This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/zR5fs6PTrjyplvT56u1K4BvWPlc.roa File: zR5fs6PTrjyplvT56u1K4BvWPlc.roa (raw, json) Hash identifier: O8dzuCsmazQPoLBfGqOiMn2tNXQbancZpn0bojUcLR0= Subject key identifier: CD:1E:5F:B3:A3:D3:AE:3C:A9:96:F4:F9:EA:ED:4A:E0:1B:D6:3E:57 Certificate issuer: /CN=09dcf1e897e598ec3f1ab60bd443328726dedae4 Certificate serial: 019B7F15E74F4545FF8C89FD948362F403AD Authority key identifier: 09:DC:F1:E8:97:E5:98:EC:3F:1A:B6:0B:D4:43:32:87:26:DE:DA:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cdzx6JflmOw_GrYL1EMyhybe2uQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/zR5fs6PTrjyplvT56u1K4BvWPlc.roa Signing time: Fri 02 Jan 2026 14:21:40 +0000 ROA not before: Fri 02 Jan 2026 14:21:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202914 IP address blocks: 84.246.240.0/22 maxlen: 24 84.246.240.0/23 maxlen: 23 84.246.242.0/24 maxlen: 24 91.210.56.0/22 maxlen: 24 141.98.12.0/22 maxlen: 24 141.98.12.0/24 maxlen: 24 141.98.13.0/24 maxlen: 24 141.98.14.0/23 maxlen: 24 185.121.172.0/22 maxlen: 22 185.121.172.0/23 maxlen: 24 185.121.174.0/23 maxlen: 23 185.121.174.0/24 maxlen: 24 185.121.175.0/24 maxlen: 24 185.150.196.0/22 maxlen: 24 2a0d:3e80::/29 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/Cdzx6JflmOw_GrYL1EMyhybe2uQ.crl rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/Cdzx6JflmOw_GrYL1EMyhybe2uQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Cdzx6JflmOw_GrYL1EMyhybe2uQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:e7:4f:45:45:ff:8c:89:fd:94:83:62:f4:03:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09dcf1e897e598ec3f1ab60bd443328726dedae4 Validity Not Before: Jan 2 14:21:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd1e5fb3a3d3ae3ca996f4f9eaed4ae01bd63e57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8c:5a:52:d6:40:6f:83:76:fd:8a:f7:7b:17: fc:60:cc:bf:77:a3:52:c5:06:89:25:ac:e3:42:f1: 29:41:2f:27:cd:64:73:bd:a7:2e:6c:83:b6:84:6d: d9:6b:c8:e7:b7:4a:8f:c1:a9:1e:15:3d:54:08:24: 5c:4b:08:ab:da:0c:4f:33:a3:d0:f2:e0:e5:3e:9b: af:da:cb:0a:ca:0e:b2:03:6c:46:ad:be:28:c4:09: 84:0c:72:92:41:e0:65:53:56:80:de:5e:96:63:f0: c8:02:ee:3a:d3:b2:1a:cd:86:c2:c8:94:af:1f:5c: fa:ad:4b:14:1f:67:50:88:8b:40:54:e9:60:86:fb: ad:d2:49:f8:52:97:ab:e9:ec:aa:74:28:93:be:e4: cb:8f:53:f1:86:06:87:19:e6:34:6f:6c:84:e3:f5: 70:20:b1:30:65:cb:ab:70:9b:2f:86:c5:77:36:91: 22:91:13:9f:01:3f:23:82:9a:29:2d:98:23:34:92: cf:37:76:21:fd:03:bf:a5:b8:53:aa:76:7e:7f:03: 6c:2d:ae:aa:2f:4c:04:eb:e8:15:7d:eb:ca:b6:3f: da:43:02:da:bd:e5:84:ed:0f:7e:7d:c5:70:82:b3: 81:fc:d2:18:25:df:0f:5d:22:e8:1a:ca:15:35:f8: 92:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:1E:5F:B3:A3:D3:AE:3C:A9:96:F4:F9:EA:ED:4A:E0:1B:D6:3E:57 X509v3 Authority Key Identifier: keyid:09:DC:F1:E8:97:E5:98:EC:3F:1A:B6:0B:D4:43:32:87:26:DE:DA:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cdzx6JflmOw_GrYL1EMyhybe2uQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/zR5fs6PTrjyplvT56u1K4BvWPlc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/Cdzx6JflmOw_GrYL1EMyhybe2uQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.246.240.0/22 91.210.56.0/22 141.98.12.0/22 185.121.172.0/22 185.150.196.0/22 IPv6: 2a0d:3e80::/29 Signature Algorithm: sha256WithRSAEncryption 28:20:38:57:a0:8f:3c:56:23:f0:d9:db:b5:61:d8:08:e0:9d: 9d:47:20:87:1e:61:59:1c:d9:11:05:4d:0d:8a:8c:a2:2e:93: fe:ef:14:ac:8e:8c:e2:ee:de:d1:f7:84:a5:96:54:b8:2c:9d: db:18:48:f9:da:37:2a:e8:0f:a6:67:c7:82:60:b6:e1:12:4d: ae:40:b1:59:bb:98:ae:35:d0:10:d3:5b:ec:0b:02:ee:e3:a0: a2:5b:96:8a:a2:ce:4e:45:77:98:42:b7:53:ea:30:ca:6b:f5: a8:ee:8a:d9:2c:11:99:37:66:e4:4e:70:ff:e4:44:ff:8c:c1: 88:d5:91:ac:67:d1:aa:8c:7e:57:b9:d1:a6:b7:fc:96:66:ef: 36:eb:ef:79:b9:2e:8c:2b:0d:e3:5a:44:19:ad:da:62:fd:8b: 57:13:cf:46:61:0b:8b:20:00:c4:78:09:1a:c6:2b:a3:3b:0b: 8a:79:c0:c4:ab:49:b4:24:1c:80:6c:05:97:4c:39:a7:18:67: 89:61:84:05:32:9f:5a:68:cd:04:d0:18:2c:f9:3a:65:2b:56: 81:73:3a:a5:f2:f1:f3:6a:99:a2:e0:c2:47:31:cd:47:a7:11: 14:ad:16:f8:ed:ca:94:a5:12:4c:68:28:2b:ff:8d:80:7c:11: 31:0b:c8:3e -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt/FedPRUX/jIn9lINi9AOtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZGNmMWU4OTdlNTk4ZWMzZjFhYjYwYmQ0NDMzMjg3MjZk ZWRhZTQwHhcNMjYwMTAyMTQyMTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDFlNWZiM2EzZDNhZTNjYTk5NmY0ZjllYWVkNGFlMDFiZDYzZTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4xaUtZAb4N2/Yr3exf8YMy/d6NS xQaJJazjQvEpQS8nzWRzvacubIO2hG3Za8jnt0qPwakeFT1UCCRcSwir2gxPM6PQ 8uDlPpuv2ssKyg6yA2xGrb4oxAmEDHKSQeBlU1aA3l6WY/DIAu4607IazYbCyJSv H1z6rUsUH2dQiItAVOlghvut0kn4Uper6eyqdCiTvuTLj1PxhgaHGeY0b2yE4/Vw ILEwZcurcJsvhsV3NpEikROfAT8jgpopLZgjNJLPN3Yh/QO/pbhTqnZ+fwNsLa6q L0wE6+gVfevKtj/aQwLaveWE7Q9+fcVwgrOB/NIYJd8PXSLoGsoVNfiSkQIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFM0eX7Oj0648qZb0+ertSuAb1j5XMB8GA1UdIwQY MBaAFAnc8eiX5ZjsPxq2C9RDMocm3trkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2R6eDZKZmxtT3dfR3JZTDFFTXloeWJlMnVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC85YmM0Y2MtYjY0Ni00NzAxLTg5NzUt NjIzZTE5OWZkYmU5LzEvelI1ZnM2UFRyanlwbHZUNTZ1MUs0QnZXUGxjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC85YmM0Y2MtYjY0Ni00NzAxLTg5NzUtNjIzZTE5OWZkYmU5 LzEvQ2R6eDZKZmxtT3dfR3JZTDFFTXloeWJlMnVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQCVPbwAwQC W9I4AwQCjWIMAwQCuXmsAwQCuZbEMA0EAgACMAcDBQMqDT6AMA0GCSqGSIb3DQEB CwUAA4IBAQAoIDhXoI88ViPw2du1YdgI4J2dRyCHHmFZHNkRBU0NioyiLpP+7xSs jozi7t7R94SlllS4LJ3bGEj52jcq6A+mZ8eCYLbhEk2uQLFZu5iuNdAQ01vsCwLu 46CiW5aKos5ORXeYQrdT6jDKa/Wo7orZLBGZN2bkTnD/5ET/jMGI1ZGsZ9GqjH5X udGmt/yWZu826+95uS6MKw3jWkQZrdpi/YtXE89GYQuLIADEeAkaxiujOwuKecDE q0m0JByAbAWXTDmnGGeJYYQFMp9aaM0E0Bgs+TplK1aBczql8vHzapmi4MJHMc1H pxEUrRb47cqUpRJMaCgr/42AfBExC8g+ -----END CERTIFICATE-----Generated at Sun Jan 25 20:30:23 2026 by rpki-client