This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/zWTdP30QPHHdohheUhhfVW3hF4c.roa File: zWTdP30QPHHdohheUhhfVW3hF4c.roa (raw, json) Hash identifier: /i9LH6nCZuFhrfLjUwLanr2mJf1UJXJyn992vVslFf8= Subject key identifier: CD:64:DD:3F:7D:10:3C:71:DD:A2:18:5E:52:18:5F:55:6D:E1:17:87 Certificate issuer: /CN=c72e716353ec733ab4b5085308b386d89a74f147 Certificate serial: 019B797F26C616DB7D8966EF19C5756B03A3 Authority key identifier: C7:2E:71:63:53:EC:73:3A:B4:B5:08:53:08:B3:86:D8:9A:74:F1:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xy5xY1Psczq0tQhTCLOG2Jp08Uc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/zWTdP30QPHHdohheUhhfVW3hF4c.roa Signing time: Thu 01 Jan 2026 12:18:54 +0000 ROA not before: Thu 01 Jan 2026 12:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209907 IP address blocks: 91.228.217.0/24 maxlen: 24 176.121.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft rsync://rpki.ripe.net/repository/DEFAULT/xy5xY1Psczq0tQhTCLOG2Jp08Uc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:26:c6:16:db:7d:89:66:ef:19:c5:75:6b:03:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c72e716353ec733ab4b5085308b386d89a74f147 Validity Not Before: Jan 1 12:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd64dd3f7d103c71dda2185e52185f556de11787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e8:04:9b:5d:59:28:a2:70:5e:51:90:4e:47: d8:d0:0b:37:e1:4b:e6:ef:66:5d:0e:92:1b:01:78: 97:44:f8:d1:16:f9:71:f2:fd:1c:bb:3a:a5:e7:0f: 45:0c:6c:08:9f:78:6b:ad:f1:73:df:9c:c9:18:5b: 8c:88:17:64:9f:16:9c:98:e7:4b:46:07:02:38:22: b8:c9:fb:df:c4:e2:30:ad:a9:fe:04:e4:62:8c:35: 7b:47:16:4e:b2:b5:df:13:18:ff:06:ea:68:d0:4d: 70:d3:e7:92:83:5f:d8:4f:6d:14:e2:b2:bd:58:eb: b2:ed:81:29:66:4a:b9:7d:19:b4:ee:0d:59:6c:69: 9a:5c:2a:9d:64:15:04:5a:84:c9:86:2b:7c:d2:4e: 49:22:0f:e3:65:0d:7b:ff:52:7f:64:0f:9b:ab:7f: 0e:ce:92:a4:68:46:81:45:3f:96:11:84:13:ba:cc: e8:4f:34:e2:45:8b:92:9b:54:53:6d:cd:6d:a2:d4: 32:cc:cc:6c:30:7b:d6:be:12:89:d7:37:12:fe:5c: 20:d7:63:89:46:5d:d2:3c:e7:6d:5f:80:3b:bf:40: 73:e7:93:48:3d:ac:f0:fc:1d:76:aa:89:bd:c0:4d: a5:d7:d4:21:a2:6b:1c:6f:18:3e:23:d1:d8:20:16: cf:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:64:DD:3F:7D:10:3C:71:DD:A2:18:5E:52:18:5F:55:6D:E1:17:87 X509v3 Authority Key Identifier: keyid:C7:2E:71:63:53:EC:73:3A:B4:B5:08:53:08:B3:86:D8:9A:74:F1:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xy5xY1Psczq0tQhTCLOG2Jp08Uc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/zWTdP30QPHHdohheUhhfVW3hF4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.228.217.0/24 176.121.1.0/24 Signature Algorithm: sha256WithRSAEncryption 90:43:24:ad:34:8b:2f:7e:15:5b:f5:63:5d:8e:23:01:2e:15: 12:ba:dc:89:56:5f:f5:e5:86:58:2b:a1:bc:98:10:27:bb:0d: d9:e6:04:0f:b2:55:8c:23:d4:cd:48:19:e9:af:3e:a3:c5:c3: ae:01:9b:85:b1:e7:26:1c:4d:94:97:2a:9d:94:86:be:f9:77: 86:ce:24:13:54:48:52:c5:56:d7:17:c6:8b:d2:24:1b:91:3e: 38:f5:46:eb:ab:66:cc:d3:ab:ff:94:2a:92:cf:4d:59:d0:60: b0:10:0f:83:8e:f6:ec:79:0a:41:ba:03:28:86:48:9c:54:60: 87:60:78:57:f7:5a:30:98:63:a3:a6:d4:90:c3:05:22:bf:98: aa:c8:e2:e1:99:be:40:4e:95:4c:d9:59:7d:d5:93:44:93:59: 7b:66:a4:64:ac:ad:6d:e0:92:99:76:8f:d6:98:8e:3a:25:d6: e9:a8:2b:25:ad:c9:0b:8b:21:f9:33:6e:f3:da:d1:f4:dd:55: 9a:13:4d:36:06:ac:9d:db:cd:d5:97:e3:49:6e:b9:df:f6:dc: 12:f5:1f:44:a6:c9:5c:83:c5:e0:6d:4d:67:a2:9f:a0:0b:48: c2:13:11:45:4e:c4:fe:5e:c1:b7:5d:80:a7:b5:9c:c9:a3:41: e5:3d:6b:a7 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5fybGFtt9iWbvGcV1awOjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3MmU3MTYzNTNlYzczM2FiNGI1MDg1MzA4YjM4NmQ4OWE3 NGYxNDcwHhcNMjYwMTAxMTIxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDY0ZGQzZjdkMTAzYzcxZGRhMjE4NWU1MjE4NWY1NTZkZTExNzg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+gEm11ZKKJwXlGQTkfY0As34Uvm 72ZdDpIbAXiXRPjRFvlx8v0cuzql5w9FDGwIn3hrrfFz35zJGFuMiBdknxacmOdL RgcCOCK4yfvfxOIwran+BORijDV7RxZOsrXfExj/Bupo0E1w0+eSg1/YT20U4rK9 WOuy7YEpZkq5fRm07g1ZbGmaXCqdZBUEWoTJhit80k5JIg/jZQ17/1J/ZA+bq38O zpKkaEaBRT+WEYQTuszoTzTiRYuSm1RTbc1totQyzMxsMHvWvhKJ1zcS/lwg12OJ Rl3SPOdtX4A7v0Bz55NIPazw/B12qom9wE2l19Qhomscbxg+I9HYIBbPOQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFM1k3T99EDxx3aIYXlIYX1Vt4ReHMB8GA1UdIwQY MBaAFMcucWNT7HM6tLUIUwizhtiadPFHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHk1eFkxUHNjenEwdFFoVENMT0cySnAwOFVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9jNDlkMzQtMWIxNC00MDI2LWI3N2Yt ZTRkZWY5YzY5N2E3LzEveldUZFAzMFFQSEhkb2hoZVVoaGZWVzNoRjRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9jNDlkMzQtMWIxNC00MDI2LWI3N2YtZTRkZWY5YzY5N2E3 LzEveHk1eFkxUHNjenEwdFFoVENMT0cySnAwOFVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW+TZAwQA sHkBMA0GCSqGSIb3DQEBCwUAA4IBAQCQQyStNIsvfhVb9WNdjiMBLhUSutyJVl/1 5YZYK6G8mBAnuw3Z5gQPslWMI9TNSBnprz6jxcOuAZuFsecmHE2UlyqdlIa++XeG ziQTVEhSxVbXF8aL0iQbkT449Ubrq2bM06v/lCqSz01Z0GCwEA+DjvbseQpBugMo hkicVGCHYHhX91owmGOjptSQwwUiv5iqyOLhmb5ATpVM2Vl91ZNEk1l7ZqRkrK1t 4JKZdo/WmI46JdbpqCslrckLiyH5M27z2tH03VWaE002Bqyd283Vl+NJbrnf9twS 9R9Epslcg8XgbU1nop+gC0jCExFFTsT+XsG3XYCntZzJo0HlPWun -----END CERTIFICATE-----Generated at Mon Jan 26 19:33:32 2026 by rpki-client