This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/zrD7NApr-CKiSl_IAZoSygFQjv4.roa
File: zrD7NApr-CKiSl_IAZoSygFQjv4.roa (raw, json)
Hash identifier: sXutfsW657aDzmpSR3D6+VEVCtONP341YHRcNDoHTYs=
Subject key identifier: CE:B0:FB:34:0A:6B:F8:22:A2:4A:5F:C8:01:9A:12:CA:01:50:8E:FE
Certificate issuer: /CN=b7c558c42c43ad59406ea446c9eefed42a491eec
Certificate serial: 019B79ECAA7E22193F080916A2F0100CCBFF
Authority key identifier: B7:C5:58:C4:2C:43:AD:59:40:6E:A4:46:C9:EE:FE:D4:2A:49:1E:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8VYxCxDrVlAbqRGye7-1CpJHuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/zrD7NApr-CKiSl_IAZoSygFQjv4.roa
Signing time: Thu 01 Jan 2026 14:18:31 +0000
ROA not before: Thu 01 Jan 2026 14:18:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43464
IP address blocks: 91.195.4.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/t8VYxCxDrVlAbqRGye7-1CpJHuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/t8VYxCxDrVlAbqRGye7-1CpJHuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/t8VYxCxDrVlAbqRGye7-1CpJHuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ec:aa:7e:22:19:3f:08:09:16:a2:f0:10:0c:cb:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7c558c42c43ad59406ea446c9eefed42a491eec
Validity
Not Before: Jan 1 14:18:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ceb0fb340a6bf822a24a5fc8019a12ca01508efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a0:13:37:94:a6:fb:aa:a1:17:6a:d8:51:cd:
31:6e:fb:3e:e8:9d:4c:a8:74:01:4e:32:7e:55:92:
c8:8b:c6:46:09:85:ba:fb:40:a3:81:98:c6:75:f2:
d8:c8:53:5d:41:d1:e8:18:ca:67:a6:e1:f9:a2:8f:
75:55:a2:e8:a1:8f:7a:2c:60:2a:82:c4:28:95:3b:
c6:ec:7a:09:86:8b:c4:e7:e8:e0:7c:3c:5c:5c:95:
77:10:1f:27:31:53:4c:b8:ef:67:2a:5b:33:67:1f:
ef:5e:c1:45:36:d5:53:99:0a:9c:54:f9:0e:0f:72:
5a:51:2b:55:82:33:06:9b:7b:c7:6b:2d:4f:c2:bc:
45:a5:a7:c7:14:b2:9b:74:23:0f:0b:8f:f2:12:a5:
09:0f:42:25:cb:b2:a0:d4:c5:d0:41:d7:55:68:0c:
48:22:41:78:07:f6:90:20:11:9f:d1:d4:71:37:7b:
3d:71:44:21:6e:81:93:90:14:a4:07:13:e0:17:22:
db:58:db:73:d8:09:6f:5e:b3:b9:99:85:1a:77:dd:
c4:fb:9c:e7:6d:dc:86:33:83:50:02:71:20:60:e2:
10:2e:18:64:82:a1:ba:af:df:e0:18:59:86:c4:b4:
56:ee:ef:eb:f3:4c:cd:a0:9e:b8:9e:e1:a5:70:78:
57:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B0:FB:34:0A:6B:F8:22:A2:4A:5F:C8:01:9A:12:CA:01:50:8E:FE
X509v3 Authority Key Identifier:
keyid:B7:C5:58:C4:2C:43:AD:59:40:6E:A4:46:C9:EE:FE:D4:2A:49:1E:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8VYxCxDrVlAbqRGye7-1CpJHuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/zrD7NApr-CKiSl_IAZoSygFQjv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/t8VYxCxDrVlAbqRGye7-1CpJHuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.4.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:f8:7e:50:18:0a:26:4b:c3:d0:8d:72:e0:d9:b0:13:26:15:
4d:4e:4c:cb:c6:b8:c8:36:66:63:52:2d:13:e0:1f:4e:36:78:
57:04:ab:67:34:91:cd:c6:ac:b5:42:b8:79:47:83:46:d2:49:
4b:7b:b1:92:8e:d2:76:1b:39:97:ff:f7:21:8d:b5:27:e9:c3:
1a:71:8d:81:62:ae:b8:19:91:71:f3:d0:46:2b:44:17:8f:a4:
73:bc:c8:7b:18:25:8c:da:45:f5:92:a0:22:2f:e5:53:b1:19:
d9:9d:ee:d4:b5:50:0b:c6:38:1a:d3:cc:db:f2:93:72:68:b0:
d4:5d:7b:2c:5d:bc:62:94:e8:b6:97:7d:0e:a4:8e:20:36:7d:
ce:5a:56:21:53:aa:11:f0:24:16:4c:43:d4:57:ba:fa:28:11:
62:0a:55:22:d0:e1:77:67:19:c3:73:26:0f:c2:bb:2e:d9:aa:
a4:e6:71:3e:54:64:11:7d:46:5d:98:57:2c:3c:3d:24:bf:d7:
7d:0a:6f:60:43:ae:e4:25:14:e6:9b:bf:5c:b1:b7:9c:a3:2f:
46:10:27:2a:24:77:98:8c:8b:bf:60:5f:ec:56:b0:05:87:63:
be:e4:9f:06:7a:94:3a:91:61:55:d4:80:e0:59:d6:58:64:27:
3f:94:b3:9b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt57Kp+Ihk/CAkWovAQDMv/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3YzU1OGM0MmM0M2FkNTk0MDZlYTQ0NmM5ZWVmZWQ0MmE0
OTFlZWMwHhcNMjYwMTAxMTQxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZWIwZmIzNDBhNmJmODIyYTI0YTVmYzgwMTlhMTJjYTAxNTA4ZWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgaATN5Sm+6qhF2rYUc0xbvs+6J1M
qHQBTjJ+VZLIi8ZGCYW6+0CjgZjGdfLYyFNdQdHoGMpnpuH5oo91VaLooY96LGAq
gsQolTvG7HoJhovE5+jgfDxcXJV3EB8nMVNMuO9nKlszZx/vXsFFNtVTmQqcVPkO
D3JaUStVgjMGm3vHay1PwrxFpafHFLKbdCMPC4/yEqUJD0Ily7Kg1MXQQddVaAxI
IkF4B/aQIBGf0dRxN3s9cUQhboGTkBSkBxPgFyLbWNtz2AlvXrO5mYUad93E+5zn
bdyGM4NQAnEgYOIQLhhkgqG6r9/gGFmGxLRW7u/r80zNoJ64nuGlcHhXNwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM6w+zQKa/giokpfyAGaEsoBUI7+MB8GA1UdIwQY
MBaAFLfFWMQsQ61ZQG6kRsnu/tQqSR7sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDhWWXhDeERyVmxBYnFSR3llNy0xQ3BKSHV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi83MTg5N2UtNWY2Zi00NDlkLWI4MmMt
YTI1ZWY0NDIwYTJhLzEvenJEN05BcHItQ0tpU2xfSUFab1N5Z0ZRanY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi83MTg5N2UtNWY2Zi00NDlkLWI4MmMtYTI1ZWY0NDIwYTJh
LzEvdDhWWXhDeERyVmxBYnFSR3llNy0xQ3BKSHV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW8MEMA0G
CSqGSIb3DQEBCwUAA4IBAQBK+H5QGAomS8PQjXLg2bATJhVNTkzLxrjINmZjUi0T
4B9ONnhXBKtnNJHNxqy1Qrh5R4NG0klLe7GSjtJ2GzmX//chjbUn6cMacY2BYq64
GZFx89BGK0QXj6RzvMh7GCWM2kX1kqAiL+VTsRnZne7UtVALxjga08zb8pNyaLDU
XXssXbxilOi2l30OpI4gNn3OWlYhU6oR8CQWTEPUV7r6KBFiClUi0OF3ZxnDcyYP
wrsu2aqk5nE+VGQRfUZdmFcsPD0kv9d9Cm9gQ67kJRTmm79csbecoy9GECcqJHeY
jIu/YF/sVrAFh2O+5J8GepQ6kWFV1IDgWdZYZCc/lLOb
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:09:09 2026 by rpki-client