This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ztyz1eu0724QdTMRWxDO5pAwrP4.roa File: ztyz1eu0724QdTMRWxDO5pAwrP4.roa (raw, json) Hash identifier: Mn5DCv9VyDJ4jg3rSRQv0zTqmZ1PpFrps2wn3d6Zfho= Subject key identifier: CE:DC:B3:D5:EB:B4:EF:6E:10:75:33:11:5B:10:CE:E6:90:30:AC:FE Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Certificate serial: 019B7F15F0F36CBCFA3ADA90228E307A87CE Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ztyz1eu0724QdTMRWxDO5pAwrP4.roa Signing time: Fri 02 Jan 2026 14:21:42 +0000 ROA not before: Fri 02 Jan 2026 14:21:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209043 IP address blocks: 85.209.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:f0:f3:6c:bc:fa:3a:da:90:22:8e:30:7a:87:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Validity Not Before: Jan 2 14:21:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cedcb3d5ebb4ef6e107533115b10cee69030acfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:59:38:43:8c:5d:96:9f:50:81:06:05:0a:6b: 08:21:08:6c:4e:6d:49:c9:3d:8a:7e:f4:ac:95:7b: 79:78:27:8f:8c:d2:b4:39:16:a4:c3:35:91:f9:fe: 3d:9a:3d:06:50:49:7d:d4:e8:bc:62:42:9b:23:ff: 3b:48:1c:bc:3e:1a:51:7b:2f:2c:4e:de:d5:2f:c1: ce:57:b8:60:41:52:b0:66:1d:eb:16:79:40:89:bd: dd:1f:9b:b7:5d:4b:59:4d:44:a5:1c:4a:18:4e:ef: c3:9e:ee:d8:92:73:74:23:ae:d7:5d:a1:a0:6b:64: 66:62:1d:d7:5f:38:78:a3:dd:99:ed:20:be:8b:46: 69:e2:1f:92:16:95:60:b5:ec:b6:e8:9d:17:d5:1c: 6c:b7:7b:ae:63:78:b3:ad:64:2f:5a:d0:ae:9c:f2: 4e:27:b9:fd:eb:90:73:8a:68:27:44:98:a7:6c:f4: 17:ee:be:8c:34:f8:54:4a:0f:df:c0:72:d2:3b:58: 24:1c:d3:1d:ca:b4:50:b9:67:24:b5:97:ba:81:11: 4f:23:48:34:80:6f:cf:47:69:8e:10:ed:de:e6:1f: ff:18:b6:9d:33:82:55:f8:e8:ba:51:d1:09:f7:98: 47:8a:a3:8a:3d:7c:ae:fa:54:ab:db:f6:6d:c1:c5: c5:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:DC:B3:D5:EB:B4:EF:6E:10:75:33:11:5B:10:CE:E6:90:30:AC:FE X509v3 Authority Key Identifier: keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ztyz1eu0724QdTMRWxDO5pAwrP4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.209.121.0/24 Signature Algorithm: sha256WithRSAEncryption a6:8a:71:ae:f3:da:eb:ce:c3:a8:98:0c:6d:10:24:6a:80:60: c7:aa:61:28:41:a1:3a:28:7a:e8:08:c0:5e:25:e4:c7:df:e7: 3e:e5:60:4e:82:6e:e6:c3:01:14:10:47:ba:17:3e:ae:83:d0: 7d:b9:85:71:d0:04:ec:57:a0:6a:6a:51:59:7d:5c:a1:b3:96: 4e:19:13:f4:90:9e:a5:08:3d:41:0c:09:dc:a1:f5:f8:36:3f: de:a1:84:f0:38:84:59:eb:4e:b1:71:b6:9c:61:fc:ca:36:70: 53:2a:2e:70:92:3e:4e:f3:85:8a:0b:21:b5:b5:08:66:0f:03: 69:40:42:6c:3d:0e:90:12:63:8d:71:13:83:eb:4e:2e:5a:b2: a5:05:94:06:e3:4f:62:1a:22:0b:44:4e:75:41:e8:6d:c8:6a: b0:73:6d:4e:e1:fc:da:25:99:f5:bc:2a:ac:aa:29:f1:82:76: c5:db:af:08:62:50:4e:b8:9c:11:29:9c:0f:7e:f7:a9:7e:21: 6f:a2:b5:4a:ef:c2:cb:51:3e:38:64:03:57:b0:88:a1:10:81: 00:d7:c9:3c:24:86:99:1d:f5:eb:52:3b:e0:46:ae:ea:4c:03: 9d:da:f4:33:48:3e:f5:2d:1e:65:d5:ea:f4:42:f0:0e:a0:fb: 09:e8:9c:d8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FfDzbLz6OtqQIo4weofOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy YTI4YTEwHhcNMjYwMTAyMTQyMTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZWRjYjNkNWViYjRlZjZlMTA3NTMzMTE1YjEwY2VlNjkwMzBhY2ZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1k4Q4xdlp9QgQYFCmsIIQhsTm1J yT2KfvSslXt5eCePjNK0ORakwzWR+f49mj0GUEl91Oi8YkKbI/87SBy8PhpRey8s Tt7VL8HOV7hgQVKwZh3rFnlAib3dH5u3XUtZTUSlHEoYTu/Dnu7YknN0I67XXaGg a2RmYh3XXzh4o92Z7SC+i0Zp4h+SFpVgtey26J0X1Rxst3uuY3izrWQvWtCunPJO J7n965BzimgnRJinbPQX7r6MNPhUSg/fwHLSO1gkHNMdyrRQuWcktZe6gRFPI0g0 gG/PR2mOEO3e5h//GLadM4JV+Oi6UdEJ95hHiqOKPXyu+lSr2/ZtwcXFdwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM7cs9XrtO9uEHUzEVsQzuaQMKz+MB8GA1UdIwQY MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt ZWVmMzUxMWY2YzYwLzEvenR5ejFldTA3MjRRZFRNUld4RE81cEF3clA0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVdF5MA0G CSqGSIb3DQEBCwUAA4IBAQCminGu89rrzsOomAxtECRqgGDHqmEoQaE6KHroCMBe JeTH3+c+5WBOgm7mwwEUEEe6Fz6ug9B9uYVx0ATsV6BqalFZfVyhs5ZOGRP0kJ6l CD1BDAncofX4Nj/eoYTwOIRZ606xcbacYfzKNnBTKi5wkj5O84WKCyG1tQhmDwNp QEJsPQ6QEmONcROD604uWrKlBZQG409iGiILRE51QehtyGqwc21O4fzaJZn1vCqs qinxgnbF268IYlBOuJwRKZwPfvepfiFvorVK78LLUT44ZANXsIihEIEA18k8JIaZ HfXrUjvgRq7qTAOd2vQzSD71LR5l1er0QvAOoPsJ6JzY -----END CERTIFICATE-----Generated at Tue Jan 6 20:51:29 2026 by rpki-client