This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/zxibd_f4xg8XI9jjPajufCcwE7M.roa File: zxibd_f4xg8XI9jjPajufCcwE7M.roa (raw, json) Hash identifier: jbQlcexgvpGqLA0AUXCsjYkFmJ4wQU/giRIaoZA7v/k= Subject key identifier: CF:18:9B:77:F7:F8:C6:0F:17:23:D8:E3:3D:A8:EE:7C:27:30:13:B3 Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7 Certificate serial: 019BB1AA6B9993C2E3D43B82027A970B3FEE Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/zxibd_f4xg8XI9jjPajufCcwE7M.roa Signing time: Mon 12 Jan 2026 10:04:54 +0000 ROA not before: Mon 12 Jan 2026 10:04:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49685 IP address blocks: 31.3.8.0/21 maxlen: 24 31.223.160.0/20 maxlen: 24 37.17.208.0/20 maxlen: 24 46.226.56.0/21 maxlen: 24 78.108.128.0/20 maxlen: 24 80.84.224.0/19 maxlen: 24 80.246.192.0/20 maxlen: 24 80.246.207.0/24 maxlen: 24 80.255.240.0/20 maxlen: 24 81.4.64.0/20 maxlen: 24 81.4.80.0/22 maxlen: 24 81.4.88.0/21 maxlen: 24 81.4.96.0/22 maxlen: 24 81.4.112.0/21 maxlen: 24 81.21.136.0/21 maxlen: 24 81.21.136.0/24 maxlen: 24 81.30.32.0/20 maxlen: 24 83.96.128.0/18 maxlen: 24 83.96.192.0/21 maxlen: 24 83.96.208.0/22 maxlen: 24 83.96.224.0/21 maxlen: 24 83.96.232.0/22 maxlen: 24 83.96.248.0/22 maxlen: 24 85.10.160.0/19 maxlen: 24 85.10.172.0/22 maxlen: 24 85.158.248.0/22 maxlen: 24 85.158.252.0/23 maxlen: 24 91.142.240.0/21 maxlen: 24 91.142.252.0/23 maxlen: 24 91.189.208.0/22 maxlen: 24 91.205.32.0/22 maxlen: 24 94.142.208.0/21 maxlen: 24 141.255.176.0/22 maxlen: 24 141.255.180.0/22 maxlen: 24 171.33.128.0/21 maxlen: 24 171.33.128.0/24 maxlen: 24 176.74.224.0/19 maxlen: 24 185.15.248.0/22 maxlen: 24 185.65.52.0/22 maxlen: 24 185.69.232.0/22 maxlen: 24 185.84.72.0/22 maxlen: 24 185.89.152.0/22 maxlen: 24 185.95.68.0/22 maxlen: 24 185.105.204.0/22 maxlen: 24 185.105.216.0/22 maxlen: 24 185.110.200.0/22 maxlen: 24 193.93.172.0/22 maxlen: 24 193.242.119.0/24 maxlen: 24 217.21.240.0/20 maxlen: 24 217.21.241.0/24 maxlen: 24 217.149.128.0/20 maxlen: 24 2001:828::/32 maxlen: 48 2001:4cb8::/29 maxlen: 48 2001:4cb8:e::/48 maxlen: 48 2001:4cb8:40b::/48 maxlen: 48 2a00:c080::/32 maxlen: 48 2a03:4f00::/32 maxlen: 48 2a03:5700::/32 maxlen: 48 2a05:2500::/32 maxlen: 48 2a05:a282::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b1:aa:6b:99:93:c2:e3:d4:3b:82:02:7a:97:0b:3f:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7 Validity Not Before: Jan 12 10:04:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf189b77f7f8c60f1723d8e33da8ee7c273013b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:cf:aa:c4:c5:6d:c8:23:a5:a3:14:04:e5:ed: cf:90:02:4f:55:7f:93:7b:13:fc:64:19:83:44:02: b4:5a:8c:ae:27:09:fe:b3:3d:b5:47:5a:63:3b:6c: 78:92:81:a4:b1:ac:0e:15:b7:21:9d:1d:2a:84:82: ec:27:22:01:0d:4d:e5:76:fd:72:e7:e3:3a:4e:14: c7:27:bc:b4:54:92:5f:8b:c3:e0:bc:34:d7:2f:8a: b6:4e:75:7f:92:8d:1b:b4:8d:05:2f:e9:7d:72:f4: 49:50:3d:84:b0:60:d2:cd:cb:43:de:51:d1:14:76: fa:e2:a0:88:99:82:9d:94:9a:68:b3:8c:8c:dd:1f: 2e:a7:41:ca:99:e5:1e:f5:88:fa:b6:47:6d:41:a6: f4:2f:1a:73:9e:e5:62:76:dc:85:25:ef:b5:f5:6d: 3f:18:b8:73:fb:6c:2f:6c:04:67:48:05:65:4d:5f: 8e:4b:56:72:32:e3:a1:cf:64:2b:c9:80:44:1e:77: a3:2b:ac:03:8f:bb:28:43:f2:79:cf:b5:4d:73:f1: f1:87:43:5e:47:bf:a2:b0:b4:81:c0:bd:d6:2f:5e: f1:e6:92:93:4c:64:af:0f:b1:55:cc:fa:b0:12:45: ee:0b:02:3a:db:a6:2a:d2:99:40:ab:78:0d:b9:7b: 40:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:18:9B:77:F7:F8:C6:0F:17:23:D8:E3:3D:A8:EE:7C:27:30:13:B3 X509v3 Authority Key Identifier: keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/zxibd_f4xg8XI9jjPajufCcwE7M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.3.8.0/21 31.223.160.0/20 37.17.208.0/20 46.226.56.0/21 78.108.128.0/20 80.84.224.0/19 80.246.192.0/20 80.255.240.0/20 81.4.64.0-81.4.83.255 81.4.88.0-81.4.99.255 81.4.112.0/21 81.21.136.0/21 81.30.32.0/20 83.96.128.0-83.96.199.255 83.96.208.0/22 83.96.224.0-83.96.235.255 83.96.248.0/22 85.10.160.0/19 85.158.248.0-85.158.253.255 91.142.240.0/21 91.142.252.0/23 91.189.208.0/22 91.205.32.0/22 94.142.208.0/21 141.255.176.0/21 171.33.128.0/21 176.74.224.0/19 185.15.248.0/22 185.65.52.0/22 185.69.232.0/22 185.84.72.0/22 185.89.152.0/22 185.95.68.0/22 185.105.204.0/22 185.105.216.0/22 185.110.200.0/22 193.93.172.0/22 193.242.119.0/24 217.21.240.0/20 217.149.128.0/20 IPv6: 2001:828::/32 2001:4cb8::/29 2a00:c080::/32 2a03:4f00::/32 2a03:5700::/32 2a05:2500::/32 2a05:a282::/32 Signature Algorithm: sha256WithRSAEncryption 6e:14:9d:b1:40:cc:c2:f1:a8:c9:0e:39:74:aa:73:87:3e:5d: cf:d4:63:db:9f:85:35:1e:27:64:4f:5a:a9:b3:20:3d:15:2f: 82:23:fb:aa:01:10:38:75:6c:48:09:12:d4:fd:aa:13:c3:8f: 4f:8c:08:1e:84:f0:6e:96:01:f1:49:2a:d3:06:53:f7:88:0a: 17:86:45:de:2e:f2:a9:2d:25:72:50:a8:f0:50:ff:58:2f:13: da:e2:44:bc:00:21:20:ae:5e:95:af:69:21:16:3b:3f:eb:3c: 55:d2:3e:30:64:f3:80:f8:95:0d:88:b5:5f:04:4f:37:2b:27: c8:d0:bf:08:90:dc:a9:f1:ae:8c:7a:1e:ee:f1:32:ee:03:5b: 9c:33:15:65:a8:bd:96:df:b2:47:f9:82:7e:b5:0c:f9:b5:ba: e6:c2:61:90:d9:fc:10:02:6a:af:36:0f:d8:0d:42:d5:40:57: 8a:f2:35:d6:68:2f:4e:2d:c7:9c:62:98:47:de:e4:c0:65:d4: 56:c5:d7:82:d5:e2:2f:39:f3:1e:f8:61:91:6d:94:65:f9:49: 50:7f:c3:41:43:10:3b:83:e6:b2:fa:36:e6:53:de:77:c7:ae: 1e:5a:61:6a:9e:19:a2:ec:9d:54:a8:94:89:64:c7:ab:6d:31: 92:79:55:9f -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgISAZuxqmuZk8Lj1DuCAnqXCz/uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1MTM2OWNjYmY4NmIxZTg0ZTFhZWI0NmU2ZDMzNmQzOWY3 NTJhZTcwHhcNMjYwMTEyMTAwNDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjE4OWI3N2Y3ZjhjNjBmMTcyM2Q4ZTMzZGE4ZWU3YzI3MzAxM2IzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8+qxMVtyCOloxQE5e3PkAJPVX+T exP8ZBmDRAK0WoyuJwn+sz21R1pjO2x4koGksawOFbchnR0qhILsJyIBDU3ldv1y 5+M6ThTHJ7y0VJJfi8PgvDTXL4q2TnV/ko0btI0FL+l9cvRJUD2EsGDSzctD3lHR FHb64qCImYKdlJpos4yM3R8up0HKmeUe9Yj6tkdtQab0LxpznuVidtyFJe+19W0/ GLhz+2wvbARnSAVlTV+OS1ZyMuOhz2QryYBEHnejK6wDj7soQ/J5z7VNc/Hxh0Ne R7+isLSBwL3WL17x5pKTTGSvD7FVzPqwEkXuCwI626Yq0plAq3gNuXtAFQIDAQAB o4IDXjCCA1owHQYDVR0OBBYEFM8Ym3f3+MYPFyPY4z2o7nwnMBOzMB8GA1UdIwQY MBaAFPUTacy/hrHoThrrRubTNtOfdSrnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8yZDViZGYtNTI2NS00OWI4LThhZmUt MmI5MjBiZGUzOTkwLzEvenhpYmRfZjR4ZzhYSTlqalBhanVmQ2N3RTdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8yZDViZGYtNTI2NS00OWI4LThhZmUtMmI5MjBiZGUzOTkw LzEvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBcgYIKwYBBQUHAQcBAf8EggFhMIIBXTCCASAEAgABMIIB GAMEAx8DCAMEBB/foAMEBCUR0AMEAy7iOAMEBE5sgAMEBVBU4AMEBFD2wAMEBFD/ 8DAMAwQGUQRAAwQCUQRQMAwDBANRBFgDBAJRBGADBANRBHADBANRFYgDBARRHiAw DAMEB1NggAMEA1NgwAMEAlNg0DAMAwQFU2DgAwQCU2DoAwQCU2D4AwQFVQqgMAwD BANVnvgDBAFVnvwDBANbjvADBAFbjvwDBAJbvdADBAJbzSADBANejtADBAON/7AD BAOrIYADBAWwSuADBAK5D/gDBAK5QTQDBAK5RegDBAK5VEgDBAK5WZgDBAK5X0QD BAK5acwDBAK5adgDBAK5bsgDBALBXawDBADB8ncDBATZFfADBATZlYAwNwQCAAIw MQMFACABCCgDBQMgAUy4AwUAKgDAgAMFACoDTwADBQAqA1cAAwUAKgUlAAMFACoF ooIwDQYJKoZIhvcNAQELBQADggEBAG4UnbFAzMLxqMkOOXSqc4c+Xc/UY9ufhTUe J2RPWqmzID0VL4Ij+6oBEDh1bEgJEtT9qhPDj0+MCB6E8G6WAfFJKtMGU/eICheG Rd4u8qktJXJQqPBQ/1gvE9riRLwAISCuXpWvaSEWOz/rPFXSPjBk84D4lQ2ItV8E TzcrJ8jQvwiQ3Knxrox6Hu7xMu4DW5wzFWWovZbfskf5gn61DPm1uubCYZDZ/BAC aq82D9gNQtVAV4ryNdZoL04tx5ximEfe5MBl1FbF14LV4i858x74YZFtlGX5SVB/ w0FDEDuD5rL6NuZT3nfHrh5aYWqeGaLsnVSolIlkx6ttMZJ5VZ8= -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:48 2026 by rpki-client