This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/zSQVk9Uctt-RfcBSveyCr38CFfA.roa File: zSQVk9Uctt-RfcBSveyCr38CFfA.roa (raw, json) Hash identifier: tRgRAlHE1zW+KtCt3216eqpIBlefLEs1R+bVPcz6sq0= Subject key identifier: CD:24:15:93:D5:1C:B6:DF:91:7D:C0:52:BD:EC:82:AF:7F:02:15:F0 Certificate issuer: /CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7 Certificate serial: 019B7AC8FC658A04069CC2C7BC7539572ED9 Authority key identifier: 54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/zSQVk9Uctt-RfcBSveyCr38CFfA.roa Signing time: Thu 01 Jan 2026 18:19:10 +0000 ROA not before: Thu 01 Jan 2026 18:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50053 IP address blocks: 91.204.74.0/24 maxlen: 24 91.204.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:fc:65:8a:04:06:9c:c2:c7:bc:75:39:57:2e:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7 Validity Not Before: Jan 1 18:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd241593d51cb6df917dc052bdec82af7f0215f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e0:8f:0c:ab:3f:b1:36:6c:a2:4d:c3:48:79: e9:87:9a:83:6c:d3:de:03:73:58:9d:da:fa:51:f2: 7d:4a:0a:3e:12:7e:f4:09:ab:d7:e1:86:87:cf:3b: 3d:e4:a2:3f:50:8c:f7:cb:86:bf:e6:4f:01:a7:5b: 1e:c1:68:da:2c:76:19:4d:7c:73:ad:5f:48:ac:51: 64:9e:c2:2e:72:48:18:48:da:ec:94:4e:68:5b:f6: ce:52:9c:a9:71:43:1c:9e:66:41:54:ac:18:86:6f: 9f:7b:1c:8b:4a:36:6d:be:18:d5:ce:97:21:23:30: 46:50:cf:03:a5:ce:6b:d5:56:cf:da:61:c0:8b:fb: 41:20:be:fc:e8:ee:92:63:e9:26:de:3e:41:87:8d: 2e:63:1e:8e:91:e0:8e:57:79:13:11:18:01:6b:f7: df:65:f1:1a:d7:1d:a4:23:7d:44:1c:60:02:c4:13: 4e:16:31:e7:17:81:b8:54:6e:5c:11:2a:fc:37:08: 6b:18:d2:2e:56:e8:51:fa:10:cf:93:1f:9e:d8:7c: b6:21:ea:90:e3:e5:02:f6:b5:a4:a0:dc:0f:32:ff: 74:4e:a6:27:e7:45:37:99:c3:ae:ff:22:9e:28:97: 52:ef:81:e9:2f:ea:e9:83:cc:be:9b:d3:54:00:1f: c1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:24:15:93:D5:1C:B6:DF:91:7D:C0:52:BD:EC:82:AF:7F:02:15:F0 X509v3 Authority Key Identifier: keyid:54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/zSQVk9Uctt-RfcBSveyCr38CFfA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.204.74.0/23 Signature Algorithm: sha256WithRSAEncryption 61:ce:09:19:21:0d:35:38:d8:f7:1e:69:b7:35:22:8b:17:96: 6e:4b:5d:19:a6:0a:00:3b:a2:3e:9b:a4:33:dd:71:c2:70:1c: 12:a1:71:77:b9:13:97:de:d6:01:85:17:e9:d5:34:2b:6e:d2: 6b:98:a1:9b:9f:d6:be:49:9d:36:1e:08:9f:53:b9:8a:b2:c8: a5:0c:c3:41:04:f7:fd:4f:57:4c:ab:d6:eb:a5:18:0f:3d:f0: fe:b6:84:6f:59:eb:ec:54:ff:92:98:e0:f7:87:80:c1:ca:10: 85:a1:6f:b2:3e:fa:4a:cf:cb:bd:a4:b5:dd:a5:dd:f6:93:6b: fa:9a:65:e6:b0:b6:e9:c0:72:11:9f:a8:0a:b5:ad:d1:55:90: 09:9d:b4:77:1d:96:81:65:20:6f:26:19:f7:21:64:1d:e4:16: 3a:19:6d:1b:09:97:46:f8:b4:1f:9f:24:33:4e:3b:bd:d4:cb: 53:66:1e:d5:55:25:da:5d:9a:ff:9c:8b:81:58:e7:01:fd:99: 8f:c9:93:14:ff:78:8e:b5:30:9c:40:4c:77:16:05:04:0b:43: 8a:0c:ce:b5:68:00:81:c2:6e:cb:42:d2:47:a2:f1:dc:b2:df: a9:b8:ea:aa:cd:82:49:62:b1:05:86:ad:eb:7d:3c:dd:67:be: f0:e4:92:6d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yPxligQGnMLHvHU5Vy7ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0M2M1YzM0YTYyZmZiZWQ4ZmMwZjBlYzAxYjQyYzBjNTBl ZTdlZjcwHhcNMjYwMTAxMTgxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDI0MTU5M2Q1MWNiNmRmOTE3ZGMwNTJiZGVjODJhZjdmMDIxNWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOCPDKs/sTZsok3DSHnph5qDbNPe A3NYndr6UfJ9Sgo+En70CavX4YaHzzs95KI/UIz3y4a/5k8Bp1sewWjaLHYZTXxz rV9IrFFknsIuckgYSNrslE5oW/bOUpypcUMcnmZBVKwYhm+fexyLSjZtvhjVzpch IzBGUM8Dpc5r1VbP2mHAi/tBIL786O6SY+km3j5Bh40uYx6OkeCOV3kTERgBa/ff ZfEa1x2kI31EHGACxBNOFjHnF4G4VG5cESr8NwhrGNIuVuhR+hDPkx+e2Hy2IeqQ 4+UC9rWkoNwPMv90TqYn50U3mcOu/yKeKJdS74HpL+rpg8y+m9NUAB/BPwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM0kFZPVHLbfkX3AUr3sgq9/AhXwMB8GA1UdIwQY MBaAFFQ8XDSmL/vtj8Dw7AG0LAxQ7n73MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkR4Y05LWXYtLTJQd1BEc0FiUXNERkR1ZnZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS8xNmUwMjItNGRhOC00Njg0LTg1ZTYt ZjRmMWY5M2UwNDY3LzEvelNRVms5VWN0dC1SZmNCU3ZleUNyMzhDRmZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS8xNmUwMjItNGRhOC00Njg0LTg1ZTYtZjRmMWY5M2UwNDY3 LzEvVkR4Y05LWXYtLTJQd1BEc0FiUXNERkR1ZnZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW8xKMA0G CSqGSIb3DQEBCwUAA4IBAQBhzgkZIQ01ONj3Hmm3NSKLF5ZuS10ZpgoAO6I+m6Qz 3XHCcBwSoXF3uROX3tYBhRfp1TQrbtJrmKGbn9a+SZ02HgifU7mKssilDMNBBPf9 T1dMq9brpRgPPfD+toRvWevsVP+SmOD3h4DByhCFoW+yPvpKz8u9pLXdpd32k2v6 mmXmsLbpwHIRn6gKta3RVZAJnbR3HZaBZSBvJhn3IWQd5BY6GW0bCZdG+LQfnyQz Tju91MtTZh7VVSXaXZr/nIuBWOcB/ZmPyZMU/3iOtTCcQEx3FgUEC0OKDM61aACB wm7LQtJHovHcst+puOqqzYJJYrEFhq3rfTzdZ77w5JJt -----END CERTIFICATE-----Generated at Thu Jan 1 21:34:41 2026 by rpki-client