This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/Z99ngPTLOUTyTSdHuL5UZwAD6NY.roa File: Z99ngPTLOUTyTSdHuL5UZwAD6NY.roa (raw, json) Hash identifier: DZi9rhCzp49WwA1zBtpD/yG3bRcqi0eJ3S0hss0FXos= Subject key identifier: 67:DF:67:80:F4:CB:39:44:F2:4D:27:47:B8:BE:54:67:00:03:E8:D6 Certificate issuer: /CN=0d4b74d489c49278a3003994ac97fd407d7236e5 Certificate serial: 019B7BA3CB297073C729421EAEA3070CEFD9 Authority key identifier: 0D:4B:74:D4:89:C4:92:78:A3:00:39:94:AC:97:FD:40:7D:72:36:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/Z99ngPTLOUTyTSdHuL5UZwAD6NY.roa Signing time: Thu 01 Jan 2026 22:18:10 +0000 ROA not before: Thu 01 Jan 2026 22:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212751 IP address blocks: 45.66.144.0/24 maxlen: 24 45.66.145.0/24 maxlen: 24 45.66.146.0/24 maxlen: 24 45.66.147.0/24 maxlen: 24 2a10:7c40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.crl rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:cb:29:70:73:c7:29:42:1e:ae:a3:07:0c:ef:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d4b74d489c49278a3003994ac97fd407d7236e5 Validity Not Before: Jan 1 22:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=67df6780f4cb3944f24d2747b8be54670003e8d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3b:99:c2:1c:ec:ab:09:96:ee:bc:56:63:cd: 65:0d:fc:d9:bc:9f:b4:6c:dd:78:37:1d:ba:a8:43: fe:99:bc:69:dc:ed:5c:c2:f0:00:7a:f6:fe:59:60: 95:04:c7:57:57:5c:da:36:9f:db:9e:07:83:78:8b: d6:dd:93:7b:3a:ea:c2:57:a5:44:2b:fa:2c:85:87: ea:12:a4:6b:c0:ed:09:91:70:c0:c7:63:6a:83:52: 63:14:ca:f6:23:e9:06:01:b7:c5:1a:cd:00:17:4a: 7e:83:cd:8b:a9:75:ee:b6:06:f4:6c:fe:3d:5d:ca: 27:ae:ea:3e:2e:92:cf:64:b2:d6:2b:da:f6:71:51: 6e:ac:db:06:64:55:1a:4d:a5:66:24:d4:a3:a4:34: 6f:87:9d:a2:60:87:34:cd:23:5f:18:9b:f6:49:da: 40:b7:5b:74:b5:15:75:b8:25:73:6a:36:e3:d4:49: 14:8a:6f:e9:23:69:b7:80:35:bf:be:f5:2f:0f:90: 11:dc:ec:8d:17:b9:5b:bd:47:cc:e5:bc:01:b5:05: e4:50:c5:26:f1:6b:22:d2:c7:60:22:19:f1:2c:ac: 95:e5:5f:dc:b3:de:5e:c7:38:38:17:1c:28:c6:ca: 52:08:c8:94:03:e0:4b:5f:44:6f:79:9f:9d:d9:b4: ac:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:DF:67:80:F4:CB:39:44:F2:4D:27:47:B8:BE:54:67:00:03:E8:D6 X509v3 Authority Key Identifier: keyid:0D:4B:74:D4:89:C4:92:78:A3:00:39:94:AC:97:FD:40:7D:72:36:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/Z99ngPTLOUTyTSdHuL5UZwAD6NY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.66.144.0/22 IPv6: 2a10:7c40::/29 Signature Algorithm: sha256WithRSAEncryption 74:83:10:dd:6e:75:5b:3b:82:a8:f9:07:0a:9a:e4:e3:9b:71: 0d:83:fc:8a:da:fa:92:29:a0:a8:0f:95:1d:71:18:f9:c4:b5: a8:7b:0c:c1:95:46:6c:e9:18:3e:68:ca:0e:f5:b9:88:60:0d: 1b:d4:08:73:77:2f:64:d5:74:96:ad:a8:33:95:d2:70:37:7c: aa:93:e1:bd:85:6d:f9:cb:7a:79:30:cd:8c:b4:83:58:da:74: 8b:50:da:3d:66:b8:16:e9:0b:82:40:1f:5f:87:64:cd:92:9e: 58:03:81:f4:73:d2:5d:2f:40:7f:d0:8c:a8:f9:ca:77:fb:53: 28:e6:7a:9f:eb:aa:45:60:5f:40:97:08:18:6e:ae:5b:a3:08: 3b:54:d0:a5:f6:09:29:25:f5:bb:74:a8:9b:8f:b7:c3:a0:37: 98:02:de:91:31:b7:e9:25:c4:42:3f:04:b2:96:01:77:82:1a: 1d:ae:89:3a:92:cd:29:75:3e:a0:78:02:aa:d4:bb:6f:c7:1f: e5:a3:62:54:0b:0d:a1:26:32:fd:ec:e7:81:6c:81:8c:71:03: 07:f6:f8:7d:a7:f5:4f:cd:46:da:e5:1c:df:82:9b:ba:b1:8e: ea:27:8b:1b:a1:2d:13:85:32:c0:a0:27:6f:5d:d5:4a:72:7c: 8b:d1:16:2a -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7o8spcHPHKUIerqMHDO/ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNGI3NGQ0ODljNDkyNzhhMzAwMzk5NGFjOTdmZDQwN2Q3 MjM2ZTUwHhcNMjYwMTAxMjIxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2N2RmNjc4MGY0Y2IzOTQ0ZjI0ZDI3NDdiOGJlNTQ2NzAwMDNlOGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DuZwhzsqwmW7rxWY81lDfzZvJ+0 bN14Nx26qEP+mbxp3O1cwvAAevb+WWCVBMdXV1zaNp/bngeDeIvW3ZN7OurCV6VE K/oshYfqEqRrwO0JkXDAx2Nqg1JjFMr2I+kGAbfFGs0AF0p+g82LqXXutgb0bP49 Xconruo+LpLPZLLWK9r2cVFurNsGZFUaTaVmJNSjpDRvh52iYIc0zSNfGJv2SdpA t1t0tRV1uCVzajbj1EkUim/pI2m3gDW/vvUvD5AR3OyNF7lbvUfM5bwBtQXkUMUm 8Wsi0sdgIhnxLKyV5V/cs95exzg4FxwoxspSCMiUA+BLX0RveZ+d2bSszwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFGffZ4D0yzlE8k0nR7i+VGcAA+jWMB8GA1UdIwQY MBaAFA1LdNSJxJJ4owA5lKyX/UB9cjblMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFV0MDFJbkVrbmlqQURtVXJKZjlRSDF5TnVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9iNjk2MzMtYzAzMS00ZDI1LTllMGUt NjU2NDBmMWMxNzlhLzEvWjk5bmdQVExPVVR5VFNkSHVMNVVad0FENk5ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9iNjk2MzMtYzAzMS00ZDI1LTllMGUtNjU2NDBmMWMxNzlh LzEvRFV0MDFJbkVrbmlqQURtVXJKZjlRSDF5TnVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLUKQMA0E AgACMAcDBQMqEHxAMA0GCSqGSIb3DQEBCwUAA4IBAQB0gxDdbnVbO4Ko+QcKmuTj m3ENg/yK2vqSKaCoD5UdcRj5xLWoewzBlUZs6Rg+aMoO9bmIYA0b1Ahzdy9k1XSW ragzldJwN3yqk+G9hW35y3p5MM2MtINY2nSLUNo9ZrgW6QuCQB9fh2TNkp5YA4H0 c9JdL0B/0Iyo+cp3+1Mo5nqf66pFYF9AlwgYbq5bowg7VNCl9gkpJfW7dKibj7fD oDeYAt6RMbfpJcRCPwSylgF3ghodrok6ks0pdT6geAKq1Ltvxx/lo2JUCw2hJjL9 7OeBbIGMcQMH9vh9p/VPzUba5Rzfgpu6sY7qJ4sboS0ThTLAoCdvXdVKcnyL0RYq -----END CERTIFICATE-----Generated at Mon Feb 9 22:27:58 2026 by rpki-client