This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/zj5fKqmt0ZTCnTxN2MLrVwaw1lQ.roa File: zj5fKqmt0ZTCnTxN2MLrVwaw1lQ.roa (raw, json) Hash identifier: /UJhdA7Jh+uSEIMl9lW07vSFGCaa6lBIOlAIZUdipFE= Subject key identifier: CE:3E:5F:2A:A9:AD:D1:94:C2:9D:3C:4D:D8:C2:EB:57:06:B0:D6:54 Certificate issuer: /CN=dbd4f8e4762377f86b07a8753f6e98f6f4b6b792 Certificate serial: 019B7EA5818F774F3354ABE1FBF221149C06 Authority key identifier: DB:D4:F8:E4:76:23:77:F8:6B:07:A8:75:3F:6E:98:F6:F4:B6:B7:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29T45HYjd_hrB6h1P26Y9vS2t5I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/zj5fKqmt0ZTCnTxN2MLrVwaw1lQ.roa Signing time: Fri 02 Jan 2026 12:18:54 +0000 ROA not before: Fri 02 Jan 2026 12:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59675 IP address blocks: 31.220.150.0/24 maxlen: 24 128.0.144.0/23 maxlen: 24 128.0.144.0/24 maxlen: 24 128.0.145.0/24 maxlen: 24 128.0.146.0/23 maxlen: 23 128.0.148.0/23 maxlen: 23 128.0.150.0/24 maxlen: 24 128.0.151.0/24 maxlen: 24 128.0.152.0/24 maxlen: 24 128.0.153.0/24 maxlen: 24 128.0.154.0/24 maxlen: 24 185.5.8.0/23 maxlen: 24 185.5.8.0/24 maxlen: 24 185.5.9.0/24 maxlen: 24 213.185.78.0/23 maxlen: 23 213.185.80.0/22 maxlen: 24 213.185.80.0/24 maxlen: 24 213.185.84.0/23 maxlen: 23 2a02:45c0::/32 maxlen: 48 2a02:45c0::/48 maxlen: 48 2a02:45c0:3::/48 maxlen: 48 2a02:45c0:7::/48 maxlen: 48 2a02:45c0:8::/48 maxlen: 48 2a02:45c0:9::/48 maxlen: 48 2a02:45c0:10::/48 maxlen: 48 2a02:45c0:13::/48 maxlen: 48 2a02:45c0:18::/48 maxlen: 48 2a02:45c0:19::/48 maxlen: 48 2a02:45c0:20::/48 maxlen: 48 2a02:45c0:fffe::/48 maxlen: 48 2a02:45c0:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.crl rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.mft rsync://rpki.ripe.net/repository/DEFAULT/29T45HYjd_hrB6h1P26Y9vS2t5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:81:8f:77:4f:33:54:ab:e1:fb:f2:21:14:9c:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbd4f8e4762377f86b07a8753f6e98f6f4b6b792 Validity Not Before: Jan 2 12:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ce3e5f2aa9add194c29d3c4dd8c2eb5706b0d654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:67:33:d2:06:04:97:5b:f0:b7:4d:af:d0:dc: 3b:fb:81:7e:11:9f:56:f2:f3:57:17:26:70:a2:02: c3:d6:b4:39:40:58:8c:c8:9b:5b:48:bb:d2:93:b2: 53:06:38:da:d2:ac:ba:a7:d6:21:44:43:fd:39:fe: d6:10:d7:17:52:ce:48:2f:21:7d:f9:1e:c4:7d:c5: c5:6e:5f:67:1b:38:23:ea:26:cb:8f:c4:f0:05:17: 36:d7:51:48:81:a2:55:f7:9c:71:78:1d:27:50:ea: c2:7c:12:4c:e0:8e:15:0e:ef:8c:05:50:97:07:36: 16:12:59:02:4e:80:c2:5e:2d:80:48:38:b4:2a:0c: 4b:f3:2d:16:07:8a:97:79:51:16:f2:5b:2f:74:77: 59:78:ee:26:fc:45:e3:39:b1:a7:fd:42:9c:ee:ca: e1:6a:88:ca:01:61:fd:13:4c:d1:23:5e:e6:27:9e: e0:4d:0f:b0:4a:75:92:1c:8c:9e:2d:97:3c:03:e4: b5:62:c9:bf:72:a5:38:59:ac:ce:1e:5c:36:f0:c2: 40:8d:65:d1:f3:29:44:3e:bf:1f:bc:32:e8:75:43: 29:8e:79:b6:b9:1d:04:16:38:65:31:60:7d:2a:05: ad:1d:26:89:10:7f:37:49:d4:cf:9d:9b:ad:3b:da: cb:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:3E:5F:2A:A9:AD:D1:94:C2:9D:3C:4D:D8:C2:EB:57:06:B0:D6:54 X509v3 Authority Key Identifier: keyid:DB:D4:F8:E4:76:23:77:F8:6B:07:A8:75:3F:6E:98:F6:F4:B6:B7:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29T45HYjd_hrB6h1P26Y9vS2t5I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/zj5fKqmt0ZTCnTxN2MLrVwaw1lQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.220.150.0/24 128.0.144.0-128.0.154.255 185.5.8.0/23 213.185.78.0-213.185.85.255 IPv6: 2a02:45c0::/32 Signature Algorithm: sha256WithRSAEncryption 66:a7:4d:06:2e:26:1a:9c:90:69:a7:f8:c0:e1:ce:2b:38:86: 0c:f5:05:5b:38:41:97:43:40:80:7b:a3:68:f9:f0:17:0a:38: 3d:7d:9c:e1:4a:aa:02:44:3f:76:d9:e2:b1:59:79:c5:63:56: 6c:ac:5a:38:02:54:cf:9c:ae:7f:32:a6:57:e6:fc:cf:9c:a6: d1:13:04:cc:bd:a9:18:00:bb:2f:a9:78:57:1e:6d:e3:c3:ee: 95:d9:3e:8b:f1:8a:f0:8d:7e:f3:c1:6d:45:b3:25:55:85:69: a4:22:12:63:35:5a:51:59:25:1b:4b:94:6f:e1:24:67:af:a3: 17:2f:13:12:c9:da:27:d8:90:f1:44:29:e4:74:c5:86:a0:13: a6:49:de:03:69:a6:44:ae:9d:28:95:0d:7c:8c:cf:06:93:48: 1a:76:39:f9:83:97:5b:29:61:61:69:4b:61:f5:81:6f:bb:b5: aa:9d:39:12:49:d9:8c:f1:e6:e1:ab:9f:e4:a5:f5:60:96:e7: cd:57:0b:7f:23:74:22:e3:cf:3a:e4:10:92:0e:56:c8:21:76: 35:6a:cf:e8:d9:a3:ff:6a:3e:5c:a0:9a:7b:a6:d0:50:3c:ab: eb:81:b9:69:69:dc:96:79:bb:16:27:c9:9d:26:d3:1a:37:5e: c0:87:c7:9c -----BEGIN CERTIFICATE----- MIIFLjCCBBagAwIBAgISAZt+pYGPd08zVKvh+/IhFJwGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiZDRmOGU0NzYyMzc3Zjg2YjA3YTg3NTNmNmU5OGY2ZjRi NmI3OTIwHhcNMjYwMTAyMTIxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTNlNWYyYWE5YWRkMTk0YzI5ZDNjNGRkOGMyZWI1NzA2YjBkNjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmcz0gYEl1vwt02v0Nw7+4F+EZ9W 8vNXFyZwogLD1rQ5QFiMyJtbSLvSk7JTBjja0qy6p9YhREP9Of7WENcXUs5ILyF9 +R7EfcXFbl9nGzgj6ibLj8TwBRc211FIgaJV95xxeB0nUOrCfBJM4I4VDu+MBVCX BzYWElkCToDCXi2ASDi0KgxL8y0WB4qXeVEW8lsvdHdZeO4m/EXjObGn/UKc7srh aojKAWH9E0zRI17mJ57gTQ+wSnWSHIyeLZc8A+S1Ysm/cqU4WazOHlw28MJAjWXR 8ylEPr8fvDLodUMpjnm2uR0EFjhlMWB9KgWtHSaJEH83SdTPnZutO9rLWQIDAQAB o4ICOjCCAjYwHQYDVR0OBBYEFM4+XyqprdGUwp08TdjC61cGsNZUMB8GA1UdIwQY MBaAFNvU+OR2I3f4aweodT9umPb0treSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjlUNDVIWWpkX2hyQjZoMVAyNlk5dlMydDVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9kM2Y2NWQtYWZhYi00ZDI4LWI0NmUt NjIwYTc5Y2Y3OTJiLzEvemo1ZktxbXQwWlRDblR4TjJNTHJWd2F3MWxRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9kM2Y2NWQtYWZhYi00ZDI4LWI0NmUtNjIwYTc5Y2Y3OTJi LzEvMjlUNDVIWWpkX2hyQjZoMVAyNlk5dlMydDVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFAGCCsGAQUFBwEHAQH/BEEwPzAuBAIAATAoAwQAH9yWMAwD BASAAJADBACAAJoDBAG5BQgwDAMEAdW5TgMEAdW5VDANBAIAAjAHAwUAKgJFwDAN BgkqhkiG9w0BAQsFAAOCAQEAZqdNBi4mGpyQaaf4wOHOKziGDPUFWzhBl0NAgHuj aPnwFwo4PX2c4UqqAkQ/dtnisVl5xWNWbKxaOAJUz5yufzKmV+b8z5ym0RMEzL2p GAC7L6l4Vx5t48Puldk+i/GK8I1+88FtRbMlVYVppCISYzVaUVklG0uUb+EkZ6+j Fy8TEsnaJ9iQ8UQp5HTFhqATpkneA2mmRK6dKJUNfIzPBpNIGnY5+YOXWylhYWlL YfWBb7u1qp05EknZjPHm4auf5KX1YJbnzVcLfyN0IuPPOuQQkg5WyCF2NWrP6Nmj /2o+XKCae6bQUDyr64G5aWnclnm7FifJnSbTGjdewIfHnA== -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:20 2026 by rpki-client