This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/ZtbiR2gXLmTAF_Ba81OuZamF65A.roa File: ZtbiR2gXLmTAF_Ba81OuZamF65A.roa (raw, json) Hash identifier: E3OpmkUHD20zWo50pMNSXcgN+lKW8YTl+sRAVHhIEok= Subject key identifier: 66:D6:E2:47:68:17:2E:64:C0:17:F0:5A:F3:53:AE:65:A9:85:EB:90 Certificate issuer: /CN=d2fa2a70003880d7561612a3c0a12602ce3541a4 Certificate serial: 019B7910932F67888D36AEAEDEFE9989E79E Authority key identifier: D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/ZtbiR2gXLmTAF_Ba81OuZamF65A.roa Signing time: Thu 01 Jan 2026 10:18:07 +0000 ROA not before: Thu 01 Jan 2026 10:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51088 IP address blocks: 46.235.40.0/21 maxlen: 21 83.150.232.0/22 maxlen: 22 2a00:d640::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:93:2f:67:88:8d:36:ae:ae:de:fe:99:89:e7:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2fa2a70003880d7561612a3c0a12602ce3541a4 Validity Not Before: Jan 1 10:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=66d6e24768172e64c017f05af353ae65a985eb90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:79:b8:26:4b:4d:d6:ad:4b:21:b5:90:89:64: 58:5c:ab:fd:aa:b7:5b:c4:8b:dc:ad:73:41:fe:41: 7a:7a:6a:ed:cf:91:3f:25:b6:b4:0f:30:f7:a1:ec: 9a:53:1c:33:97:c7:f3:68:d1:3a:80:c9:0d:6b:42: d9:aa:32:86:98:2f:86:39:87:9a:13:71:87:b5:3c: 59:be:87:fa:a8:89:30:6b:c0:1f:29:42:7c:a7:6a: f7:77:42:96:66:3a:00:69:cd:79:e4:34:04:c5:7f: 98:91:56:ec:3c:34:9b:3a:c3:8f:d3:77:d8:48:c7: f8:84:b3:be:50:08:c6:44:13:13:45:0a:4c:e2:c6: d4:79:da:1d:56:19:9f:f5:ad:94:79:02:3d:b4:ec: 69:03:b8:ee:8a:66:b6:44:34:33:fc:59:54:a2:4a: ae:4d:8f:e6:01:64:48:93:bd:f4:44:0e:18:87:73: db:b7:a6:16:14:e9:b8:97:0b:83:75:75:1a:9f:89: dd:53:fb:35:61:6a:97:2c:b2:82:58:c0:b4:13:ae: 5a:5a:6e:ed:ab:b8:9c:b3:ae:94:20:3c:c4:17:c7: 28:c6:f2:9f:6a:c0:b6:9d:8d:1c:3e:f0:19:11:e6: 06:13:ab:99:f1:2f:c7:51:79:47:20:45:3f:11:84: 3a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:D6:E2:47:68:17:2E:64:C0:17:F0:5A:F3:53:AE:65:A9:85:EB:90 X509v3 Authority Key Identifier: keyid:D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/ZtbiR2gXLmTAF_Ba81OuZamF65A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.235.40.0/21 83.150.232.0/22 IPv6: 2a00:d640::/32 Signature Algorithm: sha256WithRSAEncryption 81:e1:0c:fc:b2:f5:3b:2e:7d:1b:9c:23:29:88:a3:b9:99:17: 81:71:81:b1:a0:3b:b1:6a:88:ea:c8:2b:4e:83:ab:86:dd:dc: 28:a3:ef:e7:c2:0a:ba:92:26:f7:ed:93:47:3f:d4:69:00:b0: a5:7f:20:f0:68:c8:29:da:42:ca:fd:76:51:25:85:3d:e1:ad: 4b:9c:68:7c:55:4d:f3:ac:3f:58:10:4b:d9:19:8a:d2:c1:30: 1a:d8:47:29:16:fd:4b:92:fb:69:4d:eb:17:6c:7c:f6:6c:ef: 8b:17:aa:72:6a:bb:7b:e3:66:cb:33:18:cf:a0:9c:fe:b2:2e: fc:33:e7:7b:d8:5d:83:f7:c5:2a:52:c2:03:d6:1f:e0:ef:62: 63:8e:11:ee:89:c6:e8:a0:b4:af:27:db:8e:f7:8b:10:a1:ba: e6:f6:b0:02:54:56:4a:58:f2:79:0c:3c:81:67:39:e8:51:64: ad:c3:31:7b:96:1a:32:f0:62:1b:ce:67:c5:a6:69:b0:70:72: a4:af:7e:77:a9:c4:6d:ed:1e:6a:6b:b4:12:d4:f5:4a:00:54: a9:e8:1f:18:3e:52:1d:10:f2:4d:de:a1:9c:e6:10:9f:54:da: 4f:90:ee:5f:cb:99:a6:3b:81:a5:d9:2a:ee:bc:99:e1:f7:96: 4d:5f:4a:b4 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt5EJMvZ4iNNq6u3v6ZieeeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyZmEyYTcwMDAzODgwZDc1NjE2MTJhM2MwYTEyNjAyY2Uz NTQxYTQwHhcNMjYwMTAxMTAxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NmQ2ZTI0NzY4MTcyZTY0YzAxN2YwNWFmMzUzYWU2NWE5ODVlYjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Xm4JktN1q1LIbWQiWRYXKv9qrdb xIvcrXNB/kF6emrtz5E/Jba0DzD3oeyaUxwzl8fzaNE6gMkNa0LZqjKGmC+GOYea E3GHtTxZvof6qIkwa8AfKUJ8p2r3d0KWZjoAac155DQExX+YkVbsPDSbOsOP03fY SMf4hLO+UAjGRBMTRQpM4sbUedodVhmf9a2UeQI9tOxpA7juima2RDQz/FlUokqu TY/mAWRIk730RA4Yh3Pbt6YWFOm4lwuDdXUan4ndU/s1YWqXLLKCWMC0E65aWm7t q7ics66UIDzEF8coxvKfasC2nY0cPvAZEeYGE6uZ8S/HUXlHIEU/EYQ6RQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFGbW4kdoFy5kwBfwWvNTrmWpheuQMB8GA1UdIwQY MBaAFNL6KnAAOIDXVhYSo8ChJgLONUGkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHZvcWNBQTRnTmRXRmhLandLRW1BczQxUWFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9iMjA3ZDEtOGI3Yi00ZTI3LTgzNzAt YTc5NjUwMWU3N2ExLzEvWnRiaVIyZ1hMbVRBRl9CYTgxT3VaYW1GNjVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9iMjA3ZDEtOGI3Yi00ZTI3LTgzNzAtYTc5NjUwMWU3N2Ex LzEvMHZvcWNBQTRnTmRXRmhLandLRW1BczQxUWFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDLusoAwQC U5boMA0EAgACMAcDBQAqANZAMA0GCSqGSIb3DQEBCwUAA4IBAQCB4Qz8svU7Ln0b nCMpiKO5mReBcYGxoDuxaojqyCtOg6uG3dwoo+/nwgq6kib37ZNHP9RpALClfyDw aMgp2kLK/XZRJYU94a1LnGh8VU3zrD9YEEvZGYrSwTAa2EcpFv1LkvtpTesXbHz2 bO+LF6pyart742bLMxjPoJz+si78M+d72F2D98UqUsID1h/g72JjjhHuicbooLSv J9uO94sQobrm9rACVFZKWPJ5DDyBZznoUWStwzF7lhoy8GIbzmfFpmmwcHKkr353 qcRt7R5qa7QS1PVKAFSp6B8YPlIdEPJN3qGc5hCfVNpPkO5fy5mmO4Gl2SruvJnh 95ZNX0q0 -----END CERTIFICATE-----Generated at Sun Jan 25 15:13:45 2026 by rpki-client