This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/ZqVGldv9ZJCUDTLeSn1C0d7I18g.roa File: ZqVGldv9ZJCUDTLeSn1C0d7I18g.roa (raw, json) Hash identifier: uIgPK/yujRKyFi+4ZNmbB0CRvDlTsSwPRJk2iQzEWQU= Subject key identifier: 66:A5:46:95:DB:FD:64:90:94:0D:32:DE:4A:7D:42:D1:DE:C8:D7:C8 Certificate issuer: /CN=46bb8215b2266da3c0f6ca55cc7ba800e9ade2a2 Certificate serial: 019B7E37719F14F9673A5BA9C3E954DC6657 Authority key identifier: 46:BB:82:15:B2:26:6D:A3:C0:F6:CA:55:CC:7B:A8:00:E9:AD:E2:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RruCFbImbaPA9spVzHuoAOmt4qI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/ZqVGldv9ZJCUDTLeSn1C0d7I18g.roa Signing time: Fri 02 Jan 2026 10:18:41 +0000 ROA not before: Fri 02 Jan 2026 10:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29695 IP address blocks: 5.172.182.0/24 maxlen: 24 45.14.52.0/22 maxlen: 22 79.160.0.0/15 maxlen: 24 80.203.0.0/17 maxlen: 17 81.166.0.0/15 maxlen: 24 84.234.128.0/17 maxlen: 24 89.11.128.0/17 maxlen: 17 92.220.0.0/15 maxlen: 21 109.247.0.0/16 maxlen: 21 141.0.64.0/18 maxlen: 18 213.167.96.0/19 maxlen: 19 2a01:798::/29 maxlen: 32 2a11:5100::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/RruCFbImbaPA9spVzHuoAOmt4qI.crl rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/RruCFbImbaPA9spVzHuoAOmt4qI.mft rsync://rpki.ripe.net/repository/DEFAULT/RruCFbImbaPA9spVzHuoAOmt4qI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:71:9f:14:f9:67:3a:5b:a9:c3:e9:54:dc:66:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46bb8215b2266da3c0f6ca55cc7ba800e9ade2a2 Validity Not Before: Jan 2 10:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=66a54695dbfd6490940d32de4a7d42d1dec8d7c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b6:c5:74:5a:21:5c:05:23:4f:f9:65:7b:9b: f3:8a:f9:8c:33:fc:3a:ec:26:a8:38:df:a7:fe:31: 4d:e6:f9:11:ed:3d:38:0e:6c:a3:0f:4c:32:c2:c3: 6d:9a:87:26:29:77:a3:0c:30:be:2c:d9:a8:68:0c: b1:f0:79:2c:ed:0b:7d:0f:b1:24:06:f0:42:0d:72: f0:a8:56:32:d0:f5:0c:be:10:62:48:17:5e:53:7b: 0e:c7:d4:05:cf:ee:55:21:b8:31:88:27:14:31:1c: 93:a8:58:62:e5:62:30:98:96:c9:b5:44:fb:ad:41: 10:18:f5:bb:52:39:01:63:d2:80:e5:03:7f:dd:b1: 29:8b:32:c5:10:a9:ef:57:92:76:ec:4d:c2:7b:09: 46:32:dc:44:17:00:7e:e4:65:35:68:0f:21:d0:51: a1:d5:2f:1d:66:3b:06:c4:9e:2a:79:73:32:b3:74: 81:1a:b8:2c:85:fe:e3:7f:65:4a:33:ab:e1:e8:ae: 88:c1:d9:21:af:65:59:6e:58:f4:62:00:60:df:d9: 86:36:f2:e4:9a:86:40:43:73:af:a7:45:ee:eb:9d: 93:9d:d0:d2:90:a6:ca:6f:d7:1e:f8:3e:5b:d3:70: 67:fb:8d:de:a2:1d:e7:89:30:c4:04:2a:69:e1:d9: 5f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:A5:46:95:DB:FD:64:90:94:0D:32:DE:4A:7D:42:D1:DE:C8:D7:C8 X509v3 Authority Key Identifier: keyid:46:BB:82:15:B2:26:6D:A3:C0:F6:CA:55:CC:7B:A8:00:E9:AD:E2:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RruCFbImbaPA9spVzHuoAOmt4qI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/ZqVGldv9ZJCUDTLeSn1C0d7I18g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/RruCFbImbaPA9spVzHuoAOmt4qI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.172.182.0/24 45.14.52.0/22 79.160.0.0/15 80.203.0.0/17 81.166.0.0/15 84.234.128.0/17 89.11.128.0/17 92.220.0.0/15 109.247.0.0/16 141.0.64.0/18 213.167.96.0/19 IPv6: 2a01:798::/29 2a11:5100::/29 Signature Algorithm: sha256WithRSAEncryption 95:f6:14:76:35:82:d9:dd:8e:41:a9:9d:ef:ea:4d:2c:cd:2c: 7e:f7:97:b8:7a:fa:3c:a6:81:db:ca:dd:68:c7:28:9b:db:3a: 42:66:0b:2b:c9:77:80:10:01:7e:92:ec:7e:43:a2:de:74:84: e1:0a:b2:17:c0:03:e3:c3:24:f3:2b:a9:e0:ca:80:76:ac:ad: b8:c9:d4:2a:5e:07:f5:a7:b2:29:1c:14:57:16:2a:52:35:1c: b6:9d:70:c1:e7:6a:b7:c4:18:5f:09:12:d3:9e:ce:b3:75:5d: 0d:27:fb:d2:40:ea:d3:29:1d:c0:04:26:69:3c:7c:c4:a7:fa: f1:cd:e1:da:37:c2:73:f0:93:39:b5:7f:69:95:6d:37:10:4b: 06:6e:71:35:5a:37:50:84:21:62:fa:1a:e2:6a:e7:04:76:bf: 78:8b:83:36:60:78:3a:69:c9:df:f2:97:a9:cb:ae:8b:49:3f: 08:a8:8d:1b:11:a4:43:cb:ed:cb:f5:45:7a:c3:fb:4c:02:8a: 83:12:b6:7e:99:20:73:60:e5:18:b0:ba:f1:c9:c5:9a:25:58: b1:4f:e5:17:fb:34:3a:ba:6a:5c:4f:d9:b2:2a:71:f6:3a:ad: 1f:80:8b:65:4f:7d:7f:85:8a:e8:45:d2:58:e6:0b:e1:1f:14: 54:03:bf:1b -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgISAZt+N3GfFPlnOlupw+lU3GZXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2YmI4MjE1YjIyNjZkYTNjMGY2Y2E1NWNjN2JhODAwZTlh ZGUyYTIwHhcNMjYwMTAyMTAxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NmE1NDY5NWRiZmQ2NDkwOTQwZDMyZGU0YTdkNDJkMWRlYzhkN2M4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7bFdFohXAUjT/lle5vzivmMM/w6 7CaoON+n/jFN5vkR7T04DmyjD0wywsNtmocmKXejDDC+LNmoaAyx8Hks7Qt9D7Ek BvBCDXLwqFYy0PUMvhBiSBdeU3sOx9QFz+5VIbgxiCcUMRyTqFhi5WIwmJbJtUT7 rUEQGPW7UjkBY9KA5QN/3bEpizLFEKnvV5J27E3CewlGMtxEFwB+5GU1aA8h0FGh 1S8dZjsGxJ4qeXMys3SBGrgshf7jf2VKM6vh6K6Iwdkhr2VZblj0YgBg39mGNvLk moZAQ3Ovp0Xu652TndDSkKbKb9ce+D5b03Bn+43eoh3niTDEBCpp4dlfdwIDAQAB o4ICVzCCAlMwHQYDVR0OBBYEFGalRpXb/WSQlA0y3kp9QtHeyNfIMB8GA1UdIwQY MBaAFEa7ghWyJm2jwPbKVcx7qADpreKiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnJ1Q0ZiSW1iYVBBOXNwVnpIdW9BT210NHFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny82YTMyMTUtNmI2Mi00MzYzLTlhYmMt N2E1NGRiNTllYzJkLzEvWnFWR2xkdjlaSkNVRFRMZVNuMUMwZDdJMThnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny82YTMyMTUtNmI2Mi00MzYzLTlhYmMtN2E1NGRiNTllYzJk LzEvUnJ1Q0ZiSW1iYVBBOXNwVnpIdW9BT210NHFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBEBAIAATA+AwQABay2AwQC LQ40AwMBT6ADBAdQywADAwFRpgMEB1TqgAMEB1kLgAMDAVzcAwMAbfcDBAaNAEAD BAXVp2AwFAQCAAIwDgMFAyoBB5gDBQMqEVEAMA0GCSqGSIb3DQEBCwUAA4IBAQCV 9hR2NYLZ3Y5BqZ3v6k0szSx+95e4evo8poHbyt1oxyib2zpCZgsryXeAEAF+kux+ Q6LedIThCrIXwAPjwyTzK6ngyoB2rK24ydQqXgf1p7IpHBRXFipSNRy2nXDB52q3 xBhfCRLTns6zdV0NJ/vSQOrTKR3ABCZpPHzEp/rxzeHaN8Jz8JM5tX9plW03EEsG bnE1WjdQhCFi+hriaucEdr94i4M2YHg6acnf8pepy66LST8IqI0bEaRDy+3L9UV6 w/tMAoqDErZ+mSBzYOUYsLrxycWaJVixT+UX+zQ6umpcT9myKnH2Oq0fgItlT31/ hYroRdJY5gvhHxRUA78b -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:09 2026 by rpki-client