This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/ZnDZ3THvpz_YPmkdCKWJkIytQc8.roa File: ZnDZ3THvpz_YPmkdCKWJkIytQc8.roa (raw, json) Hash identifier: l2f5rqMmluOxA2njyi5sVPThn4rwssZmSYySxc1db4k= Subject key identifier: 66:70:D9:DD:31:EF:A7:3F:D8:3E:69:1D:08:A5:89:90:8C:AD:41:CF Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Certificate serial: 019B76EB0A7977296AB8E30C5373475BF974 Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/ZnDZ3THvpz_YPmkdCKWJkIytQc8.roa Signing time: Thu 01 Jan 2026 00:17:53 +0000 ROA not before: Thu 01 Jan 2026 00:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48146 IP address blocks: 45.86.224.0/22 maxlen: 24 45.136.32.0/22 maxlen: 24 81.22.232.0/22 maxlen: 24 92.118.248.0/22 maxlen: 24 94.103.244.0/22 maxlen: 24 151.237.59.0/24 maxlen: 24 151.237.131.0/24 maxlen: 24 185.25.52.0/22 maxlen: 24 185.87.63.0/24 maxlen: 24 185.148.52.0/22 maxlen: 24 185.189.225.0/24 maxlen: 24 185.189.226.0/23 maxlen: 24 185.192.72.0/22 maxlen: 24 185.192.116.0/22 maxlen: 24 185.195.36.0/22 maxlen: 24 185.198.108.0/22 maxlen: 24 185.209.8.0/22 maxlen: 24 185.210.60.0/22 maxlen: 24 185.210.72.0/22 maxlen: 24 185.240.22.0/24 maxlen: 24 185.240.23.0/24 maxlen: 24 185.255.72.0/22 maxlen: 24 188.240.236.0/22 maxlen: 24 193.228.194.0/23 maxlen: 24 193.228.204.0/23 maxlen: 24 194.36.104.0/22 maxlen: 24 194.147.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:0a:79:77:29:6a:b8:e3:0c:53:73:47:5b:f9:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Validity Not Before: Jan 1 00:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6670d9dd31efa73fd83e691d08a589908cad41cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:be:74:11:09:a0:1a:65:d7:c2:08:ca:96:50: f1:75:61:ad:8b:a0:03:9f:09:b2:9a:5d:52:65:33: 6d:76:d6:b6:58:5b:e5:3e:5f:01:23:9b:e9:b8:07: a5:c5:7f:22:e5:58:7f:03:d8:c3:4d:42:64:db:75: 8a:16:b2:89:e5:86:19:f2:89:7e:39:d8:e3:82:d5: f0:cd:ec:bb:2d:10:52:7c:e7:dd:3c:f2:65:dd:b8: e0:5c:2d:9c:23:07:ed:de:bf:67:f3:1f:e8:aa:b9: 32:26:36:e2:94:da:5c:44:a6:1f:dd:58:a1:40:f9: 84:6b:2f:bb:23:e2:6c:30:32:b5:8b:4c:2f:89:ac: 65:e4:13:24:f9:95:e3:b4:d2:17:db:94:ab:f2:2e: 5a:4d:47:6f:54:bb:1e:41:e6:53:9a:4d:2c:d2:a2: c6:92:9a:c8:b3:60:97:8b:c0:c4:1e:d3:67:f6:48: 11:85:b3:6a:ad:81:da:db:a3:bc:60:3f:6f:13:15: a5:83:24:42:e9:ec:4a:30:42:84:34:94:b4:33:8a: 99:1d:8b:9a:84:bc:5d:b8:2a:71:05:30:c8:b4:df: aa:6c:0b:2c:85:26:eb:26:79:7b:71:3b:e2:3e:b4: 95:19:92:1d:20:2c:22:b6:8f:4b:14:52:3b:fb:33: f5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:70:D9:DD:31:EF:A7:3F:D8:3E:69:1D:08:A5:89:90:8C:AD:41:CF X509v3 Authority Key Identifier: keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/ZnDZ3THvpz_YPmkdCKWJkIytQc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.86.224.0/22 45.136.32.0/22 81.22.232.0/22 92.118.248.0/22 94.103.244.0/22 151.237.59.0/24 151.237.131.0/24 185.25.52.0/22 185.87.63.0/24 185.148.52.0/22 185.189.225.0-185.189.227.255 185.192.72.0/22 185.192.116.0/22 185.195.36.0/22 185.198.108.0/22 185.209.8.0/22 185.210.60.0/22 185.210.72.0/22 185.240.22.0/23 185.255.72.0/22 188.240.236.0/22 193.228.194.0/23 193.228.204.0/23 194.36.104.0/22 194.147.144.0/22 Signature Algorithm: sha256WithRSAEncryption 40:9b:81:c3:ea:6e:47:c3:8d:5d:eb:1e:11:61:8f:4a:5d:26: 22:c9:f6:dd:6f:3e:3d:a2:06:a8:ed:ae:e9:ed:8f:75:08:be: af:a0:fa:2f:ec:39:a3:60:ab:2b:8b:ae:20:7a:b4:35:45:ff: 11:09:ac:4e:3f:dd:90:b8:25:f5:ce:ab:d2:41:45:8d:9f:ba: 8b:84:16:40:8d:ec:ff:5e:e0:36:b4:e5:a1:f2:96:b4:97:0c: d2:f8:b7:dc:35:8f:f6:16:c7:45:e8:ef:6e:c6:f6:72:ec:ec: 42:89:02:94:0e:49:a9:6e:d2:bd:6f:77:22:b4:e8:29:fb:9f: 57:26:91:85:48:f1:87:a4:b1:85:e3:33:52:aa:16:4b:8b:d3: 13:96:f4:48:b7:37:2c:f0:94:a6:73:d3:ac:4c:31:69:10:dd: 0e:4e:70:43:10:e3:77:3c:d2:3c:b1:f6:97:9e:02:bf:54:6e: b1:16:09:1d:5d:01:61:c9:32:93:43:1d:73:44:3a:2e:3b:9c: fc:9e:91:6d:a8:93:de:73:f2:34:10:fe:cb:f6:d3:27:37:4e: aa:fb:f4:34:94:d2:39:03:fe:62:fe:aa:a6:a2:1b:b4:f1:28: 44:d9:17:c8:b5:60:76:ea:16:a7:3d:fb:df:03:31:f1:cf:f6: 76:8d:94:c6 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt26wp5dylquOMMU3NHW/l0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4 YjZiNzUwHhcNMjYwMTAxMDAxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjcwZDlkZDMxZWZhNzNmZDgzZTY5MWQwOGE1ODk5MDhjYWQ0MWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsb50EQmgGmXXwgjKllDxdWGti6AD nwmyml1SZTNtdta2WFvlPl8BI5vpuAelxX8i5Vh/A9jDTUJk23WKFrKJ5YYZ8ol+ OdjjgtXwzey7LRBSfOfdPPJl3bjgXC2cIwft3r9n8x/oqrkyJjbilNpcRKYf3Vih QPmEay+7I+JsMDK1i0wviaxl5BMk+ZXjtNIX25Sr8i5aTUdvVLseQeZTmk0s0qLG kprIs2CXi8DEHtNn9kgRhbNqrYHa26O8YD9vExWlgyRC6exKMEKENJS0M4qZHYua hLxduCpxBTDItN+qbAsshSbrJnl7cTviPrSVGZIdICwito9LFFI7+zP1CwIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFGZw2d0x76c/2D5pHQiliZCMrUHPMB8GA1UdIwQY MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt Yzc5MTRhYjY0MjczLzEvWm5EWjNUSHZwel9ZUG1rZENLV0prSXl0UWM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG7BggrBgEFBQcBBwEB/wSBqzCBqDCBpQQCAAEwgZ4DBAIt VuADBAItiCADBAJRFugDBAJcdvgDBAJeZ/QDBACX7TsDBACX7YMDBAK5GTQDBAC5 Vz8DBAK5lDQwDAMEALm94QMEArm94AMEArnASAMEArnAdAMEArnDJAMEArnGbAME ArnRCAMEArnSPAMEArnSSAMEAbnwFgMEArn/SAMEArzw7AMEAcHkwgMEAcHkzAME AsIkaAMEAsKTkDANBgkqhkiG9w0BAQsFAAOCAQEAQJuBw+puR8ONXeseEWGPSl0m Isn23W8+PaIGqO2u6e2PdQi+r6D6L+w5o2CrK4uuIHq0NUX/EQmsTj/dkLgl9c6r 0kFFjZ+6i4QWQI3s/17gNrTlofKWtJcM0vi33DWP9hbHRejvbsb2cuzsQokClA5J qW7SvW93IrToKfufVyaRhUjxh6SxheMzUqoWS4vTE5b0SLc3LPCUpnPTrEwxaRDd Dk5wQxDjdzzSPLH2l54Cv1RusRYJHV0BYckyk0Mdc0Q6Ljuc/J6RbaiT3nPyNBD+ y/bTJzdOqvv0NJTSOQP+Yv6qpqIbtPEoRNkXyLVgduoWpz373wMx8c/2do2Uxg== -----END CERTIFICATE-----Generated at Sun Jan 25 22:14:55 2026 by rpki-client