This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/ZgpRmr9n4R_HW3fgl3MaLI7Js-k.roa File: ZgpRmr9n4R_HW3fgl3MaLI7Js-k.roa (raw, json) Hash identifier: q4viv2fxAfHFR/GFrBCoNhBLbbosPZIEVECgSP1MwQI= Subject key identifier: 66:0A:51:9A:BF:67:E1:1F:C7:5B:77:E0:97:73:1A:2C:8E:C9:B3:E9 Certificate issuer: /CN=29851f7ae610b1d0061500b343a4868f3256066e Certificate serial: 019B7DCB2DBFBF669D884C097BF881C7F7D2 Authority key identifier: 29:85:1F:7A:E6:10:B1:D0:06:15:00:B3:43:A4:86:8F:32:56:06:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/ZgpRmr9n4R_HW3fgl3MaLI7Js-k.roa Signing time: Fri 02 Jan 2026 08:20:26 +0000 ROA not before: Fri 02 Jan 2026 08:20:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199851 IP address blocks: 91.220.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft rsync://rpki.ripe.net/repository/DEFAULT/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:2d:bf:bf:66:9d:88:4c:09:7b:f8:81:c7:f7:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29851f7ae610b1d0061500b343a4868f3256066e Validity Not Before: Jan 2 08:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=660a519abf67e11fc75b77e097731a2c8ec9b3e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:25:b4:b2:f5:11:bd:95:c4:b6:2e:2a:eb:a5: 59:8b:78:72:dd:a3:da:e7:f7:a0:b7:c8:47:75:c1: 93:f2:ea:e2:5f:4f:e8:88:95:e8:85:08:0a:aa:61: e7:b0:7b:ea:85:62:c4:cc:71:b8:a0:07:a2:38:ee: b3:35:4f:cd:3f:9b:1b:45:ce:ad:5a:1d:4c:84:3a: 17:a6:15:64:60:85:4a:29:b8:59:07:5c:97:36:4d: 0e:63:cb:d2:34:28:53:2e:31:be:b5:dc:3c:17:bb: 2b:4a:99:1b:e8:b8:a8:be:e3:3a:13:e5:31:2a:eb: b2:bb:88:b2:e7:58:24:0d:d7:73:49:27:ea:a3:55: be:2b:67:25:f3:99:01:44:83:32:7b:0a:8b:fe:a8: 82:2e:ea:90:86:9f:66:15:33:c8:be:a6:ab:a9:7d: 0d:db:00:3d:00:a1:a1:a2:f2:e5:af:9e:a3:29:8b: c2:1f:ba:bd:c6:12:c6:12:f8:ce:f6:56:6c:b0:18: 07:a6:69:62:66:1b:51:cc:2b:d5:e6:a9:f1:cd:a7: bc:8e:8e:5b:f1:fd:ec:6a:ab:b0:78:ac:b8:9c:bb: da:c8:5f:63:44:7f:67:f8:59:39:68:26:7d:f8:97: 7e:3c:0d:84:b2:a2:2e:ed:f0:5f:a4:05:b1:10:a1: b8:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:0A:51:9A:BF:67:E1:1F:C7:5B:77:E0:97:73:1A:2C:8E:C9:B3:E9 X509v3 Authority Key Identifier: keyid:29:85:1F:7A:E6:10:B1:D0:06:15:00:B3:43:A4:86:8F:32:56:06:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/ZgpRmr9n4R_HW3fgl3MaLI7Js-k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.220.186.0/24 Signature Algorithm: sha256WithRSAEncryption 93:72:c3:27:5a:66:de:35:6a:cf:7a:7f:ef:3e:c5:6c:a3:c6: 28:69:5c:7f:63:32:f7:db:a8:3d:cd:6b:98:eb:fd:4d:58:ec: a3:1f:28:86:7a:a2:19:32:3a:07:53:a0:71:2e:c2:96:2f:99: af:76:66:35:1e:61:08:73:cb:2b:8c:56:80:b2:4b:9b:75:c0: d8:fc:b8:95:1f:89:f5:7b:34:64:46:d7:1c:71:f5:17:76:64: bb:26:fe:a4:0d:f8:3a:4a:af:1e:b5:ce:fc:be:6f:94:82:01: 91:03:ed:25:1b:da:8c:b0:39:9a:0b:26:86:71:0e:5c:74:a2: 44:62:58:fa:a6:a1:79:0d:88:b5:3d:1a:d5:e8:a2:62:01:b1: d4:24:3e:10:c6:63:99:85:9e:ba:3d:0b:dc:ec:42:54:86:c2: b6:af:9e:97:4d:04:88:f4:91:90:4f:4a:58:65:22:3e:61:49: ba:f6:d5:3c:4f:97:d2:10:32:9c:9b:44:d8:83:29:ec:18:0d: 23:8b:cc:db:1e:98:17:1b:23:9b:75:58:54:25:0f:1d:f9:72: 45:50:03:b8:e9:b7:ed:75:b0:66:f8:71:7f:a1:d6:36:2a:52: 5e:52:34:e1:f2:58:cd:6f:67:ef:67:4d:0d:96:71:15:16:4a: da:db:b2:47 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yy2/v2adiEwJe/iBx/fSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ODUxZjdhZTYxMGIxZDAwNjE1MDBiMzQzYTQ4NjhmMzI1 NjA2NmUwHhcNMjYwMTAyMDgyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjBhNTE5YWJmNjdlMTFmYzc1Yjc3ZTA5NzczMWEyYzhlYzliM2U5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SW0svURvZXEti4q66VZi3hy3aPa 5/egt8hHdcGT8uriX0/oiJXohQgKqmHnsHvqhWLEzHG4oAeiOO6zNU/NP5sbRc6t Wh1MhDoXphVkYIVKKbhZB1yXNk0OY8vSNChTLjG+tdw8F7srSpkb6LiovuM6E+Ux Kuuyu4iy51gkDddzSSfqo1W+K2cl85kBRIMyewqL/qiCLuqQhp9mFTPIvqarqX0N 2wA9AKGhovLlr56jKYvCH7q9xhLGEvjO9lZssBgHpmliZhtRzCvV5qnxzae8jo5b 8f3saquweKy4nLvayF9jRH9n+Fk5aCZ9+Jd+PA2EsqIu7fBfpAWxEKG4/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGYKUZq/Z+Efx1t34JdzGiyOybPpMB8GA1UdIwQY MBaAFCmFH3rmELHQBhUAs0Okho8yVgZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1lVZmV1WVFzZEFHRlFDelE2U0dqekpXQm00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84MjQ2NTItNTZlNC00YmU1LTliZTMt ZDA0ZGVkN2RlZDAwLzEvWmdwUm1yOW40Ul9IVzNmZ2wzTWFMSTdKcy1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS84MjQ2NTItNTZlNC00YmU1LTliZTMtZDA0ZGVkN2RlZDAw LzEvS1lVZmV1WVFzZEFHRlFDelE2U0dqekpXQm00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9y6MA0G CSqGSIb3DQEBCwUAA4IBAQCTcsMnWmbeNWrPen/vPsVso8YoaVx/YzL326g9zWuY 6/1NWOyjHyiGeqIZMjoHU6BxLsKWL5mvdmY1HmEIc8srjFaAskubdcDY/LiVH4n1 ezRkRtcccfUXdmS7Jv6kDfg6Sq8etc78vm+UggGRA+0lG9qMsDmaCyaGcQ5cdKJE Ylj6pqF5DYi1PRrV6KJiAbHUJD4QxmOZhZ66PQvc7EJUhsK2r56XTQSI9JGQT0pY ZSI+YUm69tU8T5fSEDKcm0TYgynsGA0ji8zbHpgXGyObdVhUJQ8d+XJFUAO46bft dbBm+HF/odY2KlJeUjTh8ljNb2fvZ00NlnEVFkra27JH -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:56 2026 by rpki-client