This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/zyvBgcaKIFGMWYv6OuW2zLjcavU.roa File: zyvBgcaKIFGMWYv6OuW2zLjcavU.roa (raw, json) Hash identifier: XTPB93PSeuPbkhF2YYl0hqMFZjAqg6tmVvQv1bPxkjA= Subject key identifier: CF:2B:C1:81:C6:8A:20:51:8C:59:8B:FA:3A:E5:B6:CC:B8:DC:6A:F5 Certificate issuer: /CN=a7fc5c65c93a7404086b17a54e7e0da960a9b293 Certificate serial: 019B7B362E26031A9C9A712C156D0A745BCF Authority key identifier: A7:FC:5C:65:C9:3A:74:04:08:6B:17:A5:4E:7E:0D:A9:60:A9:B2:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_xcZck6dAQIaxelTn4NqWCpspM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/zyvBgcaKIFGMWYv6OuW2zLjcavU.roa Signing time: Thu 01 Jan 2026 20:18:26 +0000 ROA not before: Thu 01 Jan 2026 20:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49554 IP address blocks: 91.225.112.0/22 maxlen: 22 91.225.113.0/24 maxlen: 24 2001:678:c00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.crl rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.mft rsync://rpki.ripe.net/repository/DEFAULT/p_xcZck6dAQIaxelTn4NqWCpspM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:2e:26:03:1a:9c:9a:71:2c:15:6d:0a:74:5b:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7fc5c65c93a7404086b17a54e7e0da960a9b293 Validity Not Before: Jan 1 20:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf2bc181c68a20518c598bfa3ae5b6ccb8dc6af5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3b:c9:03:1f:33:e3:24:a0:e8:5d:26:24:f0: f4:52:05:04:b7:80:c7:fe:08:e0:fc:4e:72:33:bb: 88:c9:1c:d6:81:86:f6:21:b8:43:f8:73:81:1c:89: ab:f4:47:14:62:5e:6f:ce:db:71:14:67:6a:78:fc: 7e:c8:55:ad:2a:c0:50:c2:9b:4a:21:7d:74:ee:af: 05:76:cf:0c:38:f0:36:25:9e:cd:5e:09:bd:34:bf: 80:70:cb:19:56:5b:5a:d6:a7:e5:ba:f2:d3:ae:0e: 6c:44:f9:8b:26:bf:20:83:54:fb:15:c1:05:97:03: 7a:dd:3c:c3:d7:12:79:47:d4:a2:1e:d9:91:c3:53: ab:09:12:4e:4c:fe:4c:5d:4d:2e:89:99:e9:24:87: 6a:de:90:5c:6a:52:a2:9b:d0:72:f0:8b:f3:5a:a0: 16:aa:26:00:2c:7f:58:c5:1f:a9:0f:05:ba:ba:5d: 31:9b:c0:fc:b0:01:c5:f9:97:74:59:ee:25:af:39: 52:7d:c8:41:98:14:9a:80:19:c6:c2:74:c0:77:4a: fe:70:d5:88:d4:91:b0:63:bf:57:12:0c:26:aa:73: 9e:13:21:6b:f2:07:80:17:f9:25:65:2e:14:cb:43: cc:0b:a6:4a:77:65:71:d5:8f:a7:1f:91:67:c2:7b: 79:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:2B:C1:81:C6:8A:20:51:8C:59:8B:FA:3A:E5:B6:CC:B8:DC:6A:F5 X509v3 Authority Key Identifier: keyid:A7:FC:5C:65:C9:3A:74:04:08:6B:17:A5:4E:7E:0D:A9:60:A9:B2:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_xcZck6dAQIaxelTn4NqWCpspM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/zyvBgcaKIFGMWYv6OuW2zLjcavU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.225.112.0/22 IPv6: 2001:678:c00::/48 Signature Algorithm: sha256WithRSAEncryption 66:67:b6:b8:3a:3e:26:42:52:20:48:76:d6:bc:00:b4:c1:c4: b9:8f:dd:30:9d:66:6a:96:6e:ff:2e:81:a6:72:3e:02:f8:57: 18:f0:b5:1d:27:61:30:f0:f9:6f:42:69:0c:0e:8d:0e:18:eb: 76:fd:04:a2:50:c2:3b:8e:a9:3d:22:02:8a:e1:9c:0d:c1:60: 01:c0:d2:9f:ad:0c:ba:3d:f3:c9:37:72:9b:ba:1d:76:2d:2c: e1:71:a1:d2:0f:b6:8e:bd:be:01:be:bb:01:eb:c1:e7:1e:bb: 3a:72:70:fb:d4:b3:21:94:0f:b7:8e:ce:92:42:cd:60:93:29: fb:1d:46:82:20:42:3e:c5:35:96:06:a5:c7:0e:7e:dc:3b:01: b6:50:47:89:d1:32:82:6b:46:3b:21:42:42:5a:18:f7:86:be: 4e:8a:07:cd:4c:d7:8c:e1:f0:20:b9:d0:f4:08:f4:80:d2:a6: b1:c6:8f:b1:95:a4:d8:94:d2:dd:3a:7c:aa:28:f5:93:48:63: f4:04:17:90:10:24:df:8e:0c:6e:46:22:cc:55:55:dc:1b:8a: f0:42:f6:b1:c5:7c:be:3f:46:a8:a6:23:24:07:52:d0:00:82: e7:b4:ad:52:58:34:e6:15:4e:bd:61:0c:14:8f:8c:46:82:a9: f5:a2:ef:5d -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt7Ni4mAxqcmnEsFW0KdFvPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZmM1YzY1YzkzYTc0MDQwODZiMTdhNTRlN2UwZGE5NjBh OWIyOTMwHhcNMjYwMTAxMjAxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjJiYzE4MWM2OGEyMDUxOGM1OThiZmEzYWU1YjZjY2I4ZGM2YWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTvJAx8z4ySg6F0mJPD0UgUEt4DH /gjg/E5yM7uIyRzWgYb2IbhD+HOBHImr9EcUYl5vzttxFGdqePx+yFWtKsBQwptK IX107q8Fds8MOPA2JZ7NXgm9NL+AcMsZVlta1qfluvLTrg5sRPmLJr8gg1T7FcEF lwN63TzD1xJ5R9SiHtmRw1OrCRJOTP5MXU0uiZnpJIdq3pBcalKim9By8IvzWqAW qiYALH9YxR+pDwW6ul0xm8D8sAHF+Zd0We4lrzlSfchBmBSagBnGwnTAd0r+cNWI 1JGwY79XEgwmqnOeEyFr8geAF/klZS4Uy0PMC6ZKd2Vx1Y+nH5Fnwnt58wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFM8rwYHGiiBRjFmL+jrltsy43Gr1MB8GA1UdIwQY MBaAFKf8XGXJOnQECGsXpU5+DalgqbKTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcF94Y1pjazZkQVFJYXhlbFRuNE5xV0Nwc3BNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS84ZmNiMTItYWU0ZS00MzUzLWEzYjkt ZjBhZDM3NWE4MDg2LzEvenl2QmdjYUtJRkdNV1l2Nk91VzJ6TGpjYXZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS84ZmNiMTItYWU0ZS00MzUzLWEzYjktZjBhZDM3NWE4MDg2 LzEvcF94Y1pjazZkQVFJYXhlbFRuNE5xV0Nwc3BNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCW+FwMA8E AgACMAkDBwAgAQZ4DAAwDQYJKoZIhvcNAQELBQADggEBAGZntrg6PiZCUiBIdta8 ALTBxLmP3TCdZmqWbv8ugaZyPgL4VxjwtR0nYTDw+W9CaQwOjQ4Y63b9BKJQwjuO qT0iAorhnA3BYAHA0p+tDLo988k3cpu6HXYtLOFxodIPto69vgG+uwHrweceuzpy cPvUsyGUD7eOzpJCzWCTKfsdRoIgQj7FNZYGpccOftw7AbZQR4nRMoJrRjshQkJa GPeGvk6KB81M14zh8CC50PQI9IDSprHGj7GVpNiU0t06fKoo9ZNIY/QEF5AQJN+O DG5GIsxVVdwbivBC9rHFfL4/RqimIyQHUtAAgue0rVJYNOYVTr1hDBSPjEaCqfWi 710= -----END CERTIFICATE-----Generated at Tue Feb 10 02:47:11 2026 by rpki-client