This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/zrt9WhsdMf2hq44BDT2v8p4tC64.roa File: zrt9WhsdMf2hq44BDT2v8p4tC64.roa (raw, json) Hash identifier: XpWV8qEFWpFCztfH5cglvBgtoEGZmhv6MMKT5jtMF+o= Subject key identifier: CE:BB:7D:5A:1B:1D:31:FD:A1:AB:8E:01:0D:3D:AF:F2:9E:2D:0B:AE Certificate issuer: /CN=d62329d8d7e541953e120fd05f66cc6ebab0684d Certificate serial: 019B7D5CAD724974B722B8BC1865E6CD11F9 Authority key identifier: D6:23:29:D8:D7:E5:41:95:3E:12:0F:D0:5F:66:CC:6E:BA:B0:68:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/zrt9WhsdMf2hq44BDT2v8p4tC64.roa Signing time: Fri 02 Jan 2026 06:19:44 +0000 ROA not before: Fri 02 Jan 2026 06:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25151 IP address blocks: 37.46.136.0/21 maxlen: 24 81.24.0.0/20 maxlen: 24 81.24.0.0/22 maxlen: 24 81.24.4.0/22 maxlen: 24 81.24.6.0/23 maxlen: 24 81.24.8.0/22 maxlen: 24 81.24.10.0/23 maxlen: 24 85.158.200.0/21 maxlen: 24 93.94.224.0/21 maxlen: 24 109.235.72.0/21 maxlen: 24 185.54.112.0/22 maxlen: 24 185.78.196.0/22 maxlen: 24 2a01:518::/32 maxlen: 48 2a05:6cc0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:ad:72:49:74:b7:22:b8:bc:18:65:e6:cd:11:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d62329d8d7e541953e120fd05f66cc6ebab0684d Validity Not Before: Jan 2 06:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cebb7d5a1b1d31fda1ab8e010d3daff29e2d0bae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:75:ee:67:de:73:c1:8f:e5:54:4b:16:85:fc: ad:1f:a0:dd:26:3e:63:ce:65:f4:d2:68:6a:7d:e3: 22:56:d0:0a:b3:d7:47:15:b0:93:ca:a4:22:77:c5: 1d:c1:97:1a:84:0a:72:2b:e4:91:f5:a8:b6:88:13: ac:24:85:3e:79:82:13:87:b5:ad:40:81:a7:c3:c0: d9:c1:18:9f:a1:70:45:be:e4:13:24:d5:f2:2c:21: cc:bb:9d:c2:c0:d1:76:2a:cf:b4:67:88:3b:2b:dc: d7:be:4b:49:4c:6c:0f:a5:ec:14:83:54:29:88:93: 12:fe:1b:2e:46:9d:dc:1d:e7:85:84:2c:58:46:44: 10:6c:80:e2:d4:b6:0e:f1:7b:4d:09:25:d1:70:ae: 73:70:3c:e2:a2:32:d0:f6:4c:23:a8:1c:be:62:b0: d2:95:30:ad:54:22:82:47:15:98:9f:a4:07:bb:cf: 76:c4:2d:78:41:fb:9e:23:02:8b:7c:82:88:38:f3: c1:58:5b:0c:8c:64:94:2b:e9:7e:d2:ca:1d:53:14: b3:fe:d8:a2:7f:c3:3f:07:1e:49:40:0b:1c:f5:17: a8:ca:b9:f2:a9:7b:d7:b2:fd:e7:63:e1:30:5e:c1: 4e:72:3d:a2:91:65:e8:fd:3d:5a:54:bc:af:fb:2b: 45:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:BB:7D:5A:1B:1D:31:FD:A1:AB:8E:01:0D:3D:AF:F2:9E:2D:0B:AE X509v3 Authority Key Identifier: keyid:D6:23:29:D8:D7:E5:41:95:3E:12:0F:D0:5F:66:CC:6E:BA:B0:68:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/zrt9WhsdMf2hq44BDT2v8p4tC64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.46.136.0/21 81.24.0.0/20 85.158.200.0/21 93.94.224.0/21 109.235.72.0/21 185.54.112.0/22 185.78.196.0/22 IPv6: 2a01:518::/32 2a05:6cc0::/29 Signature Algorithm: sha256WithRSAEncryption 2b:1f:c4:89:cb:87:56:08:c1:e4:79:9c:40:fd:ab:e5:75:05: 5a:ff:9e:99:8b:7a:5b:8d:cd:b8:14:19:7b:ea:7c:c9:74:38: f2:44:89:5a:68:8c:8c:cd:ff:7c:9d:e1:98:6f:c5:de:57:fa: 9c:f7:4b:03:bf:f3:53:1c:e1:71:0f:a6:e9:5d:8e:62:76:6d: 9a:8e:ee:fa:14:59:8d:33:6c:a6:0a:87:3e:d6:b0:b5:64:6d: 75:a6:20:a8:11:5d:cc:9f:3d:51:d1:b8:bc:90:1a:0f:29:7a: 07:35:46:da:46:9d:b5:f5:e4:9c:c0:9f:23:be:c0:ae:38:4a: 9c:4f:b5:22:5d:8a:a3:56:29:98:b1:f5:79:b9:49:9f:b2:c1: 2a:bd:41:9e:a6:47:94:81:dd:d3:30:49:33:0b:68:e9:bd:ef: c2:41:7f:76:ad:4c:41:8b:a3:51:dd:06:a3:11:a2:d1:de:ab: 6e:32:4a:5e:8f:6e:b7:7d:ea:c7:35:20:c2:ad:35:44:c7:ae: a4:21:16:63:03:6f:6b:f0:9c:fb:64:b7:af:61:5f:b6:c4:a4: 86:82:96:1e:9d:71:9d:19:fc:5b:0b:c3:d6:fa:cc:82:0c:f8: 76:31:92:14:71:ee:8e:82:ea:a0:92:50:95:35:23:a6:f4:41: b2:14:3a:a2 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgISAZt9XK1ySXS3Iri8GGXmzRH5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MjMyOWQ4ZDdlNTQxOTUzZTEyMGZkMDVmNjZjYzZlYmFi MDY4NGQwHhcNMjYwMTAyMDYxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZWJiN2Q1YTFiMWQzMWZkYTFhYjhlMDEwZDNkYWZmMjllMmQwYmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHXuZ95zwY/lVEsWhfytH6DdJj5j zmX00mhqfeMiVtAKs9dHFbCTyqQid8UdwZcahApyK+SR9ai2iBOsJIU+eYITh7Wt QIGnw8DZwRifoXBFvuQTJNXyLCHMu53CwNF2Ks+0Z4g7K9zXvktJTGwPpewUg1Qp iJMS/hsuRp3cHeeFhCxYRkQQbIDi1LYO8XtNCSXRcK5zcDziojLQ9kwjqBy+YrDS lTCtVCKCRxWYn6QHu892xC14QfueIwKLfIKIOPPBWFsMjGSUK+l+0sodUxSz/tii f8M/Bx5JQAsc9ReoyrnyqXvXsv3nY+EwXsFOcj2ikWXo/T1aVLyv+ytFCQIDAQAB o4ICQzCCAj8wHQYDVR0OBBYEFM67fVobHTH9oauOAQ09r/KeLQuuMB8GA1UdIwQY MBaAFNYjKdjX5UGVPhIP0F9mzG66sGhNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWlNcDJOZmxRWlUtRWdfUVgyYk1icnF3YUUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lODUxODAtMTkxMC00YzQyLWExZjUt NzMyMDJmMGUxZDAzLzEvenJ0OVdoc2RNZjJocTQ0QkRUMnY4cDR0QzY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9lODUxODAtMTkxMC00YzQyLWExZjUtNzMyMDJmMGUxZDAz LzEvMWlNcDJOZmxRWlUtRWdfUVgyYk1icnF3YUUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDAwBAIAATAqAwQDJS6IAwQE URgAAwQDVZ7IAwQDXV7gAwQDbetIAwQCuTZwAwQCuU7EMBQEAgACMA4DBQAqAQUY AwUDKgVswDANBgkqhkiG9w0BAQsFAAOCAQEAKx/EicuHVgjB5HmcQP2r5XUFWv+e mYt6W43NuBQZe+p8yXQ48kSJWmiMjM3/fJ3hmG/F3lf6nPdLA7/zUxzhcQ+m6V2O YnZtmo7u+hRZjTNspgqHPtawtWRtdaYgqBFdzJ89UdG4vJAaDyl6BzVG2kadtfXk nMCfI77ArjhKnE+1Il2Ko1YpmLH1eblJn7LBKr1BnqZHlIHd0zBJMwto6b3vwkF/ dq1MQYujUd0GoxGi0d6rbjJKXo9ut33qxzUgwq01RMeupCEWYwNva/Cc+2S3r2Ff tsSkhoKWHp1xnRn8WwvD1vrMggz4djGSFHHujoLqoJJQlTUjpvRBshQ6og== -----END CERTIFICATE-----Generated at Mon Jan 26 06:19:38 2026 by rpki-client