This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/Zn4NXMzR7VLtqK7XqBh-tq7jgUI.roa File: Zn4NXMzR7VLtqK7XqBh-tq7jgUI.roa (raw, json) Hash identifier: 3izC3/OYAiljeSsZynRDCUD3K7xrbO6bhr3QoS3ybSs= Subject key identifier: 66:7E:0D:5C:CC:D1:ED:52:ED:A8:AE:D7:A8:18:7E:B6:AE:E3:81:42 Certificate issuer: /CN=110e56177308c20c42fbf42f310f4c0ef6b27890 Certificate serial: 019B7CEDFBF770017B98A8FE154752790D41 Authority key identifier: 11:0E:56:17:73:08:C2:0C:42:FB:F4:2F:31:0F:4C:0E:F6:B2:78:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/Zn4NXMzR7VLtqK7XqBh-tq7jgUI.roa Signing time: Fri 02 Jan 2026 04:18:49 +0000 ROA not before: Fri 02 Jan 2026 04:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 36351 IP address blocks: 91.206.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:fb:f7:70:01:7b:98:a8:fe:15:47:52:79:0d:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=110e56177308c20c42fbf42f310f4c0ef6b27890 Validity Not Before: Jan 2 04:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=667e0d5cccd1ed52eda8aed7a8187eb6aee38142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:99:af:52:77:22:07:64:29:b3:ff:05:ac:37: e2:28:5f:0e:f3:ed:3d:b5:70:9e:15:99:70:75:98: fc:ec:36:fb:8d:8c:60:29:47:86:d1:bd:ad:57:3b: c9:be:29:27:16:2a:f9:10:6f:eb:1b:86:e1:55:28: a5:55:0e:38:62:4b:e4:36:2c:21:f8:44:46:2c:c7: f5:b9:e1:30:e2:90:0d:b7:63:c9:aa:1c:84:92:49: 17:70:84:22:02:05:b3:3f:63:09:f6:56:a4:f9:20: 0d:ef:6c:df:3c:4b:0b:73:57:12:18:5d:e3:62:ae: 6e:04:68:b2:b6:d9:15:44:8a:e8:be:0e:0f:24:9e: f4:79:4e:01:59:39:81:e8:78:d1:8e:42:86:e3:ac: 84:e7:de:d9:63:87:71:8c:2b:f2:b3:6f:2f:c4:10: 34:37:01:47:69:a5:bc:ed:00:be:ea:35:30:8c:d2: d8:ab:21:31:3c:08:a2:71:38:97:8f:db:a5:f1:6c: 64:d5:42:96:6f:0b:57:fd:25:b5:ef:84:bc:b5:ab: 92:aa:d1:f9:d7:df:c2:de:71:a2:de:ff:9a:1e:42: c9:e4:4a:14:c2:f0:61:79:69:17:4c:37:2c:c5:4a: 36:94:2f:a6:b7:99:ad:cd:33:1f:a3:f5:90:80:ec: 76:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:7E:0D:5C:CC:D1:ED:52:ED:A8:AE:D7:A8:18:7E:B6:AE:E3:81:42 X509v3 Authority Key Identifier: keyid:11:0E:56:17:73:08:C2:0C:42:FB:F4:2F:31:0F:4C:0E:F6:B2:78:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/Zn4NXMzR7VLtqK7XqBh-tq7jgUI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.206.64.0/24 Signature Algorithm: sha256WithRSAEncryption 15:97:2e:db:10:6d:b4:a2:04:57:2c:de:90:b4:ac:5d:e7:6d: fd:2c:0d:fc:b9:4b:c2:a1:23:6b:00:4e:d8:3c:4a:bd:e1:de: fd:c1:05:43:df:5e:58:eb:54:99:01:b2:06:24:18:7b:e0:78: a2:b4:1c:5b:f6:3a:d9:39:b2:d5:7e:8c:b6:3b:b9:41:44:c9: 50:4f:88:7b:4e:08:af:bf:a9:ef:ab:11:af:b2:df:9e:fb:ca: a0:56:d1:43:52:e1:8a:6a:ec:f2:9c:9d:b1:54:bd:e8:25:7b: 79:55:83:79:fb:48:2a:9f:84:bd:e0:96:13:8e:30:d7:27:53: 6d:26:12:20:51:ef:e8:79:ce:b8:d9:75:e7:fc:66:0b:b0:51: da:1b:cb:b6:65:09:66:dc:52:6d:97:77:d1:bb:89:e3:de:4f: 67:01:6b:08:2b:cd:86:13:8d:97:b8:37:62:0e:13:ad:84:ad: e0:c3:b2:36:a0:77:08:73:7d:f3:93:ea:52:44:a7:e5:10:01: d3:a6:33:ee:eb:9c:de:6e:7d:37:78:2d:4c:f8:22:70:af:3f: 0a:7b:50:0a:2d:ae:a7:ad:36:1c:e4:9e:7f:e5:77:b0:80:ed: 15:1e:c0:67:36:03:46:05:af:e2:85:e9:37:ae:ed:97:2a:8d: 28:10:26:b5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87fv3cAF7mKj+FUdSeQ1BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMGU1NjE3NzMwOGMyMGM0MmZiZjQyZjMxMGY0YzBlZjZi Mjc4OTAwHhcNMjYwMTAyMDQxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjdlMGQ1Y2NjZDFlZDUyZWRhOGFlZDdhODE4N2ViNmFlZTM4MTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZmvUnciB2Qps/8FrDfiKF8O8+09 tXCeFZlwdZj87Db7jYxgKUeG0b2tVzvJviknFir5EG/rG4bhVSilVQ44YkvkNiwh +ERGLMf1ueEw4pANt2PJqhyEkkkXcIQiAgWzP2MJ9lak+SAN72zfPEsLc1cSGF3j Yq5uBGiyttkVRIrovg4PJJ70eU4BWTmB6HjRjkKG46yE597ZY4dxjCvys28vxBA0 NwFHaaW87QC+6jUwjNLYqyExPAiicTiXj9ul8Wxk1UKWbwtX/SW174S8tauSqtH5 19/C3nGi3v+aHkLJ5EoUwvBheWkXTDcsxUo2lC+mt5mtzTMfo/WQgOx2awIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGZ+DVzM0e1S7aiu16gYfrau44FCMB8GA1UdIwQY MBaAFBEOVhdzCMIMQvv0LzEPTA72sniQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVE1V0YzTUl3Z3hDLV9Rdk1ROU1EdmF5ZUpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8wZTU3MTEtMmZkNC00MGNhLTkxMzYt NmY0ZTY1ODViNTRiLzEvWm40TlhNelI3Vkx0cUs3WHFCaC10cTdqZ1VJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi8wZTU3MTEtMmZkNC00MGNhLTkxMzYtNmY0ZTY1ODViNTRi LzEvRVE1V0YzTUl3Z3hDLV9Rdk1ROU1EdmF5ZUpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW85AMA0G CSqGSIb3DQEBCwUAA4IBAQAVly7bEG20ogRXLN6QtKxd5239LA38uUvCoSNrAE7Y PEq94d79wQVD315Y61SZAbIGJBh74HiitBxb9jrZObLVfoy2O7lBRMlQT4h7Tgiv v6nvqxGvst+e+8qgVtFDUuGKauzynJ2xVL3oJXt5VYN5+0gqn4S94JYTjjDXJ1Nt JhIgUe/oec642XXn/GYLsFHaG8u2ZQlm3FJtl3fRu4nj3k9nAWsIK82GE42XuDdi DhOthK3gw7I2oHcIc33zk+pSRKflEAHTpjPu65zebn03eC1M+CJwrz8Ke1AKLa6n rTYc5J5/5XewgO0VHsBnNgNGBa/ihek3ru2XKo0oECa1 -----END CERTIFICATE-----Generated at Fri Jan 2 16:24:20 2026 by rpki-client