This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/ZWc731yhXtnZwZA4k-893U-Fzys.roa
File: ZWc731yhXtnZwZA4k-893U-Fzys.roa (raw, json)
Hash identifier: RRFLJwA1DLmfU7R9eR3HkSpvYKtbhnQe6Ugjt8gXSbA=
Subject key identifier: 65:67:3B:DF:5C:A1:5E:D9:D9:C1:90:38:93:EF:3D:DD:4F:85:CF:2B
Certificate issuer: /CN=8e6d75b4e4986faccb614b334e45d5e039352a9c
Certificate serial: 019B7BA4CD44E0AAFD3E3908E504EA8F0F5B
Authority key identifier: 8E:6D:75:B4:E4:98:6F:AC:CB:61:4B:33:4E:45:D5:E0:39:35:2A:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jm11tOSYb6zLYUszTkXV4Dk1Kpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/ZWc731yhXtnZwZA4k-893U-Fzys.roa
Signing time: Thu 01 Jan 2026 22:19:16 +0000
ROA not before: Thu 01 Jan 2026 22:19:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20691
IP address blocks: 91.209.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jm11tOSYb6zLYUszTkXV4Dk1Kpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a4:cd:44:e0:aa:fd:3e:39:08:e5:04:ea:8f:0f:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e6d75b4e4986faccb614b334e45d5e039352a9c
Validity
Not Before: Jan 1 22:19:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=65673bdf5ca15ed9d9c1903893ef3ddd4f85cf2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ce:80:f8:ce:01:2a:f9:f3:3c:3a:2b:4f:e9:
4a:ef:9a:99:c3:1d:31:51:71:62:37:aa:49:85:49:
40:05:b0:8b:3d:1b:72:17:e1:c0:97:d4:d1:4d:d3:
27:25:d0:94:3a:e7:d4:70:90:cc:09:20:6e:3b:b1:
79:ef:e5:b7:05:18:85:ce:69:bb:89:2d:48:02:b5:
e1:2a:ad:74:4a:93:fd:9a:8c:81:48:06:fc:cd:d4:
cd:3f:98:b6:3a:9e:75:e3:7a:11:38:82:a0:83:7b:
1f:95:d3:10:f3:2c:04:ad:e7:1e:58:4b:68:fd:44:
61:59:b9:c5:0b:9e:ce:5d:a1:ba:46:6b:71:da:76:
5b:95:b1:bc:88:ab:37:9f:59:9b:42:35:2b:54:18:
70:ac:b3:df:b6:e3:36:4e:d8:6d:bb:e1:7b:35:1c:
2f:1e:eb:34:1f:6b:23:17:cd:0a:28:33:55:c4:82:
21:bd:e1:8f:7a:ca:15:af:40:a5:10:58:c4:70:25:
f2:01:79:1f:71:4a:8d:17:2f:16:15:67:f9:a6:46:
48:ba:f3:65:a4:0c:04:2f:d8:82:69:d4:ff:e6:8f:
1c:e0:94:df:03:be:8e:5a:6b:ec:77:ac:3a:68:a9:
60:0c:a2:03:b1:8a:26:11:2d:1d:05:1a:49:80:59:
fb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:67:3B:DF:5C:A1:5E:D9:D9:C1:90:38:93:EF:3D:DD:4F:85:CF:2B
X509v3 Authority Key Identifier:
keyid:8E:6D:75:B4:E4:98:6F:AC:CB:61:4B:33:4E:45:D5:E0:39:35:2A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jm11tOSYb6zLYUszTkXV4Dk1Kpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/ZWc731yhXtnZwZA4k-893U-Fzys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.188.0/24
Signature Algorithm: sha256WithRSAEncryption
78:9e:4d:7b:84:91:53:5a:a1:b8:2a:07:bd:f3:4c:04:e6:23:
44:7b:eb:33:c2:9d:57:b6:14:a7:ef:2a:f1:df:c4:75:8f:46:
c1:fd:5a:4d:80:45:af:d9:0b:92:22:58:30:ec:cf:4a:7d:e4:
2f:ec:4b:bc:99:52:35:fa:c9:e5:d7:cb:13:27:c5:16:3d:47:
a8:ad:d0:30:6c:d4:18:16:54:cf:1e:94:81:6a:11:63:5e:32:
3d:02:2f:a9:ac:2b:18:05:c6:5e:ac:75:46:5b:c8:35:0a:6d:
ab:30:09:88:ec:74:1c:a1:97:4e:4f:78:4c:92:be:68:6f:38:
28:60:e4:f5:8b:f4:fa:42:dd:54:50:1e:f5:84:4a:a3:59:fd:
45:58:a7:d9:29:5c:9e:c7:db:40:32:d3:65:4e:c4:a7:ac:43:
23:27:0d:59:69:08:56:fa:0a:fe:e2:d6:49:87:29:74:22:f8:
f9:6f:67:93:53:6d:ac:d0:21:07:2f:7c:59:44:cb:9f:43:cb:
2a:2f:25:20:40:58:67:f0:29:44:ef:d4:af:fe:2a:15:ac:87:
67:6b:67:cf:d3:e4:d1:85:62:1d:65:9f:be:ac:08:e8:84:9c:
37:10:65:f4:c9:ce:4f:31:d7:2f:6f:0b:7d:94:8e:cf:11:6a:
ca:e6:0c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:24:12 2026 by rpki-client