This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/zywsKwX1fUPv0A3Uj_uhOWCIOtI.roa File: zywsKwX1fUPv0A3Uj_uhOWCIOtI.roa (raw, json) Hash identifier: eo3pRkobPu7+wCNJD4zOFzMtiQC1eCBplpvP48zS7Ss= Subject key identifier: CF:2C:2C:2B:05:F5:7D:43:EF:D0:0D:D4:8F:FB:A1:39:60:88:3A:D2 Certificate issuer: /CN=d6c269f9e93b0fb8bc4b1c947abc5b21f21f2305 Certificate serial: 019B7DCADC048AA145FE87EB00B6DB564F24 Authority key identifier: D6:C2:69:F9:E9:3B:0F:B8:BC:4B:1C:94:7A:BC:5B:21:F2:1F:23:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/zywsKwX1fUPv0A3Uj_uhOWCIOtI.roa Signing time: Fri 02 Jan 2026 08:20:05 +0000 ROA not before: Fri 02 Jan 2026 08:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12480 IP address blocks: 185.149.156.0/22 maxlen: 24 194.45.22.0/24 maxlen: 24 212.86.192.0/19 maxlen: 32 2a00:1970::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.crl rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:dc:04:8a:a1:45:fe:87:eb:00:b6:db:56:4f:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6c269f9e93b0fb8bc4b1c947abc5b21f21f2305 Validity Not Before: Jan 2 08:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf2c2c2b05f57d43efd00dd48ffba13960883ad2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:40:3c:c0:b8:ad:e7:24:b0:d6:19:5a:c8:68: 2b:30:02:78:b8:b1:fa:56:d1:53:f3:b0:85:5a:32: a4:c2:5e:68:e2:3b:5d:a4:ac:3b:50:8e:92:34:ce: b8:45:37:76:96:77:74:28:71:c8:3a:7f:19:8e:e4: 5b:9f:59:44:ab:fc:8c:7d:5a:7e:83:b1:58:cf:0f: da:7b:ab:bc:52:a2:73:50:be:5e:b4:1e:c4:aa:9f: a7:a0:fe:29:fd:39:e5:4d:36:58:0e:1a:77:45:e4: 81:da:b8:97:9a:ea:04:27:21:f8:84:84:06:ae:01: 85:57:af:a9:ed:7d:85:bf:91:8d:25:7e:b5:da:0e: ce:48:21:b8:13:27:9e:0e:92:13:ff:60:e9:74:d1: aa:82:88:bc:48:d5:dc:30:f2:5c:52:c9:d2:0a:38: 78:93:3c:20:14:0d:65:93:75:ed:ab:fe:18:c6:4d: 83:00:57:a8:f0:17:eb:21:ff:04:e7:fa:82:51:53: 59:7f:58:82:1d:6a:a2:d7:60:14:44:ea:86:61:1d: ac:10:d0:3c:98:13:d4:a5:6c:8a:8a:fa:b8:08:cd: c1:28:e0:9d:c5:39:01:b9:ad:11:ff:2d:35:d0:c3: 49:57:35:d1:fe:28:c5:75:fd:eb:1b:40:95:74:65: c6:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:2C:2C:2B:05:F5:7D:43:EF:D0:0D:D4:8F:FB:A1:39:60:88:3A:D2 X509v3 Authority Key Identifier: keyid:D6:C2:69:F9:E9:3B:0F:B8:BC:4B:1C:94:7A:BC:5B:21:F2:1F:23:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/zywsKwX1fUPv0A3Uj_uhOWCIOtI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.149.156.0/22 194.45.22.0/24 212.86.192.0/19 IPv6: 2a00:1970::/32 Signature Algorithm: sha256WithRSAEncryption 29:27:ed:42:1a:aa:c9:1f:8a:9b:5d:75:61:96:6a:4d:14:bd: d2:da:02:1b:10:55:f7:a0:40:90:49:11:1f:17:62:38:5e:44: 68:30:1e:e1:3d:da:e4:d9:04:28:78:d3:08:7d:55:ef:3f:5d: 01:7b:8e:91:c1:62:4d:2c:1c:4e:6d:0a:23:37:f4:f6:f0:d1: 2e:7f:3d:99:6b:40:44:bb:89:c4:9a:d0:47:cb:65:32:06:a0: 35:f1:6b:fd:c7:f1:eb:24:b7:03:1a:c3:68:3a:79:fc:db:ed: b3:f5:cd:97:30:c3:4d:43:17:52:e5:d1:64:56:eb:7d:60:06: 7b:97:56:25:0e:cb:a0:4e:fd:fb:68:84:d8:96:03:1a:34:56: 73:0d:8b:a0:c7:14:f2:9f:05:bc:19:d0:2a:71:42:78:f9:ce: 6f:b6:8f:00:18:6b:73:82:fc:16:4e:9b:3e:7e:43:53:92:c4: d7:d3:d1:ff:0e:78:c1:53:78:d2:dd:df:4a:01:1b:79:7c:78: 29:51:45:a9:07:ad:73:53:72:84:1b:35:d8:47:23:40:99:0e: 77:b3:81:49:a5:d2:67:23:93:dc:5c:8e:e0:c1:c2:45:ab:b6: d4:64:06:0c:f9:e3:55:73:e1:c5:fa:cb:84:54:6b:d7:82:94: 69:c4:4e:10 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt9ytwEiqFF/ofrALbbVk8kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2YzI2OWY5ZTkzYjBmYjhiYzRiMWM5NDdhYmM1YjIxZjIx ZjIzMDUwHhcNMjYwMTAyMDgyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjJjMmMyYjA1ZjU3ZDQzZWZkMDBkZDQ4ZmZiYTEzOTYwODgzYWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUA8wLit5ySw1hlayGgrMAJ4uLH6 VtFT87CFWjKkwl5o4jtdpKw7UI6SNM64RTd2lnd0KHHIOn8ZjuRbn1lEq/yMfVp+ g7FYzw/ae6u8UqJzUL5etB7Eqp+noP4p/TnlTTZYDhp3ReSB2riXmuoEJyH4hIQG rgGFV6+p7X2Fv5GNJX612g7OSCG4EyeeDpIT/2DpdNGqgoi8SNXcMPJcUsnSCjh4 kzwgFA1lk3Xtq/4Yxk2DAFeo8BfrIf8E5/qCUVNZf1iCHWqi12AUROqGYR2sENA8 mBPUpWyKivq4CM3BKOCdxTkBua0R/y010MNJVzXR/ijFdf3rG0CVdGXGkQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFM8sLCsF9X1D79AN1I/7oTlgiDrSMB8GA1UdIwQY MBaAFNbCafnpOw+4vEsclHq8WyHyHyMFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXNKcC1lazdEN2k4U3h5VWVyeGJJZklmSXdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9jMjUzZTMtNDEzMy00YTE2LTkwNjEt Yjc5Y2ZjMjRkM2I3LzEvenl3c0t3WDFmVVB2MEEzVWpfdWhPV0NJT3RJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9jMjUzZTMtNDEzMy00YTE2LTkwNjEtYjc5Y2ZjMjRkM2I3 LzEvMXNKcC1lazdEN2k4U3h5VWVyeGJJZklmSXdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCuZWcAwQA wi0WAwQF1FbAMA0EAgACMAcDBQAqABlwMA0GCSqGSIb3DQEBCwUAA4IBAQApJ+1C GqrJH4qbXXVhlmpNFL3S2gIbEFX3oECQSREfF2I4XkRoMB7hPdrk2QQoeNMIfVXv P10Be46RwWJNLBxObQojN/T28NEufz2Za0BEu4nEmtBHy2UyBqA18Wv9x/HrJLcD GsNoOnn82+2z9c2XMMNNQxdS5dFkVut9YAZ7l1YlDsugTv37aITYlgMaNFZzDYug xxTynwW8GdAqcUJ4+c5vto8AGGtzgvwWTps+fkNTksTX09H/DnjBU3jS3d9KARt5 fHgpUUWpB61zU3KEGzXYRyNAmQ53s4FJpdJnI5PcXI7gwcJFq7bUZAYM+eNVc+HF +suEVGvXgpRpxE4Q -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:42 2026 by rpki-client