This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/Zrny0yg3TVa-9PfRlD4jNDdwvaQ.roa File: Zrny0yg3TVa-9PfRlD4jNDdwvaQ.roa (raw, json) Hash identifier: KV55zi4mSfveBw4rPTBhd4Q9yfOZ75ZlhzyzEJkhajg= Subject key identifier: 66:B9:F2:D3:28:37:4D:56:BE:F4:F7:D1:94:3E:23:34:37:70:BD:A4 Certificate issuer: /CN=ad9681f144db1430ac315c8306e1c14730c5fec2 Certificate serial: 019B7E37A6330E25890D1188B1C460EBD35B Authority key identifier: AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/Zrny0yg3TVa-9PfRlD4jNDdwvaQ.roa Signing time: Fri 02 Jan 2026 10:18:54 +0000 ROA not before: Fri 02 Jan 2026 10:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50733 IP address blocks: 89.221.80.0/22 maxlen: 22 89.221.80.0/23 maxlen: 23 89.221.80.0/24 maxlen: 24 89.221.81.0/24 maxlen: 24 89.221.82.0/23 maxlen: 23 89.221.82.0/24 maxlen: 24 89.221.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:a6:33:0e:25:89:0d:11:88:b1:c4:60:eb:d3:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad9681f144db1430ac315c8306e1c14730c5fec2 Validity Not Before: Jan 2 10:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=66b9f2d328374d56bef4f7d1943e23343770bda4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:10:63:05:f8:d1:bf:64:f4:a7:30:ed:db:cf: 1a:22:e0:3a:71:b0:27:73:fd:1f:af:55:18:43:97: 4e:65:ba:91:9c:7a:28:d2:b6:12:9f:2a:25:af:f1: d4:c5:91:d3:21:84:c2:9a:30:1a:3d:ae:77:2c:8c: 72:6e:62:4d:d8:cf:fc:74:e8:83:be:e7:96:20:a4: f9:b2:a5:5e:59:42:6e:3f:1c:92:56:78:38:2d:7b: 64:cf:f8:0a:e3:a9:8d:4f:ed:ba:a6:81:83:42:e4: a6:9b:6b:d4:e1:45:18:a1:7a:8f:ac:18:a2:91:32: d4:5b:d4:2b:03:35:84:a5:ba:c0:94:99:f6:7c:fa: 78:6e:92:4d:f0:3e:e6:46:b1:99:b8:14:62:b9:3a: dc:1a:8a:e1:8c:39:2f:aa:96:62:85:9f:e9:78:f9: a3:17:4d:29:60:56:4d:db:ff:41:2a:98:80:b3:9b: 2a:94:0e:9e:24:46:c1:b9:c1:fb:5b:64:8c:59:3b: 55:22:6c:fb:f2:21:d4:0e:4b:1c:25:ea:ec:a2:b9: e2:f8:8c:2d:78:57:28:31:2e:cd:8f:9f:a1:35:07: c0:14:f9:58:b5:c0:68:3d:c9:6b:24:c9:0d:47:8d: 03:b5:b0:1c:25:d7:c5:31:7d:90:c0:80:07:9c:33: a0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:B9:F2:D3:28:37:4D:56:BE:F4:F7:D1:94:3E:23:34:37:70:BD:A4 X509v3 Authority Key Identifier: keyid:AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/Zrny0yg3TVa-9PfRlD4jNDdwvaQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.221.80.0/22 Signature Algorithm: sha256WithRSAEncryption 2e:42:d0:58:f3:47:77:b7:13:0f:96:a0:5b:c8:80:c7:0f:93: c9:ce:17:d1:88:bd:97:bc:5b:e3:26:35:80:f2:f1:75:4b:ed: e2:50:e3:53:ac:a5:ca:ad:a0:be:74:4e:89:bf:0a:82:1b:a9: a6:36:f6:af:63:5d:48:2e:9c:4d:90:0f:86:91:a7:b5:a8:87: f2:e2:5a:d5:aa:26:f9:8c:dc:08:62:ce:d0:59:50:a7:3f:51: a6:42:bf:fc:6f:38:66:58:d4:3d:03:8b:a2:dc:77:28:2e:07: c7:49:19:d6:ff:ff:05:41:12:6b:9d:3a:5d:da:56:1e:af:cf: 9b:0c:8a:c5:6e:21:a8:bd:0e:23:9f:b1:e7:b5:c1:cc:2a:4f: 0b:47:29:40:3d:ac:1a:8b:a2:91:73:f9:dc:5c:ab:05:18:eb: 44:55:07:a0:f0:8d:f4:a0:5b:f4:4a:e6:dd:10:ee:ea:7b:0f: 96:19:cd:e4:43:5f:a8:de:e6:0d:c1:4e:a3:97:e5:2e:db:ae: d2:69:10:80:96:4b:78:e1:d0:44:c5:9f:5d:a4:ee:e4:9e:74: 71:77:b4:8b:7a:bf:ab:ff:e5:d3:59:c3:73:8f:4d:99:c4:ee: 30:d8:f3:10:c6:d6:bd:fe:df:10:03:00:2e:1c:e6:c1:f2:a6: 17:63:16:38 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N6YzDiWJDRGIscRg69NbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkOTY4MWYxNDRkYjE0MzBhYzMxNWM4MzA2ZTFjMTQ3MzBj NWZlYzIwHhcNMjYwMTAyMTAxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NmI5ZjJkMzI4Mzc0ZDU2YmVmNGY3ZDE5NDNlMjMzNDM3NzBiZGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRBjBfjRv2T0pzDt288aIuA6cbAn c/0fr1UYQ5dOZbqRnHoo0rYSnyolr/HUxZHTIYTCmjAaPa53LIxybmJN2M/8dOiD vueWIKT5sqVeWUJuPxySVng4LXtkz/gK46mNT+26poGDQuSmm2vU4UUYoXqPrBii kTLUW9QrAzWEpbrAlJn2fPp4bpJN8D7mRrGZuBRiuTrcGorhjDkvqpZihZ/pePmj F00pYFZN2/9BKpiAs5sqlA6eJEbBucH7W2SMWTtVImz78iHUDkscJersorni+Iwt eFcoMS7Nj5+hNQfAFPlYtcBoPclrJMkNR40DtbAcJdfFMX2QwIAHnDOgLQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGa58tMoN01WvvT30ZQ+IzQ3cL2kMB8GA1UdIwQY MBaAFK2WgfFE2xQwrDFcgwbhwUcwxf7CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclphQjhVVGJGRENzTVZ5REJ1SEJSekRGX3NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy80MDViNWYtOGQyNi00ZWUzLWI4N2Yt YTNhMTNlM2E3ZDgwLzEvWnJueTB5ZzNUVmEtOVBmUmxENGpORGR3dmFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy80MDViNWYtOGQyNi00ZWUzLWI4N2YtYTNhMTNlM2E3ZDgw LzEvclphQjhVVGJGRENzTVZ5REJ1SEJSekRGX3NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCWd1QMA0G CSqGSIb3DQEBCwUAA4IBAQAuQtBY80d3txMPlqBbyIDHD5PJzhfRiL2XvFvjJjWA 8vF1S+3iUONTrKXKraC+dE6JvwqCG6mmNvavY11ILpxNkA+Gkae1qIfy4lrVqib5 jNwIYs7QWVCnP1GmQr/8bzhmWNQ9A4ui3HcoLgfHSRnW//8FQRJrnTpd2lYer8+b DIrFbiGovQ4jn7HntcHMKk8LRylAPawai6KRc/ncXKsFGOtEVQeg8I30oFv0Subd EO7qew+WGc3kQ1+o3uYNwU6jl+Uu267SaRCAlkt44dBExZ9dpO7knnRxd7SLer+r /+XTWcNzj02ZxO4w2PMQxta9/t8QAwAuHObB8qYXYxY4 -----END CERTIFICATE-----Generated at Mon Jan 26 02:22:55 2026 by rpki-client