This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/Zy9ArgNtGZeoSvcBNVhQm83CAtY.roa File: Zy9ArgNtGZeoSvcBNVhQm83CAtY.roa (raw, json) Hash identifier: 2tInoyGIeDu4rQu0+WHE69OTAAXptyalAWcz50Rg2Q8= Subject key identifier: 67:2F:40:AE:03:6D:19:97:A8:4A:F7:01:35:58:50:9B:CD:C2:02:D6 Certificate issuer: /CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a Certificate serial: 019B79ED1CBB41E632DDCFE9FD440A90E035 Authority key identifier: 3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/Zy9ArgNtGZeoSvcBNVhQm83CAtY.roa Signing time: Thu 01 Jan 2026 14:19:01 +0000 ROA not before: Thu 01 Jan 2026 14:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 194.39.228.0/24 maxlen: 24 194.39.229.0/24 maxlen: 24 194.39.230.0/24 maxlen: 24 194.39.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:1c:bb:41:e6:32:dd:cf:e9:fd:44:0a:90:e0:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a Validity Not Before: Jan 1 14:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=672f40ae036d1997a84af7013558509bcdc202d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5f:ff:f4:07:7c:c0:9d:a9:ac:fe:3b:60:0a: 33:70:55:e8:8d:02:97:53:e7:ed:8a:2b:81:2e:8e: e8:ad:bf:47:11:3c:a7:ff:13:d7:f7:05:b2:d1:6c: 76:3e:ec:5d:c7:23:66:de:24:92:12:f3:47:1d:ad: db:69:1b:c4:48:15:bd:06:50:b4:f5:0f:e5:3f:8e: 65:71:44:2b:af:81:65:a9:b0:7d:12:92:7c:c6:70: 49:83:a8:df:8e:19:87:56:01:ce:30:97:5a:4c:ac: a9:10:25:1c:ca:40:35:8b:88:91:5a:52:a8:6a:ed: ae:9b:52:8e:c4:62:88:61:bb:45:8d:2f:87:15:fc: 55:26:4e:66:fa:29:fa:01:93:82:31:2e:c5:ea:f8: 9a:a6:91:fc:2d:d7:d1:eb:70:c0:45:0e:49:db:ba: 9a:a0:eb:53:45:13:dd:c0:3f:cd:b0:2c:79:d8:31: 37:54:88:37:dc:f2:2e:56:c6:5d:e2:28:47:a5:51: dd:53:70:6a:b0:af:42:d3:ff:d8:b9:57:c9:a4:c6: 5b:08:74:63:34:10:70:2a:09:af:cf:76:61:f0:b3: 46:7f:07:4c:a7:24:37:6d:92:4a:e9:21:e3:99:29: 73:10:ea:78:0a:77:1d:91:6a:a7:19:8c:ed:0e:15: c1:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:2F:40:AE:03:6D:19:97:A8:4A:F7:01:35:58:50:9B:CD:C2:02:D6 X509v3 Authority Key Identifier: keyid:3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/Zy9ArgNtGZeoSvcBNVhQm83CAtY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.39.228.0/22 Signature Algorithm: sha256WithRSAEncryption 64:ad:48:43:ae:21:74:cf:c2:7d:ac:2a:e7:01:dd:cd:bf:66: 0f:81:ca:50:07:72:d9:b5:25:d5:46:f4:1d:a2:83:be:16:8a: 71:21:b1:44:3f:3a:1b:39:74:3d:c3:e1:eb:1c:16:c9:10:e4: cd:21:d5:69:4a:f6:43:84:4c:bb:fa:01:57:69:96:0e:68:85: 70:53:a2:91:d8:8b:20:ac:8e:3c:30:15:eb:af:c6:83:f8:55: 01:49:d5:0d:f0:28:2f:d4:d3:bb:f2:71:f0:99:58:63:ee:2a: 49:70:d2:b1:35:6c:f9:dc:95:03:5a:6f:23:64:28:36:5d:78: ed:eb:41:c3:0f:c9:51:ae:88:9a:ad:a6:99:47:e5:c6:6a:8b: 48:bb:0a:ab:1a:50:85:ff:22:3a:09:92:b4:a8:23:92:29:a7: 75:b4:bb:d7:3e:1f:71:20:3f:9f:88:8e:b8:20:09:a9:cd:c9: bc:ec:bc:c6:db:a4:b6:36:b3:28:8b:28:fd:9e:d4:77:91:5e: a9:16:87:89:5c:82:0f:1c:86:60:4e:9b:17:76:25:6d:2d:ba: f5:2b:d1:88:db:e2:6c:4a:28:b6:be:03:7a:23:c4:d4:66:46: d8:b3:54:b6:af:40:eb:12:9c:02:58:81:63:21:0a:83:c7:9b: c1:6b:51:cc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57Ry7QeYy3c/p/UQKkOA1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkM2Y4N2JiN2Y3ODc0YWE3ZTE1Y2ZlYzliYmY2YWFlM2M5 Y2UzM2EwHhcNMjYwMTAxMTQxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NzJmNDBhZTAzNmQxOTk3YTg0YWY3MDEzNTU4NTA5YmNkYzIwMmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsl//9Ad8wJ2prP47YAozcFXojQKX U+ftiiuBLo7orb9HETyn/xPX9wWy0Wx2PuxdxyNm3iSSEvNHHa3baRvESBW9BlC0 9Q/lP45lcUQrr4FlqbB9EpJ8xnBJg6jfjhmHVgHOMJdaTKypECUcykA1i4iRWlKo au2um1KOxGKIYbtFjS+HFfxVJk5m+in6AZOCMS7F6viappH8LdfR63DARQ5J27qa oOtTRRPdwD/NsCx52DE3VIg33PIuVsZd4ihHpVHdU3BqsK9C0//YuVfJpMZbCHRj NBBwKgmvz3Zh8LNGfwdMpyQ3bZJK6SHjmSlzEOp4CncdkWqnGYztDhXBiwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGcvQK4DbRmXqEr3ATVYUJvNwgLWMB8GA1UdIwQY MBaAFD0/h7t/eHSqfhXP7Ju/aq48nOM6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFQtSHUzOTRkS3AtRmNfc203OXFyanljNHpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83MTAxNWEtMTFiZS00NzFlLTk1OTIt NjJiZTUzNDI1Njc2LzEvWnk5QXJnTnRHWmVvU3ZjQk5WaFFtODNDQXRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC83MTAxNWEtMTFiZS00NzFlLTk1OTItNjJiZTUzNDI1Njc2 LzEvUFQtSHUzOTRkS3AtRmNfc203OXFyanljNHpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwifkMA0G CSqGSIb3DQEBCwUAA4IBAQBkrUhDriF0z8J9rCrnAd3Nv2YPgcpQB3LZtSXVRvQd ooO+FopxIbFEPzobOXQ9w+HrHBbJEOTNIdVpSvZDhEy7+gFXaZYOaIVwU6KR2Isg rI48MBXrr8aD+FUBSdUN8Cgv1NO78nHwmVhj7ipJcNKxNWz53JUDWm8jZCg2XXjt 60HDD8lRroiaraaZR+XGaotIuwqrGlCF/yI6CZK0qCOSKad1tLvXPh9xID+fiI64 IAmpzcm87LzG26S2NrMoiyj9ntR3kV6pFoeJXIIPHIZgTpsXdiVtLbr1K9GI2+Js Sii2vgN6I8TUZkbYs1S2r0DrEpwCWIFjIQqDx5vBa1HM -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:04 2026 by rpki-client