This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/zq_9_kcYqu3vefIRsvfC8bPWQ-g.roa File: zq_9_kcYqu3vefIRsvfC8bPWQ-g.roa (raw, json) Hash identifier: QDKMvUQqB0HqtMyuZtPJ5BCeeeIwdd+NrKPpEKtzi6U= Subject key identifier: CE:AF:FD:FE:47:18:AA:ED:EF:79:F2:11:B2:F7:C2:F1:B3:D6:43:E8 Certificate issuer: /CN=29993007c7c92df6178e7cb43183fd7f52a526d8 Certificate serial: 019BEC5288D5A2A691A83D4019D9EB6274F5 Authority key identifier: 29:99:30:07:C7:C9:2D:F6:17:8E:7C:B4:31:83:FD:7F:52:A5:26:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/zq_9_kcYqu3vefIRsvfC8bPWQ-g.roa Signing time: Fri 23 Jan 2026 19:26:30 +0000 ROA not before: Fri 23 Jan 2026 19:26:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39582 IP address blocks: 37.77.0.0/19 maxlen: 24 37.77.1.0/24 maxlen: 24 37.77.2.0/24 maxlen: 24 37.77.3.0/24 maxlen: 24 37.77.4.0/24 maxlen: 24 37.77.5.0/24 maxlen: 24 37.77.6.0/24 maxlen: 24 37.77.7.0/24 maxlen: 24 37.77.8.0/24 maxlen: 24 37.77.9.0/24 maxlen: 24 37.77.10.0/24 maxlen: 24 37.77.12.0/24 maxlen: 24 37.77.13.0/24 maxlen: 24 37.77.14.0/24 maxlen: 24 37.77.15.0/24 maxlen: 24 37.77.16.0/24 maxlen: 24 37.77.17.0/24 maxlen: 24 37.77.18.0/24 maxlen: 24 37.77.20.0/24 maxlen: 24 37.77.21.0/24 maxlen: 24 37.77.22.0/24 maxlen: 24 37.77.23.0/24 maxlen: 24 37.77.24.0/24 maxlen: 24 37.77.26.0/24 maxlen: 24 37.77.30.0/24 maxlen: 24 185.10.243.0/24 maxlen: 24 2a02:4300::/29 maxlen: 29 2a02:4300::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.crl rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.mft rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ec:52:88:d5:a2:a6:91:a8:3d:40:19:d9:eb:62:74:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29993007c7c92df6178e7cb43183fd7f52a526d8 Validity Not Before: Jan 23 19:26:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ceaffdfe4718aaedef79f211b2f7c2f1b3d643e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c0:3b:c9:8b:5e:ed:8d:c9:9a:dc:d7:75:9d: d3:05:3b:d1:fb:0e:06:dc:09:8b:5a:29:56:fe:46: d3:47:68:e5:5b:3c:2b:44:1e:8b:cb:78:22:9b:0a: 0f:f4:46:6c:a1:99:75:ae:9c:98:9a:b1:83:bc:59: 04:c9:18:ca:94:7d:ea:b5:c6:e6:29:94:32:d8:d7: 56:03:23:da:98:72:c9:0b:65:0d:e4:c4:a1:8e:3c: 5d:27:f3:b1:06:ff:8f:d0:65:c3:82:08:e0:f0:fa: bc:58:7c:7e:5b:88:09:da:3a:26:2a:ce:d0:9e:6a: 39:28:5d:68:69:d8:19:28:4b:a8:0e:41:0d:c1:55: d8:b9:17:ac:5a:9d:c6:31:68:ca:d7:4e:b7:2a:27: bd:5b:70:7b:c1:f2:91:f7:dc:15:27:eb:d4:f0:32: ce:cd:b1:02:cb:a9:47:4a:d6:3f:ec:08:c9:91:22: 83:b3:1d:47:86:e3:3c:23:47:f9:db:3a:9a:3f:26: d4:fa:ac:45:32:10:0c:9e:c3:b3:22:9f:37:01:ad: 38:3e:2d:98:0c:50:a8:c3:eb:6d:fa:f4:53:7b:c8: 58:e1:c6:6a:49:a7:b3:62:e7:31:2b:8d:57:6c:56: 0e:20:ae:f5:02:39:38:4a:a0:2a:1a:cd:af:e1:30: 32:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:AF:FD:FE:47:18:AA:ED:EF:79:F2:11:B2:F7:C2:F1:B3:D6:43:E8 X509v3 Authority Key Identifier: keyid:29:99:30:07:C7:C9:2D:F6:17:8E:7C:B4:31:83:FD:7F:52:A5:26:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/zq_9_kcYqu3vefIRsvfC8bPWQ-g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.77.0.0/19 185.10.243.0/24 IPv6: 2a02:4300::/29 Signature Algorithm: sha256WithRSAEncryption 4d:b6:6a:c3:5b:d9:39:4f:1e:bd:70:2a:ef:99:98:1b:f0:e8: b1:95:b1:4b:19:ce:46:f8:ac:59:99:d8:6f:34:a3:6f:55:3e: 32:34:b3:d7:5a:77:c8:f3:95:91:b9:65:6f:2e:7a:b6:ef:e3: d4:35:2d:57:f5:4c:db:c4:c3:1d:cd:19:f9:69:07:46:ca:d3: 6b:e1:aa:55:09:b1:74:a6:62:46:45:e0:de:2e:b2:67:91:4c: 92:db:ad:1b:55:35:c9:af:52:41:1c:8c:24:e1:5f:98:5c:cf: a8:32:2e:6d:b9:1b:b8:4e:1c:78:5a:ba:e8:ef:0e:19:13:2b: eb:96:5c:9d:f9:14:a1:a5:30:98:8f:14:f8:9e:24:9d:f0:aa: cc:9c:4f:60:6f:94:2f:87:f0:f3:a7:6a:63:29:6a:0c:f4:4a: 3b:9d:56:6c:34:87:4d:fe:50:ef:3e:32:fa:5a:4a:ad:a2:cd: 60:d6:2e:3a:29:51:f2:ff:8f:00:cb:71:9f:1b:db:4c:b4:54: 6d:ab:cc:b2:97:d8:a5:be:2f:92:9d:cc:bb:49:92:54:45:8c: 36:ee:92:10:27:26:f0:73:5d:04:77:e2:1a:de:69:5e:ae:56: 03:3d:36:a6:f5:d7:1b:51:b9:c3:6a:d7:2e:c9:4d:97:02:d0: ce:b1:81:a3 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZvsUojVoqaRqD1AGdnrYnT1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5OTkzMDA3YzdjOTJkZjYxNzhlN2NiNDMxODNmZDdmNTJh NTI2ZDgwHhcNMjYwMTIzMTkyNjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZWFmZmRmZTQ3MThhYWVkZWY3OWYyMTFiMmY3YzJmMWIzZDY0M2U4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsA7yYte7Y3JmtzXdZ3TBTvR+w4G 3AmLWilW/kbTR2jlWzwrRB6Ly3gimwoP9EZsoZl1rpyYmrGDvFkEyRjKlH3qtcbm KZQy2NdWAyPamHLJC2UN5MShjjxdJ/OxBv+P0GXDggjg8Pq8WHx+W4gJ2jomKs7Q nmo5KF1oadgZKEuoDkENwVXYuResWp3GMWjK1063Kie9W3B7wfKR99wVJ+vU8DLO zbECy6lHStY/7AjJkSKDsx1HhuM8I0f52zqaPybU+qxFMhAMnsOzIp83Aa04Pi2Y DFCow+tt+vRTe8hY4cZqSaezYucxK41XbFYOIK71Ajk4SqAqGs2v4TAyPQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFM6v/f5HGKrt73nyEbL3wvGz1kPoMB8GA1UdIwQY MBaAFCmZMAfHyS32F458tDGD/X9SpSbYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1prd0I4ZkpMZllYam55ME1ZUDlmMUtsSnRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9kYzliNmYtM2E2ZC00NDlmLThiODkt MWU4MjlmZmExYzNhLzEvenFfOV9rY1lxdTN2ZWZJUnN2ZkM4YlBXUS1nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9kYzliNmYtM2E2ZC00NDlmLThiODktMWU4MjlmZmExYzNh LzEvS1prd0I4ZkpMZllYam55ME1ZUDlmMUtsSnRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQFJU0AAwQA uQrzMA0EAgACMAcDBQMqAkMAMA0GCSqGSIb3DQEBCwUAA4IBAQBNtmrDW9k5Tx69 cCrvmZgb8OixlbFLGc5G+KxZmdhvNKNvVT4yNLPXWnfI85WRuWVvLnq27+PUNS1X 9UzbxMMdzRn5aQdGytNr4apVCbF0pmJGReDeLrJnkUyS260bVTXJr1JBHIwk4V+Y XM+oMi5tuRu4Thx4Wrro7w4ZEyvrllyd+RShpTCYjxT4niSd8KrMnE9gb5Qvh/Dz p2pjKWoM9Eo7nVZsNIdN/lDvPjL6Wkqtos1g1i46KVHy/48Ay3GfG9tMtFRtq8yy l9ilvi+Sncy7SZJURYw27pIQJybwc10Ed+Ia3mlerlYDPTam9dcbUbnDatcuyU2X AtDOsYGj -----END CERTIFICATE-----Generated at Sun Jan 25 17:41:34 2026 by rpki-client