This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/sZxFDMEjV4E6bBsRgrZxjoy7_tk.roa File: sZxFDMEjV4E6bBsRgrZxjoy7_tk.roa (raw, json) Hash identifier: zq0CNZddr6RR3XPpn+vNQeYgJJau/bg5D4OmfDaVY/s= Subject key identifier: B1:9C:45:0C:C1:23:57:81:3A:6C:1B:11:82:B6:71:8E:8C:BB:FE:D9 Certificate issuer: /CN=07d75335f77bf4240976277b1dd0e19bb23a8e1d Certificate serial: 019B7B354759C9E8E75F2D1AA4C6B22CD7CB Authority key identifier: 07:D7:53:35:F7:7B:F4:24:09:76:27:7B:1D:D0:E1:9B:B2:3A:8E:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/sZxFDMEjV4E6bBsRgrZxjoy7_tk.roa Signing time: Thu 01 Jan 2026 20:17:27 +0000 ROA not before: Thu 01 Jan 2026 20:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205019 IP address blocks: 91.103.82.0/24 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:47:59:c9:e8:e7:5f:2d:1a:a4:c6:b2:2c:d7:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07d75335f77bf4240976277b1dd0e19bb23a8e1d Validity Not Before: Jan 1 20:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b19c450cc12357813a6c1b1182b6718e8cbbfed9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:55:88:d6:23:61:77:4a:ac:dc:5d:96:c2:21: e9:26:54:76:7f:7f:ed:b5:ac:d3:09:1b:b5:86:0d: 16:93:0e:59:cf:81:b8:cd:46:17:38:69:f4:f6:8c: 8c:f7:65:44:82:44:8e:59:e2:6d:f9:f7:b2:c6:0f: 4a:6b:37:f1:e5:36:2f:ec:7c:e6:45:11:c6:93:36: 38:77:88:0f:b7:05:ad:ac:47:5b:1a:23:7b:f6:a7: 36:9a:58:3d:00:3b:8b:86:d2:5e:e6:d5:0f:5e:bd: 7a:c3:e2:e4:d2:9c:6f:bb:78:b5:6c:9f:f6:e9:99: fd:b9:2d:07:31:d5:84:89:74:3f:9e:e2:1c:8a:a9: 9b:41:5b:16:75:8e:67:76:c2:79:9d:89:94:b4:10: cd:6a:40:70:ff:79:7d:48:44:ca:69:5d:54:30:c8: c3:f3:24:62:bb:7b:63:d3:d7:20:42:fb:83:66:71: 09:1a:67:4d:e0:76:a1:52:3d:0f:0a:9b:22:4b:ac: a1:7f:3c:ca:c7:39:17:f9:ae:90:57:3e:a8:b0:c9: f2:0c:98:d9:27:d0:33:0d:bf:37:5e:d2:09:a9:75: ab:52:30:9d:df:39:77:09:f1:38:ed:dc:c7:ed:ca: fb:de:35:b3:79:6c:f6:4f:c2:5a:ae:57:2f:32:8a: 12:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:9C:45:0C:C1:23:57:81:3A:6C:1B:11:82:B6:71:8E:8C:BB:FE:D9 X509v3 Authority Key Identifier: keyid:07:D7:53:35:F7:7B:F4:24:09:76:27:7B:1D:D0:E1:9B:B2:3A:8E:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/sZxFDMEjV4E6bBsRgrZxjoy7_tk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.103.82.0/24 Signature Algorithm: sha256WithRSAEncryption 48:82:96:98:29:53:66:1a:94:97:e6:e1:46:d2:41:a8:a4:d5: a7:56:a0:00:f1:9e:74:1b:9a:2c:8f:0e:ed:b3:76:f3:43:94: 30:cb:3e:e5:fa:82:ca:d1:3c:0e:52:ce:b7:66:c8:b3:1e:e5: 39:13:52:5b:74:2d:80:21:92:be:bc:3a:da:d7:b7:e8:7d:69: a2:8d:46:a8:2a:d8:4a:43:90:3f:63:2e:e5:73:55:b4:f7:f6: ac:27:9f:9b:fa:93:58:78:d3:59:af:eb:43:ef:84:1b:5a:e4: 92:ae:17:80:f8:f3:fa:8b:e0:44:89:06:63:44:69:02:93:d4: 50:54:36:d1:6c:dd:b8:57:45:94:fa:02:71:24:0b:e0:3b:14: cc:84:09:1f:c3:0a:db:80:09:33:20:44:a4:f1:2a:0d:63:e4: f0:5f:7c:4e:10:85:bf:77:58:fd:4a:85:26:33:f0:19:75:73: 95:be:4b:4b:ef:43:c7:97:ac:14:16:f2:53:98:f2:87:5c:d1: cf:97:ad:d7:cf:ce:cc:b9:0e:0a:81:56:a1:e3:5b:35:09:23: 84:a9:7e:53:d4:db:74:de:7e:d3:81:6e:a8:c3:74:0d:13:b3: b5:78:ef:55:be:b8:40:3b:00:25:67:e4:d7:03:b8:f4:91:0f: ee:2e:d5:00 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NUdZyejnXy0apMayLNfLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZDc1MzM1Zjc3YmY0MjQwOTc2Mjc3YjFkZDBlMTliYjIz YThlMWQwHhcNMjYwMTAxMjAxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTljNDUwY2MxMjM1NzgxM2E2YzFiMTE4MmI2NzE4ZThjYmJmZWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFWI1iNhd0qs3F2WwiHpJlR2f3/t tazTCRu1hg0Wkw5Zz4G4zUYXOGn09oyM92VEgkSOWeJt+feyxg9Kazfx5TYv7Hzm RRHGkzY4d4gPtwWtrEdbGiN79qc2mlg9ADuLhtJe5tUPXr16w+Lk0pxvu3i1bJ/2 6Zn9uS0HMdWEiXQ/nuIciqmbQVsWdY5ndsJ5nYmUtBDNakBw/3l9SETKaV1UMMjD 8yRiu3tj09cgQvuDZnEJGmdN4HahUj0PCpsiS6yhfzzKxzkX+a6QVz6osMnyDJjZ J9AzDb83XtIJqXWrUjCd3zl3CfE47dzH7cr73jWzeWz2T8JarlcvMooSWwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLGcRQzBI1eBOmwbEYK2cY6Mu/7ZMB8GA1UdIwQY MBaAFAfXUzX3e/QkCXYnex3Q4ZuyOo4dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjlkVE5mZDc5Q1FKZGlkN0hkRGhtN0k2amgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9jZTNmYTctZmM4OC00ZjQ4LWE1Y2Ut YTQ1YmJjYjM0ZGU1LzEvc1p4RkRNRWpWNEU2YkJzUmdyWnhqb3k3X3RrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9jZTNmYTctZmM4OC00ZjQ4LWE1Y2UtYTQ1YmJjYjM0ZGU1 LzEvQjlkVE5mZDc5Q1FKZGlkN0hkRGhtN0k2amgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW2dSMA0G CSqGSIb3DQEBCwUAA4IBAQBIgpaYKVNmGpSX5uFG0kGopNWnVqAA8Z50G5osjw7t s3bzQ5Qwyz7l+oLK0TwOUs63ZsizHuU5E1JbdC2AIZK+vDra17fofWmijUaoKthK Q5A/Yy7lc1W09/asJ5+b+pNYeNNZr+tD74QbWuSSrheA+PP6i+BEiQZjRGkCk9RQ VDbRbN24V0WU+gJxJAvgOxTMhAkfwwrbgAkzIESk8SoNY+TwX3xOEIW/d1j9SoUm M/AZdXOVvktL70PHl6wUFvJTmPKHXNHPl63Xz87MuQ4KgVah41s1CSOEqX5T1Nt0 3n7TgW6ow3QNE7O1eO9VvrhAOwAlZ+TXA7j0kQ/uLtUA -----END CERTIFICATE-----Generated at Fri Jan 2 11:34:20 2026 by rpki-client