This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/ZFAGiy_9lNnoyy0fIIGFcQYKZHk.roa File: ZFAGiy_9lNnoyy0fIIGFcQYKZHk.roa (raw, json) Hash identifier: bgPFIf5ZGLxX3ifKNKcI/Jfk3n/fONDt7fNzDv1yDhs= Subject key identifier: 64:50:06:8B:2F:FD:94:D9:E8:CB:2D:1F:20:81:85:71:06:0A:64:79 Certificate issuer: /CN=db99f330be3147b4da90d114a3cf4205fa451103 Certificate serial: 019B78354FAB6F121ED98B3A63865D19B26E Authority key identifier: DB:99:F3:30:BE:31:47:B4:DA:90:D1:14:A3:CF:42:05:FA:45:11:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/ZFAGiy_9lNnoyy0fIIGFcQYKZHk.roa Signing time: Thu 01 Jan 2026 06:18:38 +0000 ROA not before: Thu 01 Jan 2026 06:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20738 IP address blocks: 79.170.40.0/21 maxlen: 21 79.170.40.0/24 maxlen: 24 79.170.41.0/24 maxlen: 24 79.170.42.0/24 maxlen: 24 79.170.43.0/24 maxlen: 24 79.170.44.0/24 maxlen: 24 79.170.45.0/24 maxlen: 24 79.170.46.0/24 maxlen: 24 79.170.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.crl rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:4f:ab:6f:12:1e:d9:8b:3a:63:86:5d:19:b2:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db99f330be3147b4da90d114a3cf4205fa451103 Validity Not Before: Jan 1 06:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6450068b2ffd94d9e8cb2d1f20818571060a6479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6a:60:68:48:5e:cc:f1:cf:b4:5c:a0:ed:2a: 75:ae:0f:d9:3c:d3:0d:ba:b3:81:f1:03:7c:e9:5d: 54:ac:1c:9e:f2:82:78:74:51:d0:00:8d:ed:92:71: d9:5b:fa:c8:05:a4:0d:79:ee:0a:f5:ba:80:9c:4b: 6a:8b:18:ce:25:69:61:1d:df:0f:f4:02:41:2a:d9: 53:00:96:22:3b:a0:5c:c3:e3:05:47:c1:a2:c2:ad: d8:a0:62:97:1a:6e:14:d5:bf:ba:12:c1:3b:34:99: e8:4e:ea:e3:cc:ca:11:8e:14:94:74:75:9d:a1:9c: 11:53:68:c3:d1:5e:53:9b:0d:01:28:f0:21:d1:e0: 63:4b:54:af:0d:ff:b0:1e:fd:bf:a5:ed:41:39:94: 79:8f:14:39:a2:9f:60:6b:9b:65:46:89:be:b2:02: 30:61:f0:cc:f8:62:e6:e4:8b:73:d0:7d:cf:68:69: cd:23:eb:fe:88:f8:7d:91:6d:b0:51:0e:92:9d:83: 7f:25:71:8a:de:56:ee:7b:da:e9:f1:7a:48:31:66: 78:8e:c2:83:7d:95:fe:36:c0:84:56:9e:2a:39:87: 33:42:16:38:04:9f:4f:e7:46:84:94:8b:aa:36:79: 9f:3b:fa:1b:1b:25:64:f7:cf:c9:3c:95:48:26:ed: 1a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:50:06:8B:2F:FD:94:D9:E8:CB:2D:1F:20:81:85:71:06:0A:64:79 X509v3 Authority Key Identifier: keyid:DB:99:F3:30:BE:31:47:B4:DA:90:D1:14:A3:CF:42:05:FA:45:11:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/ZFAGiy_9lNnoyy0fIIGFcQYKZHk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.170.40.0/21 Signature Algorithm: sha256WithRSAEncryption 1a:e7:1e:ab:5b:37:7f:a4:5a:ff:8c:80:ba:13:04:05:c3:12: 28:12:ba:95:90:d8:a0:b8:2e:f2:7d:e9:cd:64:23:d6:68:ea: c4:12:f6:11:61:33:a1:60:92:02:dc:e0:3b:84:6b:e4:5b:4f: af:81:cd:69:5e:eb:46:d8:bc:dc:0f:a6:95:1b:fd:bf:e1:9d: 28:64:95:84:c0:84:b6:bb:a0:7f:c3:2f:d8:d3:23:47:19:06: 79:9b:26:15:49:db:42:3d:db:57:00:80:4c:10:3a:cb:8f:0b: e7:99:f5:de:8c:b2:74:38:eb:69:06:3c:ed:27:c9:04:e7:0b: c0:66:b3:c4:d6:f9:6c:7b:3f:bb:53:da:14:42:40:f4:66:40: 98:15:a1:75:92:51:36:58:6d:ff:d5:8c:41:92:50:09:87:7c: 8f:df:6f:de:9c:37:7e:6c:18:3b:cc:34:5a:b1:dd:4d:23:4d: 99:7e:d5:04:24:33:da:fe:87:5b:8f:f3:d3:ff:08:93:10:17: 94:61:b7:93:92:50:8c:8e:09:3b:9a:ac:8f:2c:45:77:33:e9: 02:e4:69:4b:5d:f5:e4:db:74:34:23:03:3b:eb:ca:2f:e0:bc: bf:24:80:6d:3a:3a:cf:7f:5e:69:23:6f:75:f5:2d:cf:9b:23: 9e:68:46:94 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NU+rbxIe2Ys6Y4ZdGbJuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiOTlmMzMwYmUzMTQ3YjRkYTkwZDExNGEzY2Y0MjA1ZmE0 NTExMDMwHhcNMjYwMTAxMDYxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDUwMDY4YjJmZmQ5NGQ5ZThjYjJkMWYyMDgxODU3MTA2MGE2NDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2pgaEhezPHPtFyg7Sp1rg/ZPNMN urOB8QN86V1UrBye8oJ4dFHQAI3tknHZW/rIBaQNee4K9bqAnEtqixjOJWlhHd8P 9AJBKtlTAJYiO6Bcw+MFR8Giwq3YoGKXGm4U1b+6EsE7NJnoTurjzMoRjhSUdHWd oZwRU2jD0V5Tmw0BKPAh0eBjS1SvDf+wHv2/pe1BOZR5jxQ5op9ga5tlRom+sgIw YfDM+GLm5Itz0H3PaGnNI+v+iPh9kW2wUQ6SnYN/JXGK3lbue9rp8XpIMWZ4jsKD fZX+NsCEVp4qOYczQhY4BJ9P50aElIuqNnmfO/obGyVk98/JPJVIJu0a2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGRQBosv/ZTZ6MstHyCBhXEGCmR5MB8GA1UdIwQY MBaAFNuZ8zC+MUe02pDRFKPPQgX6RREDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjVuek1MNHhSN1Rha05FVW84OUNCZnBGRVFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8zMDhjMDktMDAzNC00NDg2LTgyNzQt ZDRkYmQ1ZTIwNGY3LzEvWkZBR2l5XzlsTm5veXkwZklJR0ZjUVlLWkhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My8zMDhjMDktMDAzNC00NDg2LTgyNzQtZDRkYmQ1ZTIwNGY3 LzEvMjVuek1MNHhSN1Rha05FVW84OUNCZnBGRVFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDT6ooMA0G CSqGSIb3DQEBCwUAA4IBAQAa5x6rWzd/pFr/jIC6EwQFwxIoErqVkNiguC7yfenN ZCPWaOrEEvYRYTOhYJIC3OA7hGvkW0+vgc1pXutG2LzcD6aVG/2/4Z0oZJWEwIS2 u6B/wy/Y0yNHGQZ5myYVSdtCPdtXAIBMEDrLjwvnmfXejLJ0OOtpBjztJ8kE5wvA ZrPE1vlsez+7U9oUQkD0ZkCYFaF1klE2WG3/1YxBklAJh3yP32/enDd+bBg7zDRa sd1NI02ZftUEJDPa/odbj/PT/wiTEBeUYbeTklCMjgk7mqyPLEV3M+kC5GlLXfXk 23Q0IwM768ov4Ly/JIBtOjrPf15pI2919S3PmyOeaEaU -----END CERTIFICATE-----Generated at Sun Jan 25 20:29:33 2026 by rpki-client