This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/ZmdXwtXBsnD2eyISB1nt0uyRdc4.roa File: ZmdXwtXBsnD2eyISB1nt0uyRdc4.roa (raw, json) Hash identifier: uFKND0fVT6e97x91HY39nkCJBf2t0BI+jc6CgQmrdSg= Subject key identifier: 66:67:57:C2:D5:C1:B2:70:F6:7B:22:12:07:59:ED:D2:EC:91:75:CE Certificate issuer: /CN=5954b6183e459748c89ee5431b8f31de692ae3b7 Certificate serial: 019B7F141357D055765B084A44C6665D45A6 Authority key identifier: 59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/ZmdXwtXBsnD2eyISB1nt0uyRdc4.roa Signing time: Fri 02 Jan 2026 14:19:40 +0000 ROA not before: Fri 02 Jan 2026 14:19:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396356 IP address blocks: 84.37.20.0/23 maxlen: 24 84.37.64.0/23 maxlen: 24 84.37.70.0/23 maxlen: 24 84.37.106.0/23 maxlen: 23 84.37.108.0/23 maxlen: 24 84.37.114.0/23 maxlen: 24 84.37.118.0/23 maxlen: 24 84.37.132.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.mft rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 02:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:13:57:d0:55:76:5b:08:4a:44:c6:66:5d:45:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5954b6183e459748c89ee5431b8f31de692ae3b7 Validity Not Before: Jan 2 14:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=666757c2d5c1b270f67b22120759edd2ec9175ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1d:4b:bd:1e:77:0b:ae:9e:c9:fe:1f:69:72: 6c:10:f9:05:af:37:f9:db:ea:c9:3f:ea:1f:18:67: 71:ed:f8:0b:c1:ed:31:ea:a6:66:aa:2a:be:85:42: 8c:a9:81:36:17:25:4f:0f:30:e2:0b:21:a1:ea:0f: 65:21:6b:01:2c:35:a1:b6:5e:d3:30:33:34:8d:1d: 5f:3c:0e:36:0c:3f:c7:65:b3:52:07:4d:e5:17:73: 8b:10:de:57:ca:b4:75:ce:91:9c:cf:1f:83:bf:bf: d1:b3:47:52:bb:27:a6:4c:17:3b:e1:45:68:11:ce: 4d:67:db:b9:f0:67:98:68:30:e0:0f:87:76:1f:77: 75:fe:e4:0b:85:46:02:a2:1c:dc:c4:99:3a:98:02: fd:f7:01:0b:6e:43:36:c2:44:42:e3:cc:4c:fe:5a: 24:fc:57:55:b7:99:fa:61:0b:1e:46:93:a9:40:ef: c0:20:2a:6d:d7:1f:ed:78:c8:f3:b0:ab:d0:19:8f: de:ee:80:ad:46:1f:2f:86:7f:20:d4:3d:e0:96:0b: 85:11:55:60:e7:20:8b:ee:a3:5f:f9:6a:1c:58:dc: 47:c4:a2:a9:ce:fc:c8:8a:24:be:58:f4:bd:6a:60: e7:b0:e3:d2:d4:34:1d:30:e8:2c:66:10:bb:49:bb: f6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:67:57:C2:D5:C1:B2:70:F6:7B:22:12:07:59:ED:D2:EC:91:75:CE X509v3 Authority Key Identifier: keyid:59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/ZmdXwtXBsnD2eyISB1nt0uyRdc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.37.20.0/23 84.37.64.0/23 84.37.70.0/23 84.37.106.0-84.37.109.255 84.37.114.0/23 84.37.118.0/23 84.37.132.0/23 Signature Algorithm: sha256WithRSAEncryption 4f:f4:82:be:ef:d7:93:9f:55:34:35:55:85:a6:ca:2f:22:e3: d2:df:82:b9:1f:49:d5:5e:db:1c:82:6d:33:e5:e0:88:c2:0e: b1:58:14:67:f4:5a:00:40:54:0a:be:9a:f4:25:89:02:6a:9c: 95:42:c9:4d:fa:7a:14:db:db:f3:b1:42:ac:30:5e:6b:13:eb: 91:d0:16:e9:d0:36:4d:76:6e:01:57:67:71:63:cb:fe:2a:d9: 15:06:b6:cb:d6:97:2a:65:9c:27:c0:7b:f9:46:1f:df:d5:4c: 28:6e:ea:71:20:7d:d8:4a:73:59:65:64:f5:cd:a7:73:78:a7: 1b:8c:35:07:fa:85:2e:32:26:08:a0:e0:02:bb:f6:73:d1:45: 5a:db:f5:58:dc:ac:7e:37:56:63:21:0b:cf:c0:f2:7a:c2:2f: b9:60:30:90:27:94:41:9f:e6:88:9d:86:f2:a8:dc:33:7c:b3: e1:31:9a:76:13:ac:1a:4a:ed:b3:9a:a6:2f:a4:9a:03:a3:b0: 97:b4:a4:71:53:9b:ee:4d:b6:44:2b:a7:12:b8:90:63:63:9d: b3:e7:e3:c2:90:db:d7:a2:24:6f:34:d8:9b:38:cc:86:7e:3c: 9c:65:12:3e:6e:a7:90:9a:00:47:1b:62:37:36:95:0b:16:60: 47:d5:e9:6f -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgISAZt/FBNX0FV2WwhKRMZmXUWmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NTRiNjE4M2U0NTk3NDhjODllZTU0MzFiOGYzMWRlNjky YWUzYjcwHhcNMjYwMTAyMTQxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjY3NTdjMmQ1YzFiMjcwZjY3YjIyMTIwNzU5ZWRkMmVjOTE3NWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsR1LvR53C66eyf4faXJsEPkFrzf5 2+rJP+ofGGdx7fgLwe0x6qZmqiq+hUKMqYE2FyVPDzDiCyGh6g9lIWsBLDWhtl7T MDM0jR1fPA42DD/HZbNSB03lF3OLEN5XyrR1zpGczx+Dv7/Rs0dSuyemTBc74UVo Ec5NZ9u58GeYaDDgD4d2H3d1/uQLhUYCohzcxJk6mAL99wELbkM2wkRC48xM/lok /FdVt5n6YQseRpOpQO/AICpt1x/teMjzsKvQGY/e7oCtRh8vhn8g1D3glguFEVVg 5yCL7qNf+WocWNxHxKKpzvzIiiS+WPS9amDnsOPS1DQdMOgsZhC7Sbv23QIDAQAB o4ICNTCCAjEwHQYDVR0OBBYEFGZnV8LVwbJw9nsiEgdZ7dLskXXOMB8GA1UdIwQY MBaAFFlUthg+RZdIyJ7lQxuPMd5pKuO3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1ZTMkdENUZsMGpJbnVWREc0OHgzbWtxNDdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83ZGU2NWMtOTBmNS00ZGVmLWI4NzMt ZDJhZGVlZDc1NWQ4LzEvWm1kWHd0WEJzbkQyZXlJU0IxbnQwdXlSZGM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83ZGU2NWMtOTBmNS00ZGVmLWI4NzMtZDJhZGVlZDc1NWQ4 LzEvV1ZTMkdENUZsMGpJbnVWREc0OHgzbWtxNDdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQBVCUUAwQB VCVAAwQBVCVGMAwDBAFUJWoDBAFUJWwDBAFUJXIDBAFUJXYDBAFUJYQwDQYJKoZI hvcNAQELBQADggEBAE/0gr7v15OfVTQ1VYWmyi8i49LfgrkfSdVe2xyCbTPl4IjC DrFYFGf0WgBAVAq+mvQliQJqnJVCyU36ehTb2/OxQqwwXmsT65HQFunQNk12bgFX Z3Fjy/4q2RUGtsvWlyplnCfAe/lGH9/VTChu6nEgfdhKc1llZPXNp3N4pxuMNQf6 hS4yJgig4AK79nPRRVrb9VjcrH43VmMhC8/A8nrCL7lgMJAnlEGf5oidhvKo3DN8 s+ExmnYTrBpK7bOapi+kmgOjsJe0pHFTm+5NtkQrpxK4kGNjnbPn48KQ29eiJG80 2Js4zIZ+PJxlEj5up5CaAEcbYjc2lQsWYEfV6W8= -----END CERTIFICATE-----Generated at Sun Jan 25 11:39:57 2026 by rpki-client