This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/zUQMp2BeSBKunWgSe9fmXZ9CuM0.roa File: zUQMp2BeSBKunWgSe9fmXZ9CuM0.roa (raw, json) Hash identifier: GLAv3FngiNtDzlOEO79T42UrwsCvy0RXElAoeNFPOrw= Subject key identifier: CD:44:0C:A7:60:5E:48:12:AE:9D:68:12:7B:D7:E6:5D:9F:42:B8:CD Certificate issuer: /CN=6ff9ca5c76bb35a9353e9b13e3fce80f36316180 Certificate serial: 019B76EB104A3B4F5592105D77C9B5D9FC20 Authority key identifier: 6F:F9:CA:5C:76:BB:35:A9:35:3E:9B:13:E3:FC:E8:0F:36:31:61:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_nKXHa7Nak1PpsT4_zoDzYxYYA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/zUQMp2BeSBKunWgSe9fmXZ9CuM0.roa Signing time: Thu 01 Jan 2026 00:17:55 +0000 ROA not before: Thu 01 Jan 2026 00:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197750 IP address blocks: 91.229.93.0/24 maxlen: 24 185.6.100.0/24 maxlen: 24 185.6.101.0/24 maxlen: 24 185.6.102.0/24 maxlen: 24 185.6.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.crl rsync://rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.mft rsync://rpki.ripe.net/repository/DEFAULT/b_nKXHa7Nak1PpsT4_zoDzYxYYA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:10:4a:3b:4f:55:92:10:5d:77:c9:b5:d9:fc:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ff9ca5c76bb35a9353e9b13e3fce80f36316180 Validity Not Before: Jan 1 00:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd440ca7605e4812ae9d68127bd7e65d9f42b8cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:46:c6:46:94:8c:5b:bc:c3:a8:1b:e9:95:de: e2:1e:77:98:45:3d:59:07:1c:a1:5d:7b:4c:ce:ad: 02:22:32:b6:cf:5a:18:ec:11:d4:93:94:5b:da:b9: 79:46:a0:50:b2:24:9e:36:40:fa:e1:98:4b:ce:f8: d1:84:5f:c3:d5:c5:49:11:ca:10:6e:7f:0d:93:c0: a3:65:ec:a1:14:58:74:ff:21:4c:1c:15:a7:b4:f6: b9:fe:7a:f5:fa:f2:c2:70:1a:bf:d0:42:fe:da:95: 66:80:0d:a0:6a:f1:8b:8f:6c:3e:4d:50:ec:43:c3: 35:c9:76:9f:1c:55:f3:00:ae:e7:22:e9:64:3b:74: 0c:b5:00:df:74:ab:09:80:0a:1f:6f:f6:a5:26:bd: 89:aa:83:50:47:aa:6d:a2:95:87:f1:36:38:70:fc: 1b:6a:8f:d9:66:6b:ac:bf:74:fd:5e:68:75:30:59: 5c:c8:05:ac:f2:05:58:a2:a7:33:bc:3d:6f:4c:d6: 34:af:55:5e:cd:75:ae:29:53:cb:14:b6:44:6b:18: 9e:9d:ec:7a:8c:dc:3e:81:b0:e2:59:97:23:9e:66: 31:43:97:88:d4:9a:50:94:d2:ea:4b:6c:b1:b9:53: 4a:08:73:bc:d8:ba:00:e2:95:1c:46:28:51:be:8d: 60:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:44:0C:A7:60:5E:48:12:AE:9D:68:12:7B:D7:E6:5D:9F:42:B8:CD X509v3 Authority Key Identifier: keyid:6F:F9:CA:5C:76:BB:35:A9:35:3E:9B:13:E3:FC:E8:0F:36:31:61:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_nKXHa7Nak1PpsT4_zoDzYxYYA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/zUQMp2BeSBKunWgSe9fmXZ9CuM0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.229.93.0/24 185.6.100.0/22 Signature Algorithm: sha256WithRSAEncryption 0e:8d:40:e9:fd:96:f3:5a:00:87:26:d5:c5:db:5c:cb:a6:e7: 4d:62:f9:88:df:d9:a9:87:0c:9c:f0:9d:b6:98:6d:dc:41:70: 05:0e:40:a8:ad:d1:91:49:dc:4b:a3:7e:9f:d0:5f:4a:05:03: 5f:0a:51:ee:d0:9a:6f:fd:41:75:b6:ae:16:d9:9d:d8:9f:b7: 9d:58:d4:b0:3f:75:8a:6b:ac:a3:46:da:f7:f8:99:08:6e:62: eb:44:1d:ab:5e:40:28:eb:01:60:d5:9c:98:9a:7a:1a:f1:eb: 35:33:29:f7:54:89:f3:df:e6:d3:b6:12:54:51:59:45:03:40: 38:6c:c3:b3:03:d3:63:2b:9e:75:34:90:fb:3b:05:da:94:80: d3:a8:45:97:3d:f2:49:1a:84:b7:ae:6d:d4:30:50:19:4f:76: 39:53:63:a0:8d:ce:67:5f:6c:e2:87:d0:c2:c2:f4:27:ff:2e: 76:c2:9c:90:63:e9:a1:86:89:9a:e5:44:66:0a:69:19:bd:59: c7:9a:49:d5:66:7f:7a:f3:82:86:00:ce:99:b3:bc:93:e7:b0: db:46:97:1f:42:3f:37:9e:bb:5e:72:54:89:01:94:8d:9b:fb: 03:c1:7f:5a:cb:06:4d:b2:a1:ae:0f:9a:6a:60:4e:5e:89:ec: dc:0f:a2:70 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt26xBKO09VkhBdd8m12fwgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmZjljYTVjNzZiYjM1YTkzNTNlOWIxM2UzZmNlODBmMzYz MTYxODAwHhcNMjYwMTAxMDAxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDQ0MGNhNzYwNWU0ODEyYWU5ZDY4MTI3YmQ3ZTY1ZDlmNDJiOGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EbGRpSMW7zDqBvpld7iHneYRT1Z BxyhXXtMzq0CIjK2z1oY7BHUk5Rb2rl5RqBQsiSeNkD64ZhLzvjRhF/D1cVJEcoQ bn8Nk8CjZeyhFFh0/yFMHBWntPa5/nr1+vLCcBq/0EL+2pVmgA2gavGLj2w+TVDs Q8M1yXafHFXzAK7nIulkO3QMtQDfdKsJgAofb/alJr2JqoNQR6ptopWH8TY4cPwb ao/ZZmusv3T9Xmh1MFlcyAWs8gVYoqczvD1vTNY0r1VezXWuKVPLFLZEaxienex6 jNw+gbDiWZcjnmYxQ5eI1JpQlNLqS2yxuVNKCHO82LoA4pUcRihRvo1gbwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFM1EDKdgXkgSrp1oEnvX5l2fQrjNMB8GA1UdIwQY MBaAFG/5ylx2uzWpNT6bE+P86A82MWGAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYl9uS1hIYTdOYWsxUHBzVDRfem9Eell4WVlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi83ZjM1NDYtNGE4Ny00NjI3LWEwMTkt MzQxYjlkNjQ2NDVkLzEvelVRTXAyQmVTQkt1bldnU2U5Zm1YWjlDdU0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi83ZjM1NDYtNGE4Ny00NjI3LWEwMTktMzQxYjlkNjQ2NDVk LzEvYl9uS1hIYTdOYWsxUHBzVDRfem9Eell4WVlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW+VdAwQC uQZkMA0GCSqGSIb3DQEBCwUAA4IBAQAOjUDp/ZbzWgCHJtXF21zLpudNYvmI39mp hwyc8J22mG3cQXAFDkCordGRSdxLo36f0F9KBQNfClHu0Jpv/UF1tq4W2Z3Yn7ed WNSwP3WKa6yjRtr3+JkIbmLrRB2rXkAo6wFg1ZyYmnoa8es1Myn3VInz3+bTthJU UVlFA0A4bMOzA9NjK551NJD7OwXalIDTqEWXPfJJGoS3rm3UMFAZT3Y5U2Ogjc5n X2zih9DCwvQn/y52wpyQY+mhhoma5URmCmkZvVnHmknVZn9684KGAM6Zs7yT57Db RpcfQj83nrteclSJAZSNm/sDwX9aywZNsqGuD5pqYE5eiezcD6Jw -----END CERTIFICATE-----Generated at Tue Feb 10 04:32:25 2026 by rpki-client