This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/zJpEN2ijfRgiPpGHtFsEVOdxvB4.roa File: zJpEN2ijfRgiPpGHtFsEVOdxvB4.roa (raw, json) Hash identifier: q/PuTzWdeYcrIsP9D1aXyxve/lRb4cTeCB+ZsL9JRf4= Subject key identifier: CC:9A:44:37:68:A3:7D:18:22:3E:91:87:B4:5B:04:54:E7:71:BC:1E Certificate issuer: /CN=dc0bde1467895c6f3a47197eac58ca13ae4bb78d Certificate serial: 019B7CEDAFD72CBE74E6D59F43EF49B09C8C Authority key identifier: DC:0B:DE:14:67:89:5C:6F:3A:47:19:7E:AC:58:CA:13:AE:4B:B7:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/zJpEN2ijfRgiPpGHtFsEVOdxvB4.roa Signing time: Fri 02 Jan 2026 04:18:30 +0000 ROA not before: Fri 02 Jan 2026 04:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49824 IP address blocks: 45.87.90.0/24 maxlen: 24 45.87.91.0/24 maxlen: 24 62.204.51.0/24 maxlen: 24 95.141.245.0/24 maxlen: 24 176.111.42.0/24 maxlen: 24 176.111.43.0/24 maxlen: 24 212.23.203.0/24 maxlen: 24 2a10:2f40::/48 maxlen: 48 2a10:2f40:1::/48 maxlen: 48 2a10:2f40:2::/48 maxlen: 48 2a10:2f40:3::/48 maxlen: 48 2a10:2f40:4::/48 maxlen: 48 2a10:2f40:5::/48 maxlen: 48 2a10:2f40:9::/48 maxlen: 48 2a10:2f40:a::/48 maxlen: 48 2a10:2f40:b::/48 maxlen: 48 2a10:2f40:c::/48 maxlen: 48 2a10:2f40:d::/48 maxlen: 48 2a10:2f40:1a::/48 maxlen: 48 2a10:2f40:d1::/48 maxlen: 48 2a10:2f40:d2::/48 maxlen: 48 2a10:2f40:d3::/48 maxlen: 48 2a10:2f40:d4::/48 maxlen: 48 2a14:7280::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 04:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:af:d7:2c:be:74:e6:d5:9f:43:ef:49:b0:9c:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc0bde1467895c6f3a47197eac58ca13ae4bb78d Validity Not Before: Jan 2 04:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc9a443768a37d18223e9187b45b0454e771bc1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ca:4e:36:13:b9:63:60:c0:4f:fb:11:f6:77: a2:c4:60:9f:5c:85:0c:71:0b:7c:0d:88:7d:b6:36: 1f:6c:1d:87:0f:78:19:f1:c9:a9:3c:72:e4:ae:4c: 52:36:e1:cd:55:af:20:c8:b8:23:e7:c3:99:94:3b: 95:65:1c:dc:8f:8e:eb:72:7b:1c:72:e8:bd:72:1c: 53:30:e1:91:7b:a3:5f:2f:d7:7d:a2:9e:7b:b9:fd: 38:13:3c:e7:02:af:92:02:93:89:8d:59:c3:b2:43: 20:bb:a3:03:73:4a:38:cb:61:eb:42:05:eb:03:4e: 71:79:51:6d:fc:4d:69:c7:c3:63:9b:dd:40:5d:09: 56:e3:9a:0b:91:ea:e0:90:79:46:45:3b:d7:6c:96: f3:ae:0e:99:1d:87:80:c0:f5:f5:54:d3:71:c0:ff: 0d:5d:30:e2:08:12:bc:ea:5e:fc:73:ce:38:35:7a: da:4f:57:c8:dd:1d:70:fe:43:16:f9:90:5b:7e:b6: 5a:30:6e:b8:e0:83:05:13:f8:3c:95:64:2b:94:53: 35:07:4f:cb:09:ad:b6:9e:24:a3:2c:6b:c8:51:27: 35:61:20:69:5b:47:e1:b1:5f:51:0f:37:00:e5:ac: c4:65:78:b1:e6:77:af:36:7e:75:8c:a9:a0:2d:38: 5f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:9A:44:37:68:A3:7D:18:22:3E:91:87:B4:5B:04:54:E7:71:BC:1E X509v3 Authority Key Identifier: keyid:DC:0B:DE:14:67:89:5C:6F:3A:47:19:7E:AC:58:CA:13:AE:4B:B7:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/zJpEN2ijfRgiPpGHtFsEVOdxvB4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.87.90.0/23 62.204.51.0/24 95.141.245.0/24 176.111.42.0/23 212.23.203.0/24 IPv6: 2a10:2f40::-2a10:2f40:5:ffff:ffff:ffff:ffff:ffff 2a10:2f40:9::-2a10:2f40:d:ffff:ffff:ffff:ffff:ffff 2a10:2f40:1a::/48 2a10:2f40:d1::-2a10:2f40:d4:ffff:ffff:ffff:ffff:ffff 2a14:7280::/29 Signature Algorithm: sha256WithRSAEncryption 44:35:90:c6:de:da:22:d5:76:8c:24:78:f2:a2:6c:81:6f:7c: 74:3a:cb:77:af:82:3f:09:d6:13:87:bf:ec:3a:78:38:ef:d3: e0:73:17:df:7a:53:33:44:94:08:df:e1:5f:d0:4d:84:e3:b6: df:e9:f2:54:22:d5:98:23:bc:4a:55:6a:e3:df:59:a7:14:74: ab:d0:a3:08:8d:1b:b6:40:8d:18:f4:72:79:cc:34:3f:dc:70: 85:7d:f5:22:20:34:ae:93:c5:37:f6:19:a6:0b:e0:f8:e5:66: 98:a8:0d:70:f9:6b:0c:71:e0:4a:c8:e6:34:e3:00:4e:1b:38: e0:27:e6:c3:c6:65:f6:1f:ae:36:61:62:a2:5d:13:e4:d2:14: 25:64:8b:17:7d:97:82:93:7e:af:57:8c:99:c3:1e:1a:34:d5: 39:60:de:cb:97:ed:78:6d:0a:67:a6:4b:41:51:7a:72:7b:05: 77:cd:25:17:66:cc:c4:c4:ce:76:32:f9:c8:15:da:cd:62:7b: 3e:88:dd:ce:a1:33:d9:40:7d:17:cc:2b:ce:04:4b:5e:63:b3: d6:b1:87:b2:16:5a:2c:6d:82:03:5a:12:b0:18:e4:17:0a:c2: f3:24:a5:a2:21:cd:75:53:34:d2:2e:64:68:76:bc:1e:e8:88: b2:18:4f:53 -----BEGIN CERTIFICATE----- MIIFaDCCBFCgAwIBAgISAZt87a/XLL505tWfQ+9JsJyMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMGJkZTE0Njc4OTVjNmYzYTQ3MTk3ZWFjNThjYTEzYWU0 YmI3OGQwHhcNMjYwMTAyMDQxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzlhNDQzNzY4YTM3ZDE4MjIzZTkxODdiNDViMDQ1NGU3NzFiYzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMpONhO5Y2DAT/sR9neixGCfXIUM cQt8DYh9tjYfbB2HD3gZ8cmpPHLkrkxSNuHNVa8gyLgj58OZlDuVZRzcj47rcnsc cui9chxTMOGRe6NfL9d9op57uf04EzznAq+SApOJjVnDskMgu6MDc0o4y2HrQgXr A05xeVFt/E1px8Njm91AXQlW45oLkergkHlGRTvXbJbzrg6ZHYeAwPX1VNNxwP8N XTDiCBK86l78c844NXraT1fI3R1w/kMW+ZBbfrZaMG644IMFE/g8lWQrlFM1B0/L Ca22niSjLGvIUSc1YSBpW0fhsV9RDzcA5azEZXix5nevNn51jKmgLThfEQIDAQAB o4ICdDCCAnAwHQYDVR0OBBYEFMyaRDdoo30YIj6Rh7RbBFTncbweMB8GA1UdIwQY MBaAFNwL3hRniVxvOkcZfqxYyhOuS7eNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0F2ZUZHZUpYRzg2UnhsLXJGaktFNjVMdDQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9jZjA2M2YtOTQ5My00NmYxLWFjZDEt MzFjN2ZiNDcxNWY2LzEvekpwRU4yaWpmUmdpUHBHSHRGc0VWT2R4dkI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9jZjA2M2YtOTQ5My00NmYxLWFjZDEtMzFjN2ZiNDcxNWY2 LzEvM0F2ZUZHZUpYRzg2UnhsLXJGaktFNjVMdDQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGJBggrBgEFBQcBBwEB/wR6MHgwJAQCAAEwHgMEAS1XWgME AD7MMwMEAF+N9QMEAbBvKgMEANQXyzBQBAIAAjBKMBADBQYqEC9AAwcBKhAvQAAE MBIDBwAqEC9AAAkDBwEqEC9AAAwDBwAqEC9AABowEgMHACoQL0AA0QMHACoQL0AA 1AMFAyoUcoAwDQYJKoZIhvcNAQELBQADggEBAEQ1kMbe2iLVdowkePKibIFvfHQ6 y3evgj8J1hOHv+w6eDjv0+BzF996UzNElAjf4V/QTYTjtt/p8lQi1ZgjvEpVauPf WacUdKvQowiNG7ZAjRj0cnnMND/ccIV99SIgNK6TxTf2GaYL4PjlZpioDXD5awxx 4ErI5jTjAE4bOOAn5sPGZfYfrjZhYqJdE+TSFCVkixd9l4KTfq9XjJnDHho01Tlg 3suX7XhtCmemS0FRenJ7BXfNJRdmzMTEznYy+cgV2s1iez6I3c6hM9lAfRfMK84E S15js9axh7IWWixtggNaErAY5BcKwvMkpaIhzXVTNNIuZGh2vB7oiLIYT1M= -----END CERTIFICATE-----Generated at Mon Jan 26 13:45:50 2026 by rpki-client