This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/Z1ZwjRJZEg-6cYwegCHUQ6jbdHw.roa File: Z1ZwjRJZEg-6cYwegCHUQ6jbdHw.roa (raw, json) Hash identifier: wsBDYY9p4yj9uQ17DobokNU2uMNA8/OsKQ3DkqS0FyI= Subject key identifier: 67:56:70:8D:12:59:12:0F:BA:71:8C:1E:80:21:D4:43:A8:DB:74:7C Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8 Certificate serial: 019AE3665F413F1E00A113F033C5FA16C6C6 Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/Z1ZwjRJZEg-6cYwegCHUQ6jbdHw.roa Signing time: Wed 03 Dec 2025 08:48:48 +0000 ROA not before: Wed 03 Dec 2025 08:48:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 12741 IP address blocks: 5.226.64.0/18 maxlen: 18 5.226.92.0/24 maxlen: 24 5.226.128.0/22 maxlen: 24 5.226.135.0/24 maxlen: 24 37.128.0.0/17 maxlen: 17 37.128.0.0/19 maxlen: 19 37.128.32.0/20 maxlen: 20 37.128.48.0/20 maxlen: 20 37.128.64.0/18 maxlen: 18 62.87.128.0/17 maxlen: 17 62.89.64.0/18 maxlen: 18 62.111.128.0/17 maxlen: 17 62.111.250.0/24 maxlen: 24 62.148.64.0/19 maxlen: 19 62.181.160.0/19 maxlen: 19 62.233.128.0/17 maxlen: 17 62.244.128.0/19 maxlen: 19 77.65.134.0/24 maxlen: 24 77.65.155.0/24 maxlen: 24 77.65.171.0/24 maxlen: 24 77.65.188.0/24 maxlen: 24 77.65.193.0/24 maxlen: 24 77.65.209.0/24 maxlen: 24 77.65.226.0/24 maxlen: 24 77.65.227.0/24 maxlen: 24 77.252.0.0/14 maxlen: 14 77.252.0.0/16 maxlen: 24 78.8.0.0/14 maxlen: 14 81.168.128.0/17 maxlen: 17 81.210.0.0/17 maxlen: 17 81.219.0.0/16 maxlen: 16 82.143.128.0/18 maxlen: 18 83.238.0.0/16 maxlen: 16 84.40.128.0/17 maxlen: 17 84.40.128.0/20 maxlen: 20 84.40.136.0/24 maxlen: 24 84.40.144.0/21 maxlen: 21 84.40.152.0/21 maxlen: 21 84.40.160.0/19 maxlen: 19 84.40.192.0/20 maxlen: 20 84.40.208.0/21 maxlen: 21 84.40.216.0/21 maxlen: 21 84.40.224.0/21 maxlen: 21 84.40.236.0/24 maxlen: 24 84.40.240.0/20 maxlen: 20 85.31.252.0/24 maxlen: 24 85.128.0.0/17 maxlen: 17 85.202.54.0/24 maxlen: 24 85.202.59.0/24 maxlen: 24 87.105.0.0/16 maxlen: 16 87.204.0.0/15 maxlen: 15 87.204.0.0/16 maxlen: 16 87.205.0.0/17 maxlen: 17 87.205.128.0/17 maxlen: 17 87.239.216.0/21 maxlen: 22 89.171.0.0/16 maxlen: 16 91.192.88.0/22 maxlen: 22 93.159.0.0/18 maxlen: 18 93.180.160.0/19 maxlen: 19 159.205.0.0/16 maxlen: 16 178.16.116.0/24 maxlen: 24 178.16.121.0/24 maxlen: 24 178.16.125.0/24 maxlen: 24 178.36.0.0/15 maxlen: 15 185.58.160.0/22 maxlen: 22 185.58.160.0/23 maxlen: 23 185.58.162.0/23 maxlen: 23 185.72.184.0/22 maxlen: 22 185.164.140.0/22 maxlen: 22 185.244.96.0/22 maxlen: 22 188.114.66.0/24 maxlen: 24 193.19.104.0/23 maxlen: 23 193.91.16.0/20 maxlen: 20 193.192.173.0/24 maxlen: 24 193.192.181.0/24 maxlen: 24 193.192.188.0/24 maxlen: 24 193.192.190.0/24 maxlen: 24 195.114.160.0/19 maxlen: 19 212.49.32.0/19 maxlen: 19 212.106.0.0/19 maxlen: 19 212.106.0.0/20 maxlen: 20 212.106.16.0/20 maxlen: 20 213.17.128.0/17 maxlen: 17 213.17.244.0/24 maxlen: 24 213.134.128.0/19 maxlen: 19 213.146.32.0/19 maxlen: 19 213.186.64.0/19 maxlen: 19 213.195.128.0/18 maxlen: 18 213.216.64.0/18 maxlen: 18 213.238.64.0/18 maxlen: 18 213.241.0.0/17 maxlen: 17 213.241.89.0/24 maxlen: 24 217.30.128.0/19 maxlen: 19 2001:16b0::/32 maxlen: 32 2001:41b0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e3:66:5f:41:3f:1e:00:a1:13:f0:33:c5:fa:16:c6:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8 Validity Not Before: Dec 3 08:48:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6756708d1259120fba718c1e8021d443a8db747c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:f8:91:d3:58:24:a0:8e:ab:c9:9b:53:7f:fe: 17:aa:0d:1f:e1:57:dd:3b:f6:f0:ef:38:7b:45:11: 5d:b5:0b:bc:bd:bb:23:81:54:41:58:72:7d:b1:00: f9:2c:cf:42:49:01:1c:6d:00:7e:d3:00:c2:86:a3: 52:f6:b2:4d:bb:15:a4:cd:76:9f:2a:38:02:c0:28: 9c:60:82:d9:5c:c5:36:82:cf:e6:f5:b7:1c:1c:63: 3a:8a:fb:1f:4c:4b:74:b6:3c:79:90:fa:a0:7b:1b: 23:e8:93:42:ec:bb:49:1f:f7:2f:57:21:14:9c:fd: ae:17:f4:48:77:d8:bd:b6:c0:1c:6a:29:a1:fd:cd: 7a:e2:20:12:cd:61:7b:57:9b:2e:95:2c:92:0b:4c: 6e:f7:d2:14:91:18:06:4d:b8:76:d1:91:50:69:f4: d8:23:73:82:0c:a1:3a:cc:4c:c5:c6:6c:44:dc:9b: a1:2a:23:03:27:cf:89:61:9a:67:d4:df:89:e6:96: 9c:eb:85:8e:26:be:2d:4f:3b:f0:79:b6:13:dd:3c: c2:37:0d:4e:01:99:46:6e:bb:6d:3a:ac:d7:93:3d: 42:5c:ee:fc:cf:6d:d6:fe:28:3f:44:2e:88:88:b7: ce:be:9f:46:fc:09:4e:7b:fe:38:90:46:ce:98:e7: ca:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:56:70:8D:12:59:12:0F:BA:71:8C:1E:80:21:D4:43:A8:DB:74:7C X509v3 Authority Key Identifier: keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/Z1ZwjRJZEg-6cYwegCHUQ6jbdHw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.226.64.0-5.226.131.255 5.226.135.0/24 37.128.0.0/17 62.87.128.0/17 62.89.64.0/18 62.111.128.0/17 62.148.64.0/19 62.181.160.0/19 62.233.128.0/17 62.244.128.0/19 77.65.134.0/24 77.65.155.0/24 77.65.171.0/24 77.65.188.0/24 77.65.193.0/24 77.65.209.0/24 77.65.226.0/23 77.252.0.0/14 78.8.0.0/14 81.168.128.0/17 81.210.0.0/17 81.219.0.0/16 82.143.128.0/18 83.238.0.0/16 84.40.128.0/17 85.31.252.0/24 85.128.0.0/17 85.202.54.0/24 85.202.59.0/24 87.105.0.0/16 87.204.0.0/15 87.239.216.0/21 89.171.0.0/16 91.192.88.0/22 93.159.0.0/18 93.180.160.0/19 159.205.0.0/16 178.16.116.0/24 178.16.121.0/24 178.16.125.0/24 178.36.0.0/15 185.58.160.0/22 185.72.184.0/22 185.164.140.0/22 185.244.96.0/22 188.114.66.0/24 193.19.104.0/23 193.91.16.0/20 193.192.173.0/24 193.192.181.0/24 193.192.188.0/24 193.192.190.0/24 195.114.160.0/19 212.49.32.0/19 212.106.0.0/19 213.17.128.0/17 213.134.128.0/19 213.146.32.0/19 213.186.64.0/19 213.195.128.0/18 213.216.64.0/18 213.238.64.0/18 213.241.0.0/17 217.30.128.0/19 IPv6: 2001:16b0::/32 2001:41b0::/32 Signature Algorithm: sha256WithRSAEncryption 33:b4:ef:5a:fc:39:1d:b8:c4:92:c2:3a:5e:fb:09:cd:d7:7a: 05:88:fc:69:18:eb:00:89:0c:b7:ac:cd:25:76:d6:a0:5f:76: bf:e1:01:d1:37:91:68:0a:94:ad:26:8d:d1:d7:ef:fb:9e:66: 96:cf:29:b5:58:53:a8:a0:87:99:73:d8:9e:76:67:49:45:47: 85:b7:75:e6:cf:0c:41:02:a7:69:99:91:97:89:57:e5:e6:e8: 70:74:12:bc:95:6c:39:eb:d6:6f:3c:21:ec:86:30:d7:27:d5: 8e:be:95:25:96:f5:8e:10:0f:a8:48:54:99:29:1f:7b:eb:9c: 06:8d:fe:4f:d1:9c:57:c6:df:7d:59:22:83:f7:19:a2:e7:ee: a5:26:c4:ad:2d:52:f2:e3:1a:6c:08:24:ae:d1:e7:fe:84:f3: aa:c7:c8:59:24:97:31:25:ad:f9:c9:eb:c4:cc:6c:41:4f:e6: 10:2f:78:23:3b:54:ec:ed:97:86:c8:13:02:4f:5c:dd:51:53: ec:94:f7:94:d7:6c:0f:9f:46:0e:28:2f:46:4a:cd:67:2e:f7: c1:4e:8e:c3:b7:e5:6b:f2:b0:6b:cc:1f:8f:4e:2d:c1:d6:cd: c6:72:fb:84:b5:d4:4c:4e:89:d3:e0:96:db:44:22:bd:5e:09: 2a:b1:07:89 -----BEGIN CERTIFICATE----- MIIGljCCBX6gAwIBAgISAZrjZl9BPx4AoRPwM8X6FsbGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx YjM2ZTgwHhcNMjUxMjAzMDg0ODQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NzU2NzA4ZDEyNTkxMjBmYmE3MThjMWU4MDIxZDQ0M2E4ZGI3NDdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPiR01gkoI6ryZtTf/4Xqg0f4Vfd O/bw7zh7RRFdtQu8vbsjgVRBWHJ9sQD5LM9CSQEcbQB+0wDChqNS9rJNuxWkzXaf KjgCwCicYILZXMU2gs/m9bccHGM6ivsfTEt0tjx5kPqgexsj6JNC7LtJH/cvVyEU nP2uF/RId9i9tsAcaimh/c164iASzWF7V5sulSySC0xu99IUkRgGTbh20ZFQafTY I3OCDKE6zEzFxmxE3JuhKiMDJ8+JYZpn1N+J5pac64WOJr4tTzvwebYT3TzCNw1O AZlGbrttOqzXkz1CXO78z23W/ig/RC6IiLfOvp9G/AlOe/44kEbOmOfK4wIDAQAB o4IDojCCA54wHQYDVR0OBBYEFGdWcI0SWRIPunGMHoAh1EOo23R8MB8GA1UdIwQY MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt MDI0YjE2NTVjMjQ3LzEvWjFad2pSSlpFZy02Y1l3ZWdDSFVRNmpiZEh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3 LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBtgYIKwYBBQUHAQcBAf8EggGlMIIBoTCCAYcEAgABMIIB fzAMAwQGBeJAAwQCBeKAAwQABeKHAwQHJYAAAwQHPleAAwQGPllAAwQHPm+AAwQF PpRAAwQFPrWgAwQHPumAAwQFPvSAAwQATUGGAwQATUGbAwQATUGrAwQATUG8AwQA TUHBAwQATUHRAwQBTUHiAwMCTfwDAwJOCAMEB1GogAMEB1HSAAMDAFHbAwQGUo+A AwMAU+4DBAdUKIADBABVH/wDBAdVgAADBABVyjYDBABVyjsDAwBXaQMDAVfMAwQD V+/YAwMAWasDBAJbwFgDBAZdnwADBAVdtKADAwCfzQMEALIQdAMEALIQeQMEALIQ fQMDAbIkAwQCuTqgAwQCuUi4AwQCuaSMAwQCufRgAwQAvHJCAwQBwRNoAwQEwVsQ AwQAwcCtAwQAwcC1AwQAwcC8AwQAwcC+AwQFw3KgAwQF1DEgAwQF1GoAAwQH1RGA AwQF1YaAAwQF1ZIgAwQF1bpAAwQG1cOAAwQG1dhAAwQG1e5AAwQH1fEAAwQF2R6A MBQEAgACMA4DBQAgARawAwUAIAFBsDANBgkqhkiG9w0BAQsFAAOCAQEAM7TvWvw5 HbjEksI6XvsJzdd6BYj8aRjrAIkMt6zNJXbWoF92v+EB0TeRaAqUrSaN0dfv+55m ls8ptVhTqKCHmXPYnnZnSUVHhbd15s8MQQKnaZmRl4lX5ebocHQSvJVsOevWbzwh 7IYw1yfVjr6VJZb1jhAPqEhUmSkfe+ucBo3+T9GcV8bffVkig/cZoufupSbErS1S 8uMabAgkrtHn/oTzqsfIWSSXMSWt+cnrxMxsQU/mEC94IztU7O2XhsgTAk9c3VFT 7JT3lNdsD59GDigvRkrNZy73wU6Ow7fla/Kwa8wfj04twdbNxnL7hLXUTE6J0+CW 20QivV4JKrEHiQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:41:21 2025 by rpki-client