This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/ZiRnzXkcSpJurhu_MyLUWMF4fjw.roa File: ZiRnzXkcSpJurhu_MyLUWMF4fjw.roa (raw, json) Hash identifier: wqIirvJk9KhRbYG9hrmkySthdI26YxcHRINCM7935BQ= Subject key identifier: 66:24:67:CD:79:1C:4A:92:6E:AE:1B:BF:33:22:D4:58:C1:78:7E:3C Certificate issuer: /CN=d8284f18cd44604bdd6d08f4d878dc61456c40fd Certificate serial: 019B797E070A13630C0B7C9C840A994A9C2B Authority key identifier: D8:28:4F:18:CD:44:60:4B:DD:6D:08:F4:D8:78:DC:61:45:6C:40:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/ZiRnzXkcSpJurhu_MyLUWMF4fjw.roa Signing time: Thu 01 Jan 2026 12:17:41 +0000 ROA not before: Thu 01 Jan 2026 12:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206774 IP address blocks: 46.252.1.0/24 maxlen: 24 46.252.3.0/24 maxlen: 24 46.252.4.0/24 maxlen: 24 46.252.5.0/24 maxlen: 24 46.252.7.0/24 maxlen: 24 46.252.8.0/24 maxlen: 24 46.252.9.0/24 maxlen: 24 46.252.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:07:0a:13:63:0c:0b:7c:9c:84:0a:99:4a:9c:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8284f18cd44604bdd6d08f4d878dc61456c40fd Validity Not Before: Jan 1 12:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=662467cd791c4a926eae1bbf3322d458c1787e3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b6:62:c9:77:00:e1:bf:5b:eb:f9:3a:64:8a: 6c:01:3e:8f:0d:6a:14:04:50:cb:df:81:35:1d:ef: ac:78:02:bf:60:36:61:e3:c9:f2:e4:af:bb:9f:2f: ab:10:70:e0:ad:a3:e7:59:88:f6:d7:5f:48:89:76: 5e:0f:84:20:15:f2:3a:f9:72:c5:5b:99:57:c2:f3: 3c:8f:2d:cf:a0:be:6a:e7:65:d5:1b:29:1b:94:8a: 63:21:f5:cd:17:81:ff:32:f3:0e:6b:27:4f:33:02: a6:cb:7a:98:47:75:4a:78:a5:56:1b:72:5c:83:cd: 9e:4e:f7:fd:b1:d1:d8:6a:ba:5c:f3:c7:60:c1:89: 01:f3:b3:06:97:f4:b1:84:f8:c7:1f:ea:31:33:55: 81:c4:ac:6f:a0:38:f8:f3:4c:81:16:4c:eb:b8:5c: 27:74:06:1c:e8:36:4b:82:42:07:71:4a:c7:30:10: 97:68:3a:02:30:4a:f0:5f:75:be:bb:b4:62:96:3f: 5f:04:7e:6e:77:c0:60:bc:93:c1:04:9d:1b:83:26: 0f:fc:47:93:1d:fd:31:b0:ce:d7:79:ab:36:bb:1d: 26:e2:38:d7:d2:8a:c7:cb:72:10:28:13:6d:22:a3: bb:58:30:11:1b:61:81:2c:a7:f0:aa:d2:35:d1:9c: 9d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:24:67:CD:79:1C:4A:92:6E:AE:1B:BF:33:22:D4:58:C1:78:7E:3C X509v3 Authority Key Identifier: keyid:D8:28:4F:18:CD:44:60:4B:DD:6D:08:F4:D8:78:DC:61:45:6C:40:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/ZiRnzXkcSpJurhu_MyLUWMF4fjw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.252.1.0/24 46.252.3.0-46.252.5.255 46.252.7.0-46.252.10.255 Signature Algorithm: sha256WithRSAEncryption 64:90:56:f6:41:0b:c7:d0:63:66:c4:b1:ab:41:0c:a7:0b:cb: b7:3f:83:cb:57:aa:2f:44:33:45:dd:e1:e7:dc:c2:49:3d:9f: 18:5a:4f:fe:cc:fa:d1:95:1a:d6:22:1d:65:d4:54:df:63:a7: f1:77:4b:08:69:7f:a3:7b:e4:76:00:b4:01:4c:b1:40:fe:0d: 17:fa:09:8e:e6:af:97:b4:71:50:1a:5d:6f:f2:fe:ba:77:9a: 96:d8:16:e7:1f:87:b1:76:f2:3a:be:c8:37:f3:7b:41:7e:c5: d5:43:7d:3d:98:6f:5f:4a:a4:b1:60:7f:4b:3d:b5:9d:b9:45: 14:d0:98:92:40:1c:56:5b:bb:c7:8d:95:19:cd:44:e2:c7:0b: bd:31:47:2d:80:7f:99:9c:c6:4b:f3:63:7c:df:d1:31:0f:04: bd:6c:af:a1:6e:12:8d:7a:54:90:1f:f3:2d:ec:57:c0:c7:6b: c5:e5:b4:64:87:48:4b:5a:f1:da:15:70:c3:7f:0f:c5:f0:43: 7a:a9:bb:c7:b5:ce:d4:11:d9:d7:ab:e2:e7:62:3e:b8:8d:64: ec:0a:6e:15:53:0b:8f:20:50:96:c0:48:a1:1d:71:bf:c7:af: 5b:90:ef:33:c0:59:65:5c:5c:f4:d3:4b:44:b9:60:49:da:77: f2:90:89:82 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt5fgcKE2MMC3ychAqZSpwrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4Mjg0ZjE4Y2Q0NDYwNGJkZDZkMDhmNGQ4NzhkYzYxNDU2 YzQwZmQwHhcNMjYwMTAxMTIxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjI0NjdjZDc5MWM0YTkyNmVhZTFiYmYzMzIyZDQ1OGMxNzg3ZTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrZiyXcA4b9b6/k6ZIpsAT6PDWoU BFDL34E1He+seAK/YDZh48ny5K+7ny+rEHDgraPnWYj2119IiXZeD4QgFfI6+XLF W5lXwvM8jy3PoL5q52XVGykblIpjIfXNF4H/MvMOaydPMwKmy3qYR3VKeKVWG3Jc g82eTvf9sdHYarpc88dgwYkB87MGl/SxhPjHH+oxM1WBxKxvoDj480yBFkzruFwn dAYc6DZLgkIHcUrHMBCXaDoCMErwX3W+u7Rilj9fBH5ud8BgvJPBBJ0bgyYP/EeT Hf0xsM7Xeas2ux0m4jjX0orHy3IQKBNtIqO7WDARG2GBLKfwqtI10ZydZwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFGYkZ815HEqSbq4bvzMi1FjBeH48MB8GA1UdIwQY MBaAFNgoTxjNRGBL3W0I9Nh43GFFbED9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkNoUEdNMUVZRXZkYlFqMDJIamNZVVZzUVAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8yNjUyY2QtN2VjZi00OWU4LWE0Zjgt Yzc4NjkxMjg1ODJjLzEvWmlSbnpYa2NTcEp1cmh1X015TFVXTUY0Zmp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8yNjUyY2QtN2VjZi00OWU4LWE0ZjgtYzc4NjkxMjg1ODJj LzEvMkNoUEdNMUVZRXZkYlFqMDJIamNZVVZzUVAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiAwQALvwBMAwD BAAu/AMDBAEu/AQwDAMEAC78BwMEAC78CjANBgkqhkiG9w0BAQsFAAOCAQEAZJBW 9kELx9BjZsSxq0EMpwvLtz+Dy1eqL0QzRd3h59zCST2fGFpP/sz60ZUa1iIdZdRU 32On8XdLCGl/o3vkdgC0AUyxQP4NF/oJjuavl7RxUBpdb/L+unealtgW5x+HsXby Or7IN/N7QX7F1UN9PZhvX0qksWB/Sz21nblFFNCYkkAcVlu7x42VGc1E4scLvTFH LYB/mZzGS/NjfN/RMQ8EvWyvoW4SjXpUkB/zLexXwMdrxeW0ZIdIS1rx2hVww38P xfBDeqm7x7XO1BHZ16vi52I+uI1k7ApuFVMLjyBQlsBIoR1xv8evW5DvM8BZZVxc 9NNLRLlgSdp38pCJgg== -----END CERTIFICATE-----Generated at Sun Jan 25 22:32:01 2026 by rpki-client