This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/StZ1Vu2obb9fT7nBQIA489Gv2Nc.roa File: StZ1Vu2obb9fT7nBQIA489Gv2Nc.roa (raw, json) Hash identifier: RhQa2i+h1E8VC97tVhitBoG5LZ2Lcb5vq3T3M7bRNac= Subject key identifier: 4A:D6:75:56:ED:A8:6D:BF:5F:4F:B9:C1:40:80:38:F3:D1:AF:D8:D7 Certificate issuer: /CN=65ba15d47ba4f4482764472d8d97146a1ebbbf86 Certificate serial: 019B7F14FB082C9E6664B3158B0F16CF2A6E Authority key identifier: 65:BA:15:D4:7B:A4:F4:48:27:64:47:2D:8D:97:14:6A:1E:BB:BF:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/StZ1Vu2obb9fT7nBQIA489Gv2Nc.roa Signing time: Fri 02 Jan 2026 14:20:39 +0000 ROA not before: Fri 02 Jan 2026 14:20:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56510 IP address blocks: 91.235.174.0/24 maxlen: 24 188.227.204.0/22 maxlen: 22 195.69.225.0/24 maxlen: 24 195.88.202.0/23 maxlen: 23 2a02:7f84::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:fb:08:2c:9e:66:64:b3:15:8b:0f:16:cf:2a:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65ba15d47ba4f4482764472d8d97146a1ebbbf86 Validity Not Before: Jan 2 14:20:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ad67556eda86dbf5f4fb9c1408038f3d1afd8d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7f:db:c6:cb:87:34:70:e8:fc:9d:51:94:11: ac:d3:44:a8:d0:b2:89:d2:d1:0d:72:68:01:85:89: ee:3c:2c:05:89:3a:0c:78:07:91:f9:29:24:e4:6a: 0d:bf:69:e7:56:1d:cb:ae:b7:07:c2:cf:6a:ce:27: 29:b0:72:b5:7e:b0:c6:65:d0:aa:90:02:cf:d5:55: 02:10:21:2a:bd:3b:5f:04:20:7f:7e:4d:87:b7:28: c2:bd:bb:c7:6d:d3:48:46:28:4e:07:af:cf:30:78: 94:57:07:a2:96:71:b9:ab:8f:79:36:8c:83:a5:c3: 66:5e:47:69:4d:b7:28:d0:eb:25:95:0d:b6:e7:6d: 98:6e:5e:4f:65:89:c5:54:ec:01:96:da:aa:de:3a: 92:6a:0b:a0:e7:c2:46:4e:e2:e7:82:00:d1:25:7a: 85:6b:e1:aa:22:24:1d:6c:af:0f:23:2b:96:85:91: 31:28:e9:0c:a4:96:53:50:e9:5b:06:bd:e5:1b:58: 80:14:3d:79:82:79:b1:da:96:2c:a0:f2:73:19:7a: ee:c8:ad:b6:d9:9d:4b:d1:39:33:ba:15:3f:36:e0: 7f:98:2d:36:c7:ba:75:c4:a6:c1:76:70:b5:e2:ce: 63:4c:bc:2c:5a:72:b7:fe:3b:f1:d2:46:da:4a:23: ab:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:D6:75:56:ED:A8:6D:BF:5F:4F:B9:C1:40:80:38:F3:D1:AF:D8:D7 X509v3 Authority Key Identifier: keyid:65:BA:15:D4:7B:A4:F4:48:27:64:47:2D:8D:97:14:6A:1E:BB:BF:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/StZ1Vu2obb9fT7nBQIA489Gv2Nc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.235.174.0/24 188.227.204.0/22 195.69.225.0/24 195.88.202.0/23 IPv6: 2a02:7f84::/30 Signature Algorithm: sha256WithRSAEncryption 4a:77:6d:11:8d:2b:cf:64:35:22:ff:c7:41:d9:7d:9f:50:dd: 06:fa:52:ca:60:f6:e5:8e:59:79:f7:b8:ef:02:19:41:ad:da: 5b:17:1b:aa:f8:74:0b:63:a8:a4:d5:ec:41:07:4a:81:ea:ba: 35:20:c9:01:fa:91:cf:21:bf:4a:17:6e:8a:01:b8:d6:67:33: af:ee:b4:75:e4:bb:ae:28:db:2b:94:11:a3:46:6d:71:5d:50: 1c:5b:dd:64:0d:94:dd:48:b1:48:d3:9e:74:22:e4:f7:4d:48: 1a:4b:81:d2:18:1d:de:e6:3e:91:2a:42:e1:25:57:4b:80:ed: ce:3a:96:85:5a:82:0d:07:72:26:58:f0:70:80:a2:77:ff:4e: 1e:07:41:18:8d:50:db:56:fa:37:14:c4:91:ba:df:a1:60:1e: a0:05:ee:02:a4:1c:85:d9:ba:a8:cd:6b:ff:39:06:c7:3f:02: 80:18:af:84:df:28:4c:7a:e0:d0:3f:9e:25:a2:29:b3:12:12: 15:92:63:e2:a0:83:c6:d9:94:ca:28:53:57:22:71:af:88:66: bd:c1:f1:4c:29:f7:81:9e:4e:34:54:c5:ff:ed:16:9c:57:fb: ad:69:35:9e:2f:00:dc:e1:57:a8:6b:3f:6c:04:96:91:5a:26: 6c:4f:fb:5b -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt/FPsILJ5mZLMViw8WzypuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YmExNWQ0N2JhNGY0NDgyNzY0NDcyZDhkOTcxNDZhMWVi YmJmODYwHhcNMjYwMTAyMTQyMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YWQ2NzU1NmVkYTg2ZGJmNWY0ZmI5YzE0MDgwMzhmM2QxYWZkOGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtX/bxsuHNHDo/J1RlBGs00So0LKJ 0tENcmgBhYnuPCwFiToMeAeR+Skk5GoNv2nnVh3LrrcHws9qzicpsHK1frDGZdCq kALP1VUCECEqvTtfBCB/fk2HtyjCvbvHbdNIRihOB6/PMHiUVweilnG5q495NoyD pcNmXkdpTbco0OsllQ22522Ybl5PZYnFVOwBltqq3jqSagug58JGTuLnggDRJXqF a+GqIiQdbK8PIyuWhZExKOkMpJZTUOlbBr3lG1iAFD15gnmx2pYsoPJzGXruyK22 2Z1L0TkzuhU/NuB/mC02x7p1xKbBdnC14s5jTLwsWnK3/jvx0kbaSiOrnQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFErWdVbtqG2/X0+5wUCAOPPRr9jXMB8GA1UdIwQY MBaAFGW6FdR7pPRIJ2RHLY2XFGoeu7+GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmJvVjFIdWs5RWduWkVjdGpaY1VhaDY3djRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8zMDkwZGMtN2QyOC00MjI4LTgzODAt ZmUzYjkxOGMzMDk3LzEvU3RaMVZ1Mm9iYjlmVDduQlFJQTQ4OUd2Mk5jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8zMDkwZGMtN2QyOC00MjI4LTgzODAtZmUzYjkxOGMzMDk3 LzEvWmJvVjFIdWs5RWduWkVjdGpaY1VhaDY3djRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAW+uuAwQC vOPMAwQAw0XhAwQBw1jKMA0EAgACMAcDBQIqAn+EMA0GCSqGSIb3DQEBCwUAA4IB AQBKd20RjSvPZDUi/8dB2X2fUN0G+lLKYPbljll597jvAhlBrdpbFxuq+HQLY6ik 1exBB0qB6ro1IMkB+pHPIb9KF26KAbjWZzOv7rR15LuuKNsrlBGjRm1xXVAcW91k DZTdSLFI0550IuT3TUgaS4HSGB3e5j6RKkLhJVdLgO3OOpaFWoINB3ImWPBwgKJ3 /04eB0EYjVDbVvo3FMSRut+hYB6gBe4CpByF2bqozWv/OQbHPwKAGK+E3yhMeuDQ P54loimzEhIVkmPioIPG2ZTKKFNXInGviGa9wfFMKfeBnk40VMX/7RacV/utaTWe LwDc4Veoaz9sBJaRWiZsT/tb -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:28 2026 by rpki-client