This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/ZhycJ5-Nudz4jzFAN7KNypEk_qY.roa File: ZhycJ5-Nudz4jzFAN7KNypEk_qY.roa (raw, json) Hash identifier: Sy4qxp/vjChSs7LGRbsdrKBPDJPwQ9QRGo9byWidGTE= Subject key identifier: 66:1C:9C:27:9F:8D:B9:DC:F8:8F:31:40:37:B2:8D:CA:91:24:FE:A6 Certificate issuer: /CN=8466a5dde27f911da8be73c261ff55b5881198a9 Certificate serial: 019B76EB0B2341FD6AF9E0768C9ADE13036E Authority key identifier: 84:66:A5:DD:E2:7F:91:1D:A8:BE:73:C2:61:FF:55:B5:88:11:98:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/ZhycJ5-Nudz4jzFAN7KNypEk_qY.roa Signing time: Thu 01 Jan 2026 00:17:53 +0000 ROA not before: Thu 01 Jan 2026 00:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205945 IP address blocks: 185.201.92.0/22 maxlen: 25 185.201.92.0/24 maxlen: 24 185.201.92.0/25 maxlen: 25 185.201.92.128/25 maxlen: 25 185.201.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft rsync://rpki.ripe.net/repository/DEFAULT/hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:0b:23:41:fd:6a:f9:e0:76:8c:9a:de:13:03:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8466a5dde27f911da8be73c261ff55b5881198a9 Validity Not Before: Jan 1 00:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=661c9c279f8db9dcf88f314037b28dca9124fea6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e8:f8:db:db:e5:76:e6:e2:06:38:0d:01:75: ba:93:5e:43:77:a6:ed:cd:65:84:1a:ba:3e:ce:7c: 9b:e7:63:8f:78:c1:59:98:0f:b2:6b:86:25:91:78: c8:fa:24:6d:92:e7:6f:45:38:00:b8:5e:37:80:8a: fe:96:d7:b4:ba:ae:8d:69:1c:9c:af:9b:8c:fe:64: 93:f7:75:ad:fe:37:46:8e:8d:22:c3:45:25:3c:23: 55:e6:55:4a:37:88:be:4c:d1:4c:80:9c:e9:79:b5: 11:c7:f4:14:54:db:45:42:25:c2:e1:5c:c0:ae:cb: 8c:f7:43:32:d5:f0:3e:ed:54:a8:06:0b:94:87:c8: 3b:4e:ba:0f:0e:39:56:70:75:70:7f:a0:ee:da:ef: 23:c2:10:d4:ec:ba:94:4c:d8:fc:6f:74:79:81:da: b7:b0:8d:17:d3:4d:cf:b7:c1:c0:a2:69:1d:89:24: 2a:b0:eb:62:fe:40:18:69:d3:fa:c1:1c:d1:ca:88: d7:95:77:22:0d:94:3e:8f:d5:2e:72:38:87:98:74: 5e:46:4f:42:a2:f7:26:81:e0:31:b5:7f:69:91:44: fe:73:30:a4:39:87:dd:b4:74:02:81:fd:c5:e2:27: a9:25:3a:c2:5a:6d:ca:36:69:4d:b1:5a:13:65:bf: eb:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:1C:9C:27:9F:8D:B9:DC:F8:8F:31:40:37:B2:8D:CA:91:24:FE:A6 X509v3 Authority Key Identifier: keyid:84:66:A5:DD:E2:7F:91:1D:A8:BE:73:C2:61:FF:55:B5:88:11:98:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/ZhycJ5-Nudz4jzFAN7KNypEk_qY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.201.92.0/22 Signature Algorithm: sha256WithRSAEncryption 89:dd:16:cc:e5:c8:d6:02:37:10:8c:f4:89:ef:b7:71:78:d6: 9f:86:01:3a:57:2d:61:94:41:88:35:03:f5:0c:4d:f2:ee:13: 50:bf:16:4d:ff:7a:11:3f:cf:e4:15:46:95:2a:3a:9b:68:ef: 16:05:76:59:87:8c:d8:83:8f:e5:20:7c:1f:bf:8f:a9:43:93: 0f:14:01:95:66:74:f6:e8:58:66:63:01:56:06:ea:59:93:94: e1:9a:fb:ed:8f:0e:0f:6c:66:8b:eb:cc:ac:f8:a6:6d:a6:bd: 44:fd:33:87:c9:5e:4e:99:e3:91:ee:d3:67:c1:6d:32:a9:ee: 4a:bd:63:ca:9c:01:04:72:26:8c:5f:4a:2a:ee:e2:b4:82:19: 2f:91:5e:20:06:fe:4b:5f:df:30:a7:13:b1:54:eb:2e:0b:55: 14:80:24:e5:67:75:fc:39:c0:58:4b:4f:1c:a9:0a:ed:50:1b: 29:59:59:de:8b:6e:8a:7b:6a:b1:42:3b:d8:bc:a2:7e:2a:c0: 87:98:14:05:02:fd:1f:85:82:56:f9:95:54:4e:e7:8d:93:62: 7d:bb:37:c7:85:2d:33:f2:a7:59:fe:b8:ea:77:fd:d7:d0:0e: 6a:9d:e9:9e:c3:50:ff:90:8c:67:a6:96:d1:55:ab:50:23:5a: 6a:8b:04:1b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26wsjQf1q+eB2jJreEwNuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NjZhNWRkZTI3ZjkxMWRhOGJlNzNjMjYxZmY1NWI1ODgx MTk4YTkwHhcNMjYwMTAxMDAxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjFjOWMyNzlmOGRiOWRjZjg4ZjMxNDAzN2IyOGRjYTkxMjRmZWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwej429vldubiBjgNAXW6k15Dd6bt zWWEGro+znyb52OPeMFZmA+ya4YlkXjI+iRtkudvRTgAuF43gIr+lte0uq6NaRyc r5uM/mST93Wt/jdGjo0iw0UlPCNV5lVKN4i+TNFMgJzpebURx/QUVNtFQiXC4VzA rsuM90My1fA+7VSoBguUh8g7TroPDjlWcHVwf6Du2u8jwhDU7LqUTNj8b3R5gdq3 sI0X003Pt8HAomkdiSQqsOti/kAYadP6wRzRyojXlXciDZQ+j9UucjiHmHReRk9C ovcmgeAxtX9pkUT+czCkOYfdtHQCgf3F4iepJTrCWm3KNmlNsVoTZb/rYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGYcnCefjbnc+I8xQDeyjcqRJP6mMB8GA1UdIwQY MBaAFIRmpd3if5EdqL5zwmH/VbWIEZipMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEdhbDNlSl9rUjJvdm5QQ1lmOVZ0WWdSbUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC83MjZiNjAtOGFhNy00NjFmLTljZDkt N2NjYmI0NWRjYTUxLzEvWmh5Y0o1LU51ZHo0anpGQU43S055cEVrX3FZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC83MjZiNjAtOGFhNy00NjFmLTljZDktN2NjYmI0NWRjYTUx LzEvaEdhbDNlSl9rUjJvdm5QQ1lmOVZ0WWdSbUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuclcMA0G CSqGSIb3DQEBCwUAA4IBAQCJ3RbM5cjWAjcQjPSJ77dxeNafhgE6Vy1hlEGINQP1 DE3y7hNQvxZN/3oRP8/kFUaVKjqbaO8WBXZZh4zYg4/lIHwfv4+pQ5MPFAGVZnT2 6FhmYwFWBupZk5Thmvvtjw4PbGaL68ys+KZtpr1E/TOHyV5OmeOR7tNnwW0yqe5K vWPKnAEEciaMX0oq7uK0ghkvkV4gBv5LX98wpxOxVOsuC1UUgCTlZ3X8OcBYS08c qQrtUBspWVnei26Ke2qxQjvYvKJ+KsCHmBQFAv0fhYJW+ZVUTueNk2J9uzfHhS0z 8qdZ/rjqd/3X0A5qnemew1D/kIxnppbRVatQI1pqiwQb -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:26 2026 by rpki-client