This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/Z8_XBqnrMqCaFMrYj-tVqo5CEZM.roa File: Z8_XBqnrMqCaFMrYj-tVqo5CEZM.roa (raw, json) Hash identifier: 0jePTymgcOwFGwH77BGx0LOAQcAPk0ITZHaXgc+bQTU= Subject key identifier: 67:CF:D7:06:A9:EB:32:A0:9A:14:CA:D8:8F:EB:55:AA:8E:42:11:93 Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0 Certificate serial: 019B7C128B1A3CD125AF5AD0192ECD4A4D1D Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/Z8_XBqnrMqCaFMrYj-tVqo5CEZM.roa Signing time: Fri 02 Jan 2026 00:19:08 +0000 ROA not before: Fri 02 Jan 2026 00:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211849 IP address blocks: 80.66.75.0/24 maxlen: 24 80.66.77.0/24 maxlen: 24 87.251.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:8b:1a:3c:d1:25:af:5a:d0:19:2e:cd:4a:4d:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0 Validity Not Before: Jan 2 00:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=67cfd706a9eb32a09a14cad88feb55aa8e421193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f2:2d:b6:27:fa:aa:0e:b4:b3:1b:aa:7a:92: 12:78:56:ff:14:94:53:a8:2d:67:0d:0d:5b:36:6e: 70:eb:3f:f2:32:ce:89:0b:83:cb:68:c8:24:c2:12: fa:6e:38:fe:b1:e7:ab:ef:47:5b:4e:4a:68:c0:f1: 2d:31:cf:45:65:85:3f:d8:c1:3e:38:8a:2a:d6:30: e0:50:d7:ff:be:51:76:21:cd:0c:c1:a9:4d:2f:f0: 52:6e:5f:21:d5:b4:f2:a9:85:6c:1c:fb:25:80:92: 1e:72:b6:98:73:1c:e1:fb:51:bd:86:dd:e4:d2:5e: 6a:38:08:a1:45:7c:2a:7d:b4:ee:97:19:05:0b:d1: 72:e2:dd:ad:26:24:9f:d2:03:99:e5:65:59:da:eb: fc:ea:a1:98:b7:a0:e0:d9:d8:27:5f:f3:ce:52:77: 6c:3f:54:d9:79:86:18:5b:60:dd:79:e7:e6:33:2e: 91:9d:44:f0:96:10:91:d5:4a:ed:16:59:1d:04:c1: 6d:e0:39:2f:43:ec:b0:35:dd:93:6c:c1:fe:6e:a1: 46:74:fb:75:7c:0e:a2:cf:9f:24:ba:fc:0a:7d:87: 39:75:62:0a:fc:1b:af:8c:26:2f:06:45:30:24:f6: 73:fd:66:11:49:f0:5b:cc:6f:84:05:b7:be:e8:05: 5d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:CF:D7:06:A9:EB:32:A0:9A:14:CA:D8:8F:EB:55:AA:8E:42:11:93 X509v3 Authority Key Identifier: keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/Z8_XBqnrMqCaFMrYj-tVqo5CEZM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.66.75.0/24 80.66.77.0/24 87.251.79.0/24 Signature Algorithm: sha256WithRSAEncryption 03:c0:25:23:9c:d7:70:64:bf:4f:01:9d:54:6a:c2:52:f7:6b: 49:89:47:cd:46:d1:25:fb:49:ea:9b:20:2e:a6:44:7a:bd:5b: 52:75:18:a4:d1:e8:90:3e:1d:47:16:d2:27:48:a6:e3:8d:79: 5b:5b:79:a4:60:a4:49:61:3c:76:92:30:4c:bf:a8:20:16:96: 9f:0c:c6:45:97:61:ca:81:28:9d:d1:48:46:9f:f6:ae:49:03: a4:b4:bf:38:3a:22:e2:a9:5d:7b:19:66:31:f7:96:24:6a:f1: a0:02:9d:b5:97:2f:ca:d5:66:64:c5:ca:b2:23:01:5b:88:b0: 76:4d:23:bf:85:16:66:9b:af:c1:91:26:91:3b:cb:92:9b:35: 1d:62:d2:59:af:fc:53:d4:58:31:c5:30:a0:aa:b1:08:e8:1c: 30:15:53:60:e5:e3:7d:0c:18:89:fb:b4:e8:62:b9:1f:c5:d5: 14:00:b9:6a:0a:df:19:0f:8a:78:1c:0e:89:e5:54:88:54:93: 05:da:f3:97:e9:4a:bc:3b:bd:ce:1c:ec:84:9e:4b:9e:7c:70: 0a:a6:b8:cc:c0:22:10:f1:95:15:3a:00:14:95:b4:2f:4b:07: 88:a7:7f:ac:29:b1:8f:8e:f5:9b:cf:ae:80:de:05:3a:97:3b: fe:58:5e:5e -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8EosaPNElr1rQGS7NSk0dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3M2I0YzEyNDhjNGJjZjIyYjA1NzdkZmNhOWIxNGQ5MDYz YzI4YzAwHhcNMjYwMTAyMDAxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2N2NmZDcwNmE5ZWIzMmEwOWExNGNhZDg4ZmViNTVhYThlNDIxMTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfIttif6qg60sxuqepISeFb/FJRT qC1nDQ1bNm5w6z/yMs6JC4PLaMgkwhL6bjj+seer70dbTkpowPEtMc9FZYU/2ME+ OIoq1jDgUNf/vlF2Ic0MwalNL/BSbl8h1bTyqYVsHPslgJIecraYcxzh+1G9ht3k 0l5qOAihRXwqfbTulxkFC9Fy4t2tJiSf0gOZ5WVZ2uv86qGYt6Dg2dgnX/POUnds P1TZeYYYW2DdeefmMy6RnUTwlhCR1UrtFlkdBMFt4DkvQ+ywNd2TbMH+bqFGdPt1 fA6iz58kuvwKfYc5dWIK/BuvjCYvBkUwJPZz/WYRSfBbzG+EBbe+6AVduQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFGfP1wap6zKgmhTK2I/rVaqOQhGTMB8GA1UdIwQY MBaAFAc7TBJIxLzyKwV338qbFNkGPCjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQt YThkMzYxY2U2NGFhLzEvWjhfWEJxbnJNcUNhRk1yWWotdFZxbzVDRVpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQtYThkMzYxY2U2NGFh LzEvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUEJLAwQA UEJNAwQAV/tPMA0GCSqGSIb3DQEBCwUAA4IBAQADwCUjnNdwZL9PAZ1UasJS92tJ iUfNRtEl+0nqmyAupkR6vVtSdRik0eiQPh1HFtInSKbjjXlbW3mkYKRJYTx2kjBM v6ggFpafDMZFl2HKgSid0UhGn/auSQOktL84OiLiqV17GWYx95YkavGgAp21ly/K 1WZkxcqyIwFbiLB2TSO/hRZmm6/BkSaRO8uSmzUdYtJZr/xT1FgxxTCgqrEI6Bww FVNg5eN9DBiJ+7ToYrkfxdUUALlqCt8ZD4p4HA6J5VSIVJMF2vOX6Uq8O73OHOyE nkuefHAKprjMwCIQ8ZUVOgAUlbQvSweIp3+sKbGPjvWbz66A3gU6lzv+WF5e -----END CERTIFICATE-----Generated at Sun Jan 25 16:38:33 2026 by rpki-client