This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/nnLZ_anjPSOLRayVOL-RzewgHwI.roa File: nnLZ_anjPSOLRayVOL-RzewgHwI.roa (raw, json) Hash identifier: 2WaAIYb59kGhe6tvXHb5ioUayH6vLhFoDq8NRlocKJ8= Subject key identifier: 9E:72:D9:FD:A9:E3:3D:23:8B:45:AC:95:38:BF:91:CD:EC:20:1F:02 Certificate issuer: /CN=19f1a9dd126f37237ce200fb8616ff937bca966c Certificate serial: 019B7C11C1EE7CB3689FF4A0D4B4F94897F6 Authority key identifier: 19:F1:A9:DD:12:6F:37:23:7C:E2:00:FB:86:16:FF:93:7B:CA:96:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/nnLZ_anjPSOLRayVOL-RzewgHwI.roa Signing time: Fri 02 Jan 2026 00:18:17 +0000 ROA not before: Fri 02 Jan 2026 00:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49467 IP address blocks: 37.152.72.0/24 maxlen: 24 37.152.73.0/24 maxlen: 24 37.152.74.0/24 maxlen: 24 37.152.75.0/24 maxlen: 24 37.152.76.0/24 maxlen: 24 85.95.224.0/24 maxlen: 24 85.95.225.0/24 maxlen: 24 85.95.226.0/24 maxlen: 24 85.95.227.0/24 maxlen: 24 85.95.228.0/24 maxlen: 24 85.95.229.0/24 maxlen: 24 85.95.230.0/24 maxlen: 24 85.95.231.0/24 maxlen: 24 85.95.232.0/24 maxlen: 24 85.95.233.0/24 maxlen: 24 85.95.234.0/24 maxlen: 24 85.95.235.0/24 maxlen: 24 85.95.236.0/24 maxlen: 24 85.95.245.0/24 maxlen: 24 85.95.246.0/24 maxlen: 24 85.95.247.0/24 maxlen: 24 85.95.248.0/24 maxlen: 24 85.95.249.0/24 maxlen: 24 85.95.250.0/24 maxlen: 24 85.95.251.0/24 maxlen: 24 85.95.252.0/24 maxlen: 24 85.95.253.0/24 maxlen: 24 85.95.254.0/24 maxlen: 24 92.42.32.0/24 maxlen: 24 92.42.33.0/24 maxlen: 24 92.42.34.0/24 maxlen: 24 92.42.35.0/24 maxlen: 24 92.42.36.0/24 maxlen: 24 92.42.37.0/24 maxlen: 24 92.42.38.0/24 maxlen: 24 92.42.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:c1:ee:7c:b3:68:9f:f4:a0:d4:b4:f9:48:97:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19f1a9dd126f37237ce200fb8616ff937bca966c Validity Not Before: Jan 2 00:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e72d9fda9e33d238b45ac9538bf91cdec201f02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:e3:3c:fa:02:e0:35:3e:f3:0a:d4:f2:fa:c4: f9:ab:e9:1c:1a:82:6d:40:73:ab:d9:0d:b3:f4:9a: 05:1e:fe:00:b3:ec:61:9a:b6:15:1e:93:cf:0c:b6: a6:b2:39:59:bc:91:36:b9:27:ee:9c:9c:3f:1d:67: 0b:0d:ef:d2:87:80:42:92:b5:97:08:13:db:c8:1f: f1:6a:71:b0:94:60:8d:c6:e0:58:7d:b0:e2:f3:5b: 68:b7:27:29:df:13:c5:f4:4d:f8:26:e6:48:e3:7d: 03:78:c6:bf:be:14:92:23:1e:1f:58:ae:94:85:3e: 19:fd:fd:39:ba:ed:c8:18:ae:19:85:54:29:0e:0d: bd:d4:19:07:ca:cb:ce:19:8d:12:4f:89:e6:2e:70: ed:d7:20:47:42:31:16:19:33:0a:a4:ee:98:12:c2: 76:15:eb:e6:96:ec:53:1d:34:c1:41:70:a6:d2:e8: 38:5f:22:75:8e:50:d3:a8:5b:0b:b5:44:2d:1c:98: 99:84:fb:58:1c:1b:d3:8a:3d:76:71:00:81:7c:70: 69:5d:72:e7:06:ca:c7:9e:74:9e:e4:12:08:81:38: 3a:88:21:24:9a:61:7b:a4:76:b0:63:1e:86:b2:54: c4:79:52:96:e4:2b:c9:7f:a2:e7:bd:3d:6d:63:b4: 3e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:72:D9:FD:A9:E3:3D:23:8B:45:AC:95:38:BF:91:CD:EC:20:1F:02 X509v3 Authority Key Identifier: keyid:19:F1:A9:DD:12:6F:37:23:7C:E2:00:FB:86:16:FF:93:7B:CA:96:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/nnLZ_anjPSOLRayVOL-RzewgHwI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.152.72.0-37.152.76.255 85.95.224.0-85.95.236.255 85.95.245.0-85.95.254.255 92.42.32.0/21 Signature Algorithm: sha256WithRSAEncryption 60:7f:d1:da:d7:8f:ac:4a:b2:47:4b:9e:36:e0:a3:cc:5d:fd: 9a:6c:5a:56:12:9f:6c:ee:e7:2e:6a:da:27:3e:cb:bb:0c:73: d8:47:d1:cc:90:2b:76:3d:53:a5:2f:dc:aa:59:6c:d4:bd:f5: 09:de:c7:d7:07:ca:28:4a:e7:fe:db:0b:b0:2b:7d:4d:64:c5: 2f:eb:a1:57:fb:45:b2:37:02:d6:1a:3b:da:27:d4:fd:82:0c: d5:29:e5:57:be:35:c7:af:ff:97:05:bb:5c:02:41:11:32:c6: f1:d7:c6:e2:1f:9e:3f:81:8c:29:65:d8:e8:5a:43:34:a3:d2: 71:9f:24:ed:da:19:a4:6b:2b:75:40:0e:23:85:60:18:74:9d: af:17:e7:3b:ea:ef:bf:31:a9:0a:23:f3:24:3a:e9:88:37:da: 1d:21:ea:70:79:95:79:ff:0a:0f:fe:53:ac:d0:b6:60:a4:c1: 51:02:ae:b4:6b:30:41:84:07:e1:cd:2e:58:21:07:9c:48:78: 1e:60:30:09:ce:6b:f6:0a:3e:d7:f2:d3:b0:25:ed:9a:26:8d: 84:6a:c5:4f:60:dc:63:de:e7:33:44:d8:e2:83:45:a5:de:7a: 8d:3f:36:9c:ba:84:6b:ff:89:53:a9:07:2d:09:fa:91:9d:76: e4:12:aa:ee -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt8EcHufLNon/Sg1LT5SJf2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ZjFhOWRkMTI2ZjM3MjM3Y2UyMDBmYjg2MTZmZjkzN2Jj YTk2NmMwHhcNMjYwMTAyMDAxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTcyZDlmZGE5ZTMzZDIzOGI0NWFjOTUzOGJmOTFjZGVjMjAxZjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9uM8+gLgNT7zCtTy+sT5q+kcGoJt QHOr2Q2z9JoFHv4As+xhmrYVHpPPDLamsjlZvJE2uSfunJw/HWcLDe/Sh4BCkrWX CBPbyB/xanGwlGCNxuBYfbDi81totycp3xPF9E34JuZI430DeMa/vhSSIx4fWK6U hT4Z/f05uu3IGK4ZhVQpDg291BkHysvOGY0ST4nmLnDt1yBHQjEWGTMKpO6YEsJ2 FevmluxTHTTBQXCm0ug4XyJ1jlDTqFsLtUQtHJiZhPtYHBvTij12cQCBfHBpXXLn BsrHnnSe5BIIgTg6iCEkmmF7pHawYx6GslTEeVKW5CvJf6LnvT1tY7Q+ywIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFJ5y2f2p4z0ji0WslTi/kc3sIB8CMB8GA1UdIwQY MBaAFBnxqd0SbzcjfOIA+4YW/5N7ypZsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2ZHcDNSSnZOeU44NGdEN2hoYl9rM3ZLbG13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mOGE2M2QtMTczMC00ZDg4LWFiMzgt M2ZkMzA5ODhmNjc3LzEvbm5MWl9hbmpQU09MUmF5Vk9MLVJ6ZXdnSHdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9mOGE2M2QtMTczMC00ZDg4LWFiMzgtM2ZkMzA5ODhmNjc3 LzEvR2ZHcDNSSnZOeU44NGdEN2hoYl9rM3ZLbG13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwMAwDBAMlmEgD BAAlmEwwDAMEBVVf4AMEAFVf7DAMAwQAVV/1AwQAVV/+AwQDXCogMA0GCSqGSIb3 DQEBCwUAA4IBAQBgf9Ha14+sSrJHS5424KPMXf2abFpWEp9s7ucuatonPsu7DHPY R9HMkCt2PVOlL9yqWWzUvfUJ3sfXB8ooSuf+2wuwK31NZMUv66FX+0WyNwLWGjva J9T9ggzVKeVXvjXHr/+XBbtcAkERMsbx18biH54/gYwpZdjoWkM0o9JxnyTt2hmk ayt1QA4jhWAYdJ2vF+c76u+/MakKI/MkOumIN9odIepweZV5/woP/lOs0LZgpMFR Aq60azBBhAfhzS5YIQecSHgeYDAJzmv2Cj7X8tOwJe2aJo2EasVPYNxj3uczRNji g0Wl3nqNPzacuoRr/4lTqQctCfqRnXbkEqru -----END CERTIFICATE-----Generated at Mon Jan 26 07:07:30 2026 by rpki-client