This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/zYBOTmK7sYRu4BRgPu6vkfXun4M.roa File: zYBOTmK7sYRu4BRgPu6vkfXun4M.roa (raw, json) Hash identifier: ySD2PmcBMltDhtF67r7ul8wEaZVFWfNaQM5rxaEVYIU= Subject key identifier: CD:80:4E:4E:62:BB:B1:84:6E:E0:14:60:3E:EE:AF:91:F5:EE:9F:83 Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511 Certificate serial: 019B7C800F5695969DE20EA8245DAC52745B Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/zYBOTmK7sYRu4BRgPu6vkfXun4M.roa Signing time: Fri 02 Jan 2026 02:18:45 +0000 ROA not before: Fri 02 Jan 2026 02:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15962 IP address blocks: 90.64.0.0/16 maxlen: 24 92.180.192.0/18 maxlen: 24 2a01:c840::/28 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:0f:56:95:96:9d:e2:0e:a8:24:5d:ac:52:74:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511 Validity Not Before: Jan 2 02:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd804e4e62bbb1846ee014603eeeaf91f5ee9f83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ce:3e:54:9d:d4:0e:08:9e:29:61:7d:a2:a1: 0b:a0:d2:d2:0b:61:b4:36:8f:21:56:96:24:e1:57: ba:84:ae:c6:b1:6f:6c:81:99:4b:45:08:6a:ca:67: fc:2c:81:a5:46:71:75:4d:79:db:97:9d:30:28:8f: 6c:9d:f1:28:8e:8e:a4:56:5a:8a:17:0d:e5:51:69: cf:3b:c8:df:09:f6:9f:8a:6d:9f:ca:36:02:10:d1: 95:20:8f:a0:28:53:81:45:9a:27:00:7d:16:87:fb: f2:bd:aa:63:d7:ca:68:21:1d:33:60:fb:a8:f3:a2: fe:20:31:b3:a6:a2:7f:1e:c9:42:b9:23:88:8f:1b: c2:c1:e2:e7:10:8d:aa:66:c6:3c:78:a3:e4:be:2e: 65:09:d3:5f:d2:eb:4b:ce:7a:5a:75:a0:9c:6f:30: 43:13:fc:0c:19:f3:a6:96:49:dd:89:eb:93:8b:a6: a7:19:f7:56:4a:71:61:b1:c1:f8:77:22:50:8b:ab: bf:29:d1:01:b7:31:b0:a2:b2:65:5f:a5:2a:b4:10: 8d:dd:ea:75:aa:fb:14:6a:09:88:fc:8d:8f:8f:cb: 3b:60:e0:e2:7c:af:d1:94:33:c2:19:26:01:a3:92: 46:4e:6b:d3:0f:88:30:e9:43:8c:18:b2:06:cb:54: 09:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:80:4E:4E:62:BB:B1:84:6E:E0:14:60:3E:EE:AF:91:F5:EE:9F:83 X509v3 Authority Key Identifier: keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/zYBOTmK7sYRu4BRgPu6vkfXun4M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 90.64.0.0/16 92.180.192.0/18 IPv6: 2a01:c840::/28 Signature Algorithm: sha256WithRSAEncryption 96:f2:14:95:73:78:53:71:6e:c8:72:0c:10:55:1b:56:a8:31: 66:bb:15:0a:37:e7:d9:11:4c:71:59:51:80:78:55:50:81:64: 56:54:e2:26:1a:1d:d2:7c:15:18:5c:6a:78:08:75:59:a7:0a: d3:63:99:51:c4:e7:d3:16:49:af:21:a9:9f:7c:a9:66:76:eb: db:31:49:25:fb:f0:f4:bb:8f:e3:b3:2c:49:86:c1:e1:8f:45: 8a:a1:f2:3d:a2:a7:e3:97:58:0b:de:47:59:3f:23:34:dd:95: 5c:8f:9a:68:62:a7:e3:28:9d:83:d4:a4:72:61:0b:64:a5:7e: 2c:0d:7c:7f:90:12:07:f5:44:af:47:4b:13:2a:d0:a3:96:18: 7f:bb:d4:60:95:4b:7a:15:11:3f:4c:d3:d7:c4:18:3d:e0:62: 97:3c:5d:ef:3d:5f:92:1e:73:50:d8:01:80:06:8a:08:47:06: 11:f5:19:da:3b:fd:6e:10:0c:98:aa:59:89:c0:fd:8f:d5:a9: 61:8f:3c:6d:f3:85:9c:40:88:08:9e:05:ee:33:8b:ee:11:9b: 92:0a:62:e3:52:d2:66:92:d2:69:59:40:14:c8:ab:06:bf:36: 1c:0a:99:62:be:57:24:22:20:17:6c:c2:f2:e4:4d:e0:65:c1: 7c:25:0c:4d -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt8gA9WlZad4g6oJF2sUnRbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh MTA1MTEwHhcNMjYwMTAyMDIxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDgwNGU0ZTYyYmJiMTg0NmVlMDE0NjAzZWVlYWY5MWY1ZWU5ZjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwc4+VJ3UDgieKWF9oqELoNLSC2G0 No8hVpYk4Ve6hK7GsW9sgZlLRQhqymf8LIGlRnF1TXnbl50wKI9snfEojo6kVlqK Fw3lUWnPO8jfCfafim2fyjYCENGVII+gKFOBRZonAH0Wh/vyvapj18poIR0zYPuo 86L+IDGzpqJ/HslCuSOIjxvCweLnEI2qZsY8eKPkvi5lCdNf0utLznpadaCcbzBD E/wMGfOmlkndieuTi6anGfdWSnFhscH4dyJQi6u/KdEBtzGworJlX6UqtBCN3ep1 qvsUagmI/I2Pj8s7YODifK/RlDPCGSYBo5JGTmvTD4gw6UOMGLIGy1QJUQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFM2ATk5iu7GEbuAUYD7ur5H17p+DMB8GA1UdIwQY MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt NDU5MzVmNTA2YTEyLzEvellCT1RtSzdzWVJ1NEJSZ1B1NnZrZlh1bjRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjARBAIAATALAwMAWkADBAZc tMAwDQQCAAIwBwMFBCoByEAwDQYJKoZIhvcNAQELBQADggEBAJbyFJVzeFNxbshy DBBVG1aoMWa7FQo359kRTHFZUYB4VVCBZFZU4iYaHdJ8FRhcangIdVmnCtNjmVHE 59MWSa8hqZ98qWZ269sxSSX78PS7j+OzLEmGweGPRYqh8j2ip+OXWAveR1k/IzTd lVyPmmhip+MonYPUpHJhC2SlfiwNfH+QEgf1RK9HSxMq0KOWGH+71GCVS3oVET9M 09fEGD3gYpc8Xe89X5Iec1DYAYAGighHBhH1Gdo7/W4QDJiqWYnA/Y/VqWGPPG3z hZxAiAieBe4zi+4Rm5IKYuNS0maS0mlZQBTIqwa/NhwKmWK+VyQiIBdswvLkTeBl wXwlDE0= -----END CERTIFICATE-----Generated at Wed Jan 21 21:02:16 2026 by rpki-client