This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/Zv4GPXDvyq5s7kx7jaGbNbQFqt0.roa File: Zv4GPXDvyq5s7kx7jaGbNbQFqt0.roa (raw, json) Hash identifier: 8XNAhYzAJ4bUXfTeJzCrqCSjD8pvLZbZek9+l+xWTBQ= Subject key identifier: 66:FE:06:3D:70:EF:CA:AE:6C:EE:4C:7B:8D:A1:9B:35:B4:05:AA:DD Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f Certificate serial: 019B7AC905F6973089751BBC8706AFF57988 Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/Zv4GPXDvyq5s7kx7jaGbNbQFqt0.roa Signing time: Thu 01 Jan 2026 18:19:13 +0000 ROA not before: Thu 01 Jan 2026 18:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206760 IP address blocks: 91.107.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:05:f6:97:30:89:75:1b:bc:87:06:af:f5:79:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f Validity Not Before: Jan 1 18:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=66fe063d70efcaae6cee4c7b8da19b35b405aadd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d4:a9:9d:1a:d4:af:cb:29:98:2b:58:f9:6d: df:ba:e2:dc:99:b6:c9:fc:2f:a9:4c:63:33:83:e7: fa:55:ad:e7:22:c2:0b:bb:ac:b3:13:c6:3f:db:c4: 37:ec:2c:8c:67:8b:96:b0:40:4d:0d:5a:75:37:97: 49:94:ec:d7:06:0f:97:f4:1b:87:1d:10:56:b7:0e: 89:c1:34:74:93:05:ed:55:a2:fa:57:6f:5b:2a:1b: ff:0c:71:12:21:f8:b9:3f:ed:8b:91:22:6e:56:03: 3d:de:e9:66:30:ca:ab:ad:49:34:9a:cd:fb:27:42: ec:3c:86:48:ad:78:cd:30:8e:b9:e9:97:32:e2:da: 96:1b:bc:62:25:ad:f2:b9:ad:12:4f:ed:d3:a9:14: 10:e5:8d:54:75:b9:f8:b4:5e:df:91:fc:81:f4:2e: ce:e2:fd:b6:69:1a:dc:4c:d7:03:4f:9a:e6:5e:ab: 2c:8e:46:bb:ca:ba:b6:1a:89:ba:e8:6b:24:d2:9c: 98:b7:7b:9f:89:72:54:69:b8:bc:51:52:97:50:0a: 6c:8c:a1:0a:9e:ca:54:9d:db:4e:b0:d3:dc:cf:c0: e5:17:9b:88:96:d3:a2:5f:e4:d8:14:93:e5:4a:f8: 08:17:76:fb:02:f6:d1:82:e3:5f:0d:d3:3c:f1:5c: 8a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:FE:06:3D:70:EF:CA:AE:6C:EE:4C:7B:8D:A1:9B:35:B4:05:AA:DD X509v3 Authority Key Identifier: keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/Zv4GPXDvyq5s7kx7jaGbNbQFqt0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.107.118.0/24 Signature Algorithm: sha256WithRSAEncryption a6:b8:8b:12:d8:67:91:f1:43:b3:50:85:bc:28:1d:c3:9a:7d: a5:2d:bd:85:5a:c7:e3:c8:da:68:15:b6:fd:f8:07:52:4a:7b: ae:45:95:90:6d:ff:ab:0d:24:6b:03:b2:20:4e:74:6b:ad:66: b9:cb:2e:9a:bf:87:6d:ca:27:40:81:b0:ac:49:7a:eb:5d:5f: d1:eb:93:78:a5:2b:d8:f0:23:59:c0:67:57:51:8c:12:92:23: 1b:cd:28:00:7b:bc:8e:f8:09:b0:8c:56:2b:6c:7a:81:92:5c: 87:04:a6:41:a5:bc:91:9f:e6:8d:1a:e4:5a:58:b8:85:6b:02: a9:ad:77:22:da:4b:9b:3e:83:47:fe:27:d9:30:37:f4:17:73: 62:d8:11:cc:f2:20:fb:7c:55:c6:a9:77:38:6b:c2:ff:fe:b1: 66:3f:ec:63:f7:cc:5e:8a:bd:59:8b:74:01:76:f1:6b:5a:a3: d9:a9:82:71:67:17:0d:64:cc:7d:6e:05:d4:40:8d:a6:44:2f: be:59:f2:5e:52:d8:fc:06:fb:d5:0e:f3:7a:f6:ea:0f:7d:58: 8e:c0:0d:ed:27:20:86:3e:34:41:99:7f:8a:7c:f2:f5:87:c8: dc:32:74:a9:53:9a:40:9d:cb:31:da:5f:6e:f6:cd:ec:7a:bc: 56:9e:7c:ab -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yQX2lzCJdRu8hwav9XmIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1YjFkMTNjMmUyNmUxMjc4NjI0NmE1ZWM0YzViZWE2OTg2 NGIyMGYwHhcNMjYwMTAxMTgxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NmZlMDYzZDcwZWZjYWFlNmNlZTRjN2I4ZGExOWIzNWI0MDVhYWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9SpnRrUr8spmCtY+W3fuuLcmbbJ /C+pTGMzg+f6Va3nIsILu6yzE8Y/28Q37CyMZ4uWsEBNDVp1N5dJlOzXBg+X9BuH HRBWtw6JwTR0kwXtVaL6V29bKhv/DHESIfi5P+2LkSJuVgM93ulmMMqrrUk0ms37 J0LsPIZIrXjNMI656Zcy4tqWG7xiJa3yua0ST+3TqRQQ5Y1Udbn4tF7fkfyB9C7O 4v22aRrcTNcDT5rmXqssjka7yrq2Gom66Gsk0pyYt3ufiXJUabi8UVKXUApsjKEK nspUndtOsNPcz8DlF5uIltOiX+TYFJPlSvgIF3b7AvbRguNfDdM88VyKCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGb+Bj1w78qubO5Me42hmzW0BardMB8GA1UdIwQY MBaAFAWx0TwuJuEnhiRqXsTFvqaYZLIPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjct NDkwNTI0M2JjODI4LzEvWnY0R1BYRHZ5cTVzN2t4N2phR2JOYlFGcXQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjctNDkwNTI0M2JjODI4 LzEvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW2t2MA0G CSqGSIb3DQEBCwUAA4IBAQCmuIsS2GeR8UOzUIW8KB3Dmn2lLb2FWsfjyNpoFbb9 +AdSSnuuRZWQbf+rDSRrA7IgTnRrrWa5yy6av4dtyidAgbCsSXrrXV/R65N4pSvY 8CNZwGdXUYwSkiMbzSgAe7yO+AmwjFYrbHqBklyHBKZBpbyRn+aNGuRaWLiFawKp rXci2kubPoNH/ifZMDf0F3Ni2BHM8iD7fFXGqXc4a8L//rFmP+xj98xeir1Zi3QB dvFrWqPZqYJxZxcNZMx9bgXUQI2mRC++WfJeUtj8BvvVDvN69uoPfViOwA3tJyCG PjRBmX+KfPL1h8jcMnSpU5pAncsx2l9u9s3serxWnnyr -----END CERTIFICATE-----Generated at Wed Jan 21 14:11:46 2026 by rpki-client