This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/ZigwfFDMTq9p3ufVtUZkAGSvOE8.roa File: ZigwfFDMTq9p3ufVtUZkAGSvOE8.roa (raw, json) Hash identifier: hCk1IHYdcTCr5kX9GXFGk1z+A8RaamqdMUb21r4V0lQ= Subject key identifier: 66:28:30:7C:50:CC:4E:AF:69:DE:E7:D5:B5:46:64:00:64:AF:38:4F Certificate issuer: /CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c Certificate serial: 019B7CED143B8F1BE3916E78C256A7DC6EB4 Authority key identifier: 74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/ZigwfFDMTq9p3ufVtUZkAGSvOE8.roa Signing time: Fri 02 Jan 2026 04:17:50 +0000 ROA not before: Fri 02 Jan 2026 04:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205820 IP address blocks: 46.53.196.0/24 maxlen: 24 128.140.254.0/24 maxlen: 24 178.163.224.0/19 maxlen: 19 178.163.230.0/23 maxlen: 23 185.183.120.0/22 maxlen: 22 185.183.120.0/24 maxlen: 24 185.183.121.0/24 maxlen: 24 185.204.116.0/22 maxlen: 22 2a0a:f240::/29 maxlen: 29 2a0a:f241::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:14:3b:8f:1b:e3:91:6e:78:c2:56:a7:dc:6e:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c Validity Not Before: Jan 2 04:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6628307c50cc4eaf69dee7d5b546640064af384f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3b:d8:9d:4b:93:95:41:65:d5:e3:c2:94:54: de:9a:f2:8e:ee:47:0e:0f:f3:e4:5a:18:56:44:c0: 6d:ba:44:1b:66:83:9c:aa:05:99:2b:06:5e:56:9f: 29:b1:e6:cd:06:dd:43:3b:13:8e:2f:74:3d:d8:ee: 50:35:fa:ad:09:de:f7:96:69:06:f3:08:3b:71:02: ca:c5:8b:b4:32:86:67:88:1e:b3:18:85:01:f2:d7: d3:45:94:3b:56:f7:27:d5:19:e4:4e:c0:29:38:62: e2:01:88:66:f4:a8:84:f7:0a:b5:11:39:f8:38:a9: 35:d9:ef:9a:7e:b0:b3:b2:dc:9d:01:bb:2b:d1:da: 41:66:3a:cc:2c:c6:da:44:d5:8b:09:b2:44:15:8e: fd:8e:85:c2:c6:41:bd:19:d3:7e:e1:b2:01:35:5c: 0e:d9:67:50:1b:73:73:24:3d:e1:2c:e9:99:15:3f: d2:e0:84:e8:1e:b5:c9:de:63:05:3f:3e:24:6a:94: ad:de:b8:cd:e1:fc:c7:b9:56:5f:e4:47:c3:1b:a2: b4:f9:0a:c9:83:cc:59:38:4e:e6:6a:7a:b1:bd:f0: 28:26:95:2c:db:ed:41:fc:a9:8f:89:8c:24:25:26: 6f:db:b1:cd:b5:3e:fc:e9:b9:7e:71:bc:5f:57:2c: 42:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:28:30:7C:50:CC:4E:AF:69:DE:E7:D5:B5:46:64:00:64:AF:38:4F X509v3 Authority Key Identifier: keyid:74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/ZigwfFDMTq9p3ufVtUZkAGSvOE8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.53.196.0/24 128.140.254.0/24 178.163.224.0/19 185.183.120.0/22 185.204.116.0/22 IPv6: 2a0a:f240::/29 Signature Algorithm: sha256WithRSAEncryption 19:86:83:4f:03:7c:58:9e:7e:af:ed:c3:70:6b:52:5a:d1:3c: 74:de:a9:d9:5d:87:c0:6d:75:82:e4:f5:a5:41:b9:58:a4:47: b9:2a:3b:e0:ea:42:6a:66:ab:9a:0a:97:65:a9:97:59:19:7e: 95:ba:6c:94:72:fa:c0:c6:61:fd:76:48:f0:6e:14:1f:05:4a: c9:52:cd:42:34:fc:7b:34:f2:bb:cb:2a:22:62:94:b0:d8:31: 09:aa:1d:29:ad:72:80:52:0c:f4:15:f6:75:c4:5d:58:99:e1: fc:25:1e:c4:99:29:f5:5f:f2:49:3e:d7:37:e0:6a:0a:16:5d: 3e:21:72:67:3b:df:34:11:07:4a:a1:a4:72:ab:11:56:18:1d: ca:93:46:9f:88:98:70:d9:36:09:91:f9:e0:f8:78:07:94:dc: 7c:d3:41:f2:cb:e0:2e:6f:e5:2b:3d:a9:6b:69:d7:68:3c:20: 46:f9:14:c1:da:c3:0d:38:79:fb:cc:2a:c6:30:b2:7b:ae:33: 3e:ed:47:6b:ad:41:13:8f:34:92:61:20:2b:48:81:b2:9c:15: 7b:97:05:ce:df:70:83:91:c5:7e:89:14:f4:03:ee:e8:b4:d4: 9a:1c:fc:06:ae:d4:ba:21:ec:e4:0a:a3:af:4a:0e:a9:14:a1: a5:e0:aa:64 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt87RQ7jxvjkW54wlan3G60MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0YWE5MzEyYWY0YzNkOWNlZTA4MmM5NTQxYTZiNjVhZGE1 NjliM2MwHhcNMjYwMTAyMDQxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjI4MzA3YzUwY2M0ZWFmNjlkZWU3ZDViNTQ2NjQwMDY0YWYzODRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzvYnUuTlUFl1ePClFTemvKO7kcO D/PkWhhWRMBtukQbZoOcqgWZKwZeVp8psebNBt1DOxOOL3Q92O5QNfqtCd73lmkG 8wg7cQLKxYu0MoZniB6zGIUB8tfTRZQ7Vvcn1RnkTsApOGLiAYhm9KiE9wq1ETn4 OKk12e+afrCzstydAbsr0dpBZjrMLMbaRNWLCbJEFY79joXCxkG9GdN+4bIBNVwO 2WdQG3NzJD3hLOmZFT/S4IToHrXJ3mMFPz4kapSt3rjN4fzHuVZf5EfDG6K0+QrJ g8xZOE7manqxvfAoJpUs2+1B/KmPiYwkJSZv27HNtT786bl+cbxfVyxCYQIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFGYoMHxQzE6vad7n1bVGZABkrzhPMB8GA1UdIwQY MBaAFHSqkxKvTD2c7ggslUGmtlraVps8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEtxVEVxOU1QWnp1Q0N5VlFhYTJXdHBXbXp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8wYTQxNWEtYzcyOC00MmU5LWJlNDUt OThhMWQ2NWNmZTZmLzEvWmlnd2ZGRE1UcTlwM3VmVnRVWmtBR1N2T0U4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS8wYTQxNWEtYzcyOC00MmU5LWJlNDUtOThhMWQ2NWNmZTZm LzEvZEtxVEVxOU1QWnp1Q0N5VlFhYTJXdHBXbXp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQALjXEAwQA gIz+AwQFsqPgAwQCubd4AwQCucx0MA0EAgACMAcDBQMqCvJAMA0GCSqGSIb3DQEB CwUAA4IBAQAZhoNPA3xYnn6v7cNwa1Ja0Tx03qnZXYfAbXWC5PWlQblYpEe5Kjvg 6kJqZquaCpdlqZdZGX6VumyUcvrAxmH9dkjwbhQfBUrJUs1CNPx7NPK7yyoiYpSw 2DEJqh0prXKAUgz0FfZ1xF1YmeH8JR7EmSn1X/JJPtc34GoKFl0+IXJnO980EQdK oaRyqxFWGB3Kk0afiJhw2TYJkfng+HgHlNx800Hyy+Aub+UrPalraddoPCBG+RTB 2sMNOHn7zCrGMLJ7rjM+7UdrrUETjzSSYSArSIGynBV7lwXO33CDkcV+iRT0A+7o tNSaHPwGrtS6IezkCqOvSg6pFKGl4Kpk -----END CERTIFICATE-----Generated at Mon Jan 26 08:38:42 2026 by rpki-client