This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/ZuhzTaDClxjmQVXxvnkYsTWFFGQ.roa File: ZuhzTaDClxjmQVXxvnkYsTWFFGQ.roa (raw, json) Hash identifier: sV8EfVihdKiLsfcrDwHQZu5bOJ9OiQzvEOBbJ1cZbxk= Subject key identifier: 66:E8:73:4D:A0:C2:97:18:E6:41:55:F1:BE:79:18:B1:35:85:14:64 Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901 Certificate serial: 019B7A5B7AE2A04C9625E0FC8B2AB22DBCB0 Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/ZuhzTaDClxjmQVXxvnkYsTWFFGQ.roa Signing time: Thu 01 Jan 2026 16:19:34 +0000 ROA not before: Thu 01 Jan 2026 16:19:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201942 IP address blocks: 46.31.68.0/24 maxlen: 24 46.226.144.0/21 maxlen: 21 185.58.196.0/22 maxlen: 22 185.119.112.0/22 maxlen: 24 185.232.41.0/24 maxlen: 24 193.46.216.0/24 maxlen: 24 193.163.117.0/24 maxlen: 24 194.26.143.0/24 maxlen: 24 195.182.205.0/24 maxlen: 24 195.184.72.0/24 maxlen: 24 212.23.223.0/24 maxlen: 24 2a02:6520::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:7a:e2:a0:4c:96:25:e0:fc:8b:2a:b2:2d:bc:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901 Validity Not Before: Jan 1 16:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=66e8734da0c29718e64155f1be7918b135851464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:09:d5:93:3f:4f:1b:e9:22:22:8b:64:43:37: 25:75:c4:59:ff:3f:af:9c:f0:75:18:57:e5:2d:ba: 9b:15:8b:5d:2f:a8:93:ca:b7:0b:8e:09:19:a1:d4: 6a:45:51:90:42:78:3e:ce:e3:99:17:1f:5a:c6:90: e4:84:2b:93:6c:3e:a2:d7:35:40:1d:b6:39:8e:3e: dc:34:e5:81:43:e6:4a:33:70:02:94:b8:4d:6f:e2: 2f:5d:18:69:68:4c:cc:8e:d9:8c:10:4b:60:5e:39: ce:86:fd:2a:41:39:99:8c:4e:75:3b:2d:30:3c:76: 24:6f:e1:a7:cb:d2:81:e8:e3:38:ca:6e:c0:32:75: 06:f8:a0:50:43:6c:20:4d:c6:3c:60:88:ce:c9:01: 19:2b:ed:ca:50:40:75:e4:db:1d:f8:39:39:f5:a9: 8b:08:3d:c7:90:c0:0e:1f:96:d9:bd:0f:44:d4:76: 26:c9:23:5b:d8:20:e2:34:6c:5f:4b:b6:22:0e:48: bd:3e:33:bc:13:b0:23:fe:1d:ef:c2:d6:22:b7:cf: 0f:2e:f9:e4:c4:6b:6d:56:3f:d5:61:a5:d4:da:3a: 5f:94:d9:96:6f:43:2c:0e:28:f4:9f:46:ee:9d:6f: 1a:5f:30:a2:0f:be:07:cb:eb:be:ef:08:3d:95:74: 7c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:E8:73:4D:A0:C2:97:18:E6:41:55:F1:BE:79:18:B1:35:85:14:64 X509v3 Authority Key Identifier: keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/ZuhzTaDClxjmQVXxvnkYsTWFFGQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.31.68.0/24 46.226.144.0/21 185.58.196.0/22 185.119.112.0/22 185.232.41.0/24 193.46.216.0/24 193.163.117.0/24 194.26.143.0/24 195.182.205.0/24 195.184.72.0/24 212.23.223.0/24 IPv6: 2a02:6520::/32 Signature Algorithm: sha256WithRSAEncryption 2a:25:54:19:45:dc:6b:2d:3c:cf:90:f0:b8:be:80:96:75:52: 1b:59:19:14:81:bb:11:2d:d5:31:1f:47:a2:bc:c5:c5:05:48: 33:12:92:c6:c1:23:f3:92:ea:73:ab:f3:84:c4:e0:d5:7f:13: 9f:be:16:78:e5:d2:27:25:81:c0:1d:e2:e2:5c:58:3c:55:62: 71:89:29:45:35:fa:8b:37:f6:83:da:eb:7e:fb:76:a6:ee:8e: 72:e1:7c:c7:92:f5:f2:62:08:de:82:01:8d:77:3e:5f:c2:9b: cf:45:88:de:df:22:a4:71:68:27:8f:b0:33:33:fd:c5:2a:ec: 93:83:3c:df:da:61:46:88:3f:ee:32:9c:a0:97:6b:94:23:1e: e5:53:10:13:17:e8:5a:b1:8e:fe:d8:eb:ae:18:e2:34:27:14: 76:46:79:aa:86:b7:b5:02:39:4b:41:f7:36:d9:cb:67:86:d9: 17:e3:c0:12:9e:f4:58:b3:23:d1:9c:19:ce:e8:0f:e6:f5:eb: b9:e9:a7:60:85:b1:f7:b3:9c:44:50:b1:1b:28:03:9a:83:af: 9e:19:7a:b9:b1:27:27:9b:55:e5:9d:01:fe:d7:e5:c7:e4:ed: cf:3b:c1:52:c0:d2:ad:77:4e:96:42:e3:7d:0b:8b:65:50:72: 4b:d9:cb:fe -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgISAZt6W3rioEyWJeD8iyqyLbywMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhYmExMTcyNDcyZWE4MDI2NWQxMjk4Mjk2N2RlMGE4YjBi YzU5MDEwHhcNMjYwMTAxMTYxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NmU4NzM0ZGEwYzI5NzE4ZTY0MTU1ZjFiZTc5MThiMTM1ODUxNDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgnVkz9PG+kiIotkQzcldcRZ/z+v nPB1GFflLbqbFYtdL6iTyrcLjgkZodRqRVGQQng+zuOZFx9axpDkhCuTbD6i1zVA HbY5jj7cNOWBQ+ZKM3AClLhNb+IvXRhpaEzMjtmMEEtgXjnOhv0qQTmZjE51Oy0w PHYkb+Gny9KB6OM4ym7AMnUG+KBQQ2wgTcY8YIjOyQEZK+3KUEB15Nsd+Dk59amL CD3HkMAOH5bZvQ9E1HYmySNb2CDiNGxfS7YiDki9PjO8E7Aj/h3vwtYit88PLvnk xGttVj/VYaXU2jpflNmWb0MsDij0n0bunW8aXzCiD74Hy+u+7wg9lXR8JQIDAQAB o4ICVDCCAlAwHQYDVR0OBBYEFGboc02gwpcY5kFV8b55GLE1hRRkMB8GA1UdIwQY MBaAFDq6EXJHLqgCZdEpgpZ94KiwvFkBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgt NGRkMDQzNDZhYmMzLzEvWnVoelRhRENseGptUVZYeHZua1lzVFdGRkdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgtNGRkMDQzNDZhYmMz LzEvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGoGCCsGAQUFBwEHAQH/BFswWTBIBAIAATBCAwQALh9EAwQD LuKQAwQCuTrEAwQCuXdwAwQAuegpAwQAwS7YAwQAwaN1AwQAwhqPAwQAw7bNAwQA w7hIAwQA1BffMA0EAgACMAcDBQAqAmUgMA0GCSqGSIb3DQEBCwUAA4IBAQAqJVQZ RdxrLTzPkPC4voCWdVIbWRkUgbsRLdUxH0eivMXFBUgzEpLGwSPzkupzq/OExODV fxOfvhZ45dInJYHAHeLiXFg8VWJxiSlFNfqLN/aD2ut++3am7o5y4XzHkvXyYgje ggGNdz5fwpvPRYje3yKkcWgnj7AzM/3FKuyTgzzf2mFGiD/uMpygl2uUIx7lUxAT F+hasY7+2OuuGOI0JxR2Rnmqhre1AjlLQfc22ctnhtkX48ASnvRYsyPRnBnO6A/m 9eu56adghbH3s5xEULEbKAOag6+eGXq5sScnm1XlnQH+1+XH5O3PO8FSwNKtd06W QuN9C4tlUHJL2cv+ -----END CERTIFICATE-----Generated at Sun Jan 25 19:38:32 2026 by rpki-client