This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/ZrOcAdpcSsRROyYE23OBjWG5yVQ.roa File: ZrOcAdpcSsRROyYE23OBjWG5yVQ.roa (raw, json) Hash identifier: 3TzGgdPPeRvq5m4XrgUnNCdTHF2ADSRfiiLFr+IcrFs= Subject key identifier: 66:B3:9C:01:DA:5C:4A:C4:51:3B:26:04:DB:73:81:8D:61:B9:C9:54 Certificate issuer: /CN=5f08dc10218ac6db79430ae7c44515590417d605 Certificate serial: 019B7F15ADA74605752CCF4A58832C1C8CD2 Authority key identifier: 5F:08:DC:10:21:8A:C6:DB:79:43:0A:E7:C4:45:15:59:04:17:D6:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/ZrOcAdpcSsRROyYE23OBjWG5yVQ.roa Signing time: Fri 02 Jan 2026 14:21:25 +0000 ROA not before: Fri 02 Jan 2026 14:21:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42337 IP address blocks: 176.101.32.0/20 maxlen: 20 176.101.32.0/24 maxlen: 24 176.101.33.0/24 maxlen: 24 176.101.34.0/24 maxlen: 24 176.101.35.0/24 maxlen: 24 176.101.36.0/24 maxlen: 24 176.101.37.0/24 maxlen: 24 176.101.38.0/24 maxlen: 24 176.101.39.0/24 maxlen: 24 176.101.40.0/24 maxlen: 24 176.101.41.0/24 maxlen: 24 176.101.42.0/24 maxlen: 24 176.101.43.0/24 maxlen: 24 176.101.44.0/24 maxlen: 24 176.101.45.0/24 maxlen: 24 176.101.46.0/24 maxlen: 24 176.101.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:ad:a7:46:05:75:2c:cf:4a:58:83:2c:1c:8c:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f08dc10218ac6db79430ae7c44515590417d605 Validity Not Before: Jan 2 14:21:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=66b39c01da5c4ac4513b2604db73818d61b9c954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1f:e9:3d:85:be:52:ca:b0:1d:31:58:30:84: 63:3a:c0:12:35:43:e1:62:81:a5:53:1b:a0:99:59: b9:2f:dd:84:9d:e1:83:8f:23:24:c0:57:1d:c2:40: 63:28:47:84:1c:c0:ce:7b:78:67:6a:39:a6:00:23: 4a:f2:66:e7:e3:01:9b:26:b7:64:3c:4e:f7:be:3e: 7a:88:ca:00:62:a3:20:4b:70:64:9d:1a:42:8c:9d: 46:23:18:81:df:b7:70:55:43:2c:d7:60:93:e0:50: 05:f9:8a:15:a0:4c:cd:de:39:eb:61:41:80:6c:32: ef:c0:e9:23:e9:10:b3:d1:8e:0f:f5:67:b1:31:7d: 92:62:2f:2a:24:0c:99:6c:25:ad:5f:09:6c:dd:24: db:9f:d8:16:3c:b8:fb:76:18:54:27:51:da:49:2b: ae:f7:3a:62:ae:5e:ca:4e:92:dd:46:71:00:aa:fb: b7:48:cd:69:eb:75:6a:2d:0f:7f:9e:e2:06:92:07: f0:71:bd:8e:94:28:a9:59:c6:87:91:ed:75:23:3c: c7:df:25:7f:57:01:ce:ae:e6:7a:7b:74:ad:b4:3e: 47:18:20:be:46:3d:cb:de:cb:7c:49:e8:24:2e:b5: 51:0f:32:85:d1:14:60:59:f0:71:54:03:3e:f2:dd: ae:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:B3:9C:01:DA:5C:4A:C4:51:3B:26:04:DB:73:81:8D:61:B9:C9:54 X509v3 Authority Key Identifier: keyid:5F:08:DC:10:21:8A:C6:DB:79:43:0A:E7:C4:45:15:59:04:17:D6:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/ZrOcAdpcSsRROyYE23OBjWG5yVQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.101.32.0/20 Signature Algorithm: sha256WithRSAEncryption 7b:96:21:da:c7:46:a3:06:ca:20:89:f0:04:82:1b:cd:41:19: 0a:64:2a:1d:52:86:21:e8:7b:05:21:3e:5f:4e:51:cd:c7:65: d9:89:61:5a:e1:7f:55:86:0d:0e:f4:de:4a:23:ca:29:90:7c: 3d:7a:41:c6:22:1a:c6:a1:4c:36:1f:84:99:11:37:39:f2:4a: 3a:dd:3d:5e:8c:9b:07:17:87:42:0e:e7:88:ee:71:04:58:1c: 25:e5:37:cc:6b:36:aa:1f:05:87:7b:34:06:39:0c:33:68:a9: 7f:46:bb:ae:e7:43:79:2c:9c:7b:ec:de:24:2d:f1:1e:ac:83: 68:23:b1:0d:05:8a:49:62:a0:20:50:61:cb:d6:3a:93:03:dd: 48:12:7d:d9:a1:7b:1d:f1:2f:26:12:12:fb:5b:81:f9:32:f8: 6a:fe:59:26:76:20:c9:95:bc:3d:47:54:a8:57:f0:d4:f3:2c: ad:61:7e:33:73:29:da:7b:b2:a8:33:aa:5b:da:fc:3a:99:0f: 15:a2:fa:2e:b5:8b:24:b3:78:6a:80:8c:53:b8:7c:d0:ef:a0: 81:24:0b:20:f3:b1:ac:68:59:36:dd:e8:38:00:7c:8f:d3:83: 54:07:41:97:77:fa:ce:b6:fd:01:0f:9a:49:2a:ff:de:eb:ec: 36:6c:06:3f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/Fa2nRgV1LM9KWIMsHIzSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMDhkYzEwMjE4YWM2ZGI3OTQzMGFlN2M0NDUxNTU5MDQx N2Q2MDUwHhcNMjYwMTAyMTQyMTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NmIzOWMwMWRhNWM0YWM0NTEzYjI2MDRkYjczODE4ZDYxYjljOTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnB/pPYW+UsqwHTFYMIRjOsASNUPh YoGlUxugmVm5L92EneGDjyMkwFcdwkBjKEeEHMDOe3hnajmmACNK8mbn4wGbJrdk PE73vj56iMoAYqMgS3BknRpCjJ1GIxiB37dwVUMs12CT4FAF+YoVoEzN3jnrYUGA bDLvwOkj6RCz0Y4P9WexMX2SYi8qJAyZbCWtXwls3STbn9gWPLj7dhhUJ1HaSSuu 9zpirl7KTpLdRnEAqvu3SM1p63VqLQ9/nuIGkgfwcb2OlCipWcaHke11IzzH3yV/ VwHOruZ6e3SttD5HGCC+Rj3L3st8SegkLrVRDzKF0RRgWfBxVAM+8t2uaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGaznAHaXErEUTsmBNtzgY1huclUMB8GA1UdIwQY MBaAFF8I3BAhisbbeUMK58RFFVkEF9YFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHdqY0VDR0t4dHQ1UXdybnhFVVZXUVFYMWdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9kODE3NDUtNjU4ZC00YTc0LTkyZjct NWQzYTQyMWEwZjEwLzEvWnJPY0FkcGNTc1JST3lZRTIzT0JqV0c1eVZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9kODE3NDUtNjU4ZC00YTc0LTkyZjctNWQzYTQyMWEwZjEw LzEvWHdqY0VDR0t4dHQ1UXdybnhFVVZXUVFYMWdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEsGUgMA0G CSqGSIb3DQEBCwUAA4IBAQB7liHax0ajBsogifAEghvNQRkKZCodUoYh6HsFIT5f TlHNx2XZiWFa4X9Vhg0O9N5KI8opkHw9ekHGIhrGoUw2H4SZETc58ko63T1ejJsH F4dCDueI7nEEWBwl5TfMazaqHwWHezQGOQwzaKl/Rruu50N5LJx77N4kLfEerINo I7ENBYpJYqAgUGHL1jqTA91IEn3ZoXsd8S8mEhL7W4H5Mvhq/lkmdiDJlbw9R1So V/DU8yytYX4zcynae7KoM6pb2vw6mQ8VovoutYsks3hqgIxTuHzQ76CBJAsg87Gs aFk23eg4AHyP04NUB0GXd/rOtv0BD5pJKv/e6+w2bAY/ -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:08 2026 by rpki-client