This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/035de6-ea5f-40a6-a673-19c9298ff5d5/1/CZGvanbzXzbTLy-E28BjiXoCWZI.roa File: CZGvanbzXzbTLy-E28BjiXoCWZI.roa (raw, json) Hash identifier: r6XT2/69sCIN8p1O7nkMBsQAmasMtjSauYspua3iwCk= Subject key identifier: 09:91:AF:6A:76:F3:5F:36:D3:2F:2F:84:DB:C0:63:89:7A:02:59:92 Certificate issuer: /CN=66dfc89c07ae1331bfb37138568ea79a87fecf3b Certificate serial: 019B78A23365E7FCDA9EAC7D50AC7283A7E5 Authority key identifier: 66:DF:C8:9C:07:AE:13:31:BF:B3:71:38:56:8E:A7:9A:87:FE:CF:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt_InAeuEzG_s3E4Vo6nmof-zzs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/035de6-ea5f-40a6-a673-19c9298ff5d5/1/CZGvanbzXzbTLy-E28BjiXoCWZI.roa Signing time: Thu 01 Jan 2026 08:17:34 +0000 ROA not before: Thu 01 Jan 2026 08:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58222 IP address blocks: 45.80.16.0/22 maxlen: 24 185.234.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/035de6-ea5f-40a6-a673-19c9298ff5d5/1/Zt_InAeuEzG_s3E4Vo6nmof-zzs.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/035de6-ea5f-40a6-a673-19c9298ff5d5/1/Zt_InAeuEzG_s3E4Vo6nmof-zzs.mft rsync://rpki.ripe.net/repository/DEFAULT/Zt_InAeuEzG_s3E4Vo6nmof-zzs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 11:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:33:65:e7:fc:da:9e:ac:7d:50:ac:72:83:a7:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dfc89c07ae1331bfb37138568ea79a87fecf3b Validity Not Before: Jan 1 08:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0991af6a76f35f36d32f2f84dbc063897a025992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:01:73:fc:c5:97:63:9c:bb:df:ec:ad:6c:0b: 6f:fb:bd:26:2c:85:7a:82:98:63:f1:a2:e6:e8:a9: 59:c3:bf:f6:d1:13:b8:01:e4:22:32:8c:79:b4:8f: 81:00:61:81:f0:b7:01:f9:1b:e0:9f:ed:5a:ae:8d: 94:4a:29:2e:a0:18:cd:dd:48:20:08:a8:0e:6f:d0: 8e:97:a4:19:c3:a3:96:c9:74:83:2c:4c:17:af:5d: e8:7e:76:03:b8:ee:2e:a3:0b:af:41:23:6b:53:9e: fb:1c:c2:7f:51:60:4d:24:e1:d1:ab:94:10:67:df: 4b:e5:f2:53:04:c1:ac:81:70:7e:7d:bb:10:a1:16: 7c:47:50:fe:19:0e:71:8d:f6:11:62:3d:62:6f:cd: 28:df:4c:7e:95:90:59:49:cc:b8:4c:90:c3:34:5c: 33:6f:cc:05:5f:c9:60:77:55:ef:90:46:ef:38:72: f8:5c:3f:7d:e2:88:fb:01:fb:ee:c1:47:5e:61:cd: 78:dc:62:5e:63:1e:67:b3:3c:35:7d:c2:2a:e3:91: c1:e2:ee:6c:83:6e:a1:00:9b:eb:b9:5e:e6:d0:f4: b6:5e:84:8c:a3:8b:2f:65:c6:c1:49:ac:a8:a1:b4: 6a:d6:f0:37:c1:41:eb:26:8f:37:7f:11:db:d8:44: b8:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:91:AF:6A:76:F3:5F:36:D3:2F:2F:84:DB:C0:63:89:7A:02:59:92 X509v3 Authority Key Identifier: keyid:66:DF:C8:9C:07:AE:13:31:BF:B3:71:38:56:8E:A7:9A:87:FE:CF:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt_InAeuEzG_s3E4Vo6nmof-zzs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/035de6-ea5f-40a6-a673-19c9298ff5d5/1/CZGvanbzXzbTLy-E28BjiXoCWZI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/035de6-ea5f-40a6-a673-19c9298ff5d5/1/Zt_InAeuEzG_s3E4Vo6nmof-zzs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.80.16.0/22 185.234.16.0/22 Signature Algorithm: sha256WithRSAEncryption 67:5d:68:dc:cf:03:ed:b9:19:99:1d:da:b5:a1:21:50:c7:32: 70:54:79:9f:ba:89:d8:6c:a5:dd:dd:3e:32:30:e6:2a:c1:0d: cf:60:d4:64:1c:fa:9e:d7:37:5a:29:86:07:17:15:0c:b7:97: 79:1e:49:c3:52:97:e0:12:c3:69:b4:94:23:44:2a:b9:3c:72: 86:7f:eb:75:e3:9f:ff:25:ad:d6:9b:a1:5a:af:ae:f7:ce:a9: e2:75:df:94:b5:18:31:d2:59:42:08:12:8b:30:d2:1b:49:33: 18:41:f9:33:f6:a5:8d:bd:f8:d3:e3:2c:0d:23:e6:5b:46:63: 9d:99:5b:0f:65:d7:e9:0f:0a:a7:8f:e1:31:89:92:ab:aa:66: 86:8c:05:80:3d:16:e5:82:b3:c7:b5:1f:c0:05:2a:ea:75:95: b9:ce:6e:0f:a5:18:dd:d5:ab:ea:3f:d3:e7:81:24:4a:b3:02: 0a:7c:41:58:b4:ed:39:9a:37:75:84:c9:05:24:7f:c6:25:0e: 80:8e:7a:a3:7a:aa:47:18:f8:91:88:e1:43:81:47:60:86:6a: c1:40:73:ea:c2:89:1c:5b:4f:be:0f:11:74:78:54:9a:26:25: 91:6b:c5:e0:42:ba:60:e3:f9:f6:37:24:33:36:fd:f0:0b:70: a4:c1:c0:7e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4ojNl5/zanqx9UKxyg6flMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZGZjODljMDdhZTEzMzFiZmIzNzEzODU2OGVhNzlhODdm ZWNmM2IwHhcNMjYwMTAxMDgxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTkxYWY2YTc2ZjM1ZjM2ZDMyZjJmODRkYmMwNjM4OTdhMDI1OTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7AFz/MWXY5y73+ytbAtv+70mLIV6 gphj8aLm6KlZw7/20RO4AeQiMox5tI+BAGGB8LcB+Rvgn+1aro2USikuoBjN3Ugg CKgOb9COl6QZw6OWyXSDLEwXr13ofnYDuO4uowuvQSNrU577HMJ/UWBNJOHRq5QQ Z99L5fJTBMGsgXB+fbsQoRZ8R1D+GQ5xjfYRYj1ib80o30x+lZBZScy4TJDDNFwz b8wFX8lgd1XvkEbvOHL4XD994oj7AfvuwUdeYc143GJeYx5nszw1fcIq45HB4u5s g26hAJvruV7m0PS2XoSMo4svZcbBSayoobRq1vA3wUHrJo83fxHb2ES42QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAmRr2p281820y8vhNvAY4l6AlmSMB8GA1UdIwQY MBaAFGbfyJwHrhMxv7NxOFaOp5qH/s87MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnRfSW5BZXVFekdfczNFNFZvNm5tb2YtenpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8wMzVkZTYtZWE1Zi00MGE2LWE2NzMt MTljOTI5OGZmNWQ1LzEvQ1pHdmFuYnpYemJUTHktRTI4QmppWG9DV1pJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi8wMzVkZTYtZWE1Zi00MGE2LWE2NzMtMTljOTI5OGZmNWQ1 LzEvWnRfSW5BZXVFekdfczNFNFZvNm5tb2YtenpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLVAQAwQC ueoQMA0GCSqGSIb3DQEBCwUAA4IBAQBnXWjczwPtuRmZHdq1oSFQxzJwVHmfuonY bKXd3T4yMOYqwQ3PYNRkHPqe1zdaKYYHFxUMt5d5HknDUpfgEsNptJQjRCq5PHKG f+t145//Ja3Wm6Far673zqnidd+UtRgx0llCCBKLMNIbSTMYQfkz9qWNvfjT4ywN I+ZbRmOdmVsPZdfpDwqnj+ExiZKrqmaGjAWAPRblgrPHtR/ABSrqdZW5zm4PpRjd 1avqP9PngSRKswIKfEFYtO05mjd1hMkFJH/GJQ6AjnqjeqpHGPiRiOFDgUdghmrB QHPqwokcW0++DxF0eFSaJiWRa8XgQrpg4/n2NyQzNv3wC3CkwcB+ -----END CERTIFICATE-----Generated at Mon Jan 26 19:34:58 2026 by rpki-client