This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/ROZhmusy1NDknUF5aPaZGu5NXA4.roa File: ROZhmusy1NDknUF5aPaZGu5NXA4.roa (raw, json) Hash identifier: UAuXcLj79aVhKSKK569wYuvrITgWR3uMrjyjPiEXMnE= Subject key identifier: 44:E6:61:9A:EB:32:D4:D0:E4:9D:41:79:68:F6:99:1A:EE:4D:5C:0E Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362 Certificate serial: 019B7C7F7E24BDDC2C686C06C308E500A0E3 Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/ROZhmusy1NDknUF5aPaZGu5NXA4.roa Signing time: Fri 02 Jan 2026 02:18:08 +0000 ROA not before: Fri 02 Jan 2026 02:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212669 IP address blocks: 45.130.76.0/24 maxlen: 24 91.132.15.0/24 maxlen: 24 194.31.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:7e:24:bd:dc:2c:68:6c:06:c3:08:e5:00:a0:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362 Validity Not Before: Jan 2 02:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=44e6619aeb32d4d0e49d417968f6991aee4d5c0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c0:99:00:a0:49:98:3d:99:4e:b3:d2:c9:98: 6d:45:cd:b7:44:71:ee:b7:b3:8b:47:68:58:2b:f5: c5:fb:c8:94:4f:1d:2c:79:f0:5e:5b:bd:97:ac:77: fa:b7:ea:8c:3d:c2:63:5d:cd:46:f2:a5:e8:41:1c: 9a:ea:8d:fd:c8:69:88:02:4b:b1:13:6c:ec:7f:df: 83:13:c9:3c:12:8a:f1:07:15:75:84:7c:a3:df:5e: d3:47:62:6e:c9:17:a2:1f:85:48:e8:0b:cc:11:67: b6:c0:9a:fd:99:06:54:9f:0d:6a:87:c5:5a:02:ed: ac:6c:73:e2:77:ec:2f:16:54:67:ac:c7:3f:8a:a1: 6a:65:73:81:97:10:80:57:4c:b3:ef:27:a7:99:9f: 7f:f7:8a:02:73:95:69:4d:45:c6:4a:4c:81:90:1d: 72:21:06:dc:28:64:ee:ff:c0:95:37:57:d7:f7:7c: d7:ce:ca:e9:73:cc:ee:d8:5b:4b:02:11:8c:a0:04: 12:85:ce:a2:fb:ee:16:c7:55:ec:84:99:04:67:47: 3b:83:72:a1:d9:e4:c6:1f:ee:bb:ec:ba:f9:f7:a4: 9c:57:6a:b6:24:f9:e5:f9:79:a2:9a:3a:ee:ba:a4: 9d:ea:85:6c:b7:ce:87:04:00:44:22:31:c6:ac:9a: bb:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:E6:61:9A:EB:32:D4:D0:E4:9D:41:79:68:F6:99:1A:EE:4D:5C:0E X509v3 Authority Key Identifier: keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/ROZhmusy1NDknUF5aPaZGu5NXA4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.130.76.0/24 91.132.15.0/24 194.31.183.0/24 Signature Algorithm: sha256WithRSAEncryption 15:60:8d:c8:12:78:0d:77:7c:b1:ab:dc:0c:dd:d4:d2:df:82: 00:29:e0:5b:ca:70:2f:6d:6e:3f:d3:4c:ea:62:cf:d4:7c:24: a9:b4:05:c3:b5:38:79:37:e3:cd:8b:2e:72:24:0e:18:43:2b: 76:c6:43:a6:76:91:81:0d:26:26:20:fc:7e:e8:d1:ef:49:cc: 41:21:16:37:3d:53:b5:c0:1a:3e:b3:31:43:33:5d:fb:ec:10: 07:8b:c6:c9:b9:e7:ab:a9:8b:c8:f8:ae:ae:04:e6:44:fe:b3: 31:e4:01:f0:8b:c3:61:96:af:cb:1e:06:ce:62:d7:4e:60:19: 17:71:63:b1:ab:cb:7b:24:52:8a:09:bc:4d:41:0a:92:60:9d: 43:c8:c6:0c:0a:3c:74:b0:c8:f2:b9:9b:e3:e8:a2:c2:2c:76: cb:aa:b6:03:6e:f4:fa:2b:b0:0c:c4:0e:e4:6b:57:27:34:83: 73:50:13:d3:b6:c2:de:79:69:ec:f3:04:1e:5f:df:e3:21:dc: a3:e7:99:51:de:b0:38:c4:65:f3:99:45:23:39:21:19:ca:a0: 4e:61:57:25:6f:30:04:58:24:22:cc:b6:17:35:da:8f:a5:1c: 75:b6:97:bb:32:67:39:47:70:4a:03:60:d4:78:df:b4:b7:63: 69:57:ad:e8 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8f34kvdwsaGwGwwjlAKDjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNzYwM2E5M2JjYTMxYjAxOGY1MTFmNmQ0YjBiNzU0NmU5 NjMzNjIwHhcNMjYwMTAyMDIxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NGU2NjE5YWViMzJkNGQwZTQ5ZDQxNzk2OGY2OTkxYWVlNGQ1YzBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcCZAKBJmD2ZTrPSyZhtRc23RHHu t7OLR2hYK/XF+8iUTx0sefBeW72XrHf6t+qMPcJjXc1G8qXoQRya6o39yGmIAkux E2zsf9+DE8k8EorxBxV1hHyj317TR2JuyReiH4VI6AvMEWe2wJr9mQZUnw1qh8Va Au2sbHPid+wvFlRnrMc/iqFqZXOBlxCAV0yz7yenmZ9/94oCc5VpTUXGSkyBkB1y IQbcKGTu/8CVN1fX93zXzsrpc8zu2FtLAhGMoAQShc6i++4Wx1XshJkEZ0c7g3Kh 2eTGH+677Lr596ScV2q2JPnl+XmimjruuqSd6oVst86HBABEIjHGrJq74QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFETmYZrrMtTQ5J1BeWj2mRruTVwOMB8GA1UdIwQY MBaAFIJ2A6k7yjGwGPUR9tSwt1RuljNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYt YjE2Y2I0ZGZhZGQzLzEvUk9aaG11c3kxTkRrblVGNWFQYVpHdTVOWEE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYtYjE2Y2I0ZGZhZGQz LzEvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALYJMAwQA W4QPAwQAwh+3MA0GCSqGSIb3DQEBCwUAA4IBAQAVYI3IEngNd3yxq9wM3dTS34IA KeBbynAvbW4/00zqYs/UfCSptAXDtTh5N+PNiy5yJA4YQyt2xkOmdpGBDSYmIPx+ 6NHvScxBIRY3PVO1wBo+szFDM1377BAHi8bJueerqYvI+K6uBOZE/rMx5AHwi8Nh lq/LHgbOYtdOYBkXcWOxq8t7JFKKCbxNQQqSYJ1DyMYMCjx0sMjyuZvj6KLCLHbL qrYDbvT6K7AMxA7ka1cnNINzUBPTtsLeeWns8wQeX9/jIdyj55lR3rA4xGXzmUUj OSEZyqBOYVclbzAEWCQizLYXNdqPpRx1tpe7Mmc5R3BKA2DUeN+0t2NpV63o -----END CERTIFICATE-----Generated at Mon Jan 19 23:23:31 2026 by rpki-client