This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/z3gn7O2ArUfbRH7IibkSmLe4aaQ.roa File: z3gn7O2ArUfbRH7IibkSmLe4aaQ.roa (raw, json) Hash identifier: OBFHoWbMgkm2Gitpb2oBEMkW3r4uU6S8dgFs2hCVQO4= Subject key identifier: CF:78:27:EC:ED:80:AD:47:DB:44:7E:C8:89:B9:12:98:B7:B8:69:A4 Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Certificate serial: 019B7D5CCB4EB268A7723A9710F26C49CCB2 Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/z3gn7O2ArUfbRH7IibkSmLe4aaQ.roa Signing time: Fri 02 Jan 2026 06:19:51 +0000 ROA not before: Fri 02 Jan 2026 06:19:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49444 IP address blocks: 91.92.244.0/24 maxlen: 24 91.92.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:cb:4e:b2:68:a7:72:3a:97:10:f2:6c:49:cc:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Validity Not Before: Jan 2 06:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf7827eced80ad47db447ec889b91298b7b869a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:59:a6:eb:5a:a6:1e:1d:7d:63:2c:17:23:bb: 53:d8:89:e1:73:c8:43:46:cd:7c:df:14:f7:de:16: ff:e0:27:ba:99:70:f7:c9:ff:5b:90:5a:97:6a:5f: 1c:f4:42:b0:4a:94:c2:3a:83:4d:12:bc:f0:9a:7e: c5:4e:c7:a2:fe:15:60:5d:b9:dd:da:08:20:23:40: 2f:2a:2d:ca:2e:10:1f:03:7d:a3:6b:3d:ea:c2:cd: 20:cc:4d:b6:e0:fa:59:1e:3c:40:21:ff:11:b9:cf: d4:a5:84:f1:b9:23:88:df:72:3a:59:78:08:97:89: a1:2a:03:cc:c9:0b:b6:56:6f:3f:ee:63:e6:a9:d7: 90:ef:1d:e7:a0:3f:a7:20:40:e4:f2:98:a3:ff:b9: f0:a6:68:fb:25:86:9b:8c:d7:d5:09:21:75:2e:ea: b6:b5:ca:3a:ac:c5:3f:e0:db:7e:ab:ad:ef:31:18: 42:ae:d2:46:c8:40:1f:b5:ba:37:2d:02:4e:2d:15: 93:b2:73:81:02:05:77:85:a2:89:1f:d5:48:6d:75: 0a:94:e0:f2:c9:a6:4e:ae:90:f4:e8:2f:e6:76:30: bd:8f:14:27:d5:46:df:3f:6f:43:ac:25:b2:f2:db: b5:b5:0d:23:f2:00:bd:f0:ad:7d:8e:9e:84:6d:94: 76:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:78:27:EC:ED:80:AD:47:DB:44:7E:C8:89:B9:12:98:B7:B8:69:A4 X509v3 Authority Key Identifier: keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/z3gn7O2ArUfbRH7IibkSmLe4aaQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.92.244.0/23 Signature Algorithm: sha256WithRSAEncryption 90:5a:09:48:d6:6c:0d:25:8c:78:fe:12:94:ea:91:88:12:8b: 05:6d:ec:43:3a:d3:c2:d5:c0:a4:f7:b8:dc:48:9d:8b:1e:7f: a1:7a:69:d5:de:a3:e7:0e:66:77:65:d8:6e:af:99:98:3b:c3: 12:85:52:a7:09:07:15:57:68:13:08:5d:18:56:92:de:c0:df: fa:d0:d1:a7:2b:70:14:04:20:83:65:dd:59:ae:10:be:70:e2: fb:5a:30:65:be:53:63:7e:7b:78:b6:83:58:01:3c:bd:31:85: 29:2f:21:eb:4a:b3:74:c4:80:09:ea:af:06:b4:a7:8b:8c:f0: 64:31:98:ee:53:a7:c8:09:84:02:2e:3b:b6:2d:44:75:62:10: 73:94:d9:0c:61:ea:7a:42:2d:2c:90:29:c1:78:5d:fa:2a:e9: e8:89:70:d8:cb:cf:f2:dd:1c:58:f8:65:3b:c7:60:f8:2c:35: f3:50:27:c0:80:34:cb:14:1c:38:39:b6:62:6d:04:7b:1d:3d: f4:ec:d8:7e:0e:36:4f:85:55:7a:40:15:c9:bf:ed:6e:f4:7c: 5d:8b:21:53:1d:45:98:93:55:f2:41:a0:b0:8c:3e:9a:f0:ea: a9:14:82:a4:75:bd:4b:a2:cc:e9:d9:39:ac:1b:84:6d:b1:40: f6:21:94:83 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XMtOsmincjqXEPJsScyyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl NWVjZjIwHhcNMjYwMTAyMDYxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjc4MjdlY2VkODBhZDQ3ZGI0NDdlYzg4OWI5MTI5OGI3Yjg2OWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1mm61qmHh19YywXI7tT2Inhc8hD Rs183xT33hb/4Ce6mXD3yf9bkFqXal8c9EKwSpTCOoNNErzwmn7FTsei/hVgXbnd 2gggI0AvKi3KLhAfA32jaz3qws0gzE224PpZHjxAIf8Ruc/UpYTxuSOI33I6WXgI l4mhKgPMyQu2Vm8/7mPmqdeQ7x3noD+nIEDk8pij/7nwpmj7JYabjNfVCSF1Luq2 tco6rMU/4Nt+q63vMRhCrtJGyEAftbo3LQJOLRWTsnOBAgV3haKJH9VIbXUKlODy yaZOrpD06C/mdjC9jxQn1UbfP29DrCWy8tu1tQ0j8gC98K19jp6EbZR20wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM94J+ztgK1H20R+yIm5Epi3uGmkMB8GA1UdIwQY MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt MTcxYzM2N2JlNzgyLzEvejNnbjdPMkFyVWZiUkg3SWlia1NtTGU0YWFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW1z0MA0G CSqGSIb3DQEBCwUAA4IBAQCQWglI1mwNJYx4/hKU6pGIEosFbexDOtPC1cCk97jc SJ2LHn+hemnV3qPnDmZ3Zdhur5mYO8MShVKnCQcVV2gTCF0YVpLewN/60NGnK3AU BCCDZd1ZrhC+cOL7WjBlvlNjfnt4toNYATy9MYUpLyHrSrN0xIAJ6q8GtKeLjPBk MZjuU6fICYQCLju2LUR1YhBzlNkMYep6Qi0skCnBeF36KunoiXDYy8/y3RxY+GU7 x2D4LDXzUCfAgDTLFBw4ObZibQR7HT307Nh+DjZPhVV6QBXJv+1u9HxdiyFTHUWY k1XyQaCwjD6a8OqpFIKkdb1Loszp2TmsG4RtsUD2IZSD -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:32 2026 by rpki-client