This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/zsxL5mWwDu18qqxIjwp7oJ6NMvg.roa File: zsxL5mWwDu18qqxIjwp7oJ6NMvg.roa (raw, json) Hash identifier: Zc+JBKMYLpS2EeJDTfA9cZJRjrVpts3RusM33URjnr4= Subject key identifier: CE:CC:4B:E6:65:B0:0E:ED:7C:AA:AC:48:8F:0A:7B:A0:9E:8D:32:F8 Certificate issuer: /CN=e91ef22adaa16d53dcf637c569f4131f26215b91 Certificate serial: 019B7A5A98A6AD564254E7510F937CCD6143 Authority key identifier: E9:1E:F2:2A:DA:A1:6D:53:DC:F6:37:C5:69:F4:13:1F:26:21:5B:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6R7yKtqhbVPc9jfFafQTHyYhW5E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/zsxL5mWwDu18qqxIjwp7oJ6NMvg.roa Signing time: Thu 01 Jan 2026 16:18:36 +0000 ROA not before: Thu 01 Jan 2026 16:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214798 IP address blocks: 45.129.140.0/24 maxlen: 24 130.49.160.0/22 maxlen: 24 185.164.163.0/24 maxlen: 24 185.169.107.0/24 maxlen: 24 185.216.84.0/22 maxlen: 24 2a09:31c0:cafe::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/6R7yKtqhbVPc9jfFafQTHyYhW5E.crl rsync://rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/6R7yKtqhbVPc9jfFafQTHyYhW5E.mft rsync://rpki.ripe.net/repository/DEFAULT/6R7yKtqhbVPc9jfFafQTHyYhW5E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:98:a6:ad:56:42:54:e7:51:0f:93:7c:cd:61:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e91ef22adaa16d53dcf637c569f4131f26215b91 Validity Not Before: Jan 1 16:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cecc4be665b00eed7caaac488f0a7ba09e8d32f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8e:13:9d:65:ef:de:f2:2e:9a:6c:fa:05:3a: bd:e9:ab:a3:7c:d0:e4:b8:9e:db:cd:8d:21:bf:56: 44:39:56:b7:f8:11:ab:a2:0a:1c:76:79:06:ee:45: 86:5c:b6:8c:30:43:a7:0c:ae:b8:d7:5c:06:11:92: 53:f2:05:6a:d3:18:07:12:70:6d:34:81:21:af:94: b6:04:16:cc:12:5a:fb:d5:2e:e2:8b:50:f5:4f:f3: 8a:66:fe:79:e5:2b:43:8e:e7:f3:05:35:aa:80:f8: 28:34:12:f2:3b:37:c3:18:c1:f7:e8:2d:35:dd:cc: 25:3c:c7:e7:82:16:c3:67:e6:61:0c:e8:4a:88:0f: d4:b5:52:d9:a8:2e:db:40:6c:0b:fe:fc:e2:e8:de: e5:32:fd:29:dc:36:3f:8c:1b:47:b1:85:af:45:ec: f3:b8:c5:33:d0:be:3a:e5:ab:08:d7:45:f0:bf:38: 2d:fd:56:42:89:e3:bb:94:ef:6f:6b:96:54:9a:4b: 00:2d:90:c4:7b:56:de:b6:ba:3b:a5:ba:f2:8c:95: a8:58:c7:8d:dc:7c:d0:d6:48:c7:9f:5e:71:7f:86: 04:7c:da:72:46:52:cc:47:c4:9a:52:7c:93:ea:f6: 99:ec:54:f8:43:72:eb:93:56:65:98:1a:de:c0:5f: 02:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:CC:4B:E6:65:B0:0E:ED:7C:AA:AC:48:8F:0A:7B:A0:9E:8D:32:F8 X509v3 Authority Key Identifier: keyid:E9:1E:F2:2A:DA:A1:6D:53:DC:F6:37:C5:69:F4:13:1F:26:21:5B:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6R7yKtqhbVPc9jfFafQTHyYhW5E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/zsxL5mWwDu18qqxIjwp7oJ6NMvg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/6R7yKtqhbVPc9jfFafQTHyYhW5E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.129.140.0/24 130.49.160.0/22 185.164.163.0/24 185.169.107.0/24 185.216.84.0/22 IPv6: 2a09:31c0:cafe::/48 Signature Algorithm: sha256WithRSAEncryption 82:e6:6e:ce:a2:4b:bf:7b:1d:64:ff:47:5c:21:ca:80:99:65: e1:ee:e6:2c:5e:6a:eb:94:b2:7b:aa:a8:13:8d:7d:5e:73:a4: 94:90:bf:c6:8f:50:9d:d6:1f:14:3c:c8:b0:d6:35:8c:85:79: a7:f3:8b:4e:6a:32:1f:4a:32:23:90:93:6b:66:11:2d:99:d5: 34:a2:b2:01:c4:b1:12:de:02:dc:c7:db:af:0a:f8:e7:f2:70: a2:6e:a4:0a:bc:15:13:15:03:72:7c:1c:3a:82:9f:bb:a7:00: 50:18:88:07:a0:87:10:2f:a6:62:14:57:ec:49:0a:47:35:78: 19:cc:15:60:cc:21:a4:05:e2:42:45:2c:35:29:49:fb:71:17: eb:c4:2c:31:88:10:ab:98:11:89:5c:1a:e8:d8:6b:59:c6:0b: 39:e0:f7:34:67:ca:2c:57:d5:65:91:4a:55:4e:a1:04:e2:d7: 15:6b:02:f0:29:e6:56:95:d6:01:e8:ae:c6:25:a4:03:8e:a5: a2:a3:93:e3:e6:4a:c1:23:f0:a5:2d:01:f0:1e:a0:bf:59:85: b0:e0:ff:c6:6e:de:b7:5d:6c:51:6f:0d:7f:84:40:9b:fc:83: 89:cc:35:5c:5d:50:c0:82:ec:56:12:23:7d:c2:02:57:cf:79: 5b:6e:44:82 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgISAZt6WpimrVZCVOdRD5N8zWFDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MWVmMjJhZGFhMTZkNTNkY2Y2MzdjNTY5ZjQxMzFmMjYy MTViOTEwHhcNMjYwMTAxMTYxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZWNjNGJlNjY1YjAwZWVkN2NhYWFjNDg4ZjBhN2JhMDllOGQzMmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuI4TnWXv3vIummz6BTq96aujfNDk uJ7bzY0hv1ZEOVa3+BGrogocdnkG7kWGXLaMMEOnDK6411wGEZJT8gVq0xgHEnBt NIEhr5S2BBbMElr71S7ii1D1T/OKZv555StDjufzBTWqgPgoNBLyOzfDGMH36C01 3cwlPMfnghbDZ+ZhDOhKiA/UtVLZqC7bQGwL/vzi6N7lMv0p3DY/jBtHsYWvRezz uMUz0L465asI10Xwvzgt/VZCieO7lO9va5ZUmksALZDEe1betro7pbryjJWoWMeN 3HzQ1kjHn15xf4YEfNpyRlLMR8SaUnyT6vaZ7FT4Q3Lrk1ZlmBrewF8CXwIDAQAB o4ICMjCCAi4wHQYDVR0OBBYEFM7MS+ZlsA7tfKqsSI8Ke6CejTL4MB8GA1UdIwQY MBaAFOke8iraoW1T3PY3xWn0Ex8mIVuRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlI3eUt0cWhiVlBjOWpmRmFmUVRIeVloVzVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8xMTEzODUtMmViNi00YzZhLWI5YzQt MzRhZTg5MWE3MmNmLzEvenN4TDVtV3dEdTE4cXF4SWp3cDdvSjZOTXZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS8xMTEzODUtMmViNi00YzZhLWI5YzQtMzRhZTg5MWE3MmNm LzEvNlI3eUt0cWhiVlBjOWpmRmFmUVRIeVloVzVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAkBAIAATAeAwQALYGMAwQC gjGgAwQAuaSjAwQAualrAwQCudhUMA8EAgACMAkDBwAqCTHAyv4wDQYJKoZIhvcN AQELBQADggEBAILmbs6iS797HWT/R1whyoCZZeHu5ixeauuUsnuqqBONfV5zpJSQ v8aPUJ3WHxQ8yLDWNYyFeafzi05qMh9KMiOQk2tmES2Z1TSisgHEsRLeAtzH268K +OfycKJupAq8FRMVA3J8HDqCn7unAFAYiAeghxAvpmIUV+xJCkc1eBnMFWDMIaQF 4kJFLDUpSftxF+vELDGIEKuYEYlcGujYa1nGCzng9zRnyixX1WWRSlVOoQTi1xVr AvAp5laV1gHorsYlpAOOpaKjk+PmSsEj8KUtAfAeoL9ZhbDg/8Zu3rddbFFvDX+E QJv8g4nMNVxdUMCC7FYSI33CAlfPeVtuRII= -----END CERTIFICATE-----Generated at Sun Jan 25 14:39:54 2026 by rpki-client