This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/RzkStUYUjVQC6LTgMo4mZ3HqeCE.roa File: RzkStUYUjVQC6LTgMo4mZ3HqeCE.roa (raw, json) Hash identifier: wOjCGMxhGea0Q6g7iJZGjMDjFNv2EEhIT9SC/wyAcEg= Subject key identifier: 47:39:12:B5:46:14:8D:54:02:E8:B4:E0:32:8E:26:67:71:EA:78:21 Certificate issuer: /CN=9760fd5864826805cf3655eeeb2fb898f36d9821 Certificate serial: 019B7B365BD3A96DF722037F1BD8C26FA5E3 Authority key identifier: 97:60:FD:58:64:82:68:05:CF:36:55:EE:EB:2F:B8:98:F3:6D:98:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l2D9WGSCaAXPNlXu6y-4mPNtmCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/RzkStUYUjVQC6LTgMo4mZ3HqeCE.roa Signing time: Thu 01 Jan 2026 20:18:38 +0000 ROA not before: Thu 01 Jan 2026 20:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51835 IP address blocks: 91.194.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft rsync://rpki.ripe.net/repository/DEFAULT/l2D9WGSCaAXPNlXu6y-4mPNtmCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:5b:d3:a9:6d:f7:22:03:7f:1b:d8:c2:6f:a5:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9760fd5864826805cf3655eeeb2fb898f36d9821 Validity Not Before: Jan 1 20:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=473912b546148d5402e8b4e0328e266771ea7821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:68:7f:c7:8a:d7:00:72:02:20:30:8c:7a:7e: f4:f9:cd:72:16:1f:f2:ea:a0:0d:4a:fe:ad:88:98: 40:34:c9:05:be:a5:3f:d8:5b:02:1d:77:e1:96:63: 24:c5:3a:51:9b:0d:a0:9c:b7:e4:d5:4b:bf:67:94: 84:67:1a:c3:65:0f:01:df:fe:2d:41:d9:28:73:89: 1e:96:95:82:bd:cd:63:de:67:30:86:cc:87:75:f6: bf:fc:cb:1b:c7:39:ce:ec:3e:4a:53:51:ba:4f:87: 3b:0a:a5:de:28:a5:5e:8e:be:9c:bd:d5:e8:5d:0f: 14:ed:ea:fb:a3:ea:6e:a6:88:55:54:6b:f0:6f:12: 17:c6:08:8f:50:b7:32:cb:41:cf:fe:e0:a1:95:a1: 65:de:6c:66:f5:3a:ad:cd:6e:17:56:4e:64:b9:27: 86:20:5e:2d:58:e3:69:5a:ba:ba:58:b9:42:9b:a3: 9b:5a:44:d2:91:be:ae:e3:b8:dd:28:a6:1b:6c:ed: 66:c3:bc:f9:47:e5:40:97:3f:f5:30:c8:1f:5b:b1: 67:f3:78:60:42:ce:ba:37:3b:bc:a0:59:b3:fa:f2: e0:42:7d:69:b0:a3:a1:d9:e7:ec:b1:51:7c:ee:e4: 0b:9d:41:b1:df:82:f2:c4:d4:f3:51:06:45:50:f6: 43:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:39:12:B5:46:14:8D:54:02:E8:B4:E0:32:8E:26:67:71:EA:78:21 X509v3 Authority Key Identifier: keyid:97:60:FD:58:64:82:68:05:CF:36:55:EE:EB:2F:B8:98:F3:6D:98:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2D9WGSCaAXPNlXu6y-4mPNtmCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/RzkStUYUjVQC6LTgMo4mZ3HqeCE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.194.31.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:28:5c:8b:63:f7:a0:a0:ec:38:0c:f9:44:52:8b:64:96:78: 84:f6:42:d4:01:7b:ac:df:ac:6d:5f:cf:ac:27:11:b5:73:8a: cc:d4:52:22:27:37:4a:f2:d2:96:73:90:e2:02:dc:9d:88:63: a7:15:7f:a7:42:8c:e4:fc:38:e3:df:18:83:7d:e5:c8:52:ef: 6f:1c:bc:d4:5f:90:ea:61:2a:86:9d:f3:98:8f:9a:4d:52:31: ba:b5:18:2b:87:89:fc:c6:54:0c:8e:9b:e4:63:75:63:dd:fb: 08:47:6e:38:62:ee:89:9f:9f:51:4a:1e:26:4b:af:f4:72:f8: 1c:74:1a:b0:96:a4:0e:37:06:cb:83:bb:e8:ac:17:4e:65:3d: 4b:80:d5:12:74:b9:8c:b8:c0:a2:6f:54:cc:4b:9c:97:b7:cc: 63:f3:86:13:77:ca:ca:84:a6:52:44:bf:8a:90:f2:ea:20:49: f6:fd:21:68:9a:23:0f:3f:b4:80:15:ac:79:63:4b:e6:bd:1a: b2:fd:15:cf:2f:e2:47:e9:b0:2b:e6:1a:ea:ac:e9:44:bc:4d: a7:94:c0:ff:1f:a6:27:c3:b0:9d:2e:3f:ca:06:d9:f2:92:64: 4a:6e:e4:88:65:b3:e2:23:ff:6a:1d:25:e0:6b:11:6d:5b:d2: c9:b0:de:a9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NlvTqW33IgN/G9jCb6XjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NjBmZDU4NjQ4MjY4MDVjZjM2NTVlZWViMmZiODk4ZjM2 ZDk4MjEwHhcNMjYwMTAxMjAxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NzM5MTJiNTQ2MTQ4ZDU0MDJlOGI0ZTAzMjhlMjY2NzcxZWE3ODIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWh/x4rXAHICIDCMen70+c1yFh/y 6qANSv6tiJhANMkFvqU/2FsCHXfhlmMkxTpRmw2gnLfk1Uu/Z5SEZxrDZQ8B3/4t Qdkoc4kelpWCvc1j3mcwhsyHdfa//MsbxznO7D5KU1G6T4c7CqXeKKVejr6cvdXo XQ8U7er7o+pupohVVGvwbxIXxgiPULcyy0HP/uChlaFl3mxm9TqtzW4XVk5kuSeG IF4tWONpWrq6WLlCm6ObWkTSkb6u47jdKKYbbO1mw7z5R+VAlz/1MMgfW7Fn83hg Qs66Nzu8oFmz+vLgQn1psKOh2efssVF87uQLnUGx34LyxNTzUQZFUPZDcQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEc5ErVGFI1UAui04DKOJmdx6nghMB8GA1UdIwQY MBaAFJdg/VhkgmgFzzZV7usvuJjzbZghMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDJEOVdHU0NhQVhQTmxYdTZ5LTRtUE50bUNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9hMjljOWEtY2E0ZC00MDAwLThmZjMt ZDlhMTA0NDA0YWFmLzEvUnprU3RVWVVqVlFDNkxUZ01vNG1aM0hxZUNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9hMjljOWEtY2E0ZC00MDAwLThmZjMtZDlhMTA0NDA0YWFm LzEvbDJEOVdHU0NhQVhQTmxYdTZ5LTRtUE50bUNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8IfMA0G CSqGSIb3DQEBCwUAA4IBAQA7KFyLY/egoOw4DPlEUotklniE9kLUAXus36xtX8+s JxG1c4rM1FIiJzdK8tKWc5DiAtydiGOnFX+nQozk/Djj3xiDfeXIUu9vHLzUX5Dq YSqGnfOYj5pNUjG6tRgrh4n8xlQMjpvkY3Vj3fsIR244Yu6Jn59RSh4mS6/0cvgc dBqwlqQONwbLg7vorBdOZT1LgNUSdLmMuMCib1TMS5yXt8xj84YTd8rKhKZSRL+K kPLqIEn2/SFomiMPP7SAFax5Y0vmvRqy/RXPL+JH6bAr5hrqrOlEvE2nlMD/H6Yn w7CdLj/KBtnykmRKbuSIZbPiI/9qHSXgaxFtW9LJsN6p -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:04 2026 by rpki-client