This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/VxWfHatZSPjNCGQb391xfXyxZ3U.roa File: VxWfHatZSPjNCGQb391xfXyxZ3U.roa (raw, json) Hash identifier: k4qh49pNo2b+6Z7ZcEp1/eu5zGES0cIQ64LIQKZCaxU= Subject key identifier: 57:15:9F:1D:AB:59:48:F8:CD:08:64:1B:DF:DD:71:7D:7C:B1:67:75 Certificate issuer: /CN=65b48d0a37abfc34b41d2d2bae8c682ed23ec426 Certificate serial: 019B7B36B5550378A1FAF02D792BFD343A38 Authority key identifier: 65:B4:8D:0A:37:AB:FC:34:B4:1D:2D:2B:AE:8C:68:2E:D2:3E:C4:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbSNCjer_DS0HS0rroxoLtI-xCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/VxWfHatZSPjNCGQb391xfXyxZ3U.roa Signing time: Thu 01 Jan 2026 20:19:01 +0000 ROA not before: Thu 01 Jan 2026 20:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42112 IP address blocks: 91.199.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.crl rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft rsync://rpki.ripe.net/repository/DEFAULT/ZbSNCjer_DS0HS0rroxoLtI-xCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:b5:55:03:78:a1:fa:f0:2d:79:2b:fd:34:3a:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65b48d0a37abfc34b41d2d2bae8c682ed23ec426 Validity Not Before: Jan 1 20:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=57159f1dab5948f8cd08641bdfdd717d7cb16775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:44:28:5e:59:2a:24:af:57:4a:da:70:d3:36: 31:9c:ec:ed:d0:10:97:ff:c2:e8:b5:d5:ad:46:8f: 84:ca:59:e2:90:93:90:86:5d:33:e5:2d:46:3f:12: b5:67:de:cf:d6:b4:35:3d:6b:49:96:e6:26:22:de: a4:7b:e4:c2:f8:ba:1a:7c:ca:de:23:f4:42:88:ef: a7:23:1f:dd:77:61:f2:ba:a0:81:c1:61:02:37:a1: 85:7f:8c:79:8a:b5:fe:28:da:02:53:3f:98:a9:a8: 30:03:fb:2a:12:e5:73:d7:ff:66:41:40:01:95:c8: 1e:61:70:7b:7d:02:b6:54:59:61:6c:1e:dc:14:76: 4c:d2:42:c9:d5:4a:4b:b9:6c:3e:bc:ae:41:d1:52: 5a:a1:19:01:ec:b1:6a:71:97:59:64:f5:86:77:8b: 57:db:d1:d2:c9:b8:05:b3:ea:74:53:c3:2e:7d:6a: d3:68:8f:ab:c8:78:a6:08:ce:bb:2b:b7:f7:a3:6b: 3f:59:48:38:d7:e0:66:e1:f8:76:23:b7:c1:be:b6: c9:e9:b7:99:ba:21:5c:29:4d:2d:62:a9:56:9b:fa: c2:49:74:85:50:4f:7b:64:82:c3:32:a1:21:df:2f: 16:37:fa:a0:78:51:eb:d9:a4:22:ed:ce:2c:1f:48: 27:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:15:9F:1D:AB:59:48:F8:CD:08:64:1B:DF:DD:71:7D:7C:B1:67:75 X509v3 Authority Key Identifier: keyid:65:B4:8D:0A:37:AB:FC:34:B4:1D:2D:2B:AE:8C:68:2E:D2:3E:C4:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbSNCjer_DS0HS0rroxoLtI-xCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/VxWfHatZSPjNCGQb391xfXyxZ3U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.199.91.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:83:1a:08:3b:d3:90:57:5d:0c:82:23:fd:2a:6f:f0:39:69: ed:2e:06:c2:27:9b:f2:8f:47:1b:ce:7c:f9:ef:c3:c0:e4:68: 83:01:b9:1a:1f:75:8d:43:64:60:b4:30:4b:74:0c:50:3c:fb: bb:50:cd:1f:cc:b1:58:bc:09:43:c5:12:1c:60:45:84:95:7e: 8a:07:86:be:84:c1:e9:6a:f0:38:f6:ae:fe:22:c2:50:fa:a0: e5:00:90:9f:43:ee:ff:66:fd:7b:86:a1:80:02:1a:70:d9:35: 44:30:89:7f:60:32:ca:aa:d4:2f:87:41:d5:19:26:bf:5d:78: d2:65:33:11:73:29:1e:7d:0b:5e:aa:97:35:8b:3a:d2:99:c0: 42:81:2d:ef:bd:00:4a:71:f4:08:38:80:5a:8b:1f:1d:df:2e: b9:bc:12:48:00:ce:b4:0e:d2:5f:66:d9:6b:12:de:dd:60:d1: de:a5:4f:fc:86:ba:37:0c:b2:74:08:14:7b:a8:b0:5e:46:ae: 0e:63:27:4d:ef:21:00:08:08:39:fb:3c:63:37:e7:ba:44:b5: b0:f2:b2:1f:bc:5c:8f:7a:cc:26:63:81:82:74:b5:d4:33:43: 37:da:04:6f:e8:e1:4e:bf:5f:7e:40:30:fb:14:29:9e:97:bd: 7e:49:b1:39 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NrVVA3ih+vAteSv9NDo4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YjQ4ZDBhMzdhYmZjMzRiNDFkMmQyYmFlOGM2ODJlZDIz ZWM0MjYwHhcNMjYwMTAxMjAxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzE1OWYxZGFiNTk0OGY4Y2QwODY0MWJkZmRkNzE3ZDdjYjE2Nzc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EQoXlkqJK9XStpw0zYxnOzt0BCX /8LotdWtRo+EylnikJOQhl0z5S1GPxK1Z97P1rQ1PWtJluYmIt6ke+TC+LoafMre I/RCiO+nIx/dd2HyuqCBwWECN6GFf4x5irX+KNoCUz+YqagwA/sqEuVz1/9mQUAB lcgeYXB7fQK2VFlhbB7cFHZM0kLJ1UpLuWw+vK5B0VJaoRkB7LFqcZdZZPWGd4tX 29HSybgFs+p0U8MufWrTaI+ryHimCM67K7f3o2s/WUg41+Bm4fh2I7fBvrbJ6beZ uiFcKU0tYqlWm/rCSXSFUE97ZILDMqEh3y8WN/qgeFHr2aQi7c4sH0gn1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFcVnx2rWUj4zQhkG9/dcX18sWd1MB8GA1UdIwQY MBaAFGW0jQo3q/w0tB0tK66MaC7SPsQmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmJTTkNqZXJfRFMwSFMwcnJveG9MdEkteENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8yMWI2OWEtYTExNy00YjZkLTg2ZDUt OWExNWJjMGQzOTg4LzEvVnhXZkhhdFpTUGpOQ0dRYjM5MXhmWHl4WjNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8yMWI2OWEtYTExNy00YjZkLTg2ZDUtOWExNWJjMGQzOTg4 LzEvWmJTTkNqZXJfRFMwSFMwcnJveG9MdEkteENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8dbMA0G CSqGSIb3DQEBCwUAA4IBAQBdgxoIO9OQV10MgiP9Km/wOWntLgbCJ5vyj0cbznz5 78PA5GiDAbkaH3WNQ2RgtDBLdAxQPPu7UM0fzLFYvAlDxRIcYEWElX6KB4a+hMHp avA49q7+IsJQ+qDlAJCfQ+7/Zv17hqGAAhpw2TVEMIl/YDLKqtQvh0HVGSa/XXjS ZTMRcykefQteqpc1izrSmcBCgS3vvQBKcfQIOIBaix8d3y65vBJIAM60DtJfZtlr Et7dYNHepU/8hro3DLJ0CBR7qLBeRq4OYydN7yEACAg5+zxjN+e6RLWw8rIfvFyP eswmY4GCdLXUM0M32gRv6OFOv19+QDD7FCmel71+SbE5 -----END CERTIFICATE-----Generated at Tue Feb 10 03:02:22 2026 by rpki-client