This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/ZTv1yaUdeeTsSjhgkcbW3sOan8A.roa File: ZTv1yaUdeeTsSjhgkcbW3sOan8A.roa (raw, json) Hash identifier: vGSSEZMU1rC38w1BEnBzc1B2fso5PDq2a8Oi71K6PZk= Subject key identifier: 65:3B:F5:C9:A5:1D:79:E4:EC:4A:38:60:91:C6:D6:DE:C3:9A:9F:C0 Certificate issuer: /CN=1dacbdc7dc874bd8be2336f5667cdf77bd980c77 Certificate serial: 019B7F1560689C8A33C3F2D35B5359FF1161 Authority key identifier: 1D:AC:BD:C7:DC:87:4B:D8:BE:23:36:F5:66:7C:DF:77:BD:98:0C:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hay9x9yHS9i-Izb1Znzfd72YDHc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/ZTv1yaUdeeTsSjhgkcbW3sOan8A.roa Signing time: Fri 02 Jan 2026 14:21:05 +0000 ROA not before: Fri 02 Jan 2026 14:21:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199749 IP address blocks: 84.39.32.0/24 maxlen: 24 185.47.80.0/24 maxlen: 24 185.47.81.0/24 maxlen: 24 185.47.82.0/24 maxlen: 24 185.47.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft rsync://rpki.ripe.net/repository/DEFAULT/Hay9x9yHS9i-Izb1Znzfd72YDHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:60:68:9c:8a:33:c3:f2:d3:5b:53:59:ff:11:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dacbdc7dc874bd8be2336f5667cdf77bd980c77 Validity Not Before: Jan 2 14:21:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=653bf5c9a51d79e4ec4a386091c6d6dec39a9fc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:78:c7:39:03:37:6d:b4:cd:2e:7c:79:6f:5f: cf:25:1a:bf:46:c1:6d:a9:f5:1a:04:bf:e6:bb:69: 0d:d6:69:0a:13:a5:c9:3c:e1:79:6b:71:46:81:49: 1d:ab:eb:03:f6:03:04:c8:cf:e2:34:4a:71:3c:73: a6:5e:91:cf:22:e1:b9:b5:2f:36:a2:b4:a2:77:33: fc:70:be:ee:48:84:f0:8b:32:de:32:69:a6:29:2d: 47:a2:6e:df:a8:9a:f4:fe:be:9b:3f:e4:93:e5:dc: dc:06:04:d4:0f:6f:eb:07:91:31:10:bb:4c:6b:1a: 6e:45:23:f6:a5:48:f7:3e:92:cd:e4:b7:48:5f:ca: 96:30:be:98:03:d3:1d:4e:fe:62:a4:3f:7c:d6:73: b3:61:8e:c3:6c:12:d3:ab:84:f8:1a:11:9a:67:53: 7b:31:d5:9f:d0:c0:3d:e1:17:53:c1:85:6b:c4:ef: aa:f0:6a:93:c4:cd:f5:dd:7a:e7:88:6d:0f:a6:fa: c8:e3:d1:b4:49:ed:18:38:9c:49:91:7b:a4:b5:42: 89:5f:96:63:c4:cc:db:53:f2:05:c3:2b:0b:f0:c6: d9:6b:7b:15:fc:b1:64:fc:7f:b6:4e:8c:5e:d6:ad: 50:e1:ab:fc:24:1a:b3:3a:9e:83:52:1b:74:07:c5: 97:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:3B:F5:C9:A5:1D:79:E4:EC:4A:38:60:91:C6:D6:DE:C3:9A:9F:C0 X509v3 Authority Key Identifier: keyid:1D:AC:BD:C7:DC:87:4B:D8:BE:23:36:F5:66:7C:DF:77:BD:98:0C:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hay9x9yHS9i-Izb1Znzfd72YDHc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/ZTv1yaUdeeTsSjhgkcbW3sOan8A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.39.32.0/24 185.47.80.0/22 Signature Algorithm: sha256WithRSAEncryption 38:0e:8e:64:e4:b3:a2:e1:23:39:b4:ff:d0:7c:57:0d:4f:fb: cb:a7:8a:46:f0:d1:08:29:b9:ce:6c:de:5a:cb:59:35:85:bf: c0:5b:b7:2c:e4:13:30:fb:9c:eb:e1:39:9b:d1:cf:61:84:e3: 3f:53:b0:ce:42:24:86:a3:34:36:51:7c:a4:e5:65:7a:1d:52: 87:ae:ce:e3:9e:7b:44:68:60:cc:c1:66:6b:3b:f2:63:4f:91: 95:2f:5c:2e:eb:d7:08:f0:00:9e:f7:a4:99:98:9f:29:a5:0a: 52:fd:ff:e4:3b:ad:da:d0:53:65:ea:fb:1b:52:29:77:d1:85: da:ff:d2:d3:56:8d:c7:d0:2d:cb:0e:c1:0b:dd:5d:34:b1:de: bb:f3:60:ff:ec:5f:71:bc:2a:c6:ac:c6:cd:26:04:d4:48:b4: 75:86:ba:7e:e3:d3:5e:65:9b:88:68:c8:52:31:90:5f:b9:a9: f1:76:98:71:fe:e0:fa:7d:d6:48:be:b1:f7:dc:84:7c:14:ad: a3:f3:b0:23:3c:d1:a7:24:bd:d7:3f:43:dd:6d:a8:05:91:ae: 6a:26:49:ff:40:2a:48:e9:1b:87:de:45:7e:f4:db:b2:a6:c3: 4f:a5:ba:c3:43:bc:42:f6:8c:07:1a:a8:3c:19:e7:a0:e1:a5: dd:0d:df:e8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FWBonIozw/LTW1NZ/xFhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkYWNiZGM3ZGM4NzRiZDhiZTIzMzZmNTY2N2NkZjc3YmQ5 ODBjNzcwHhcNMjYwMTAyMTQyMTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTNiZjVjOWE1MWQ3OWU0ZWM0YTM4NjA5MWM2ZDZkZWMzOWE5ZmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HjHOQM3bbTNLnx5b1/PJRq/RsFt qfUaBL/mu2kN1mkKE6XJPOF5a3FGgUkdq+sD9gMEyM/iNEpxPHOmXpHPIuG5tS82 orSidzP8cL7uSITwizLeMmmmKS1Hom7fqJr0/r6bP+ST5dzcBgTUD2/rB5ExELtM axpuRSP2pUj3PpLN5LdIX8qWML6YA9MdTv5ipD981nOzYY7DbBLTq4T4GhGaZ1N7 MdWf0MA94RdTwYVrxO+q8GqTxM313XrniG0PpvrI49G0Se0YOJxJkXuktUKJX5Zj xMzbU/IFwysL8MbZa3sV/LFk/H+2Toxe1q1Q4av8JBqzOp6DUht0B8WXUQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGU79cmlHXnk7Eo4YJHG1t7Dmp/AMB8GA1UdIwQY MBaAFB2svcfch0vYviM29WZ833e9mAx3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGF5OXg5eUhTOWktSXpiMVpuemZkNzJZREhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9mMDRmODUtN2IwNC00ODdjLWExZTct ZjcxYTIyMTQ1ZDRlLzEvWlR2MXlhVWRlZVRzU2poZ2tjYlczc09hbjhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9mMDRmODUtN2IwNC00ODdjLWExZTctZjcxYTIyMTQ1ZDRl LzEvSGF5OXg5eUhTOWktSXpiMVpuemZkNzJZREhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVCcgAwQC uS9QMA0GCSqGSIb3DQEBCwUAA4IBAQA4Do5k5LOi4SM5tP/QfFcNT/vLp4pG8NEI KbnObN5ay1k1hb/AW7cs5BMw+5zr4Tmb0c9hhOM/U7DOQiSGozQ2UXyk5WV6HVKH rs7jnntEaGDMwWZrO/JjT5GVL1wu69cI8ACe96SZmJ8ppQpS/f/kO63a0FNl6vsb Uil30YXa/9LTVo3H0C3LDsEL3V00sd6782D/7F9xvCrGrMbNJgTUSLR1hrp+49Ne ZZuIaMhSMZBfuanxdphx/uD6fdZIvrH33IR8FK2j87AjPNGnJL3XP0PdbagFka5q Jkn/QCpI6RuH3kV+9NuypsNPpbrDQ7xC9owHGqg8Geeg4aXdDd/o -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:16 2026 by rpki-client