This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/ZDnCXrs2VTXwnUeyEGxx3aj0GCo.roa File: ZDnCXrs2VTXwnUeyEGxx3aj0GCo.roa (raw, json) Hash identifier: lCX2OIWetakZH0BDXor6ZmMOPfPeK+kN4Jw1mCD9ZF0= Subject key identifier: 64:39:C2:5E:BB:36:55:35:F0:9D:47:B2:10:6C:71:DD:A8:F4:18:2A Certificate issuer: /CN=572b4ed92682d718a8fc4488140027406960795f Certificate serial: 019B797EF30F59098D7A43B3FC613A0E5E37 Authority key identifier: 57:2B:4E:D9:26:82:D7:18:A8:FC:44:88:14:00:27:40:69:60:79:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/ZDnCXrs2VTXwnUeyEGxx3aj0GCo.roa Signing time: Thu 01 Jan 2026 12:18:41 +0000 ROA not before: Thu 01 Jan 2026 12:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205624 IP address blocks: 37.156.188.0/22 maxlen: 24 94.176.176.0/22 maxlen: 24 152.89.32.0/23 maxlen: 24 185.44.16.0/22 maxlen: 24 185.154.204.0/22 maxlen: 24 185.156.100.0/22 maxlen: 24 185.196.64.0/22 maxlen: 24 185.211.68.0/22 maxlen: 24 185.252.224.0/22 maxlen: 24 193.46.192.0/22 maxlen: 24 2a0d:8800::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:f3:0f:59:09:8d:7a:43:b3:fc:61:3a:0e:5e:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=572b4ed92682d718a8fc4488140027406960795f Validity Not Before: Jan 1 12:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6439c25ebb365535f09d47b2106c71dda8f4182a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:27:be:b7:e9:d9:f9:da:0e:b0:ce:8a:f4:0f: 33:f9:39:0b:5b:3c:07:26:ed:76:f6:8e:1d:e5:b7: 80:b6:9c:25:c7:2c:ec:2f:92:f7:12:b3:8c:b6:f9: ca:b5:06:39:f3:7e:d1:20:c9:05:df:7e:c4:a1:b4: 3c:d3:c0:71:eb:98:e5:1a:66:51:77:1a:d2:c4:bf: 37:b6:24:68:9a:8a:64:9f:81:5f:5a:74:e1:24:99: 81:f2:96:bd:68:66:f6:22:1d:f0:82:05:ea:77:0a: e7:d1:b5:0d:bf:4d:10:4d:8a:ad:62:cb:79:0b:46: e1:20:b1:0b:7c:be:86:ca:da:e4:f6:8b:8c:ea:7a: d1:52:c6:2d:78:2f:1e:42:b0:fc:94:c1:9b:3d:0f: cc:b4:34:fa:cb:66:b6:3a:3d:5e:e2:4a:b2:0a:ff: 4b:64:d7:d4:57:8d:27:66:7b:8e:fc:8e:8d:ba:0a: 43:f9:1b:e2:df:b2:e0:c7:e8:2d:93:72:db:ed:64: 88:89:76:da:b9:a6:e8:25:42:b4:87:cb:0c:06:31: fc:3e:82:9e:fa:b4:5a:4e:25:96:79:00:bb:7b:c6: 36:82:63:db:b8:28:53:6d:4d:9a:a0:ad:47:25:6d: 97:d5:28:5d:ae:e7:31:86:5b:65:81:20:50:e6:0d: fa:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:39:C2:5E:BB:36:55:35:F0:9D:47:B2:10:6C:71:DD:A8:F4:18:2A X509v3 Authority Key Identifier: keyid:57:2B:4E:D9:26:82:D7:18:A8:FC:44:88:14:00:27:40:69:60:79:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/ZDnCXrs2VTXwnUeyEGxx3aj0GCo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.156.188.0/22 94.176.176.0/22 152.89.32.0/23 185.44.16.0/22 185.154.204.0/22 185.156.100.0/22 185.196.64.0/22 185.211.68.0/22 185.252.224.0/22 193.46.192.0/22 IPv6: 2a0d:8800::/29 Signature Algorithm: sha256WithRSAEncryption 9a:56:9f:d5:bd:63:8f:c2:97:c4:f5:9d:97:fe:28:58:67:06: 4e:0f:ce:d9:ea:b9:e1:44:d5:99:fc:2a:9b:13:c4:d3:d2:af: e7:74:7f:12:d5:ee:5f:dc:8f:e9:0f:74:cf:80:dd:66:35:75: dc:88:fa:59:bd:9f:aa:c8:ad:0f:c1:36:d3:d9:ea:d0:b5:45: a0:42:50:75:16:13:da:15:5f:3c:0e:bf:66:01:b7:7d:0e:d5: 36:3b:60:ea:d5:07:8c:f1:b0:ac:5b:fe:e2:81:49:10:fd:a8: 99:7e:4f:4e:70:f4:f1:09:2c:df:e0:7b:9b:ce:0e:63:05:d6: 09:66:fd:df:05:e1:3b:5f:a6:7b:34:c6:2d:23:01:92:04:27: 85:c3:fb:1a:b3:e5:52:c4:2c:04:6d:e7:4c:4a:1c:37:83:98: a2:8b:ea:27:13:1a:bf:81:9e:57:f9:cc:c0:38:48:e8:11:bf: 96:d6:6b:cf:fa:08:f6:68:88:f6:14:2e:f2:07:f7:bc:80:e3: 9f:88:94:d5:bb:69:56:b0:18:fb:08:60:6b:a4:c0:67:d2:7c: d3:85:d0:9a:47:79:f9:1c:aa:91:48:24:43:51:7c:b5:3e:ca: 74:94:92:77:05:fe:84:f9:5f:5d:6a:77:9d:d7:de:65:5b:e6: fa:d1:69:0e -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgISAZt5fvMPWQmNekOz/GE6Dl43MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MmI0ZWQ5MjY4MmQ3MThhOGZjNDQ4ODE0MDAyNzQwNjk2 MDc5NWYwHhcNMjYwMTAxMTIxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDM5YzI1ZWJiMzY1NTM1ZjA5ZDQ3YjIxMDZjNzFkZGE4ZjQxODJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwie+t+nZ+doOsM6K9A8z+TkLWzwH Ju129o4d5beAtpwlxyzsL5L3ErOMtvnKtQY5837RIMkF337EobQ808Bx65jlGmZR dxrSxL83tiRomopkn4FfWnThJJmB8pa9aGb2Ih3wggXqdwrn0bUNv00QTYqtYst5 C0bhILELfL6Gytrk9ouM6nrRUsYteC8eQrD8lMGbPQ/MtDT6y2a2Oj1e4kqyCv9L ZNfUV40nZnuO/I6NugpD+Rvi37Lgx+gtk3Lb7WSIiXbauaboJUK0h8sMBjH8PoKe +rRaTiWWeQC7e8Y2gmPbuChTbU2aoK1HJW2X1ShdrucxhltlgSBQ5g367wIDAQAB o4ICTjCCAkowHQYDVR0OBBYEFGQ5wl67NlU18J1HshBscd2o9BgqMB8GA1UdIwQY MBaAFFcrTtkmgtcYqPxEiBQAJ0BpYHlfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnl0TzJTYUMxeGlvX0VTSUZBQW5RR2xnZVY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84ODRjMzEtZTUwOS00MjJiLWIwYTEt YWY5ZmMwMTJiZDU0LzEvWkRuQ1hyczJWVFh3blVleUVHeHgzYWowR0NvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi84ODRjMzEtZTUwOS00MjJiLWIwYTEtYWY5ZmMwMTJiZDU0 LzEvVnl0TzJTYUMxeGlvX0VTSUZBQW5RR2xnZVY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGQGCCsGAQUFBwEHAQH/BFUwUzBCBAIAATA8AwQCJZy8AwQC XrCwAwQBmFkgAwQCuSwQAwQCuZrMAwQCuZxkAwQCucRAAwQCudNEAwQCufzgAwQC wS7AMA0EAgACMAcDBQMqDYgAMA0GCSqGSIb3DQEBCwUAA4IBAQCaVp/VvWOPwpfE 9Z2X/ihYZwZOD87Z6rnhRNWZ/CqbE8TT0q/ndH8S1e5f3I/pD3TPgN1mNXXciPpZ vZ+qyK0PwTbT2erQtUWgQlB1FhPaFV88Dr9mAbd9DtU2O2Dq1QeM8bCsW/7igUkQ /aiZfk9OcPTxCSzf4Hubzg5jBdYJZv3fBeE7X6Z7NMYtIwGSBCeFw/sas+VSxCwE bedMShw3g5iii+onExq/gZ5X+czAOEjoEb+W1mvP+gj2aIj2FC7yB/e8gOOfiJTV u2lWsBj7CGBrpMBn0nzThdCaR3n5HKqRSCRDUXy1Psp0lJJ3Bf6E+V9daned195l W+b60WkO -----END CERTIFICATE-----Generated at Mon Jan 26 07:24:44 2026 by rpki-client