This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/Zyo9GK454m2Y9Hx3gQAA2RVkkzg.roa File: Zyo9GK454m2Y9Hx3gQAA2RVkkzg.roa (raw, json) Hash identifier: mbKN457fTUnOw3MdaP/O9IlT3j3fwRDhf3hiIlpCzIg= Subject key identifier: 67:2A:3D:18:AE:39:E2:6D:98:F4:7C:77:81:00:00:D9:15:64:93:38 Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Certificate serial: 019C0B60F9200E6826F4787CE0BA1F8A8BB8 Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/Zyo9GK454m2Y9Hx3gQAA2RVkkzg.roa Signing time: Thu 29 Jan 2026 20:10:30 +0000 ROA not before: Thu 29 Jan 2026 20:10:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29802 IP address blocks: 77.81.1.0/24 maxlen: 24 89.32.130.0/24 maxlen: 24 89.32.131.0/24 maxlen: 24 94.177.27.0/24 maxlen: 24 176.223.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 05:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0b:60:f9:20:0e:68:26:f4:78:7c:e0:ba:1f:8a:8b:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Validity Not Before: Jan 29 20:10:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=672a3d18ae39e26d98f47c77810000d915649338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:96:c6:a9:49:b4:ad:fe:c5:c0:b0:9e:f3:8d: 78:27:44:09:9b:d4:51:d5:b5:88:d3:f0:c8:eb:4b: 63:a3:54:e4:40:b6:e7:9b:d6:51:0a:9e:b6:62:84: 83:48:9b:91:e7:fb:c9:d8:28:98:a4:03:ed:4d:f2: 39:12:2a:19:80:63:33:54:70:70:8d:f0:9e:ca:66: ae:60:a7:28:1f:39:a0:4c:de:05:71:49:0a:d9:d5: 38:d3:be:64:02:24:b1:51:e3:52:7f:0f:1a:c3:e4: 0d:69:4f:8c:15:39:46:61:ab:5a:09:75:8d:42:e6: 30:92:83:0b:bd:2d:ca:23:3e:5c:2e:5b:1f:6e:d5: 91:d6:a0:c7:d5:b3:a5:28:18:6a:b5:d6:6f:3e:74: fc:0f:aa:f5:e6:e3:a7:8b:0a:a0:92:21:5a:3a:2e: a4:7e:21:d2:d8:6e:22:a5:1c:a6:2d:e3:6c:d9:e6: db:b9:c8:f2:0b:6a:83:03:c3:9b:99:17:45:3b:54: 1b:3c:19:46:63:0c:9e:13:0a:02:a1:ab:af:a5:53: b7:64:1b:17:7b:d7:a7:d5:d1:8e:2e:a7:a5:99:fe: 5a:ef:85:5c:49:12:12:ad:59:87:dd:ed:a5:16:2e: d9:a2:8c:95:9f:3d:77:27:8a:9e:08:1b:93:dc:8a: e6:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:2A:3D:18:AE:39:E2:6D:98:F4:7C:77:81:00:00:D9:15:64:93:38 X509v3 Authority Key Identifier: keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/Zyo9GK454m2Y9Hx3gQAA2RVkkzg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.81.1.0/24 89.32.130.0/23 94.177.27.0/24 176.223.181.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:dd:c1:01:22:43:2f:d1:57:dd:db:23:41:a1:0c:ae:40:0c: e9:1e:84:3d:e3:44:8c:de:8c:c3:92:26:57:f1:65:8b:5c:62: 4f:a9:3a:d7:4a:08:54:0b:2c:b9:78:f5:03:20:28:47:ab:33: d4:96:93:f2:70:45:87:45:a2:81:22:21:f1:84:93:f4:89:47: d0:9b:e8:9a:73:f6:8c:f2:53:55:96:89:78:4c:76:81:b0:3f: 08:3d:e0:10:23:ff:b4:00:aa:c5:27:f2:3c:8b:1e:d4:a3:a2: e6:de:f8:20:57:90:b0:55:41:cf:d0:cd:ba:b1:eb:4f:c3:74: f2:67:44:33:ae:f4:53:45:e0:d2:6d:f7:66:7e:83:00:07:1b: ab:73:ec:7a:5b:d2:b2:4b:f4:8b:00:0c:2f:22:20:d7:ef:b9: 72:e8:9b:96:41:47:9b:d1:39:fe:91:4d:17:c5:c1:98:4d:65: 35:24:0f:9c:d5:c7:0f:31:20:f9:b1:3e:92:80:7e:9a:be:bc: e7:0e:37:b5:2e:79:1c:3c:80:f7:e6:d1:a1:3f:88:02:20:e9: ef:9c:09:b2:39:d9:62:f8:f1:3f:82:77:7f:b5:aa:b4:0a:6f: a9:a1:61:21:55:ce:c4:4f:d5:cc:ed:1a:2a:8f:82:4a:95:b2: b6:35:e2:1a -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZwLYPkgDmgm9Hh84Lofiou4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0OGEyN2Y0NGIxMDQwNGM1MmY2ZmZjNGUwOGRjODJiZjhi NWRlZTQwHhcNMjYwMTI5MjAxMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NzJhM2QxOGFlMzllMjZkOThmNDdjNzc4MTAwMDBkOTE1NjQ5MzM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypbGqUm0rf7FwLCe8414J0QJm9RR 1bWI0/DI60tjo1TkQLbnm9ZRCp62YoSDSJuR5/vJ2CiYpAPtTfI5EioZgGMzVHBw jfCeymauYKcoHzmgTN4FcUkK2dU4075kAiSxUeNSfw8aw+QNaU+MFTlGYataCXWN QuYwkoMLvS3KIz5cLlsfbtWR1qDH1bOlKBhqtdZvPnT8D6r15uOniwqgkiFaOi6k fiHS2G4ipRymLeNs2ebbucjyC2qDA8ObmRdFO1QbPBlGYwyeEwoCoauvpVO3ZBsX e9en1dGOLqelmf5a74VcSRISrVmH3e2lFi7ZooyVnz13J4qeCBuT3Irm3wIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFGcqPRiuOeJtmPR8d4EAANkVZJM4MB8GA1UdIwQY MBaAFNSKJ/RLEEBMUvb/xOCNyCv4td7kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYt NTlmNTk4NGI2NGVhLzEvWnlvOUdLNDU0bTJZOUh4M2dRQUEyUlZra3pnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYtNTlmNTk4NGI2NGVh LzEvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQATVEBAwQB WSCCAwQAXrEbAwQAsN+1MA0GCSqGSIb3DQEBCwUAA4IBAQA63cEBIkMv0Vfd2yNB oQyuQAzpHoQ940SM3ozDkiZX8WWLXGJPqTrXSghUCyy5ePUDIChHqzPUlpPycEWH RaKBIiHxhJP0iUfQm+iac/aM8lNVlol4THaBsD8IPeAQI/+0AKrFJ/I8ix7Uo6Lm 3vggV5CwVUHP0M26setPw3TyZ0QzrvRTReDSbfdmfoMABxurc+x6W9KyS/SLAAwv IiDX77ly6JuWQUeb0Tn+kU0XxcGYTWU1JA+c1ccPMSD5sT6SgH6avrznDje1Lnkc PID35tGhP4gCIOnvnAmyOdli+PE/gnd/taq0Cm+poWEhVc7ET9XM7Roqj4JKlbK2 NeIa -----END CERTIFICATE-----Generated at Fri Jan 30 12:19:58 2026 by rpki-client