This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zyrvvt-0YaM1oJVY3gEtrt1vmFI.roa File: Zyrvvt-0YaM1oJVY3gEtrt1vmFI.roa (raw, json) Hash identifier: bZNszqhnT3nG89SByGHQ2OOopVxYZGpnqUauM45GA3A= Subject key identifier: 67:2A:EF:BE:DF:B4:61:A3:35:A0:95:58:DE:01:2D:AE:DD:6F:98:52 Certificate issuer: /CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e Certificate serial: 019B7A5A702ED8A77CC9284C130255BC0868 Authority key identifier: 66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zyrvvt-0YaM1oJVY3gEtrt1vmFI.roa Signing time: Thu 01 Jan 2026 16:18:25 +0000 ROA not before: Thu 01 Jan 2026 16:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198507 IP address blocks: 37.143.52.0/22 maxlen: 22 37.143.55.0/24 maxlen: 24 45.9.196.0/22 maxlen: 22 45.14.176.0/22 maxlen: 22 45.81.192.0/22 maxlen: 22 185.132.73.0/24 maxlen: 24 185.132.74.0/24 maxlen: 24 185.132.75.0/24 maxlen: 24 2a06:e040::/32 maxlen: 32 2a06:e040:3501::/48 maxlen: 48 2a06:e040:3502::/48 maxlen: 48 2a06:e040:6900::/40 maxlen: 40 2a06:e040:7601::/48 maxlen: 48 2a06:e040:7603::/48 maxlen: 48 2a06:e043::/32 maxlen: 32 2a06:e044:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:70:2e:d8:a7:7c:c9:28:4c:13:02:55:bc:08:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e Validity Not Before: Jan 1 16:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=672aefbedfb461a335a09558de012daedd6f9852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:52:e7:76:f9:fe:91:4e:24:db:68:35:5d:63: 80:69:a0:48:12:94:aa:27:2d:40:97:8d:dd:26:34: f1:1b:26:86:e6:85:8c:27:fb:77:a5:09:58:8e:75: 39:19:ff:4e:ed:eb:3e:bc:a8:d4:12:51:21:a3:df: 35:19:f7:5a:e3:ea:6a:45:4a:93:19:c1:0b:23:8f: bd:f0:ca:88:28:0e:c8:17:50:f7:46:7b:3c:2c:5e: 39:c2:44:96:47:5e:d9:69:01:ae:2f:4c:cf:5c:44: 84:dc:eb:48:e3:9c:bc:2d:41:04:5e:08:c7:f4:b5: af:73:ab:8d:75:b6:18:78:cd:51:c8:65:b1:db:c5: 75:94:22:59:16:c1:8b:0f:88:8b:b2:c7:6b:d8:88: 22:cc:49:75:33:30:75:55:3d:84:e7:b6:5a:0d:1f: ad:c9:b8:b7:28:64:fc:4d:82:1d:83:e3:90:8a:61: 8b:38:1b:28:ca:82:ce:51:7b:b2:60:c2:4e:a5:cd: 1a:00:81:45:c2:77:b0:75:82:83:cf:ac:30:9e:75: 88:f5:a3:e0:50:6b:82:9f:50:10:2d:e6:21:aa:53: 01:9d:a5:06:e6:bd:6a:c8:65:73:03:66:4e:95:8c: 29:03:09:d3:07:bf:04:b9:39:18:b7:59:06:c4:86: 97:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:2A:EF:BE:DF:B4:61:A3:35:A0:95:58:DE:01:2D:AE:DD:6F:98:52 X509v3 Authority Key Identifier: keyid:66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zyrvvt-0YaM1oJVY3gEtrt1vmFI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.143.52.0/22 45.9.196.0/22 45.14.176.0/22 45.81.192.0/22 185.132.73.0-185.132.75.255 IPv6: 2a06:e040::/32 2a06:e043::/32 2a06:e044:10::/48 Signature Algorithm: sha256WithRSAEncryption 15:bc:ee:1a:ad:3c:4b:4e:78:cc:1c:7e:36:f5:3b:92:a0:e1: 9e:e4:ea:5d:d4:13:23:27:65:ff:f0:57:0f:cc:f0:3a:2a:4b: c6:a3:d8:7a:4d:37:4a:19:c3:6c:a6:e5:81:d6:7d:cd:6a:36: 00:33:a4:b5:66:af:28:32:f6:4e:df:1f:24:fb:3a:92:bf:d9: a0:ff:65:e8:a5:14:9f:2a:3c:38:a7:b8:07:26:22:11:7e:1e: 28:4f:94:92:ce:38:ea:e9:cd:f1:91:76:44:0c:3f:95:3a:b2: 9b:c0:91:1c:24:36:80:63:a8:8f:fc:6b:44:43:77:73:09:3d: 40:57:4d:05:ba:07:86:1e:aa:f9:10:64:fe:84:a2:ba:94:28: 98:cd:6e:8a:ab:f4:a3:44:96:83:ac:77:ca:25:10:47:5c:4e: 80:8b:dc:6e:4d:35:56:2b:04:fd:f7:71:3f:66:7f:ec:e6:26: 76:40:77:7b:4c:cb:fc:f3:25:80:d0:35:12:fa:bc:08:95:3e: a3:3e:bb:aa:9f:60:8f:eb:45:79:e2:6b:84:72:77:6e:42:d3: bd:5b:4d:fd:a8:04:7c:a8:2f:a8:9d:10:7e:79:01:61:d7:a8: 29:fb:9b:1f:ea:19:cc:e7:59:cd:cf:66:1e:cc:84:a7:63:1f: fd:e2:e6:32 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgISAZt6WnAu2Kd8yShMEwJVvAhoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZGUxZDlkY2RiMjVjMWU1MzJjNWM5YjY5ZGZhNzU3ZTMw NjIxMGUwHhcNMjYwMTAxMTYxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NzJhZWZiZWRmYjQ2MWEzMzVhMDk1NThkZTAxMmRhZWRkNmY5ODUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVLndvn+kU4k22g1XWOAaaBIEpSq Jy1Al43dJjTxGyaG5oWMJ/t3pQlYjnU5Gf9O7es+vKjUElEho981Gfda4+pqRUqT GcELI4+98MqIKA7IF1D3Rns8LF45wkSWR17ZaQGuL0zPXESE3OtI45y8LUEEXgjH 9LWvc6uNdbYYeM1RyGWx28V1lCJZFsGLD4iLssdr2IgizEl1MzB1VT2E57ZaDR+t ybi3KGT8TYIdg+OQimGLOBsoyoLOUXuyYMJOpc0aAIFFwnewdYKDz6wwnnWI9aPg UGuCn1AQLeYhqlMBnaUG5r1qyGVzA2ZOlYwpAwnTB78EuTkYt1kGxIaXvQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFGcq777ftGGjNaCVWN4BLa7db5hSMB8GA1UdIwQY MBaAFGbeHZ3NslweUyxcm2nfp1fjBiEOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnQ0ZG5jMnlYQjVUTEZ5YmFkLW5WLU1HSVE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC82MGZjZmUtN2IyYy00NjcyLWJjMmYt NDA0Nzk4NzA5NzZlLzEvWnlydnZ0LTBZYU0xb0pWWTNnRXRydDF2bUZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC82MGZjZmUtN2IyYy00NjcyLWJjMmYtNDA0Nzk4NzA5NzZl LzEvWnQ0ZG5jMnlYQjVUTEZ5YmFkLW5WLU1HSVE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTAsBAIAATAmAwQCJY80AwQC LQnEAwQCLQ6wAwQCLVHAMAwDBAC5hEkDBAK5hEgwHQQCAAIwFwMFACoG4EADBQAq BuBDAwcAKgbgRAAQMA0GCSqGSIb3DQEBCwUAA4IBAQAVvO4arTxLTnjMHH429TuS oOGe5Opd1BMjJ2X/8FcPzPA6KkvGo9h6TTdKGcNspuWB1n3NajYAM6S1Zq8oMvZO 3x8k+zqSv9mg/2XopRSfKjw4p7gHJiIRfh4oT5SSzjjq6c3xkXZEDD+VOrKbwJEc JDaAY6iP/GtEQ3dzCT1AV00FugeGHqr5EGT+hKK6lCiYzW6Kq/SjRJaDrHfKJRBH XE6Ai9xuTTVWKwT993E/Zn/s5iZ2QHd7TMv88yWA0DUS+rwIlT6jPruqn2CP60V5 4muEcnduQtO9W039qAR8qC+onRB+eQFh16gp+5sf6hnM51nNz2YezISnYx/94uYy -----END CERTIFICATE-----Generated at Mon Jan 26 08:39:37 2026 by rpki-client