This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/VZDwVhwIg3g9iM3qt-x-zwWp4Ao.roa File: VZDwVhwIg3g9iM3qt-x-zwWp4Ao.roa (raw, json) Hash identifier: 7a9BH9RzouuHFjB1cCK0b23ksnqE0jY9b0U+LyPMrtw= Subject key identifier: 55:90:F0:56:1C:08:83:78:3D:88:CD:EA:B7:EC:7E:CF:05:A9:E0:0A Certificate issuer: /CN=c77111ec5549115cb347654d8fe5b2709d27f7df Certificate serial: 019B7B35CE6F4B6829C999B4882FAA76A8A6 Authority key identifier: C7:71:11:EC:55:49:11:5C:B3:47:65:4D:8F:E5:B2:70:9D:27:F7:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3ER7FVJEVyzR2VNj-WycJ0n998.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/VZDwVhwIg3g9iM3qt-x-zwWp4Ao.roa Signing time: Thu 01 Jan 2026 20:18:02 +0000 ROA not before: Thu 01 Jan 2026 20:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41505 IP address blocks: 91.208.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.mft rsync://rpki.ripe.net/repository/DEFAULT/x3ER7FVJEVyzR2VNj-WycJ0n998.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:ce:6f:4b:68:29:c9:99:b4:88:2f:aa:76:a8:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c77111ec5549115cb347654d8fe5b2709d27f7df Validity Not Before: Jan 1 20:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5590f0561c0883783d88cdeab7ec7ecf05a9e00a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a6:df:de:4c:9f:6f:8e:a6:ab:b8:a2:27:24: e2:f1:9e:0d:aa:10:6a:f1:81:e6:32:7e:82:b5:e9: 79:9d:c8:8a:91:3b:c0:4b:a7:65:26:2f:0a:84:27: 22:e2:21:4c:cb:35:6f:20:81:a5:6b:37:c6:45:b7: a6:b9:7d:e2:4d:5b:06:17:9b:58:bc:28:8c:d8:57: 12:7f:78:0a:a1:58:ca:98:99:ba:ac:c5:53:3d:82: b7:a6:00:f8:76:7d:b3:4e:29:e4:30:5d:37:92:b8: 42:ac:3e:81:0c:34:c1:a5:9e:2b:f7:0d:b8:d7:f6: dd:94:db:e4:03:4c:74:2c:3b:8f:85:e5:da:78:c6: e1:23:5e:77:07:0f:fa:4d:22:61:77:0c:3d:af:bf: cd:3a:27:38:11:2c:62:47:c0:b3:ae:b8:87:62:15: 4f:2d:85:ed:0d:53:80:09:3f:2d:11:f3:9c:15:fa: f7:2e:4b:e2:62:0b:24:52:bb:8d:3d:bc:ad:09:09: 93:6a:5c:81:fd:71:7f:ef:28:1b:aa:b5:f9:f6:1e: 32:4e:d1:f3:f6:e1:64:ed:44:73:c0:30:89:23:86: b5:9b:86:09:e9:61:8d:c0:83:0a:c2:0f:57:90:4f: 19:7c:6a:29:9e:d6:39:2d:70:65:4a:ee:19:91:ca: 5d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:90:F0:56:1C:08:83:78:3D:88:CD:EA:B7:EC:7E:CF:05:A9:E0:0A X509v3 Authority Key Identifier: keyid:C7:71:11:EC:55:49:11:5C:B3:47:65:4D:8F:E5:B2:70:9D:27:F7:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3ER7FVJEVyzR2VNj-WycJ0n998.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/VZDwVhwIg3g9iM3qt-x-zwWp4Ao.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.101.0/24 Signature Algorithm: sha256WithRSAEncryption 18:8a:2b:d8:db:d9:2e:73:f6:fa:55:47:0f:a9:8d:1d:e1:6b: d4:df:92:a0:cf:6d:46:51:34:01:df:3f:23:6d:c0:57:4c:3d: 49:ae:8b:50:c5:a2:53:89:86:08:f8:14:bf:93:2b:8d:ba:e3: 75:0f:76:b1:12:a8:05:b4:33:64:2f:f4:bb:4b:04:f8:fc:d9: 7e:32:59:d4:f5:49:f5:7c:68:01:7c:c8:c7:0b:53:94:d0:a0: 87:20:f3:a6:28:bc:15:fb:f8:87:d6:5e:4f:7c:ac:73:27:d3: d9:84:38:2a:a0:17:69:9f:94:6b:c9:49:15:18:b5:65:d7:73: 6d:ba:53:a8:13:ad:84:fc:ee:a5:3e:e7:28:b4:61:d4:dc:e5: 99:2b:6e:46:b0:2d:85:8b:d4:45:b0:5a:6b:38:2c:31:fc:75: 6f:8d:16:68:05:22:e2:22:0b:7e:92:dd:dc:86:98:71:21:cc: 9a:bb:ee:a2:f5:1d:06:16:ca:37:06:ce:47:84:54:82:58:00: f8:dd:81:8e:e0:cb:ef:97:18:43:74:c0:92:1d:bf:c3:36:01: dd:34:1d:92:65:fd:5a:5c:a2:26:6e:cd:34:df:e0:1d:ef:64: 9d:e4:a0:2b:4d:87:bb:e5:88:b8:c0:10:72:45:0c:1e:2c:a1: db:d5:02:e0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nc5vS2gpyZm0iC+qdqimMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NzExMWVjNTU0OTExNWNiMzQ3NjU0ZDhmZTViMjcwOWQy N2Y3ZGYwHhcNMjYwMTAxMjAxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NTkwZjA1NjFjMDg4Mzc4M2Q4OGNkZWFiN2VjN2VjZjA1YTllMDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqbf3kyfb46mq7iiJyTi8Z4NqhBq 8YHmMn6Ctel5nciKkTvAS6dlJi8KhCci4iFMyzVvIIGlazfGRbemuX3iTVsGF5tY vCiM2FcSf3gKoVjKmJm6rMVTPYK3pgD4dn2zTinkMF03krhCrD6BDDTBpZ4r9w24 1/bdlNvkA0x0LDuPheXaeMbhI153Bw/6TSJhdww9r7/NOic4ESxiR8CzrriHYhVP LYXtDVOACT8tEfOcFfr3LkviYgskUruNPbytCQmTalyB/XF/7ygbqrX59h4yTtHz 9uFk7URzwDCJI4a1m4YJ6WGNwIMKwg9XkE8ZfGopntY5LXBlSu4Zkcpd1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFWQ8FYcCIN4PYjN6rfsfs8FqeAKMB8GA1UdIwQY MBaAFMdxEexVSRFcs0dlTY/lsnCdJ/ffMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDNFUjdGVkpFVnl6UjJWTmotV3ljSjBuOTk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9lMmQxYWQtY2ZlMC00NDk0LWFhNzUt ZTBjMmI5NDc5MmNhLzEvVlpEd1Zod0lnM2c5aU0zcXQteC16d1dwNEFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9lMmQxYWQtY2ZlMC00NDk0LWFhNzUtZTBjMmI5NDc5MmNh LzEveDNFUjdGVkpFVnl6UjJWTmotV3ljSjBuOTk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9BlMA0G CSqGSIb3DQEBCwUAA4IBAQAYiivY29kuc/b6VUcPqY0d4WvU35Kgz21GUTQB3z8j bcBXTD1JrotQxaJTiYYI+BS/kyuNuuN1D3axEqgFtDNkL/S7SwT4/Nl+MlnU9Un1 fGgBfMjHC1OU0KCHIPOmKLwV+/iH1l5PfKxzJ9PZhDgqoBdpn5RryUkVGLVl13Nt ulOoE62E/O6lPucotGHU3OWZK25GsC2Fi9RFsFprOCwx/HVvjRZoBSLiIgt+kt3c hphxIcyau+6i9R0GFso3Bs5HhFSCWAD43YGO4MvvlxhDdMCSHb/DNgHdNB2SZf1a XKImbs003+Ad72Sd5KArTYe75Yi4wBByRQweLKHb1QLg -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:33 2026 by rpki-client