This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/33aa24-35ea-4adc-8c05-5a34e52b0b10/1/ZVHQNn8NDHrKDlrXSjskIERGk-w.roa File: ZVHQNn8NDHrKDlrXSjskIERGk-w.roa (raw, json) Hash identifier: GPFXQQAYnCScqN6Tj+UkAGSIUrlH/xEf/by5WbPkz1Q= Subject key identifier: 65:51:D0:36:7F:0D:0C:7A:CA:0E:5A:D7:4A:3B:24:20:44:46:93:EC Certificate issuer: /CN=d871998aa140ab7c1ff240eab0c9235913c96e8a Certificate serial: 019B7759262D92B6DC20433B5F0862382F06 Authority key identifier: D8:71:99:8A:A1:40:AB:7C:1F:F2:40:EA:B0:C9:23:59:13:C9:6E:8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2HGZiqFAq3wf8kDqsMkjWRPJboo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/33aa24-35ea-4adc-8c05-5a34e52b0b10/1/ZVHQNn8NDHrKDlrXSjskIERGk-w.roa Signing time: Thu 01 Jan 2026 02:18:09 +0000 ROA not before: Thu 01 Jan 2026 02:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49639 IP address blocks: 91.213.61.0/24 maxlen: 24 2001:67c:52c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/33aa24-35ea-4adc-8c05-5a34e52b0b10/1/2HGZiqFAq3wf8kDqsMkjWRPJboo.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/33aa24-35ea-4adc-8c05-5a34e52b0b10/1/2HGZiqFAq3wf8kDqsMkjWRPJboo.mft rsync://rpki.ripe.net/repository/DEFAULT/2HGZiqFAq3wf8kDqsMkjWRPJboo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:26:2d:92:b6:dc:20:43:3b:5f:08:62:38:2f:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d871998aa140ab7c1ff240eab0c9235913c96e8a Validity Not Before: Jan 1 02:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6551d0367f0d0c7aca0e5ad74a3b2420444693ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a4:d5:8a:94:f8:89:d2:ca:6a:9f:74:a0:67: 84:49:a6:16:11:74:df:ba:d7:99:16:2f:c7:2f:89: 53:fd:95:e1:d5:74:95:75:cb:e6:a2:12:40:16:22: da:97:7c:ef:95:03:85:60:b4:88:75:a4:32:d6:cf: cf:ea:cf:98:6b:dd:15:77:00:b8:8d:9f:f4:44:ac: b6:8b:0b:05:08:1c:c4:04:ef:f7:9f:13:dc:94:37: 5e:04:e1:94:b5:5f:a0:a2:2f:41:a0:1b:d6:45:cd: 03:28:87:02:29:c0:12:6e:0a:8c:1f:03:50:1d:10: 5d:0f:9d:55:a8:0a:66:e2:1d:a9:36:0a:af:49:e2: 8d:6f:f3:b2:7c:ff:45:13:51:59:5a:41:d1:8e:64: 0f:46:18:bd:76:b1:e3:a5:b6:38:9e:c7:0d:41:9d: e4:d9:0f:8f:a6:d6:bd:87:d9:71:01:f0:67:98:d8: 24:0d:6c:a4:7c:c4:cd:bc:ee:44:b5:26:71:48:2d: 97:7c:a4:64:eb:7d:2a:6a:de:9a:e2:0d:b2:2e:61: 1f:09:25:6f:88:1c:bd:b6:7f:ff:e2:c6:d6:5b:49: 31:57:15:10:77:3d:ed:c8:b1:17:9f:a1:8e:80:88: 44:87:57:7c:08:bd:5e:a4:03:30:64:04:4f:dc:0d: ee:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:51:D0:36:7F:0D:0C:7A:CA:0E:5A:D7:4A:3B:24:20:44:46:93:EC X509v3 Authority Key Identifier: keyid:D8:71:99:8A:A1:40:AB:7C:1F:F2:40:EA:B0:C9:23:59:13:C9:6E:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2HGZiqFAq3wf8kDqsMkjWRPJboo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/33aa24-35ea-4adc-8c05-5a34e52b0b10/1/ZVHQNn8NDHrKDlrXSjskIERGk-w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/33aa24-35ea-4adc-8c05-5a34e52b0b10/1/2HGZiqFAq3wf8kDqsMkjWRPJboo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.213.61.0/24 IPv6: 2001:67c:52c::/48 Signature Algorithm: sha256WithRSAEncryption 82:1f:12:6f:95:65:64:49:d1:4c:98:13:54:9e:6b:a2:6c:ca: be:68:1d:d9:09:8c:60:c9:28:82:62:34:28:2a:1f:e7:aa:e1: a0:12:53:01:e4:cb:e6:84:44:14:f3:bc:e5:4d:69:48:d7:63: d3:1c:e8:ed:11:b0:d4:af:0b:59:09:9f:51:b3:02:78:c8:d7: c9:b8:9e:90:91:e1:4b:d4:a3:be:46:2d:39:29:9d:1d:e0:37: 45:08:18:ee:92:0a:79:5f:b2:ed:86:94:7a:5b:66:87:8e:c1: 25:f3:9c:e4:0d:c4:c6:99:9f:29:e7:42:a8:82:60:1e:ed:40: 14:50:33:fa:2c:b4:84:a6:65:8f:f3:6c:f1:28:d2:14:96:1b: b1:c7:92:2d:43:24:b3:69:f3:b7:80:d8:30:f9:1a:30:76:a0: 40:90:74:bc:56:4e:4f:b8:1d:a1:aa:e8:ae:80:25:29:8f:d2: 10:e4:88:f1:47:ae:5e:e9:93:7d:38:51:59:25:65:13:e1:a6: b8:32:56:85:fc:61:d5:1c:ff:42:32:b9:6f:f5:2d:f5:65:b6: 09:79:7a:4b:7c:52:b7:ab:a2:68:96:f7:28:ba:b5:a9:7e:14: 7d:19:b6:b6:13:dd:bb:8b:e2:ba:7e:63:ed:85:45:4f:ca:83: 98:ab:70:b0 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt3WSYtkrbcIEM7XwhiOC8GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4NzE5OThhYTE0MGFiN2MxZmYyNDBlYWIwYzkyMzU5MTNj OTZlOGEwHhcNMjYwMTAxMDIxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTUxZDAzNjdmMGQwYzdhY2EwZTVhZDc0YTNiMjQyMDQ0NDY5M2VjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaTVipT4idLKap90oGeESaYWEXTf uteZFi/HL4lT/ZXh1XSVdcvmohJAFiLal3zvlQOFYLSIdaQy1s/P6s+Ya90VdwC4 jZ/0RKy2iwsFCBzEBO/3nxPclDdeBOGUtV+goi9BoBvWRc0DKIcCKcASbgqMHwNQ HRBdD51VqApm4h2pNgqvSeKNb/OyfP9FE1FZWkHRjmQPRhi9drHjpbY4nscNQZ3k 2Q+Ppta9h9lxAfBnmNgkDWykfMTNvO5EtSZxSC2XfKRk630qat6a4g2yLmEfCSVv iBy9tn//4sbWW0kxVxUQdz3tyLEXn6GOgIhEh1d8CL1epAMwZARP3A3u0wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFGVR0DZ/DQx6yg5a10o7JCBERpPsMB8GA1UdIwQY MBaAFNhxmYqhQKt8H/JA6rDJI1kTyW6KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkhHWmlxRkFxM3dmOGtEcXNNa2pXUlBKYm9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8zM2FhMjQtMzVlYS00YWRjLThjMDUt NWEzNGU1MmIwYjEwLzEvWlZIUU5uOE5ESHJLRGxyWFNqc2tJRVJHay13LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi8zM2FhMjQtMzVlYS00YWRjLThjMDUtNWEzNGU1MmIwYjEw LzEvMkhHWmlxRkFxM3dmOGtEcXNNa2pXUlBKYm9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW9U9MA8E AgACMAkDBwAgAQZ8BSwwDQYJKoZIhvcNAQELBQADggEBAIIfEm+VZWRJ0UyYE1Se a6Jsyr5oHdkJjGDJKIJiNCgqH+eq4aASUwHky+aERBTzvOVNaUjXY9Mc6O0RsNSv C1kJn1GzAnjI18m4npCR4UvUo75GLTkpnR3gN0UIGO6SCnlfsu2GlHpbZoeOwSXz nOQNxMaZnynnQqiCYB7tQBRQM/ostISmZY/zbPEo0hSWG7HHki1DJLNp87eA2DD5 GjB2oECQdLxWTk+4HaGq6K6AJSmP0hDkiPFHrl7pk304UVklZRPhprgyVoX8YdUc /0IyuW/1LfVltgl5ekt8UreromiW9yi6tal+FH0ZtrYT3buL4rp+Y+2FRU/Kg5ir cLA= -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:51 2026 by rpki-client