This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/znypVRB8HdELH7t-EZvR2o9mzZ0.roa File: znypVRB8HdELH7t-EZvR2o9mzZ0.roa (raw, json) Hash identifier: VtWRBjrQreIxKps4k8DyQN35GM7QKv0koJ0vJoZMRsE= Subject key identifier: CE:7C:A9:55:10:7C:1D:D1:0B:1F:BB:7E:11:9B:D1:DA:8F:66:CD:9D Certificate issuer: /CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625 Certificate serial: 019B8E74D1A95DAC263045A1F2992416F1C8 Authority key identifier: 8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/znypVRB8HdELH7t-EZvR2o9mzZ0.roa Signing time: Mon 05 Jan 2026 13:59:38 +0000 ROA not before: Mon 05 Jan 2026 13:59:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 91.200.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8e:74:d1:a9:5d:ac:26:30:45:a1:f2:99:24:16:f1:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625 Validity Not Before: Jan 5 13:59:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ce7ca955107c1dd10b1fbb7e119bd1da8f66cd9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:91:aa:45:73:a4:6b:7f:2d:77:40:81:c7:8e: a5:fc:7c:a7:db:5f:55:b6:c6:88:ae:69:67:b2:8a: 8d:27:e2:46:95:d7:99:9e:c5:a8:f8:0d:54:64:2b: 3a:1e:ec:f2:d8:b1:47:b1:7d:1e:ef:42:1e:70:f7: 37:3b:d1:83:e6:81:f1:67:b7:15:16:0a:5f:90:a5: ff:46:39:d3:56:ac:4b:b7:05:cf:ae:6e:3f:64:7e: a6:9a:6e:5b:e3:fc:d2:35:35:4c:71:c5:ed:85:7e: 5a:29:82:d8:1a:c3:c0:bc:c3:f1:4f:73:fe:4e:09: 0a:7b:0c:af:8c:18:18:c9:21:0f:47:6b:22:8b:13: 0d:17:6b:06:06:ab:e5:c1:ee:b6:23:fd:68:9e:8d: 41:18:ed:eb:ad:72:4e:23:be:f1:5d:cc:d3:b8:53: 7b:5e:4a:7c:81:6c:e5:2a:10:ba:40:3d:c1:08:e7: 44:3e:4d:7d:50:02:04:88:7a:76:28:70:e2:b4:a8: 69:75:1f:c7:03:8d:00:e3:de:93:ac:a9:34:c6:25: 17:be:ad:7f:84:ab:34:20:90:cc:69:b1:5b:93:18: d8:cc:c1:a1:11:d1:f8:19:9d:cb:2a:10:f7:59:4d: ea:34:59:5d:49:c1:9f:06:39:e0:ca:c1:3a:17:ff: b4:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:7C:A9:55:10:7C:1D:D1:0B:1F:BB:7E:11:9B:D1:DA:8F:66:CD:9D X509v3 Authority Key Identifier: keyid:8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/znypVRB8HdELH7t-EZvR2o9mzZ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.200.59.0/24 Signature Algorithm: sha256WithRSAEncryption 40:85:1a:94:12:89:f4:65:60:7f:59:e6:4c:5c:8b:db:2c:8b: f2:97:bd:f1:f8:9f:9f:00:7a:ea:a5:3b:b1:04:53:1a:c8:d5: d2:9c:68:af:05:23:84:10:8c:ed:89:46:e5:ed:64:cf:2c:eb: 64:52:76:64:2f:99:e4:30:a8:67:62:17:be:2b:29:df:40:53: 1f:3c:28:d0:95:fe:77:b2:1a:7d:0a:10:b0:0a:fb:f1:c6:9b: 06:26:8a:06:2b:d0:64:53:00:63:c4:32:5a:8c:c6:18:61:1e: 33:60:f2:df:e7:e8:ef:c2:4f:20:f1:72:2b:0a:1d:64:37:4d: c1:ee:21:ee:24:c7:06:73:08:15:24:3a:cb:47:18:c5:88:b5: b4:1f:c2:70:56:70:65:5d:87:7c:75:1f:7a:44:52:61:2a:56: 1b:6f:f1:5a:81:bc:1f:2b:59:05:f7:e4:1b:a1:f5:76:6c:6f: 28:ba:d3:c8:69:91:f1:76:a0:8e:dd:5b:d3:a3:9b:51:ad:8a: d4:b1:ab:38:da:35:53:42:3a:89:fc:7e:a5:51:e0:d9:a8:a7: 98:14:2a:fb:8b:bc:cb:4b:c3:c7:81:af:56:cf:f2:5c:75:8c: 64:4f:7f:55:fb:3c:47:44:fb:a4:6d:82:d8:f5:2c:ec:01:80: ab:74:e2:ca -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuOdNGpXawmMEWh8pkkFvHIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhNjAyNGIyYzI3YTY3ZGZmNWI2NTRlZmEwNmJmN2JmYzEy MjI2MjUwHhcNMjYwMTA1MTM1OTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTdjYTk1NTEwN2MxZGQxMGIxZmJiN2UxMTliZDFkYThmNjZjZDlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5GqRXOka38td0CBx46l/Hyn219V tsaIrmlnsoqNJ+JGldeZnsWo+A1UZCs6Huzy2LFHsX0e70IecPc3O9GD5oHxZ7cV FgpfkKX/RjnTVqxLtwXPrm4/ZH6mmm5b4/zSNTVMccXthX5aKYLYGsPAvMPxT3P+ TgkKewyvjBgYySEPR2siixMNF2sGBqvlwe62I/1ono1BGO3rrXJOI77xXczTuFN7 Xkp8gWzlKhC6QD3BCOdEPk19UAIEiHp2KHDitKhpdR/HA40A496TrKk0xiUXvq1/ hKs0IJDMabFbkxjYzMGhEdH4GZ3LKhD3WU3qNFldScGfBjngysE6F/+0rwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM58qVUQfB3RCx+7fhGb0dqPZs2dMB8GA1UdIwQY MBaAFIpgJLLCemff9bZU76Br97/BIiYlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaW1Ba3NzSjZaOV8xdGxUdm9HdjN2OEVpSmlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zM2VjY2YtMGFlMy00YzdlLWE0NDEt MDhlOGYwY2JiODQwLzEvem55cFZSQjhIZEVMSDd0LUVadlIybzltelowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8zM2VjY2YtMGFlMy00YzdlLWE0NDEtMDhlOGYwY2JiODQw LzEvaW1Ba3NzSjZaOV8xdGxUdm9HdjN2OEVpSmlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8g7MA0G CSqGSIb3DQEBCwUAA4IBAQBAhRqUEon0ZWB/WeZMXIvbLIvyl73x+J+fAHrqpTux BFMayNXSnGivBSOEEIztiUbl7WTPLOtkUnZkL5nkMKhnYhe+KynfQFMfPCjQlf53 shp9ChCwCvvxxpsGJooGK9BkUwBjxDJajMYYYR4zYPLf5+jvwk8g8XIrCh1kN03B 7iHuJMcGcwgVJDrLRxjFiLW0H8JwVnBlXYd8dR96RFJhKlYbb/FagbwfK1kF9+Qb ofV2bG8outPIaZHxdqCO3VvTo5tRrYrUsas42jVTQjqJ/H6lUeDZqKeYFCr7i7zL S8PHga9Wz/JcdYxkT39V+zxHRPukbYLY9SzsAYCrdOLK -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:50 2026 by rpki-client