This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/z4InAxDK05kox6Mep1pGJqv26Ks.roa File: z4InAxDK05kox6Mep1pGJqv26Ks.roa (raw, json) Hash identifier: uXp39wxoRlljVBGquILR6v0EQX+MSTGZ+l0nEBhpar4= Subject key identifier: CF:82:27:03:10:CA:D3:99:28:C7:A3:1E:A7:5A:46:26:AB:F6:E8:AB Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8 Certificate serial: 019B7758E92C19E4F298F42AA159FC5EBE15 Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/z4InAxDK05kox6Mep1pGJqv26Ks.roa Signing time: Thu 01 Jan 2026 02:17:54 +0000 ROA not before: Thu 01 Jan 2026 02:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12887 IP address blocks: 84.40.152.0/23 maxlen: 23 84.40.155.0/24 maxlen: 24 84.40.156.0/22 maxlen: 22 84.40.216.0/24 maxlen: 24 84.40.218.0/23 maxlen: 23 84.40.220.0/22 maxlen: 22 84.40.232.0/22 maxlen: 22 84.40.237.0/24 maxlen: 24 84.40.238.0/23 maxlen: 23 93.159.0.0/22 maxlen: 22 93.159.4.0/23 maxlen: 23 93.159.7.0/24 maxlen: 24 93.159.12.0/23 maxlen: 23 93.159.14.0/24 maxlen: 24 93.159.16.0/23 maxlen: 23 93.159.18.0/24 maxlen: 24 93.159.20.0/24 maxlen: 24 93.159.22.0/24 maxlen: 24 93.159.24.0/22 maxlen: 22 93.159.28.0/24 maxlen: 24 93.159.33.0/24 maxlen: 24 93.159.34.0/23 maxlen: 23 93.159.36.0/24 maxlen: 24 93.159.40.0/24 maxlen: 24 93.159.42.0/24 maxlen: 24 93.159.45.0/24 maxlen: 24 93.159.46.0/23 maxlen: 23 93.159.48.0/24 maxlen: 24 93.159.49.0/24 maxlen: 24 93.159.55.0/24 maxlen: 24 93.159.57.0/24 maxlen: 24 93.159.58.0/23 maxlen: 23 93.159.60.0/22 maxlen: 22 185.72.184.0/22 maxlen: 22 185.164.140.0/22 maxlen: 22 194.9.78.0/23 maxlen: 23 195.85.209.0/24 maxlen: 24 195.128.172.0/24 maxlen: 24 195.128.173.0/24 maxlen: 24 195.128.180.0/24 maxlen: 24 195.128.181.0/24 maxlen: 24 195.160.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:e9:2c:19:e4:f2:98:f4:2a:a1:59:fc:5e:be:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8 Validity Not Before: Jan 1 02:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf82270310cad39928c7a31ea75a4626abf6e8ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c8:ef:1d:6e:cf:dc:cd:9f:be:12:83:76:cd: b8:22:38:df:99:b4:9b:28:c6:e0:0c:0a:fe:5d:39: 4d:f1:a7:ed:da:d5:0b:d9:23:d9:3b:30:1e:15:3e: 64:75:50:93:01:13:fb:b7:c9:f2:68:5a:c0:d2:87: 1e:d6:00:60:e3:9d:ff:9d:dc:b2:a8:13:d4:54:eb: 26:e3:61:73:82:c7:80:95:3e:2f:5a:13:99:81:19: 62:27:d9:8f:1d:a6:8c:d8:6a:dc:08:35:32:6f:76: da:77:0f:d2:fd:fa:42:0b:cb:90:ab:59:1b:f3:e9: ee:e1:56:ed:b3:0f:0c:a7:f7:81:24:a9:a2:90:8b: 28:a7:74:e4:44:38:48:00:f7:41:b1:04:3d:6f:76: ba:54:7e:a8:8a:d4:a3:ff:87:f8:c3:de:7e:39:88: e2:58:6d:50:aa:d8:7b:9e:0d:e7:95:cb:b3:fe:d6: db:af:f4:6a:1c:03:81:28:86:03:16:cb:0a:1b:f8: 2a:67:be:b6:86:61:c7:91:0d:a3:fe:d7:e0:d3:95: 3c:05:71:22:cd:a9:81:f4:b5:b7:f2:df:83:58:fd: 47:18:36:89:55:80:e1:be:c5:74:60:3a:a4:f0:78: 41:e3:14:95:c3:4e:bc:9e:bf:33:76:8c:05:57:76: 1a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:82:27:03:10:CA:D3:99:28:C7:A3:1E:A7:5A:46:26:AB:F6:E8:AB X509v3 Authority Key Identifier: keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/z4InAxDK05kox6Mep1pGJqv26Ks.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.40.152.0/23 84.40.155.0-84.40.159.255 84.40.216.0/24 84.40.218.0-84.40.223.255 84.40.232.0/22 84.40.237.0-84.40.239.255 93.159.0.0-93.159.5.255 93.159.7.0/24 93.159.12.0-93.159.14.255 93.159.16.0-93.159.18.255 93.159.20.0/24 93.159.22.0/24 93.159.24.0-93.159.28.255 93.159.33.0-93.159.36.255 93.159.40.0/24 93.159.42.0/24 93.159.45.0-93.159.49.255 93.159.55.0/24 93.159.57.0-93.159.63.255 185.72.184.0/22 185.164.140.0/22 194.9.78.0/23 195.85.209.0/24 195.128.172.0/23 195.128.180.0/23 195.160.174.0/23 Signature Algorithm: sha256WithRSAEncryption 93:81:e6:9b:61:d5:5a:65:bc:27:a1:94:62:3e:ca:5f:4f:ab: 5b:99:36:77:20:3a:fb:cb:6d:b8:a4:e0:bf:63:54:da:fb:6e: 89:95:21:99:88:08:e4:21:69:a5:08:6b:1a:43:9d:88:e2:59: aa:02:f5:0e:d7:0b:cb:1a:df:f7:53:90:e6:ca:13:51:ed:71: a9:37:ad:39:c0:1d:56:6a:cd:80:a1:4b:bd:9e:a7:d1:90:a2: ec:9b:bb:bc:2a:63:e4:4a:d5:44:5d:6d:fc:89:b6:a9:4d:5c: ea:c7:cf:65:5e:86:6a:9b:9d:b4:a9:17:4e:2e:7f:15:63:95: b9:7b:49:32:4c:f3:e7:ba:78:5d:25:b7:ae:f4:14:3a:88:95: 62:bd:44:dd:17:4c:50:04:11:29:d8:0e:8e:ba:27:b3:4c:66: 55:1a:4c:e2:aa:bf:2d:89:a7:e1:67:4f:d0:53:bd:8c:bd:56: ed:f8:15:21:32:16:b8:7d:54:70:35:5e:67:89:11:06:93:4b: b5:52:2a:4b:83:6d:e6:c7:9d:13:b1:1d:91:97:17:ab:97:ab: a0:ae:f3:01:bd:06:2f:49:33:56:98:06:a8:dc:5b:70:d2:5a: 0a:e7:7e:82:e1:64:68:6a:ab:69:da:8c:3c:b0:9d:9c:25:c7: 18:81:7f:f9 -----BEGIN CERTIFICATE----- MIIF6DCCBNCgAwIBAgISAZt3WOksGeTymPQqoVn8Xr4VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx YjM2ZTgwHhcNMjYwMTAxMDIxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjgyMjcwMzEwY2FkMzk5MjhjN2EzMWVhNzVhNDYyNmFiZjZlOGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8jvHW7P3M2fvhKDds24IjjfmbSb KMbgDAr+XTlN8aft2tUL2SPZOzAeFT5kdVCTARP7t8nyaFrA0oce1gBg453/ndyy qBPUVOsm42FzgseAlT4vWhOZgRliJ9mPHaaM2GrcCDUyb3badw/S/fpCC8uQq1kb 8+nu4Vbtsw8Mp/eBJKmikIsop3TkRDhIAPdBsQQ9b3a6VH6oitSj/4f4w95+OYji WG1Qqth7ng3nlcuz/tbbr/RqHAOBKIYDFssKG/gqZ762hmHHkQ2j/tfg05U8BXEi zamB9LW38t+DWP1HGDaJVYDhvsV0YDqk8HhB4xSVw068nr8zdowFV3Ya3QIDAQAB o4IC9DCCAvAwHQYDVR0OBBYEFM+CJwMQytOZKMejHqdaRiar9uirMB8GA1UdIwQY MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt MDI0YjE2NTVjMjQ3LzEvejRJbkF4REswNWtveDZNZXAxcEdKcXYyNktzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3 LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBCAYIKwYBBQUHAQcBAf8EgfgwgfUwgfIEAgABMIHrAwQB VCiYMAwDBABUKJsDBAVUKIADBABUKNgwDAMEAVQo2gMEBVQowAMEAlQo6DAMAwQA VCjtAwQEVCjgMAsDAwBdnwMEAV2fBAMEAF2fBzAMAwQCXZ8MAwQAXZ8OMAwDBARd nxADBABdnxIDBABdnxQDBABdnxYwDAMEA12fGAMEAF2fHDAMAwQAXZ8hAwQAXZ8k AwQAXZ8oAwQAXZ8qMAwDBABdny0DBAFdnzADBABdnzcwDAMEAF2fOQMEBl2fAAME ArlIuAMEArmkjAMEAcIJTgMEAMNV0QMEAcOArAMEAcOAtAMEAcOgrjANBgkqhkiG 9w0BAQsFAAOCAQEAk4Hmm2HVWmW8J6GUYj7KX0+rW5k2dyA6+8ttuKTgv2NU2vtu iZUhmYgI5CFppQhrGkOdiOJZqgL1DtcLyxrf91OQ5soTUe1xqTetOcAdVmrNgKFL vZ6n0ZCi7Ju7vCpj5ErVRF1t/Im2qU1c6sfPZV6GapudtKkXTi5/FWOVuXtJMkzz 57p4XSW3rvQUOoiVYr1E3RdMUAQRKdgOjrons0xmVRpM4qq/LYmn4WdP0FO9jL1W 7fgVITIWuH1UcDVeZ4kRBpNLtVIqS4Nt5sedE7EdkZcXq5eroK7zAb0GL0kzVpgG qNxbcNJaCud+guFkaGqradqMPLCdnCXHGIF/+Q== -----END CERTIFICATE-----Generated at Sun Jan 25 20:30:06 2026 by rpki-client