This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/zdBfrD5IVw8pi6vqQcHS7a-6B6M.roa File: zdBfrD5IVw8pi6vqQcHS7a-6B6M.roa (raw, json) Hash identifier: SRsoqmWroYRk0WNerAdt/zBAQsfM9cCx4q8bbzm8IYM= Subject key identifier: CD:D0:5F:AC:3E:48:57:0F:29:8B:AB:EA:41:C1:D2:ED:AF:BA:07:A3 Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Certificate serial: 019B77C762280FCE6C4519B259CDE9921936 Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/zdBfrD5IVw8pi6vqQcHS7a-6B6M.roa Signing time: Thu 01 Jan 2026 04:18:34 +0000 ROA not before: Thu 01 Jan 2026 04:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29648 IP address blocks: 31.173.104.0/24 maxlen: 24 31.173.105.0/24 maxlen: 24 31.173.106.0/24 maxlen: 24 31.173.107.0/24 maxlen: 24 31.173.108.0/24 maxlen: 24 31.173.109.0/24 maxlen: 24 31.173.110.0/24 maxlen: 24 31.173.111.0/24 maxlen: 24 31.173.112.0/24 maxlen: 24 31.173.113.0/24 maxlen: 24 31.173.114.0/24 maxlen: 24 31.173.115.0/24 maxlen: 24 31.173.116.0/24 maxlen: 24 31.173.117.0/24 maxlen: 24 31.173.118.0/24 maxlen: 24 31.173.119.0/24 maxlen: 24 77.233.160.0/19 maxlen: 19 77.233.160.0/24 maxlen: 24 77.233.161.0/24 maxlen: 24 77.233.162.0/24 maxlen: 24 77.233.164.0/24 maxlen: 24 77.233.166.0/24 maxlen: 24 77.233.167.0/24 maxlen: 24 77.233.170.0/24 maxlen: 24 77.233.173.0/24 maxlen: 24 77.233.178.0/24 maxlen: 24 77.233.180.0/24 maxlen: 24 77.233.181.0/24 maxlen: 24 77.233.182.0/24 maxlen: 24 77.233.185.0/24 maxlen: 24 77.233.186.0/24 maxlen: 24 77.233.188.0/24 maxlen: 24 77.233.190.0/24 maxlen: 24 77.233.191.0/24 maxlen: 24 78.109.120.0/24 maxlen: 24 78.109.121.0/24 maxlen: 24 78.109.123.0/24 maxlen: 24 78.109.124.0/24 maxlen: 24 83.169.217.0/24 maxlen: 24 83.169.218.0/24 maxlen: 24 83.169.219.0/24 maxlen: 24 83.169.220.0/24 maxlen: 24 83.169.221.0/24 maxlen: 24 83.169.222.0/24 maxlen: 24 83.169.223.0/24 maxlen: 24 86.109.192.0/19 maxlen: 19 86.109.192.0/20 maxlen: 20 86.109.193.0/24 maxlen: 24 86.109.195.0/24 maxlen: 24 86.109.200.0/23 maxlen: 23 86.109.208.0/24 maxlen: 24 86.109.210.0/24 maxlen: 24 86.109.212.0/24 maxlen: 24 86.109.213.0/24 maxlen: 24 86.109.214.0/24 maxlen: 24 86.109.215.0/24 maxlen: 24 86.109.216.0/24 maxlen: 24 86.109.218.0/23 maxlen: 23 86.109.220.0/24 maxlen: 24 86.109.222.0/24 maxlen: 24 86.109.223.0/24 maxlen: 24 178.176.96.0/24 maxlen: 24 178.176.97.0/24 maxlen: 24 178.176.98.0/24 maxlen: 24 178.176.99.0/24 maxlen: 24 178.176.100.0/24 maxlen: 24 178.176.101.0/24 maxlen: 24 178.176.102.0/24 maxlen: 24 178.176.103.0/24 maxlen: 24 178.176.114.0/24 maxlen: 24 178.176.115.0/24 maxlen: 24 178.176.116.0/24 maxlen: 24 178.176.117.0/24 maxlen: 24 178.176.118.0/24 maxlen: 24 178.176.119.0/24 maxlen: 24 178.176.120.0/24 maxlen: 24 178.176.121.0/24 maxlen: 24 178.176.122.0/24 maxlen: 24 178.176.123.0/24 maxlen: 24 178.176.124.0/24 maxlen: 24 178.176.125.0/24 maxlen: 24 178.176.126.0/24 maxlen: 24 178.176.127.0/24 maxlen: 24 178.178.160.0/24 maxlen: 24 188.94.168.0/24 maxlen: 24 188.94.169.0/24 maxlen: 24 188.94.170.0/24 maxlen: 24 188.94.171.0/24 maxlen: 24 188.94.172.0/24 maxlen: 24 188.94.173.0/24 maxlen: 24 188.94.174.0/24 maxlen: 24 188.94.175.0/24 maxlen: 24 188.170.96.0/24 maxlen: 24 188.170.97.0/24 maxlen: 24 188.170.98.0/24 maxlen: 24 188.170.99.0/24 maxlen: 24 188.170.100.0/24 maxlen: 24 188.170.101.0/24 maxlen: 24 188.170.102.0/24 maxlen: 24 188.170.103.0/24 maxlen: 24 188.170.104.0/24 maxlen: 24 188.170.105.0/24 maxlen: 24 188.170.106.0/24 maxlen: 24 188.170.107.0/24 maxlen: 24 188.170.108.0/24 maxlen: 24 188.170.109.0/24 maxlen: 24 188.170.110.0/24 maxlen: 24 188.170.111.0/24 maxlen: 24 188.170.112.0/24 maxlen: 24 188.170.113.0/24 maxlen: 24 188.170.114.0/24 maxlen: 24 188.170.115.0/24 maxlen: 24 188.170.116.0/24 maxlen: 24 188.170.117.0/24 maxlen: 24 188.170.118.0/24 maxlen: 24 188.170.119.0/24 maxlen: 24 188.170.120.0/24 maxlen: 24 188.170.121.0/24 maxlen: 24 188.170.122.0/24 maxlen: 24 188.170.123.0/24 maxlen: 24 188.170.124.0/24 maxlen: 24 188.170.125.0/24 maxlen: 24 188.170.126.0/24 maxlen: 24 188.170.127.0/24 maxlen: 24 195.149.111.0/24 maxlen: 24 217.115.80.0/20 maxlen: 20 217.115.80.0/24 maxlen: 24 217.115.81.0/24 maxlen: 24 217.115.91.0/24 maxlen: 24 217.115.94.0/24 maxlen: 24 2a03:d000:9004::/46 maxlen: 46 2a03:d005::/40 maxlen: 40 2a03:d005:100::/40 maxlen: 40 2a03:d005:200::/40 maxlen: 40 2a03:d005:300::/40 maxlen: 40 2a03:d005:400::/40 maxlen: 40 2a03:d005:500::/40 maxlen: 40 2a03:d005:600::/40 maxlen: 40 2a03:d005:700::/40 maxlen: 40 2a03:d005:800::/40 maxlen: 40 2a03:d005:900::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:62:28:0f:ce:6c:45:19:b2:59:cd:e9:92:19:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Validity Not Before: Jan 1 04:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cdd05fac3e48570f298babea41c1d2edafba07a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0a:8b:bd:82:9e:9a:f5:fe:80:6c:d3:9e:2e: 94:f1:d8:2b:97:8a:ec:e6:f9:a6:b0:9e:d2:21:ad: 30:67:f4:91:65:c4:9e:e9:1b:e4:4c:63:68:38:19: 12:1c:27:b4:37:60:c2:b5:9c:eb:ce:0e:cc:c0:bf: fa:95:41:ab:14:be:62:d1:af:2c:b9:a0:38:40:a2: e9:8b:98:fc:5f:9b:14:15:c9:18:63:dd:ae:32:3d: 42:11:00:7e:47:c0:a2:d8:c8:fc:39:8d:5b:51:a8: 4d:5a:25:38:72:b3:fb:2a:8e:ba:95:73:8c:7b:5b: 23:89:a9:b6:c0:ff:3e:69:36:5b:e1:4d:2d:0a:c5: 77:01:ef:75:93:31:d9:b0:39:36:87:15:fa:52:93: e0:23:a0:74:0c:73:10:93:9c:93:43:f3:21:35:5a: 33:29:2b:7e:6f:f4:80:43:f2:aa:81:f2:da:ac:08: 04:d8:d1:96:7a:4f:ef:b0:30:c9:44:da:a1:19:5b: 6f:1d:81:14:11:bc:ef:fc:2e:5b:2b:8f:80:5d:65: a2:8e:ce:b5:cc:74:37:af:bf:87:65:c6:72:59:a0: 6c:53:04:cb:e2:a7:fd:c4:f2:c5:d7:08:69:61:46: e4:e8:1b:af:3c:d1:c0:ee:f9:f4:2e:e8:9e:d8:69: 2c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:D0:5F:AC:3E:48:57:0F:29:8B:AB:EA:41:C1:D2:ED:AF:BA:07:A3 X509v3 Authority Key Identifier: keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/zdBfrD5IVw8pi6vqQcHS7a-6B6M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.173.104.0-31.173.119.255 77.233.160.0/19 78.109.120.0/23 78.109.123.0-78.109.124.255 83.169.217.0-83.169.223.255 86.109.192.0/19 178.176.96.0/21 178.176.114.0-178.176.127.255 178.178.160.0/24 188.94.168.0/21 188.170.96.0/19 195.149.111.0/24 217.115.80.0/20 IPv6: 2a03:d000:9004::/46 2a03:d005::-2a03:d005:9ff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 6a:c6:a5:45:54:74:a3:e7:7d:c0:0c:2f:6b:43:d4:89:b4:2c: f7:f3:1e:cf:37:03:ab:d1:c2:20:ce:a7:84:18:96:9f:70:ed: 3e:2c:bc:de:04:86:ec:6f:43:c1:8a:d1:5d:f7:4d:8e:f7:77: 6b:0f:26:72:ed:99:05:9a:b3:1c:2c:a6:6f:30:85:f0:db:2f: 5b:0d:86:2d:0d:e1:42:af:e9:97:c1:8a:dc:44:eb:56:74:eb: d9:9b:17:8c:07:cc:f8:94:35:d1:22:4a:c0:f9:f4:66:ee:e7: 73:e3:60:44:be:59:3a:5c:cf:66:27:57:3b:fa:de:f4:06:5f: c0:36:2c:4c:65:0e:c6:f1:7f:1c:f0:6a:38:ee:03:5a:6c:dd: 98:1f:0f:d1:aa:1f:f7:66:d9:7a:31:37:1f:b0:29:04:9b:01: 3f:15:d4:f6:1e:f2:fa:2a:99:b3:0e:1d:e5:0f:d5:9a:16:b7: f9:51:d3:bf:47:cb:9f:ec:09:0c:de:b4:da:fb:a9:fc:7f:f0: dc:7d:d6:08:40:53:3c:ea:ba:c0:bf:2d:e7:e8:e8:f4:79:05: 9c:ad:ad:31:6e:ee:63:0d:43:f2:38:29:e0:00:39:58:6a:86: 88:e6:51:d6:64:50:75:c8:a8:05:8d:46:21:fd:3b:21:80:02: 7d:90:aa:fd -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgISAZt3x2IoD85sRRmyWc3pkhk2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx Nzg1YzAwHhcNMjYwMTAxMDQxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZGQwNWZhYzNlNDg1NzBmMjk4YmFiZWE0MWMxZDJlZGFmYmEwN2EzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wqLvYKemvX+gGzTni6U8dgrl4rs 5vmmsJ7SIa0wZ/SRZcSe6RvkTGNoOBkSHCe0N2DCtZzrzg7MwL/6lUGrFL5i0a8s uaA4QKLpi5j8X5sUFckYY92uMj1CEQB+R8Ci2Mj8OY1bUahNWiU4crP7Ko66lXOM e1sjiam2wP8+aTZb4U0tCsV3Ae91kzHZsDk2hxX6UpPgI6B0DHMQk5yTQ/MhNVoz KSt+b/SAQ/KqgfLarAgE2NGWek/vsDDJRNqhGVtvHYEUEbzv/C5bK4+AXWWijs61 zHQ3r7+HZcZyWaBsUwTL4qf9xPLF1whpYUbk6BuvPNHA7vn0Luie2Gks3QIDAQAB o4ICljCCApIwHQYDVR0OBBYEFM3QX6w+SFcPKYur6kHB0u2vugejMB8GA1UdIwQY MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct ODllNTZjODBkMWQwLzEvemRCZnJENUlWdzhwaTZ2cVFjSFM3YS02QjZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGrBggrBgEFBQcBBwEB/wSBmzCBmDB0BAIAATBuMAwDBAMf rWgDBAMfrXADBAVN6aADBAFObXgwDAMEAE5tewMEAE5tfDAMAwQAU6nZAwQFU6nA AwQFVm3AAwQDsrBgMAwDBAGysHIDBAeysAADBACysqADBAO8XqgDBAW8qmADBADD lW8DBATZc1AwIAQCAAIwGgMHAioD0ACQBDAPAwUAKgPQBQMGASoD0AUIMA0GCSqG SIb3DQEBCwUAA4IBAQBqxqVFVHSj533ADC9rQ9SJtCz38x7PNwOr0cIgzqeEGJaf cO0+LLzeBIbsb0PBitFd902O93drDyZy7ZkFmrMcLKZvMIXw2y9bDYYtDeFCr+mX wYrcROtWdOvZmxeMB8z4lDXRIkrA+fRm7udz42BEvlk6XM9mJ1c7+t70Bl/ANixM ZQ7G8X8c8Go47gNabN2YHw/Rqh/3Ztl6MTcfsCkEmwE/FdT2HvL6KpmzDh3lD9Wa Frf5UdO/R8uf7AkM3rTa+6n8f/DcfdYIQFM86rrAvy3n6Oj0eQWcra0xbu5jDUPy OCngADlYaoaI5lHWZFB1yKgFjUYh/TshgAJ9kKr9 -----END CERTIFICATE-----Generated at Sun Jan 25 22:41:46 2026 by rpki-client