This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/zBYtGjJx0SDgAamEQM20aTAainM.roa File: zBYtGjJx0SDgAamEQM20aTAainM.roa (raw, json) Hash identifier: SpCq7G69+l1y5Xw0RtXWj3cYKHjMPmny1b0+UtkUplE= Subject key identifier: CC:16:2D:1A:32:71:D1:20:E0:01:A9:84:40:CD:B4:69:30:1A:8A:73 Certificate issuer: /CN=029e98336f6a6cc9dbcf1ecb4895580f094e3e2b Certificate serial: 019B7F82E833BC1527C53A24377BB335E957 Authority key identifier: 02:9E:98:33:6F:6A:6C:C9:DB:CF:1E:CB:48:95:58:0F:09:4E:3E:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/zBYtGjJx0SDgAamEQM20aTAainM.roa Signing time: Fri 02 Jan 2026 16:20:44 +0000 ROA not before: Fri 02 Jan 2026 16:20:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8376 IP address blocks: 185.98.224.0/22 maxlen: 24 212.34.0.0/19 maxlen: 24 213.139.32.0/19 maxlen: 24 2a00:18d8::/29 maxlen: 64 2a00:18d8::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.mft rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:e8:33:bc:15:27:c5:3a:24:37:7b:b3:35:e9:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=029e98336f6a6cc9dbcf1ecb4895580f094e3e2b Validity Not Before: Jan 2 16:20:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc162d1a3271d120e001a98440cdb469301a8a73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:54:ed:10:7c:10:fc:89:1b:a0:84:5a:de:7b: 34:f1:8d:6e:bf:47:36:14:97:59:47:6b:b7:76:bd: 85:25:ba:bf:14:d2:24:cd:ed:47:c6:fe:35:71:c5: 12:8d:aa:2b:06:5c:cc:28:0f:79:8a:5b:1e:6f:25: 29:68:b4:88:d2:88:10:40:ae:b3:bc:44:59:4a:59: 44:1e:ce:77:06:ea:65:a6:ff:9b:d9:e3:be:2a:15: 39:8a:36:4f:43:fb:09:24:47:7d:4c:82:81:7e:99: 13:ce:19:ac:b0:5a:8e:ec:7c:06:7c:7c:f7:0f:3b: 71:8f:40:fd:c9:4c:21:de:ce:05:5f:21:f2:93:b3: c8:39:f9:a5:b5:d9:c9:2c:f8:86:a2:85:10:93:1a: ba:d3:9b:2e:33:8b:46:3f:7e:44:40:1f:ca:63:9d: dc:9d:66:84:ad:ce:99:bc:d5:25:d4:11:7d:e7:42: 89:ef:cb:91:1a:c0:d8:37:fd:2b:83:29:53:31:bf: 56:15:e3:a8:df:97:be:ce:06:11:74:00:ad:77:94: 52:45:48:0a:64:f3:69:ca:21:50:aa:52:e2:d4:00: 9e:bf:6a:b3:c8:6b:e9:90:10:64:eb:76:dd:ac:97: 81:84:28:ce:4e:89:b2:cd:fb:73:05:5a:01:9f:3c: db:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:16:2D:1A:32:71:D1:20:E0:01:A9:84:40:CD:B4:69:30:1A:8A:73 X509v3 Authority Key Identifier: keyid:02:9E:98:33:6F:6A:6C:C9:DB:CF:1E:CB:48:95:58:0F:09:4E:3E:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/zBYtGjJx0SDgAamEQM20aTAainM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.98.224.0/22 212.34.0.0/19 213.139.32.0/19 IPv6: 2a00:18d8::/29 Signature Algorithm: sha256WithRSAEncryption 56:63:b2:e4:d9:3e:61:94:ec:c9:b4:82:7d:fb:cd:44:39:f3: bb:26:70:25:32:e9:2d:38:e9:af:98:9c:b8:15:5b:52:fd:fc: 8a:f2:c4:32:a6:5b:03:a6:ba:90:b2:77:b0:25:f0:d4:40:d7: a5:00:a1:3e:6d:7a:08:3f:d8:36:b4:ed:25:2a:bc:69:af:ab: a1:e3:0b:d4:2e:20:f5:91:61:a7:4e:fa:6f:1d:6f:10:de:e8: 14:9b:2b:db:66:35:5e:28:d4:d4:e8:63:b9:b5:83:5f:81:39: 84:26:f3:15:d6:f6:4e:8d:18:5e:91:58:75:d4:06:8a:51:e6: 1e:e4:32:a3:51:98:87:c1:fe:3d:1f:b2:de:46:f6:ec:3c:65: 59:18:d8:61:e0:d0:f8:ec:0a:92:54:9e:98:09:17:f4:65:ee: 3c:35:8b:0d:81:95:a3:eb:f8:d5:b3:e6:f7:95:7b:d9:9d:1b: 44:15:b2:0d:56:cf:0e:7e:8f:5c:c2:4a:c5:b4:76:74:cd:e4: db:39:cb:52:8a:9e:66:54:8a:02:8e:68:c3:6d:f7:cd:a8:2d: 82:2b:6d:1f:a0:fc:9f:77:34:6d:07:8d:b3:c1:43:1f:72:57: 9b:83:48:1e:73:f7:66:98:00:53:d5:28:db:92:81:b8:f6:7f: 15:b8:89:87 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt/gugzvBUnxTokN3uzNelXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyOWU5ODMzNmY2YTZjYzlkYmNmMWVjYjQ4OTU1ODBmMDk0 ZTNlMmIwHhcNMjYwMTAyMTYyMDQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzE2MmQxYTMyNzFkMTIwZTAwMWE5ODQ0MGNkYjQ2OTMwMWE4YTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9FTtEHwQ/IkboIRa3ns08Y1uv0c2 FJdZR2u3dr2FJbq/FNIkze1Hxv41ccUSjaorBlzMKA95ilsebyUpaLSI0ogQQK6z vERZSllEHs53Buplpv+b2eO+KhU5ijZPQ/sJJEd9TIKBfpkTzhmssFqO7HwGfHz3 Dztxj0D9yUwh3s4FXyHyk7PIOfmltdnJLPiGooUQkxq605suM4tGP35EQB/KY53c nWaErc6ZvNUl1BF950KJ78uRGsDYN/0rgylTMb9WFeOo35e+zgYRdACtd5RSRUgK ZPNpyiFQqlLi1ACev2qzyGvpkBBk63bdrJeBhCjOTomyzftzBVoBnzzbZQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFMwWLRoycdEg4AGphEDNtGkwGopzMB8GA1UdIwQY MBaAFAKemDNvamzJ288ey0iVWA8JTj4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXA2WU0yOXFiTW5ieng3TFNKVllEd2xPUGlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9mYmMxNDEtOTlmYy00ZjgzLWI1ODUt MGZlNmY1NWRiM2Y2LzEvekJZdEdqSngwU0RnQWFtRVFNMjBhVEFhaW5NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9mYmMxNDEtOTlmYy00ZjgzLWI1ODUtMGZlNmY1NWRiM2Y2 LzEvQXA2WU0yOXFiTW5ieng3TFNKVllEd2xPUGlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCuWLgAwQF 1CIAAwQF1YsgMA0EAgACMAcDBQMqABjYMA0GCSqGSIb3DQEBCwUAA4IBAQBWY7Lk 2T5hlOzJtIJ9+81EOfO7JnAlMuktOOmvmJy4FVtS/fyK8sQyplsDprqQsnewJfDU QNelAKE+bXoIP9g2tO0lKrxpr6uh4wvULiD1kWGnTvpvHW8Q3ugUmyvbZjVeKNTU 6GO5tYNfgTmEJvMV1vZOjRhekVh11AaKUeYe5DKjUZiHwf49H7LeRvbsPGVZGNhh 4ND47AqSVJ6YCRf0Ze48NYsNgZWj6/jVs+b3lXvZnRtEFbINVs8Ofo9cwkrFtHZ0 zeTbOctSip5mVIoCjmjDbffNqC2CK20foPyfdzRtB42zwUMfclebg0gec/dmmABT 1SjbkoG49n8VuImH -----END CERTIFICATE-----Generated at Tue Feb 10 05:55:05 2026 by rpki-client