This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/0k8JSiXuI9yOlNc8R8ZC7myFR1s.roa File: 0k8JSiXuI9yOlNc8R8ZC7myFR1s.roa (raw, json) Hash identifier: hkDwNbOr9T8egEZmcAGrpawWPuV3eUejQ8UO6ApjR78= Subject key identifier: D2:4F:09:4A:25:EE:23:DC:8E:94:D7:3C:47:C6:42:EE:6C:85:47:5B Certificate issuer: /CN=cf2c30f34493c452a173e4de0c462c83a711c338 Certificate serial: 019B7CED67E18305F4E70BE17ABC12289FE9 Authority key identifier: CF:2C:30:F3:44:93:C4:52:A1:73:E4:DE:0C:46:2C:83:A7:11:C3:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zyww80STxFKhc-TeDEYsg6cRwzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/0k8JSiXuI9yOlNc8R8ZC7myFR1s.roa Signing time: Fri 02 Jan 2026 04:18:11 +0000 ROA not before: Fri 02 Jan 2026 04:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200966 IP address blocks: 91.215.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.mft rsync://rpki.ripe.net/repository/DEFAULT/zyww80STxFKhc-TeDEYsg6cRwzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:67:e1:83:05:f4:e7:0b:e1:7a:bc:12:28:9f:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf2c30f34493c452a173e4de0c462c83a711c338 Validity Not Before: Jan 2 04:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d24f094a25ee23dc8e94d73c47c642ee6c85475b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:b3:df:5e:6a:70:31:4e:e0:15:32:df:41:cf: ec:f8:61:8c:21:67:9c:be:a8:0d:bb:74:58:da:4e: 39:3c:94:a9:2b:79:fa:56:dd:62:63:a7:17:7b:7d: 97:1d:d2:2f:05:e0:e6:19:57:cf:4c:fa:7c:94:8e: 57:53:ab:7e:67:e8:5f:78:14:7d:b8:8e:45:f1:0b: 9b:24:c5:17:0b:58:1e:84:eb:22:ba:a5:11:c0:28: fa:83:f7:57:e9:6c:f7:1b:1c:ff:1d:37:d6:1b:c4: 61:56:82:de:59:fd:19:a5:06:71:e3:aa:48:88:a5: 1b:f5:0b:47:ae:c9:1a:a2:cd:e6:fa:4d:3d:3e:65: ad:c3:07:98:d0:19:d6:bf:94:42:83:be:3c:3c:a3: 7d:78:6f:f8:73:24:f2:cf:85:c7:44:d4:94:d3:ff: 75:25:d4:04:d3:96:6c:3f:42:01:e5:54:c6:89:ba: 8d:99:ed:ab:bd:11:82:f1:4c:65:bb:1c:93:a7:40: ed:5d:3e:91:50:b0:52:fa:e8:5e:f5:c2:71:c5:a1: 5b:0e:3f:28:cd:06:28:ca:40:7f:d5:df:7b:a6:61: b9:c7:77:06:b1:45:27:67:fe:cf:9a:95:9d:9d:7a: 77:4e:f5:50:46:78:bf:4d:c0:ec:da:ae:6c:2c:6c: 25:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:4F:09:4A:25:EE:23:DC:8E:94:D7:3C:47:C6:42:EE:6C:85:47:5B X509v3 Authority Key Identifier: keyid:CF:2C:30:F3:44:93:C4:52:A1:73:E4:DE:0C:46:2C:83:A7:11:C3:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zyww80STxFKhc-TeDEYsg6cRwzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/0k8JSiXuI9yOlNc8R8ZC7myFR1s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.215.87.0/24 Signature Algorithm: sha256WithRSAEncryption 52:bd:60:f8:c2:a5:51:85:8c:5c:8b:a0:73:1a:b5:53:e2:be: 47:73:c6:8a:8a:ae:39:72:23:92:a2:6d:30:60:45:89:96:70: 63:86:e1:4b:40:18:30:af:0e:1c:0c:d7:b5:d9:5e:fa:49:4d: 3a:50:c6:26:0f:b5:15:91:9d:50:76:5e:37:e2:17:6d:b9:9f: 15:8e:81:0c:11:31:33:23:56:0e:25:9d:74:e0:05:77:c2:bb: f8:39:34:13:c5:30:5d:2e:2f:bd:94:fd:4e:2d:f4:a5:c7:4c: fd:df:c6:ef:10:50:b9:d1:79:96:18:b6:1d:ef:97:f3:39:a6: 56:ba:4a:eb:25:7c:7e:7c:c3:f2:fb:ae:88:12:31:7f:12:e1: f7:a9:02:62:e2:31:ed:b9:b0:e8:ed:66:82:80:a7:14:f8:6c: b5:a9:4b:6f:29:cd:b1:0b:8c:5a:62:f4:d2:20:7c:d4:78:a1: 9c:ea:5f:9a:dd:53:47:f4:11:43:98:a3:a3:ba:76:f3:94:16: 6a:54:5b:7c:c1:4a:bd:53:d7:5d:30:ec:90:fe:82:3e:62:a6: a0:e8:b0:bd:28:62:7a:ab:42:03:8e:56:1d:3c:8b:95:9f:8a: a0:da:eb:6a:56:30:d7:f2:2b:d6:50:a5:54:81:eb:d0:d2:18: 96:0d:03:ca -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87WfhgwX05wvherwSKJ/pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMmMzMGYzNDQ5M2M0NTJhMTczZTRkZTBjNDYyYzgzYTcx MWMzMzgwHhcNMjYwMTAyMDQxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjRmMDk0YTI1ZWUyM2RjOGU5NGQ3M2M0N2M2NDJlZTZjODU0NzViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA97PfXmpwMU7gFTLfQc/s+GGMIWec vqgNu3RY2k45PJSpK3n6Vt1iY6cXe32XHdIvBeDmGVfPTPp8lI5XU6t+Z+hfeBR9 uI5F8QubJMUXC1gehOsiuqURwCj6g/dX6Wz3Gxz/HTfWG8RhVoLeWf0ZpQZx46pI iKUb9QtHrskaos3m+k09PmWtwweY0BnWv5RCg748PKN9eG/4cyTyz4XHRNSU0/91 JdQE05ZsP0IB5VTGibqNme2rvRGC8UxluxyTp0DtXT6RULBS+uhe9cJxxaFbDj8o zQYoykB/1d97pmG5x3cGsUUnZ/7PmpWdnXp3TvVQRni/TcDs2q5sLGwlSQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNJPCUol7iPcjpTXPEfGQu5shUdbMB8GA1UdIwQY MBaAFM8sMPNEk8RSoXPk3gxGLIOnEcM4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenl3dzgwU1R4RktoYy1UZURFWXNnNmNSd3pnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi82ZjY3NTgtYzIzMy00YWMwLTk5YjAt NWE5MjJhNjJjNTcxLzEvMGs4SlNpWHVJOXlPbE5jOFI4WkM3bXlGUjFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi82ZjY3NTgtYzIzMy00YWMwLTk5YjAtNWE5MjJhNjJjNTcx LzEvenl3dzgwU1R4RktoYy1UZURFWXNnNmNSd3pnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9dXMA0G CSqGSIb3DQEBCwUAA4IBAQBSvWD4wqVRhYxci6BzGrVT4r5Hc8aKiq45ciOSom0w YEWJlnBjhuFLQBgwrw4cDNe12V76SU06UMYmD7UVkZ1Qdl434hdtuZ8VjoEMETEz I1YOJZ104AV3wrv4OTQTxTBdLi+9lP1OLfSlx0z938bvEFC50XmWGLYd75fzOaZW ukrrJXx+fMPy+66IEjF/EuH3qQJi4jHtubDo7WaCgKcU+Gy1qUtvKc2xC4xaYvTS IHzUeKGc6l+a3VNH9BFDmKOjunbzlBZqVFt8wUq9U9ddMOyQ/oI+Yqag6LC9KGJ6 q0IDjlYdPIuVn4qg2utqVjDX8ivWUKVUgevQ0hiWDQPK -----END CERTIFICATE-----Generated at Tue Feb 10 00:15:03 2026 by rpki-client