This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/zyy7DFvxeNDAh4pOqGvmANgdfpY.roa File: zyy7DFvxeNDAh4pOqGvmANgdfpY.roa (raw, json) Hash identifier: hmel/U2e/Q6evOOJkJluvCudwlyZpvn4SGB/ShoJCY0= Subject key identifier: CF:2C:BB:0C:5B:F1:78:D0:C0:87:8A:4E:A8:6B:E6:00:D8:1D:7E:96 Certificate issuer: /CN=75386a6fae1e55f576a405bd74b7f08e7a6c4653 Certificate serial: 019B7AC90D3DE4F78E7B2889D7B4F96E3E4F Authority key identifier: 75:38:6A:6F:AE:1E:55:F5:76:A4:05:BD:74:B7:F0:8E:7A:6C:46:53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dThqb64eVfV2pAW9dLfwjnpsRlM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/zyy7DFvxeNDAh4pOqGvmANgdfpY.roa Signing time: Thu 01 Jan 2026 18:19:15 +0000 ROA not before: Thu 01 Jan 2026 18:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51269 IP address blocks: 185.32.70.0/24 maxlen: 24 185.163.124.0/22 maxlen: 22 194.146.126.0/24 maxlen: 24 194.147.47.0/24 maxlen: 24 194.147.67.0/24 maxlen: 24 2a0b:b800::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.mft rsync://rpki.ripe.net/repository/DEFAULT/dThqb64eVfV2pAW9dLfwjnpsRlM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:0d:3d:e4:f7:8e:7b:28:89:d7:b4:f9:6e:3e:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75386a6fae1e55f576a405bd74b7f08e7a6c4653 Validity Not Before: Jan 1 18:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf2cbb0c5bf178d0c0878a4ea86be600d81d7e96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:90:2a:68:2a:91:02:42:22:4c:58:ad:0a:41: 36:e5:42:11:70:1e:19:04:a3:5c:41:65:7e:a3:92: 66:e6:7a:6c:e6:a6:39:4c:83:79:81:aa:2c:ce:30: ca:ca:10:41:99:ac:9a:92:7d:9b:ba:4d:87:df:0c: 21:c3:94:0c:6d:83:f2:9a:9f:5e:c0:e4:5e:47:de: 31:c8:f9:40:18:76:f2:ab:61:fd:60:76:3e:82:14: 30:88:62:3e:b9:e0:af:c2:b0:84:f8:83:61:77:1e: 16:51:ec:54:f6:46:c0:d0:42:bd:d3:63:15:51:48: 28:bb:a0:9f:bb:6a:35:e7:88:9e:03:47:29:78:3d: d5:9a:2b:a7:a6:16:95:d2:21:07:82:4a:5c:b8:f2: fb:8e:e3:30:03:37:98:45:35:85:52:15:f2:fa:3a: 1c:04:d8:2e:f4:d4:96:1d:9c:49:b0:3c:8b:f9:a4: 75:84:b7:13:c3:f4:fe:a4:b0:30:8d:5e:ec:55:38: ed:7f:29:bd:4c:11:b6:82:97:96:ac:c8:99:a2:80: 21:69:ef:79:c7:1c:e4:07:a3:34:a7:ed:c9:94:dc: 81:87:a6:6e:76:e0:cd:52:81:4e:6a:ea:fc:f3:d9: 2e:2c:c4:8b:2c:07:e3:23:70:4b:af:89:d4:c7:5a: fd:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:2C:BB:0C:5B:F1:78:D0:C0:87:8A:4E:A8:6B:E6:00:D8:1D:7E:96 X509v3 Authority Key Identifier: keyid:75:38:6A:6F:AE:1E:55:F5:76:A4:05:BD:74:B7:F0:8E:7A:6C:46:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dThqb64eVfV2pAW9dLfwjnpsRlM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/zyy7DFvxeNDAh4pOqGvmANgdfpY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.32.70.0/24 185.163.124.0/22 194.146.126.0/24 194.147.47.0/24 194.147.67.0/24 IPv6: 2a0b:b800::/29 Signature Algorithm: sha256WithRSAEncryption 82:a3:50:2f:1f:b2:12:74:0b:63:cc:eb:0f:d5:47:2e:66:72: 1b:da:f7:98:d0:f6:99:15:7e:c0:21:47:81:f1:de:45:2a:f4: ff:de:15:71:9e:4c:a5:61:43:cd:46:03:9f:0f:ab:30:4d:89: 26:62:47:7c:e4:24:5e:e2:90:48:bc:31:e6:b7:c4:05:78:2f: 30:c8:1f:27:91:22:0d:31:78:fa:46:10:33:2d:40:71:b3:4e: 62:c1:07:1a:a7:85:d2:ca:9b:1b:1b:5c:a9:47:5e:a4:8b:20: fd:c3:5e:07:51:4f:cd:ff:81:61:8f:00:ed:e6:71:1a:64:dc: a8:7f:07:0d:69:16:46:78:9a:84:59:1d:c6:0a:cc:ba:b8:7d: dd:a3:dd:f9:15:3a:09:f2:0e:0b:b6:0a:5b:0a:2d:0b:db:5a: 7f:a1:1e:a6:dd:9f:91:be:65:4b:e9:3e:62:b4:88:71:9f:8d: 83:81:f4:f1:a8:d5:48:45:50:73:9d:66:e3:5e:a3:5c:f1:de: 21:54:b0:72:a3:52:47:bf:3d:18:d5:c0:36:35:31:33:1f:9f: 26:04:61:e1:c6:94:60:a7:b1:d5:0b:d9:85:9b:5e:89:e6:51: 5c:47:85:a3:e3:c9:35:82:34:ce:aa:16:de:6f:5a:41:15:2d: 6b:36:c5:74 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt6yQ095PeOeyiJ17T5bj5PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1Mzg2YTZmYWUxZTU1ZjU3NmE0MDViZDc0YjdmMDhlN2E2 YzQ2NTMwHhcNMjYwMTAxMTgxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjJjYmIwYzViZjE3OGQwYzA4NzhhNGVhODZiZTYwMGQ4MWQ3ZTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZAqaCqRAkIiTFitCkE25UIRcB4Z BKNcQWV+o5Jm5nps5qY5TIN5gaoszjDKyhBBmayakn2buk2H3wwhw5QMbYPymp9e wOReR94xyPlAGHbyq2H9YHY+ghQwiGI+ueCvwrCE+INhdx4WUexU9kbA0EK902MV UUgou6Cfu2o154ieA0cpeD3VmiunphaV0iEHgkpcuPL7juMwAzeYRTWFUhXy+joc BNgu9NSWHZxJsDyL+aR1hLcTw/T+pLAwjV7sVTjtfym9TBG2gpeWrMiZooAhae95 xxzkB6M0p+3JlNyBh6ZuduDNUoFOaur889kuLMSLLAfjI3BLr4nUx1r92QIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFM8suwxb8XjQwIeKTqhr5gDYHX6WMB8GA1UdIwQY MBaAFHU4am+uHlX1dqQFvXS38I56bEZTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFRocWI2NGVWZlYycEFXOWRMZndqbnBzUmxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9kOWEwMWMtNWM5MS00ZDAwLWEwOWEt Zjg3OTJmNTc3YjlhLzEvenl5N0RGdnhlTkRBaDRwT3FHdm1BTmdkZnBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9kOWEwMWMtNWM5MS00ZDAwLWEwOWEtZjg3OTJmNTc3Yjlh LzEvZFRocWI2NGVWZlYycEFXOWRMZndqbnBzUmxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQAuSBGAwQC uaN8AwQAwpJ+AwQAwpMvAwQAwpNDMA0EAgACMAcDBQMqC7gAMA0GCSqGSIb3DQEB CwUAA4IBAQCCo1AvH7ISdAtjzOsP1UcuZnIb2veY0PaZFX7AIUeB8d5FKvT/3hVx nkylYUPNRgOfD6swTYkmYkd85CRe4pBIvDHmt8QFeC8wyB8nkSINMXj6RhAzLUBx s05iwQcap4XSypsbG1ypR16kiyD9w14HUU/N/4FhjwDt5nEaZNyofwcNaRZGeJqE WR3GCsy6uH3do935FToJ8g4LtgpbCi0L21p/oR6m3Z+RvmVL6T5itIhxn42DgfTx qNVIRVBznWbjXqNc8d4hVLByo1JHvz0Y1cA2NTEzH58mBGHhxpRgp7HVC9mFm16J 5lFcR4Wj48k1gjTOqhbeb1pBFS1rNsV0 -----END CERTIFICATE-----Generated at Sun Jan 25 22:15:09 2026 by rpki-client