This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/zyJqja8i5enykfQL1sM53ZShgH0.roa File: zyJqja8i5enykfQL1sM53ZShgH0.roa (raw, json) Hash identifier: J+NP8HyXO9ukIEuup6W49Dx/Ezg/MyJPrky1D1gxmBE= Subject key identifier: CF:22:6A:8D:AF:22:E5:E9:F2:91:F4:0B:D6:C3:39:DD:94:A1:80:7D Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b Certificate serial: 019B0C3097FD821696890CD15DF4A5B8D919 Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/zyJqja8i5enykfQL1sM53ZShgH0.roa Signing time: Thu 11 Dec 2025 06:54:29 +0000 ROA not before: Thu 11 Dec 2025 06:54:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 209372 IP address blocks: 89.19.56.0/24 maxlen: 24 89.19.57.0/24 maxlen: 24 89.19.58.0/24 maxlen: 24 89.19.59.0/24 maxlen: 24 185.59.232.0/22 maxlen: 24 185.68.245.0/24 maxlen: 24 185.79.51.0/24 maxlen: 24 185.79.79.0/24 maxlen: 24 185.81.146.0/24 maxlen: 24 185.81.147.0/24 maxlen: 24 185.81.172.0/24 maxlen: 24 185.81.173.0/24 maxlen: 24 185.81.174.0/23 maxlen: 24 185.81.174.0/24 maxlen: 24 185.81.184.0/23 maxlen: 24 185.81.186.0/23 maxlen: 24 185.89.40.0/24 maxlen: 24 185.89.104.0/22 maxlen: 22 185.89.108.0/22 maxlen: 24 185.95.100.0/23 maxlen: 24 185.95.102.0/23 maxlen: 24 185.96.80.0/24 maxlen: 24 185.96.81.0/24 maxlen: 24 185.96.82.0/24 maxlen: 24 185.96.83.0/24 maxlen: 24 185.96.132.0/24 maxlen: 24 185.97.0.0/22 maxlen: 24 185.98.43.0/24 maxlen: 24 185.101.203.0/24 maxlen: 24 185.104.151.0/24 maxlen: 24 185.112.56.0/23 maxlen: 24 185.175.224.0/23 maxlen: 24 185.175.226.0/23 maxlen: 24 185.185.147.0/24 maxlen: 24 193.221.215.0/24 maxlen: 24 213.170.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:30:97:fd:82:16:96:89:0c:d1:5d:f4:a5:b8:d9:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b Validity Not Before: Dec 11 06:54:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cf226a8daf22e5e9f291f40bd6c339dd94a1807d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f7:86:c7:2e:f2:34:09:9b:86:8c:d6:7f:5e: ed:4f:46:58:44:a4:05:3f:ae:9b:ba:ed:f0:a8:8b: 2f:05:b7:e0:a0:bb:4d:67:fc:fe:69:91:d3:92:5a: 20:7e:ad:44:a4:af:7c:48:fc:04:15:97:22:e0:e7: ad:0f:a8:2f:e4:31:7e:57:9b:28:b1:be:e7:be:68: 2b:10:91:06:a9:af:3c:2a:97:99:49:30:ab:e1:26: ad:b7:0b:f7:39:bf:ba:db:0b:1d:4d:e6:1b:4a:e8: 5f:b3:34:15:15:4e:f1:f8:93:81:86:e3:d3:15:f7: 86:b9:12:d6:33:9c:24:ff:b7:3e:9a:0f:65:b6:fb: 2a:52:0e:ba:9f:67:83:10:cc:c7:8f:c1:7a:58:00: 00:02:08:69:06:b8:2f:b1:1e:42:b6:dd:c9:46:3b: 35:70:a4:17:51:38:ea:a2:cb:d8:5d:f4:9f:cf:1c: f2:83:03:12:26:5c:4a:5f:79:42:4e:41:79:41:df: ea:50:12:3c:fb:b6:04:3b:d3:a1:3f:17:1e:c7:b9: d5:80:49:86:86:37:09:2c:b0:bf:36:e2:13:2e:2f: 3d:42:a7:ab:34:d3:49:5f:2f:3c:88:f4:44:27:25: 2a:7d:de:5b:be:65:cd:ef:c0:c5:84:5d:ec:05:9a: b7:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:22:6A:8D:AF:22:E5:E9:F2:91:F4:0B:D6:C3:39:DD:94:A1:80:7D X509v3 Authority Key Identifier: keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/zyJqja8i5enykfQL1sM53ZShgH0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.19.56.0/22 185.59.232.0/22 185.68.245.0/24 185.79.51.0/24 185.79.79.0/24 185.81.146.0/23 185.81.172.0/22 185.81.184.0/22 185.89.40.0/24 185.89.104.0/21 185.95.100.0/22 185.96.80.0/22 185.96.132.0/24 185.97.0.0/22 185.98.43.0/24 185.101.203.0/24 185.104.151.0/24 185.112.56.0/23 185.175.224.0/22 185.185.147.0/24 193.221.215.0/24 213.170.223.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:8f:e0:ed:a1:4e:2e:09:f6:16:35:cf:1d:58:52:19:99:b7: 9e:ca:fd:0d:1e:16:d2:96:61:66:63:77:01:d1:2f:6d:c2:61: 97:25:f7:30:af:cb:99:2f:fd:47:b5:45:ce:60:72:f3:bc:a2: 98:fe:83:0e:c7:8b:93:10:83:09:95:63:fd:ed:df:ea:cb:cb: 92:b9:c0:a7:35:f0:b3:4c:89:7e:36:4a:fb:ee:b2:a5:0e:fd: ea:3a:18:80:2c:31:b5:ab:dd:6a:b2:a2:59:fb:e1:1c:99:be: 87:73:a6:f4:6e:f6:78:ca:00:0c:86:0e:04:2f:f4:35:13:2a: 76:cf:82:9a:07:d2:00:bc:8d:08:99:01:19:e0:9e:68:cf:d3: d4:d8:d8:6a:bc:f7:84:62:0d:23:f8:16:2d:e5:f6:5a:05:e0: 78:57:1c:d7:de:30:b1:30:e2:51:3a:46:e2:38:33:bc:8e:3a: 2f:95:51:f5:94:43:f8:3d:c5:13:c5:96:37:86:9d:3b:7a:f6: 72:87:d4:96:9a:6a:55:25:1f:0e:0c:fd:91:9c:4a:b2:c9:28: 88:c1:d6:09:5d:a8:59:02:e6:4c:f8:b4:b1:27:3c:fa:0d:76: 28:fb:d0:20:54:ba:5d:7b:80:d1:a2:05:12:90:77:94:f1:bd: e6:f3:8f:2d -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgISAZsMMJf9ghaWiQzRXfSluNkZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhZWUxNWMzM2RlMzU4OTM4ZDY5MDBhMWIzYzE0NDgwYTM4 OWU4NWIwHhcNMjUxMjExMDY1NDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjIyNmE4ZGFmMjJlNWU5ZjI5MWY0MGJkNmMzMzlkZDk0YTE4MDdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfeGxy7yNAmbhozWf17tT0ZYRKQF P66buu3wqIsvBbfgoLtNZ/z+aZHTklogfq1EpK98SPwEFZci4OetD6gv5DF+V5so sb7nvmgrEJEGqa88KpeZSTCr4Sattwv3Ob+62wsdTeYbSuhfszQVFU7x+JOBhuPT FfeGuRLWM5wk/7c+mg9ltvsqUg66n2eDEMzHj8F6WAAAAghpBrgvsR5Ctt3JRjs1 cKQXUTjqosvYXfSfzxzygwMSJlxKX3lCTkF5Qd/qUBI8+7YEO9OhPxcex7nVgEmG hjcJLLC/NuITLi89QqerNNNJXy88iPREJyUqfd5bvmXN78DFhF3sBZq3uQIDAQAB o4ICjDCCAogwHQYDVR0OBBYEFM8iao2vIuXp8pH0C9bDOd2UoYB9MB8GA1UdIwQY MBaAFJruFcM941iTjWkAobPBRICjiehbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjIt NmVlNTM0ZDkyZTUyLzEvenlKcWphOGk1ZW55a2ZRTDFzTTUzWlNoZ0gwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjItNmVlNTM0ZDkyZTUy LzEvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGhBggrBgEFBQcBBwEB/wSBkTCBjjCBiwQCAAEwgYQDBAJZ EzgDBAK5O+gDBAC5RPUDBAC5TzMDBAC5T08DBAG5UZIDBAK5UawDBAK5UbgDBAC5 WSgDBAO5WWgDBAK5X2QDBAK5YFADBAC5YIQDBAK5YQADBAC5YisDBAC5ZcsDBAC5 aJcDBAG5cDgDBAK5r+ADBAC5uZMDBADB3dcDBADVqt8wDQYJKoZIhvcNAQELBQAD ggEBAAqP4O2hTi4J9hY1zx1YUhmZt57K/Q0eFtKWYWZjdwHRL23CYZcl9zCvy5kv /Ue1Rc5gcvO8opj+gw7Hi5MQgwmVY/3t3+rLy5K5wKc18LNMiX42SvvusqUO/eo6 GIAsMbWr3Wqyoln74RyZvodzpvRu9njKAAyGDgQv9DUTKnbPgpoH0gC8jQiZARng nmjP09TY2Gq894RiDSP4Fi3l9loF4HhXHNfeMLEw4lE6RuI4M7yOOi+VUfWUQ/g9 xRPFljeGnTt69nKH1JaaalUlHw4M/ZGcSrLJKIjB1gldqFkC5kz4tLEnPPoNdij7 0CBUul17gNGiBRKQd5Txvebzjy0= -----END CERTIFICATE-----Generated at Sat Dec 20 11:46:51 2025 by rpki-client