This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/Zvu226f1fBrcEihPAWh1s6Daxf4.roa File: Zvu226f1fBrcEihPAWh1s6Daxf4.roa (raw, json) Hash identifier: JpmLyxsFn08hdPg/l1P8dzonTsKrdWYeS04Q9Rr9wLI= Subject key identifier: 66:FB:B6:DB:A7:F5:7C:1A:DC:12:28:4F:01:68:75:B3:A0:DA:C5:FE Certificate issuer: /CN=7247ba43e270c98bdc642a9e3c218ca524eb0f53 Certificate serial: 019B7E392E9E984E074AB1E1C64ACB93C5B1 Authority key identifier: 72:47:BA:43:E2:70:C9:8B:DC:64:2A:9E:3C:21:8C:A5:24:EB:0F:53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cke6Q-JwyYvcZCqePCGMpSTrD1M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/Zvu226f1fBrcEihPAWh1s6Daxf4.roa Signing time: Fri 02 Jan 2026 10:20:35 +0000 ROA not before: Fri 02 Jan 2026 10:20:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209242 IP address blocks: 80.70.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/cke6Q-JwyYvcZCqePCGMpSTrD1M.crl rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/cke6Q-JwyYvcZCqePCGMpSTrD1M.mft rsync://rpki.ripe.net/repository/DEFAULT/cke6Q-JwyYvcZCqePCGMpSTrD1M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:2e:9e:98:4e:07:4a:b1:e1:c6:4a:cb:93:c5:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7247ba43e270c98bdc642a9e3c218ca524eb0f53 Validity Not Before: Jan 2 10:20:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=66fbb6dba7f57c1adc12284f016875b3a0dac5fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b3:5e:0b:80:ad:73:76:9b:02:a8:b6:f4:36: f9:5b:3c:b9:c2:97:ca:d8:02:20:b4:f8:36:3d:a8: 23:2a:8e:88:16:7c:5e:ff:c8:55:76:c2:65:d8:f6: 94:b7:25:54:9e:77:27:98:1f:5b:ad:dd:0d:c1:23: ed:af:e8:1e:94:ac:3e:d5:2c:2d:8e:76:09:bc:bc: 1b:32:46:ee:03:11:5f:d0:f2:8a:da:94:1d:3a:5e: 8f:05:04:ca:da:1d:b9:6a:35:bc:ac:b9:60:9c:c8: 9b:c7:c7:bf:21:c6:f9:7a:90:2a:5f:f8:e1:e9:17: 35:91:8e:81:ef:b2:21:4a:7f:73:f6:59:40:21:06: e2:a0:d4:92:49:a3:23:bf:fb:92:75:5b:1c:54:ec: c5:21:9f:d4:ef:99:6c:e9:8a:cc:36:47:ab:d8:9b: 6e:db:3c:ce:42:85:53:d8:4e:cc:b3:0b:3c:92:f7: b2:31:ab:4e:25:d5:54:fc:c4:12:8f:1a:eb:5d:17: ee:4b:c9:ff:58:dc:04:d7:3c:9d:e1:8a:f0:46:f1: 40:5f:31:00:74:bb:88:f1:76:d2:6e:d5:c7:e1:cc: f6:99:bc:8b:6b:41:f9:62:4f:38:aa:fd:b6:6e:83: ac:b1:e1:94:8a:e7:e9:bc:66:42:79:34:fb:55:48: 19:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:FB:B6:DB:A7:F5:7C:1A:DC:12:28:4F:01:68:75:B3:A0:DA:C5:FE X509v3 Authority Key Identifier: keyid:72:47:BA:43:E2:70:C9:8B:DC:64:2A:9E:3C:21:8C:A5:24:EB:0F:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cke6Q-JwyYvcZCqePCGMpSTrD1M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/Zvu226f1fBrcEihPAWh1s6Daxf4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/cke6Q-JwyYvcZCqePCGMpSTrD1M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.70.221.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:e8:81:da:75:75:6a:43:9d:a9:82:cb:fb:46:69:32:c8:b1: b2:78:d0:bb:7b:38:30:4e:7f:22:22:77:83:1a:e0:3c:0c:92: 6d:d7:c0:80:9d:f4:1b:76:4e:c6:9e:ae:5e:53:e2:05:11:08: 8c:f5:96:ba:9e:c6:6d:1d:2b:73:b2:19:75:51:7b:72:11:79: 53:b4:0a:8b:eb:f3:d3:0c:2e:d3:f6:6f:24:b5:68:65:dc:66: 21:e8:16:60:7e:26:77:b6:b3:9f:cc:22:c4:1a:b0:e5:6b:0b: 5e:69:5d:bc:8f:fc:f2:b2:75:42:c3:6a:df:fd:a2:ec:ac:42: 67:8f:cf:0e:0d:86:a7:1c:33:db:47:b2:14:c5:a1:6c:f0:6e: 80:b8:bc:8f:df:5d:5f:c7:ac:66:54:d0:aa:0a:57:01:0f:46: a3:96:20:f9:f5:9f:57:98:89:88:17:2d:b1:a6:8a:37:a8:57: f2:cc:26:5b:05:a6:58:91:09:ec:f2:0a:76:e4:b7:a9:c3:5c: 82:ad:1c:13:b0:1e:de:fc:63:1c:ac:58:b4:88:43:eb:08:ff: 0c:a3:cf:d7:f8:6f:a7:ea:4b:ab:e8:91:61:74:35:40:e2:6e: 52:db:3e:49:ad:28:0e:2c:47:80:5e:ae:dd:62:59:f1:e2:0b: ce:46:00:ab -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OS6emE4HSrHhxkrLk8WxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNDdiYTQzZTI3MGM5OGJkYzY0MmE5ZTNjMjE4Y2E1MjRl YjBmNTMwHhcNMjYwMTAyMTAyMDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NmZiYjZkYmE3ZjU3YzFhZGMxMjI4NGYwMTY4NzViM2EwZGFjNWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7NeC4Ctc3abAqi29Db5Wzy5wpfK 2AIgtPg2PagjKo6IFnxe/8hVdsJl2PaUtyVUnncnmB9brd0NwSPtr+gelKw+1Swt jnYJvLwbMkbuAxFf0PKK2pQdOl6PBQTK2h25ajW8rLlgnMibx8e/Icb5epAqX/jh 6Rc1kY6B77IhSn9z9llAIQbioNSSSaMjv/uSdVscVOzFIZ/U75ls6YrMNker2Jtu 2zzOQoVT2E7Msws8kveyMatOJdVU/MQSjxrrXRfuS8n/WNwE1zyd4YrwRvFAXzEA dLuI8XbSbtXH4cz2mbyLa0H5Yk84qv22boOsseGUiufpvGZCeTT7VUgZ6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGb7ttun9Xwa3BIoTwFodbOg2sX+MB8GA1UdIwQY MBaAFHJHukPicMmL3GQqnjwhjKUk6w9TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2tlNlEtSnd5WXZjWkNxZVBDR01wU1RyRDFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8zNDEwNjgtMjhmNi00ZjgxLTk5M2Yt Mjc5MjAzYjFkOTJjLzEvWnZ1MjI2ZjFmQnJjRWloUEFXaDFzNkRheGY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni8zNDEwNjgtMjhmNi00ZjgxLTk5M2YtMjc5MjAzYjFkOTJj LzEvY2tlNlEtSnd5WXZjWkNxZVBDR01wU1RyRDFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUEbdMA0G CSqGSIb3DQEBCwUAA4IBAQB86IHadXVqQ52pgsv7RmkyyLGyeNC7ezgwTn8iIneD GuA8DJJt18CAnfQbdk7Gnq5eU+IFEQiM9Za6nsZtHStzshl1UXtyEXlTtAqL6/PT DC7T9m8ktWhl3GYh6BZgfiZ3trOfzCLEGrDlawteaV28j/zysnVCw2rf/aLsrEJn j88ODYanHDPbR7IUxaFs8G6AuLyP311fx6xmVNCqClcBD0ajliD59Z9XmImIFy2x poo3qFfyzCZbBaZYkQns8gp25Lepw1yCrRwTsB7e/GMcrFi0iEPrCP8Mo8/X+G+n 6kur6JFhdDVA4m5S2z5JrSgOLEeAXq7dYlnx4gvORgCr -----END CERTIFICATE-----Generated at Sun Jan 25 08:00:31 2026 by rpki-client