This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/Zp9zRiO75kWzExNlPmmXxiSiVB8.roa File: Zp9zRiO75kWzExNlPmmXxiSiVB8.roa (raw, json) Hash identifier: v83of7u5H6aL+AuW3nStEeiW6yeJITq4WVe1dcQEc/8= Subject key identifier: 66:9F:73:46:23:BB:E6:45:B3:13:13:65:3E:69:97:C6:24:A2:54:1F Certificate issuer: /CN=2ef957aba2ef00352850e202464c71d33ca81448 Certificate serial: 019B7758879EF34C38213B67BDB75DDA2CF6 Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/Zp9zRiO75kWzExNlPmmXxiSiVB8.roa Signing time: Thu 01 Jan 2026 02:17:29 +0000 ROA not before: Thu 01 Jan 2026 02:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2470 IP address blocks: 193.50.206.0/24 maxlen: 24 193.51.11.0/24 maxlen: 24 193.51.113.0/24 maxlen: 24 193.51.115.0/24 maxlen: 24 194.167.103.0/24 maxlen: 24 194.167.142.0/24 maxlen: 24 194.199.66.0/24 maxlen: 24 194.199.67.0/24 maxlen: 24 194.199.68.0/24 maxlen: 24 194.199.69.0/24 maxlen: 24 194.199.70.0/24 maxlen: 24 194.199.71.0/24 maxlen: 24 194.199.72.0/24 maxlen: 24 194.199.73.0/24 maxlen: 24 194.199.78.0/24 maxlen: 24 195.83.188.0/24 maxlen: 24 195.98.231.0/24 maxlen: 24 195.98.232.0/24 maxlen: 24 195.220.149.0/24 maxlen: 24 195.220.150.0/24 maxlen: 24 195.220.151.0/24 maxlen: 24 2001:660:8018::/48 maxlen: 48 2001:660:8019::/48 maxlen: 48 2001:660:801a::/48 maxlen: 48 2001:661:8000::/35 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:87:9e:f3:4c:38:21:3b:67:bd:b7:5d:da:2c:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448 Validity Not Before: Jan 1 02:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=669f734623bbe645b31313653e6997c624a2541f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:95:bf:ed:02:45:ce:28:6a:a3:3d:8a:92:5b: 01:50:93:da:f9:a5:ec:2c:d2:75:8c:b2:47:46:58: 7a:00:50:bd:77:79:cb:f8:c3:c9:07:77:c5:41:fd: 79:62:eb:34:ac:c6:dd:73:1d:63:10:f1:46:40:27: 44:cb:1f:2d:8d:da:a5:f7:69:c7:4a:6b:54:4b:cb: db:c3:47:f5:5a:c4:76:8f:27:0d:1c:3e:68:59:0f: a4:11:38:eb:d9:fb:c6:a6:e5:60:a8:98:f8:bc:a6: db:d6:4c:60:54:91:1a:f5:c4:d8:0b:c1:12:92:87: 09:4d:39:fe:70:fd:5d:82:a9:ce:e6:b6:2e:55:fb: 2f:83:ce:b1:e8:6d:1e:f1:b7:3e:f0:52:45:d7:a8: 6f:54:52:bf:99:58:b8:1b:85:7b:8e:fe:25:65:07: 0f:4b:86:cb:2d:38:60:23:81:d6:16:66:f2:7a:fe: 24:02:40:6e:e8:f0:41:1d:50:61:0f:81:1f:0d:95: 87:a8:46:40:94:e1:4b:6f:35:1c:97:bb:b3:97:ad: 7b:0f:a1:25:41:38:37:4a:59:9e:97:a9:e4:a5:43: a3:64:17:48:28:51:b0:e5:41:d4:7d:04:2a:d8:6e: 5e:8a:f2:38:26:3d:e8:e1:21:c1:db:4a:33:f4:95: 01:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:9F:73:46:23:BB:E6:45:B3:13:13:65:3E:69:97:C6:24:A2:54:1F X509v3 Authority Key Identifier: keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/Zp9zRiO75kWzExNlPmmXxiSiVB8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.50.206.0/24 193.51.11.0/24 193.51.113.0/24 193.51.115.0/24 194.167.103.0/24 194.167.142.0/24 194.199.66.0-194.199.73.255 194.199.78.0/24 195.83.188.0/24 195.98.231.0-195.98.232.255 195.220.149.0-195.220.151.255 IPv6: 2001:660:8018::-2001:660:801a:ffff:ffff:ffff:ffff:ffff 2001:661:8000::/35 Signature Algorithm: sha256WithRSAEncryption 45:76:8b:61:ad:8f:48:4e:49:2b:69:0a:d9:64:c6:50:fd:df: f1:dc:9d:88:54:52:f5:2c:24:ec:b1:cb:f7:f9:45:86:3b:b6: c4:b4:6c:b9:56:6f:43:04:65:98:e4:88:89:08:77:e3:a1:17: d6:d0:f0:62:e8:fd:35:19:7a:2c:de:8c:30:7b:c9:d7:e5:a4: 1b:45:0c:4b:1a:f2:ac:a7:fa:82:86:bc:fb:77:c6:3d:dd:e9: 58:67:e8:76:e3:0d:02:24:ed:ed:fd:9c:90:e4:a4:64:f7:0c: e7:3c:00:5b:28:03:0c:30:31:af:44:40:83:97:3f:ba:d5:a9: b5:37:57:3e:ef:5b:c7:e3:39:fc:6d:60:49:b8:2f:97:4e:d9: 55:94:54:c3:59:01:dd:33:7c:53:f2:bd:d3:dd:75:50:02:66: d0:ef:4c:2a:4b:d0:bb:4b:67:27:5b:a8:20:97:76:d1:5e:6f: fe:18:a9:d3:e4:21:5b:b9:fc:9c:eb:22:bb:58:f8:e2:f5:06: 2e:36:67:de:25:38:09:c9:cf:a5:c7:89:78:7f:6e:22:bd:6a: be:81:82:aa:ba:44:36:f2:a2:eb:f6:45:37:c6:4d:d7:4a:ca: 71:7f:e7:31:2c:2b:c9:23:0d:36:77:37:cd:c9:2e:26:72:7f: 8c:ec:82:41 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt3WIee80w4ITtnvbdd2iz2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZjk1N2FiYTJlZjAwMzUyODUwZTIwMjQ2NGM3MWQzM2Nh ODE0NDgwHhcNMjYwMTAxMDIxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjlmNzM0NjIzYmJlNjQ1YjMxMzEzNjUzZTY5OTdjNjI0YTI1NDFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JW/7QJFzihqoz2KklsBUJPa+aXs LNJ1jLJHRlh6AFC9d3nL+MPJB3fFQf15Yus0rMbdcx1jEPFGQCdEyx8tjdql92nH SmtUS8vbw0f1WsR2jycNHD5oWQ+kETjr2fvGpuVgqJj4vKbb1kxgVJEa9cTYC8ES kocJTTn+cP1dgqnO5rYuVfsvg86x6G0e8bc+8FJF16hvVFK/mVi4G4V7jv4lZQcP S4bLLThgI4HWFmbyev4kAkBu6PBBHVBhD4EfDZWHqEZAlOFLbzUcl7uzl617D6El QTg3Slmel6nkpUOjZBdIKFGw5UHUfQQq2G5eivI4Jj3o4SHB20oz9JUB8QIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFGafc0Yju+ZFsxMTZT5pl8YkolQfMB8GA1UdIwQY MBaAFC75V6ui7wA1KFDiAkZMcdM8qBRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYt MDRhMjdjNGQ1NDUzLzEvWnA5elJpTzc1a1d6RXhObFBtbVh4aVNpVkI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYtMDRhMjdjNGQ1NDUz LzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGZBggrBgEFBQcBBwEB/wSBiTCBhjBgBAIAATBaAwQAwTLO AwQAwTMLAwQAwTNxAwQAwTNzAwQAwqdnAwQAwqeOMAwDBAHCx0IDBAHCx0gDBADC x04DBADDU7wwDAMEAMNi5wMEAMNi6DAMAwQAw9yVAwQDw9yQMCIEAgACMBwwEgMH AyABBmCAGAMHACABBmCAGgMGBSABBmGAMA0GCSqGSIb3DQEBCwUAA4IBAQBFdoth rY9ITkkraQrZZMZQ/d/x3J2IVFL1LCTsscv3+UWGO7bEtGy5Vm9DBGWY5IiJCHfj oRfW0PBi6P01GXos3owwe8nX5aQbRQxLGvKsp/qChrz7d8Y93elYZ+h24w0CJO3t /ZyQ5KRk9wznPABbKAMMMDGvRECDlz+61am1N1c+71vH4zn8bWBJuC+XTtlVlFTD WQHdM3xT8r3T3XVQAmbQ70wqS9C7S2cnW6ggl3bRXm/+GKnT5CFbufyc6yK7WPji 9QYuNmfeJTgJyc+lx4l4f24ivWq+gYKqukQ28qLr9kU3xk3XSspxf+cxLCvJIw02 dzfNyS4mcn+M7IJB -----END CERTIFICATE-----Generated at Mon Jan 26 07:57:48 2026 by rpki-client