This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/ZbEVlOlPibB1JH7syaSKIrTo-j4.roa File: ZbEVlOlPibB1JH7syaSKIrTo-j4.roa (raw, json) Hash identifier: 4uDEaVZMxo1TXHVXgG3ztPEE1OCkRAmIJn2VyL/FjAA= Subject key identifier: 65:B1:15:94:E9:4F:89:B0:75:24:7E:EC:C9:A4:8A:22:B4:E8:FA:3E Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819 Certificate serial: 019B7A5B0A96213B3A1D6A9498E34A6C030B Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/ZbEVlOlPibB1JH7syaSKIrTo-j4.roa Signing time: Thu 01 Jan 2026 16:19:05 +0000 ROA not before: Thu 01 Jan 2026 16:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44395 IP address blocks: 5.77.128.0/17 maxlen: 24 37.157.209.0/24 maxlen: 24 37.157.210.0/23 maxlen: 23 37.157.210.0/24 maxlen: 24 37.157.212.0/24 maxlen: 24 37.157.213.0/24 maxlen: 24 37.157.214.0/24 maxlen: 24 37.157.215.0/24 maxlen: 24 37.157.216.0/24 maxlen: 24 37.157.217.0/24 maxlen: 24 37.157.218.0/24 maxlen: 24 37.157.219.0/24 maxlen: 24 37.157.220.0/24 maxlen: 24 37.157.221.0/24 maxlen: 24 37.157.222.0/24 maxlen: 24 37.157.223.0/24 maxlen: 24 37.252.64.0/19 maxlen: 24 46.36.112.0/20 maxlen: 24 46.162.192.0/18 maxlen: 24 46.241.128.0/17 maxlen: 24 81.16.0.0/20 maxlen: 24 82.199.192.0/21 maxlen: 24 92.43.136.0/21 maxlen: 24 92.43.136.0/22 maxlen: 24 92.43.140.0/22 maxlen: 24 109.75.34.0/23 maxlen: 24 109.75.36.0/22 maxlen: 24 109.75.40.0/21 maxlen: 24 141.136.64.0/19 maxlen: 24 178.78.128.0/18 maxlen: 24 185.59.68.0/22 maxlen: 24 185.86.195.0/24 maxlen: 24 188.115.192.0/18 maxlen: 24 212.34.224.0/19 maxlen: 24 212.34.232.0/21 maxlen: 24 212.34.240.0/20 maxlen: 24 212.34.240.0/21 maxlen: 24 2a00:cc40::/29 maxlen: 48 2a00:cc40::/32 maxlen: 32 2a00:cc40::/48 maxlen: 48 2a01:4a00::/32 maxlen: 32 2a03:1080::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:0a:96:21:3b:3a:1d:6a:94:98:e3:4a:6c:03:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819 Validity Not Before: Jan 1 16:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=65b11594e94f89b075247eecc9a48a22b4e8fa3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ba:d9:24:68:db:cc:24:3a:90:a3:61:2d:c4: 44:37:bc:de:5f:10:7a:39:74:8f:48:eb:ed:e9:6f: 71:5d:49:d5:1c:5a:35:e2:9c:18:b5:82:25:0a:1e: 29:49:29:3a:53:fb:fa:7c:69:f9:95:1b:68:43:45: 17:6c:4a:be:e2:d7:f0:ac:7a:dc:39:67:f7:0f:41: ae:f7:08:8c:e9:24:49:bd:b1:ad:73:d6:f6:f3:6a: 15:0d:db:94:4b:88:4b:ea:4c:2e:1e:e4:9d:88:9e: af:e4:c2:84:37:e2:16:f9:84:0a:18:b1:3e:82:49: b1:d9:7d:d0:be:7e:bc:79:dd:63:28:26:08:22:5c: 88:ce:ac:85:dd:5c:4b:65:d9:31:8d:93:5c:a0:85: 3c:b6:55:0c:79:1a:3f:44:c4:08:71:2e:91:e2:e5: 71:da:80:da:75:e9:a7:82:e2:b0:1c:35:0e:88:a2: a8:1c:d3:23:d5:d2:e3:6c:68:5f:60:f0:08:32:56: 26:0f:ac:d1:5e:48:5f:29:30:99:23:29:79:fd:8f: b2:25:80:ca:f1:49:c8:26:2a:8c:0e:e0:a2:ce:97: 35:bc:59:5e:07:e7:2a:f4:68:90:d7:5d:47:c8:a0: eb:c0:3b:0c:7b:09:63:e1:fd:61:13:8c:fa:e8:3b: 85:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:B1:15:94:E9:4F:89:B0:75:24:7E:EC:C9:A4:8A:22:B4:E8:FA:3E X509v3 Authority Key Identifier: keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/ZbEVlOlPibB1JH7syaSKIrTo-j4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.77.128.0/17 37.157.209.0-37.157.223.255 37.252.64.0/19 46.36.112.0/20 46.162.192.0/18 46.241.128.0/17 81.16.0.0/20 82.199.192.0/21 92.43.136.0/21 109.75.34.0-109.75.47.255 141.136.64.0/19 178.78.128.0/18 185.59.68.0/22 185.86.195.0/24 188.115.192.0/18 212.34.224.0/19 IPv6: 2a00:cc40::/29 2a01:4a00::/32 2a03:1080::/32 Signature Algorithm: sha256WithRSAEncryption 83:6e:dd:92:00:b1:cd:b3:e5:ca:18:1b:90:fe:31:d6:e9:e2: 6f:bc:57:8e:d8:da:af:fd:60:f9:6e:48:fa:bc:0a:53:66:f9: 4a:01:24:8a:4f:bf:0f:ee:b6:67:dd:ff:fb:53:c4:c5:71:f3: 90:54:66:cb:d0:f1:15:b6:e2:d4:78:24:c5:e5:61:a2:9e:b8: 89:7f:5d:5d:9e:a9:d1:e3:24:cb:45:05:32:a3:b8:69:6d:c3: 4d:90:8a:b5:11:72:01:05:f1:bd:78:ab:a6:27:bf:9e:62:8e: f8:d3:30:87:c8:c9:13:74:6e:15:e3:df:a5:9a:34:24:37:8f: c9:ea:16:c0:ba:80:f5:62:25:b7:fb:ca:c9:98:cb:51:f4:9e: a7:e5:40:9a:15:96:55:b8:7b:d1:12:59:c7:a5:77:40:ac:dd: 85:ad:de:9d:dd:a9:23:2b:44:57:b8:f9:86:3a:41:7b:9d:0c: 0d:dd:95:2d:c4:03:42:0b:92:f0:cf:74:98:a3:54:9d:00:36: 82:d2:3e:b8:06:d9:64:02:2a:55:55:e2:eb:5a:3f:a8:68:12: 6a:07:ae:21:b3:97:7a:98:0b:e2:7e:a4:98:a5:f9:83:84:7c: f7:6b:92:22:ae:c5:83:e1:bb:ad:8e:1b:0c:70:e5:80:27:ed: a9:d9:8e:ef -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt6WwqWITs6HWqUmONKbAMLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjOTBjMzU2ZTI4NjRmNDM4OTQ4NTc0NDM1NTVkOGI1YzAz NTI4MTkwHhcNMjYwMTAxMTYxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NWIxMTU5NGU5NGY4OWIwNzUyNDdlZWNjOWE0OGEyMmI0ZThmYTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4rrZJGjbzCQ6kKNhLcREN7zeXxB6 OXSPSOvt6W9xXUnVHFo14pwYtYIlCh4pSSk6U/v6fGn5lRtoQ0UXbEq+4tfwrHrc OWf3D0Gu9wiM6SRJvbGtc9b282oVDduUS4hL6kwuHuSdiJ6v5MKEN+IW+YQKGLE+ gkmx2X3Qvn68ed1jKCYIIlyIzqyF3VxLZdkxjZNcoIU8tlUMeRo/RMQIcS6R4uVx 2oDademnguKwHDUOiKKoHNMj1dLjbGhfYPAIMlYmD6zRXkhfKTCZIyl5/Y+yJYDK 8UnIJiqMDuCizpc1vFleB+cq9GiQ111HyKDrwDsMewlj4f1hE4z66DuFrQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFGWxFZTpT4mwdSR+7MmkiiK06Po+MB8GA1UdIwQY MBaAFAyQw1bihk9DiUhXRDVV2LXANSgZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDct ZTM3OTlhZGU5ZGZlLzEvWmJFVmxPbFBpYkIxSkg3c3lhU0tJclRvLWo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDctZTM3OTlhZGU5ZGZl LzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGoBggrBgEFBQcBBwEB/wSBmDCBlTB2BAIAATBwAwQHBU2A MAwDBAAlndEDBAUlncADBAUl/EADBAQuJHADBAYuosADBAcu8YADBARREAADBANS x8ADBANcK4gwDAMEAW1LIgMEBG1LIAMEBY2IQAMEBrJOgAMEArk7RAMEALlWwwME BrxzwAMEBdQi4DAbBAIAAjAVAwUDKgDMQAMFACoBSgADBQAqAxCAMA0GCSqGSIb3 DQEBCwUAA4IBAQCDbt2SALHNs+XKGBuQ/jHW6eJvvFeO2Nqv/WD5bkj6vApTZvlK ASSKT78P7rZn3f/7U8TFcfOQVGbL0PEVtuLUeCTF5WGinriJf11dnqnR4yTLRQUy o7hpbcNNkIq1EXIBBfG9eKumJ7+eYo740zCHyMkTdG4V49+lmjQkN4/J6hbAuoD1 YiW3+8rJmMtR9J6n5UCaFZZVuHvRElnHpXdArN2Frd6d3akjK0RXuPmGOkF7nQwN 3ZUtxANCC5Lwz3SYo1SdADaC0j64BtlkAipVVeLrWj+oaBJqB64hs5d6mAvifqSY pfmDhHz3a5IirsWD4butjhsMcOWAJ+2p2Y7v -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:21 2026 by rpki-client