This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/ZLYr5qfFq0qAWqoeLoZCAKr_wSc.roa File: ZLYr5qfFq0qAWqoeLoZCAKr_wSc.roa (raw, json) Hash identifier: mwj70VSnOcrDOMBDB/t2oHG+GFVtQ9P3sUch+spBbHA= Subject key identifier: 64:B6:2B:E6:A7:C5:AB:4A:80:5A:AA:1E:2E:86:42:00:AA:FF:C1:27 Certificate issuer: /CN=75790c7ecf24d28be2e13fe069118cee27d58002 Certificate serial: 019B7C7EDE3047F12EA2BFDD69473F345593 Authority key identifier: 75:79:0C:7E:CF:24:D2:8B:E2:E1:3F:E0:69:11:8C:EE:27:D5:80:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXkMfs8k0ovi4T_gaRGM7ifVgAI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/ZLYr5qfFq0qAWqoeLoZCAKr_wSc.roa Signing time: Fri 02 Jan 2026 02:17:27 +0000 ROA not before: Fri 02 Jan 2026 02:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12302 IP address blocks: 31.5.0.0/16 maxlen: 16 31.5.0.0/17 maxlen: 17 31.5.128.0/17 maxlen: 17 31.14.35.0/24 maxlen: 24 62.121.64.0/18 maxlen: 19 77.81.16.0/20 maxlen: 21 78.96.0.0/15 maxlen: 16 78.96.80.0/22 maxlen: 22 81.89.0.0/20 maxlen: 21 82.208.128.0/18 maxlen: 19 82.210.128.0/18 maxlen: 19 83.103.128.0/17 maxlen: 18 84.117.0.0/16 maxlen: 16 84.117.0.0/17 maxlen: 17 84.117.128.0/17 maxlen: 17 85.186.0.0/16 maxlen: 17 85.204.0.0/20 maxlen: 21 85.204.0.0/21 maxlen: 21 85.204.184.0/21 maxlen: 22 85.204.188.0/22 maxlen: 22 86.104.136.0/21 maxlen: 22 86.105.64.0/20 maxlen: 21 86.106.32.0/19 maxlen: 20 86.106.48.0/20 maxlen: 20 89.33.72.0/21 maxlen: 22 89.38.72.0/22 maxlen: 23 89.42.248.0/21 maxlen: 22 89.42.252.0/22 maxlen: 22 89.44.78.0/23 maxlen: 23 89.44.78.0/24 maxlen: 24 89.136.0.0/15 maxlen: 16 93.113.32.0/23 maxlen: 23 93.113.241.0/24 maxlen: 24 93.113.242.0/23 maxlen: 23 93.117.66.0/23 maxlen: 23 93.117.138.0/23 maxlen: 23 93.117.154.0/23 maxlen: 23 93.118.46.0/23 maxlen: 23 93.119.126.0/23 maxlen: 23 93.119.137.0/24 maxlen: 24 93.119.138.0/23 maxlen: 23 93.119.224.0/23 maxlen: 23 93.119.226.0/24 maxlen: 24 95.76.0.0/15 maxlen: 16 95.76.16.0/22 maxlen: 22 185.63.136.0/22 maxlen: 23 188.208.117.0/24 maxlen: 24 188.208.118.0/23 maxlen: 23 188.214.153.0/24 maxlen: 24 188.214.195.0/24 maxlen: 24 188.214.196.0/23 maxlen: 23 188.240.64.0/22 maxlen: 22 188.240.64.0/23 maxlen: 23 188.240.66.0/23 maxlen: 23 193.178.165.0/24 maxlen: 24 194.102.99.0/24 maxlen: 24 194.102.146.0/24 maxlen: 24 194.102.248.0/21 maxlen: 22 194.105.17.0/24 maxlen: 24 194.105.24.0/22 maxlen: 22 194.105.28.0/22 maxlen: 23 195.234.172.0/24 maxlen: 24 213.164.224.0/19 maxlen: 20 2a04:2400::/27 maxlen: 27 2a04:2400::/28 maxlen: 28 2a04:2410::/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/dXkMfs8k0ovi4T_gaRGM7ifVgAI.crl rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/dXkMfs8k0ovi4T_gaRGM7ifVgAI.mft rsync://rpki.ripe.net/repository/DEFAULT/dXkMfs8k0ovi4T_gaRGM7ifVgAI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7e:de:30:47:f1:2e:a2:bf:dd:69:47:3f:34:55:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75790c7ecf24d28be2e13fe069118cee27d58002 Validity Not Before: Jan 2 02:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=64b62be6a7c5ab4a805aaa1e2e864200aaffc127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:0b:91:e2:8f:c1:a2:75:b7:58:f5:7e:0f:c1: c5:f7:c4:aa:46:5c:b8:96:ee:47:37:28:ca:5f:55: 36:66:88:93:a3:73:85:db:e5:b0:91:80:23:9d:ad: 35:ee:ce:b1:d5:12:ca:ec:6b:bf:2a:90:16:19:e7: 60:18:af:79:d4:6c:9d:82:8f:65:a1:ca:4c:4b:12: d2:cc:fc:c6:6f:98:b3:f2:d2:e3:86:20:51:ed:9e: b1:fe:cd:6d:ea:65:4b:fe:ed:f1:ff:f0:f2:67:7e: 96:47:63:52:79:96:fe:91:9c:30:4e:94:f8:aa:6b: 66:df:05:b8:60:5d:0e:8e:d7:7c:d2:c6:1b:d3:bb: c9:a9:35:a3:57:78:0a:ce:f1:7d:32:97:c9:b7:1a: ab:a2:45:d0:66:0f:61:0a:50:ba:be:d7:e5:8d:c6: 84:4f:d5:4c:02:cd:e8:ab:69:e8:29:74:6b:38:eb: 80:41:46:5e:00:b3:ed:0d:0d:ce:19:0b:a3:cf:af: 84:a9:00:c6:97:b9:96:af:e1:bf:3a:c6:f1:ca:fd: e1:14:e9:b8:23:85:6d:89:31:63:1b:49:d1:6b:47: 79:41:c1:68:1b:98:65:bf:3f:f2:8e:08:3b:5a:16: 98:14:9d:17:89:5c:b6:dc:7b:d1:20:08:a3:88:a1: 55:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:B6:2B:E6:A7:C5:AB:4A:80:5A:AA:1E:2E:86:42:00:AA:FF:C1:27 X509v3 Authority Key Identifier: keyid:75:79:0C:7E:CF:24:D2:8B:E2:E1:3F:E0:69:11:8C:EE:27:D5:80:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXkMfs8k0ovi4T_gaRGM7ifVgAI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/ZLYr5qfFq0qAWqoeLoZCAKr_wSc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/dXkMfs8k0ovi4T_gaRGM7ifVgAI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.5.0.0/16 31.14.35.0/24 62.121.64.0/18 77.81.16.0/20 78.96.0.0/15 81.89.0.0/20 82.208.128.0/18 82.210.128.0/18 83.103.128.0/17 84.117.0.0/16 85.186.0.0/16 85.204.0.0/20 85.204.184.0/21 86.104.136.0/21 86.105.64.0/20 86.106.32.0/19 89.33.72.0/21 89.38.72.0/22 89.42.248.0/21 89.44.78.0/23 89.136.0.0/15 93.113.32.0/23 93.113.241.0-93.113.243.255 93.117.66.0/23 93.117.138.0/23 93.117.154.0/23 93.118.46.0/23 93.119.126.0/23 93.119.137.0-93.119.139.255 93.119.224.0-93.119.226.255 95.76.0.0/15 185.63.136.0/22 188.208.117.0-188.208.119.255 188.214.153.0/24 188.214.195.0-188.214.197.255 188.240.64.0/22 193.178.165.0/24 194.102.99.0/24 194.102.146.0/24 194.102.248.0/21 194.105.17.0/24 194.105.24.0/21 195.234.172.0/24 213.164.224.0/19 IPv6: 2a04:2400::/27 Signature Algorithm: sha256WithRSAEncryption 76:e3:63:76:73:29:fa:3a:bb:2b:cd:ff:bf:18:e8:3a:b1:c2: bc:db:15:71:f9:d0:ab:9e:22:f4:2b:22:17:bb:f9:0f:79:0b: 79:17:75:4f:8a:5f:ff:58:52:23:6d:a4:7b:54:2d:59:c7:92: 96:08:c0:39:20:5c:70:34:39:b2:eb:67:7a:a2:a4:ce:fd:b7: dc:23:37:77:41:5c:bc:ff:56:e1:1d:37:7d:2c:6e:4d:fc:c5: 66:4b:a1:ed:0c:0d:be:05:46:30:b8:d8:59:0c:ce:90:e2:03: a0:2b:e0:16:18:7d:89:6c:f7:fa:c1:31:72:dd:74:2b:f6:99: 7e:53:92:96:e4:3a:3e:bb:15:69:15:cd:0e:c8:f4:03:e2:99: a5:d0:b0:78:58:61:f9:a5:c9:cb:7b:3d:b2:63:12:46:ae:b1: 81:74:c5:88:d0:69:f4:54:6c:39:ac:e6:3f:83:b0:ee:03:7f: 7e:5a:ab:67:62:84:8e:84:c9:e4:57:61:86:21:70:ff:2b:c4: c9:5d:c7:61:be:06:c3:ae:61:6a:4d:c8:78:aa:2e:64:e3:f1: 55:8a:ec:82:cc:7b:72:30:77:f1:58:2f:51:3f:b1:de:8d:03: f7:9c:e4:6e:8e:e4:70:bf:90:b1:f5:b6:3f:f2:2f:8f:86:48: 13:90:b2:35 -----BEGIN CERTIFICATE----- MIIGOjCCBSKgAwIBAgISAZt8ft4wR/Euor/daUc/NFWTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1NzkwYzdlY2YyNGQyOGJlMmUxM2ZlMDY5MTE4Y2VlMjdk NTgwMDIwHhcNMjYwMTAyMDIxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NGI2MmJlNmE3YzVhYjRhODA1YWFhMWUyZTg2NDIwMGFhZmZjMTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7QuR4o/BonW3WPV+D8HF98SqRly4 lu5HNyjKX1U2ZoiTo3OF2+WwkYAjna017s6x1RLK7Gu/KpAWGedgGK951Gydgo9l ocpMSxLSzPzGb5iz8tLjhiBR7Z6x/s1t6mVL/u3x//DyZ36WR2NSeZb+kZwwTpT4 qmtm3wW4YF0Ojtd80sYb07vJqTWjV3gKzvF9MpfJtxqrokXQZg9hClC6vtfljcaE T9VMAs3oq2noKXRrOOuAQUZeALPtDQ3OGQujz6+EqQDGl7mWr+G/Osbxyv3hFOm4 I4VtiTFjG0nRa0d5QcFoG5hlvz/yjgg7WhaYFJ0XiVy23HvRIAijiKFVPwIDAQAB o4IDRjCCA0IwHQYDVR0OBBYEFGS2K+anxatKgFqqHi6GQgCq/8EnMB8GA1UdIwQY MBaAFHV5DH7PJNKL4uE/4GkRjO4n1YACMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFhrTWZzOGswb3ZpNFRfZ2FSR003aWZWZ0FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi80OTZkNTYtODZmZi00OGJlLWJkZTMt MjcxZmRlMmRjNjU1LzEvWkxZcjVxZkZxMHFBV3FvZUxvWkNBS3Jfd1NjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi80OTZkNTYtODZmZi00OGJlLWJkZTMtMjcxZmRlMmRjNjU1 LzEvZFhrTWZzOGswb3ZpNFRfZ2FSR003aWZWZ0FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBWgYIKwYBBQUHAQcBAf8EggFJMIIBRTCCATIEAgABMIIB KgMDAB8FAwQAHw4jAwQGPnlAAwQETVEQAwMBTmADBARRWQADBAZS0IADBAZS0oAD BAdTZ4ADAwBUdQMDAFW6AwQEVcwAAwQDVcy4AwQDVmiIAwQEVmlAAwQFVmogAwQD WSFIAwQCWSZIAwQDWSr4AwQBWSxOAwMBWYgDBAFdcSAwDAMEAF1x8QMEAl1x8AME AV11QgMEAV11igMEAV11mgMEAV12LgMEAV13fjAMAwQAXXeJAwQCXXeIMAwDBAVd d+ADBABdd+IDAwFfTAMEArk/iDAMAwQAvNB1AwQDvNBwAwQAvNaZMAwDBAC81sMD BAG81sQDBAK88EADBADBsqUDBADCZmMDBADCZpIDBAPCZvgDBADCaREDBAPCaRgD BADD6qwDBAXVpOAwDQQCAAIwBwMFBSoEJAAwDQYJKoZIhvcNAQELBQADggEBAHbj Y3ZzKfo6uyvN/78Y6DqxwrzbFXH50KueIvQrIhe7+Q95C3kXdU+KX/9YUiNtpHtU LVnHkpYIwDkgXHA0ObLrZ3qipM79t9wjN3dBXLz/VuEdN30sbk38xWZLoe0MDb4F RjC42FkMzpDiA6Ar4BYYfYls9/rBMXLddCv2mX5TkpbkOj67FWkVzQ7I9APimaXQ sHhYYfmlyct7PbJjEkausYF0xYjQafRUbDms5j+DsO4Df35aq2dihI6EyeRXYYYh cP8rxMldx2G+BsOuYWpNyHiqLmTj8VWK7ILMe3Iwd/FYL1E/sd6NA/ec5G6O5HC/ kLH1tj/yL4+GSBOQsjU= -----END CERTIFICATE-----Generated at Sun Jan 25 17:34:36 2026 by rpki-client