23:c3:5f:b5:d0:94:47:57:83:92:97:c5:2d: 6b:ab:a1:22:7d:52:3e:79:fc:29:22:af:62:b7:d3: 0a:97:05:88:d4:99:df:0d:31:d1:04:8e:50:7e:bb: 53:55:9e:74:50:a3:73:07:4a:38:b3:d8:46:c9:0c: a2:a1:a9:18:60:66:6c:ed:8b:70:5c:f6:45:87:6d: 17:41:66:27:11:e0:28:7f:fc:42:cd:71:d2:3f:ab: 09:02:3d:6a:91:f2:ad:28:6d:e4:dc:b5:65:d0:2a: 94:92:04:1a:f6:ef:89:12:90:04:2a:e7:54:c5:3b: ab:e1:10:f5:52:05:63:35:24:ed:76:8a:55:33:0f: 83:5a:b8:15:b2:a3:ba:07:04:43:7d:b3:47:ca:f7: 67:fa:80:61:a6:65:b4:82:31:80:6d:74:52:d5:b2: 46:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:B4:59:A1:33:B0:4D:C2:8F:7A:41:CA:23:85:3B:A6:E6:CC:C5:3A X509v3 Authority Key Identifier: keyid:5A:4C:4F:96:AA:5A:02:CA:DA:83:D4:B8:8D:49:E6:A7:3A:BD:25:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkxPlqpaAsrag9S4jUnmpzq9JfA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/G7RZoTOwTcKPekHKI4U7pubMxTo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.45.0/24 Signature Algorithm: sha256WithRSAEncryption 86:ad:48:8e:d9:af:8b:19:a1:d8:97:f2:3b:84:36:c1:ad:4c: f6:bc:58:11:cb:05:58:21:33:8f:e8:25:70:13:a5:41:3d:33: 84:99:f9:01:f3:4a:1a:4c:53:8a:ff:86:60:97:35:5a:a7:5d: a6:df:ec:be:ff:c3:7c:0d:d5:0e:f3:d4:9b:18:3b:5e:85:d8: 1f:10:c5:3c:1b:39:d0:19:11:9c:1e:79:c1:b6:c7:33:3b:58: 65:5f:11:bc:25:89:ef:ac:fa:e3:a2:33:e5:7f:1c:24:ad:41: 58:f4:73:33:db:21:f2:cc:72:4f:7a:5f:fb:32:ce:fd:03:f2: 54:68:c7:f1:1d:65:e6:09:94:71:bb:38:99:d9:7b:ae:e6:15: 92:5e:e9:a6:dd:68:c9:98:29:ed:b1:23:85:ab:03:95:04:70: 0b:ef:a2:bb:2b:21:56:f8:a0:f4:12:36:0c:5e:56:88:07:61: a9:94:5d:13:0e:f0:87:60:b0:67:0b:fc:53:6f:83:17:99:7f: 84:50:b8:a2:65:c1:32:d9:36:4e:ad:5f:55:8e:8a:d9:ea:ba: 84:a6:b0:2d:9e:41:ac:bd:37:b2:5f:ce:79:b5:33:90:d2:7b: c4:61:50:3f:f6:99:b8:0b:0a:84:0a:3e:a3:7c:c3:c1:1d:53: ec:5b:0c:69 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/Faa/VqwxTdOQS/lJMB7NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhNGM0Zjk2YWE1YTAyY2FkYTgzZDRiODhkNDllNmE3M2Fi ZDI1ZjAwHhcNMjYwMTAyMTQyMTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYmI0NTlhMTMzYjA0ZGMyOGY3YTQxY2EyMzg1M2JhNmU2Y2NjNTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAcMtEyH8UVqG05CixRw527FAXWG zT3d4bbJRT9y7SmHq8CJzESN+K+/IE68EzBvD6q/hfCczGYdfTzmg1kmNvxN6ETd Bazx3MMZwzquNBgb1TYeUXuq2B0RyyPDX7XQlEdXg5KXxS1rq6EifVI+efwpIq9i t9MKlwWI1JnfDTHRBI5QfrtTVZ50UKNzB0o4s9hGyQyioakYYGZs7YtwXPZFh20X QWYnEeAof/xCzXHSP6sJAj1qkfKtKG3k3LVl0CqUkgQa9u+JEpAEKudUxTur4RD1 UgVjNSTtdopVMw+DWrgVsqO6BwRDfbNHyvdn+oBhpmW0gjGAbXRS1bJG3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBu0WaEzsE3Cj3pByiOFO6bmzMU6MB8GA1UdIwQY MBaAFFpMT5aqWgLK2oPUuI1J5qc6vSXwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2t4UGxxcGFBc3JhZzlTNGpVbm1wenE5SmZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC85ZDgxODctMmI1NC00MjAzLWEwMjMt OGE5MjEwOTk4OWVmLzEvRzdSWm9UT3dUY0tQZWtIS0k0VTdwdWJNeFRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC85ZDgxODctMmI1NC00MjAzLWEwMjMtOGE5MjEwOTk4OWVm LzEvV2t4UGxxcGFBc3JhZzlTNGpVbm1wenE5SmZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8YtMA0G CSqGSIb3DQEBCwUAA4IBAQCGrUiO2a+LGaHYl/I7hDbBrUz2vFgRywVYITOP6CVw E6VBPTOEmfkB80oaTFOK/4ZglzVap12m3+y+/8N8DdUO89SbGDtehdgfEMU8GznQ GRGcHnnBtsczO1hlXxG8JYnvrPrjojPlfxwkrUFY9HMz2yHyzHJPel/7Ms79A/JU aMfxHWXmCZRxuziZ2Xuu5hWSXumm3WjJmCntsSOFqwOVBHAL76K7KyFW+KD0EjYM XlaIB2GplF0TDvCHYLBnC/xTb4MXmX+EULiiZcEy2TZOrV9VjorZ6rqEprAtnkGs vTeyX855tTOQ0nvEYVA/9pm4CwqECj6jfMPBHVPsWwxp -----END CERTIFICATE-----Generated at Mon Feb 9 20:45:35 2026 by rpki-client