This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Zc7RAD61b3xRcuabvmN1GFsZbp0.roa File: Zc7RAD61b3xRcuabvmN1GFsZbp0.roa (raw, json) Hash identifier: RGQxjIX7DwiOFHJJRcT6xixymhoBKc/5U/SMHLcBocE= Subject key identifier: 65:CE:D1:00:3E:B5:6F:7C:51:72:E6:9B:BE:63:75:18:5B:19:6E:9D Certificate issuer: /CN=0ede17b8caf02461bf54c0964ed38a2590062f94 Certificate serial: 019B7759321A2D0E8F0C08C5E21DB6EAE719 Authority key identifier: 0E:DE:17:B8:CA:F0:24:61:BF:54:C0:96:4E:D3:8A:25:90:06:2F:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Zc7RAD61b3xRcuabvmN1GFsZbp0.roa Signing time: Thu 01 Jan 2026 02:18:12 +0000 ROA not before: Thu 01 Jan 2026 02:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 91.102.232.0/21 maxlen: 24 91.102.237.0/24 maxlen: 24 91.102.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.crl rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:32:1a:2d:0e:8f:0c:08:c5:e2:1d:b6:ea:e7:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ede17b8caf02461bf54c0964ed38a2590062f94 Validity Not Before: Jan 1 02:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=65ced1003eb56f7c5172e69bbe6375185b196e9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:7c:9b:c1:1f:37:d9:8a:df:1e:b6:7b:0b:9f: 6f:56:df:1a:18:df:0c:ef:d4:c7:80:a5:bf:94:bf: 4d:c5:37:83:eb:79:35:10:5a:9e:bc:be:e3:45:52: 58:2e:4a:ba:a8:20:d1:e8:12:b2:31:e9:09:d1:39: 9a:cd:28:fb:50:92:cc:83:eb:15:20:51:3e:67:02: 49:88:86:df:94:f0:0e:b0:1c:28:90:9b:d7:8a:de: 3e:da:24:a8:cf:f9:f4:34:9c:65:63:39:29:11:a0: 97:f9:c5:71:4f:e5:e2:21:2a:20:1c:dc:75:35:ff: fe:a5:c0:5a:6a:c3:11:13:6f:42:67:ca:67:1e:92: 03:31:d8:fb:7c:0e:8d:31:da:7e:10:f6:95:80:85: 88:b9:7a:f0:51:7d:dd:48:ac:d5:53:7c:62:51:7a: 75:e1:ab:97:a2:17:d1:4c:0e:12:67:e2:c8:08:0f: 74:39:19:4b:ed:2a:9b:8e:26:12:f2:21:ee:1d:82: ce:a1:df:ae:25:2c:29:b7:6c:41:10:1d:79:de:fd: ac:12:e1:3c:87:09:4c:7e:2c:e6:f8:4e:b4:50:5c: 7b:e6:ad:a4:b1:8d:d1:d5:4a:29:5e:6b:48:bf:71: 11:3b:01:e5:ae:d4:9b:20:30:5c:16:3d:8d:15:fa: 77:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:CE:D1:00:3E:B5:6F:7C:51:72:E6:9B:BE:63:75:18:5B:19:6E:9D X509v3 Authority Key Identifier: keyid:0E:DE:17:B8:CA:F0:24:61:BF:54:C0:96:4E:D3:8A:25:90:06:2F:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Zc7RAD61b3xRcuabvmN1GFsZbp0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.102.232.0/21 Signature Algorithm: sha256WithRSAEncryption b8:27:c3:db:92:26:8d:c4:a9:27:e7:c2:6b:0f:35:40:04:fe: 11:67:42:2a:47:c3:71:27:ea:cf:b4:90:79:99:eb:9f:d0:73: d3:98:9e:2b:7f:63:14:b2:70:fe:9d:6d:b0:c4:06:93:92:c4: d5:46:2b:c5:a4:97:c5:92:12:69:c5:ef:a0:90:da:34:9c:6a: ca:2f:4e:4f:4b:98:a2:6c:e2:46:2c:fd:e1:3c:68:a6:d9:81: 08:b1:dd:d5:e0:06:c9:86:4b:9d:f6:73:27:ed:84:d3:39:7f: c8:d0:80:07:bd:b4:e6:56:5f:27:7b:c2:13:25:5b:6e:45:65: d1:59:6b:ce:1e:ba:78:5d:33:0d:63:6c:04:fd:85:0d:6b:92: 0d:b3:15:b4:30:33:f2:59:27:5c:c6:33:4a:70:5e:96:b5:6b: f3:f9:30:cf:87:f7:af:a1:5b:fa:4d:b2:ad:f0:a6:69:37:40: 07:f1:3b:ed:53:b2:57:1e:76:4b:54:f5:38:71:9e:c8:4b:76: ef:11:4c:8a:49:e7:a0:1d:b1:76:f3:ff:d1:37:e4:93:fa:6f: 95:b0:08:04:3d:8f:1d:e7:b6:e6:4c:d6:cf:d7:c6:f3:82:5d: 18:8d:5d:75:5c:bd:4d:4a:79:8f:b3:b4:f6:b6:70:79:bb:16: 7a:96:ba:d3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WTIaLQ6PDAjF4h226ucZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlZGUxN2I4Y2FmMDI0NjFiZjU0YzA5NjRlZDM4YTI1OTAw NjJmOTQwHhcNMjYwMTAxMDIxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NWNlZDEwMDNlYjU2ZjdjNTE3MmU2OWJiZTYzNzUxODViMTk2ZTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHybwR832YrfHrZ7C59vVt8aGN8M 79THgKW/lL9NxTeD63k1EFqevL7jRVJYLkq6qCDR6BKyMekJ0TmazSj7UJLMg+sV IFE+ZwJJiIbflPAOsBwokJvXit4+2iSoz/n0NJxlYzkpEaCX+cVxT+XiISogHNx1 Nf/+pcBaasMRE29CZ8pnHpIDMdj7fA6NMdp+EPaVgIWIuXrwUX3dSKzVU3xiUXp1 4auXohfRTA4SZ+LICA90ORlL7SqbjiYS8iHuHYLOod+uJSwpt2xBEB153v2sEuE8 hwlMfizm+E60UFx75q2ksY3R1UopXmtIv3EROwHlrtSbIDBcFj2NFfp39QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGXO0QA+tW98UXLmm75jdRhbGW6dMB8GA1UdIwQY MBaAFA7eF7jK8CRhv1TAlk7TiiWQBi+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHQ0WHVNcndKR0dfVk1DV1R0T0tKWkFHTDVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9lNGJiNTEtYjk2My00YjQ2LWFhMjct MjZiZjhjY2Q3Yjc0LzEvWmM3UkFENjFiM3hSY3VhYnZtTjFHRnNaYnAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9lNGJiNTEtYjk2My00YjQ2LWFhMjctMjZiZjhjY2Q3Yjc0 LzEvRHQ0WHVNcndKR0dfVk1DV1R0T0tKWkFHTDVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDW2boMA0G CSqGSIb3DQEBCwUAA4IBAQC4J8PbkiaNxKkn58JrDzVABP4RZ0IqR8NxJ+rPtJB5 meuf0HPTmJ4rf2MUsnD+nW2wxAaTksTVRivFpJfFkhJpxe+gkNo0nGrKL05PS5ii bOJGLP3hPGim2YEIsd3V4AbJhkud9nMn7YTTOX/I0IAHvbTmVl8ne8ITJVtuRWXR WWvOHrp4XTMNY2wE/YUNa5INsxW0MDPyWSdcxjNKcF6WtWvz+TDPh/evoVv6TbKt 8KZpN0AH8TvtU7JXHnZLVPU4cZ7IS3bvEUyKSeegHbF28//RN+ST+m+VsAgEPY8d 57bmTNbP18bzgl0YjV11XL1NSnmPs7T2tnB5uxZ6lrrT -----END CERTIFICATE-----Generated at Tue Jan 20 01:19:48 2026 by rpki-client