This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/ZrpD-HPOpkWnog8ZwPaUN_G8Qz8.roa File: ZrpD-HPOpkWnog8ZwPaUN_G8Qz8.roa (raw, json) Hash identifier: cYVKZh1myfenrYhf5mnnHt/sHZoWJT/ER0EDPjoy5XA= Subject key identifier: 66:BA:43:F8:73:CE:A6:45:A7:A2:0F:19:C0:F6:94:37:F1:BC:43:3F Certificate issuer: /CN=055618a6195f1ecacb085ced3b0a1a17c62a2cfa Certificate serial: 019BB6D9EF054436599FFE1E25DC8A2A34B5 Authority key identifier: 05:56:18:A6:19:5F:1E:CA:CB:08:5C:ED:3B:0A:1A:17:C6:2A:2C:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVYYphlfHsrLCFztOwoaF8YqLPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/ZrpD-HPOpkWnog8ZwPaUN_G8Qz8.roa Signing time: Tue 13 Jan 2026 10:14:54 +0000 ROA not before: Tue 13 Jan 2026 10:14:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201602 IP address blocks: 31.187.104.0/21 maxlen: 24 134.19.168.0/21 maxlen: 24 185.66.24.0/22 maxlen: 24 185.203.104.0/22 maxlen: 24 188.241.140.0/23 maxlen: 24 2a02:e380::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.mft rsync://rpki.ripe.net/repository/DEFAULT/BVYYphlfHsrLCFztOwoaF8YqLPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b6:d9:ef:05:44:36:59:9f:fe:1e:25:dc:8a:2a:34:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=055618a6195f1ecacb085ced3b0a1a17c62a2cfa Validity Not Before: Jan 13 10:14:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=66ba43f873cea645a7a20f19c0f69437f1bc433f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8e:24:89:2b:c6:bd:ff:0f:59:a3:1d:93:df: 04:35:a3:ac:80:5d:32:b8:02:4c:5a:36:29:1a:cf: 44:12:89:7b:db:84:98:a2:5e:1e:5a:cd:49:16:4b: d4:5a:8e:93:28:d0:11:05:bd:38:52:71:d2:a3:56: a3:0b:27:25:bc:78:0f:44:c6:32:b3:2f:58:f5:bd: 83:51:05:ba:11:9d:e8:b1:14:38:2d:4d:23:ec:26: 48:23:9c:ed:f6:c9:cc:48:2d:7a:a0:c8:4c:b1:d3: 1d:da:4b:b1:88:3a:3f:b7:0c:42:ba:e5:9d:6e:21: af:af:e2:84:29:09:f7:c3:7a:80:48:68:31:2a:92: 31:51:0a:43:ce:fa:96:3f:cb:54:bf:26:1e:e8:a9: f9:e9:95:d1:34:6a:e1:ec:93:0c:a9:70:e2:45:1a: 9f:d5:f8:22:3b:ef:8d:ad:ed:04:d1:85:d2:ee:7e: 64:92:c1:dc:c2:fd:2c:23:9d:5d:f2:fc:f2:5e:5b: 67:d8:40:81:5d:92:f5:dd:6e:7b:37:fc:bd:3d:b4: 83:a1:14:d1:1c:88:dd:8c:c2:ac:4b:46:6e:3a:03: cf:e9:2c:0d:c9:72:a8:69:c5:66:cf:dc:46:20:e8: 33:8f:f9:29:e4:61:0d:99:2f:6d:08:81:3c:de:c5: 3a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:BA:43:F8:73:CE:A6:45:A7:A2:0F:19:C0:F6:94:37:F1:BC:43:3F X509v3 Authority Key Identifier: keyid:05:56:18:A6:19:5F:1E:CA:CB:08:5C:ED:3B:0A:1A:17:C6:2A:2C:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVYYphlfHsrLCFztOwoaF8YqLPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/ZrpD-HPOpkWnog8ZwPaUN_G8Qz8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.187.104.0/21 134.19.168.0/21 185.66.24.0/22 185.203.104.0/22 188.241.140.0/23 IPv6: 2a02:e380::/29 Signature Algorithm: sha256WithRSAEncryption 8a:66:52:fa:f1:be:35:ef:35:7b:d1:de:34:a6:00:a8:b8:71: d0:b5:d4:59:e8:aa:e5:ce:65:46:0c:4d:33:14:8c:c6:fd:da: f8:16:df:c1:d9:21:11:ad:dd:95:f4:57:ac:e1:7b:8a:ec:23: 15:de:f5:24:1c:5d:5b:e1:a9:98:46:9c:d0:7f:19:7b:f6:60: 38:16:aa:a1:0b:85:7f:2b:71:f8:11:28:e8:b2:dc:58:e1:e3: 04:64:29:a0:12:35:4c:cc:e0:c7:e6:82:84:e5:61:a2:24:1a: 6a:d4:63:34:16:51:ab:fd:e5:87:c3:8d:5e:b6:93:2c:4f:62: 0e:88:14:da:30:ec:5b:db:00:f7:29:03:5f:51:51:54:60:f0: fb:b0:74:b4:7a:8e:58:47:27:93:8f:ee:76:52:d3:ad:84:e6: bf:6d:c2:0c:61:9d:34:72:fb:18:ea:5f:a3:75:fb:e7:10:5b: 4c:0a:f9:c7:28:fb:62:f8:c2:23:ce:d2:49:11:c6:f8:14:79: ca:40:52:8f:a3:68:7f:be:6f:c7:7c:5d:76:c6:fa:4b:f9:3b: 8c:8e:ee:cd:ae:97:3a:41:cc:c1:66:eb:99:cc:24:33:18:5e: c8:98:9b:37:a4:76:4f:69:8a:59:b7:0f:e5:5d:ab:b0:aa:85: ef:8e:cf:66 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZu22e8FRDZZn/4eJdyKKjS1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NTYxOGE2MTk1ZjFlY2FjYjA4NWNlZDNiMGExYTE3YzYy YTJjZmEwHhcNMjYwMTEzMTAxNDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NmJhNDNmODczY2VhNjQ1YTdhMjBmMTljMGY2OTQzN2YxYmM0MzNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzY4kiSvGvf8PWaMdk98ENaOsgF0y uAJMWjYpGs9EEol724SYol4eWs1JFkvUWo6TKNARBb04UnHSo1ajCyclvHgPRMYy sy9Y9b2DUQW6EZ3osRQ4LU0j7CZII5zt9snMSC16oMhMsdMd2kuxiDo/twxCuuWd biGvr+KEKQn3w3qASGgxKpIxUQpDzvqWP8tUvyYe6Kn56ZXRNGrh7JMMqXDiRRqf 1fgiO++Nre0E0YXS7n5kksHcwv0sI51d8vzyXltn2ECBXZL13W57N/y9PbSDoRTR HIjdjMKsS0ZuOgPP6SwNyXKoacVmz9xGIOgzj/kp5GENmS9tCIE83sU6WwIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFGa6Q/hzzqZFp6IPGcD2lDfxvEM/MB8GA1UdIwQY MBaAFAVWGKYZXx7Kywhc7TsKGhfGKiz6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlZZWXBobGZIc3JMQ0Z6dE93b2FGOFlxTFBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9lYWUzMzMtMzBjNC00M2ZmLWIyM2Qt NWFlNWJjYTZmNDhjLzEvWnJwRC1IUE9wa1dub2c4WndQYVVOX0c4UXo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9lYWUzMzMtMzBjNC00M2ZmLWIyM2QtNWFlNWJjYTZmNDhj LzEvQlZZWXBobGZIc3JMQ0Z6dE93b2FGOFlxTFBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQDH7toAwQD hhOoAwQCuUIYAwQCuctoAwQBvPGMMA0EAgACMAcDBQMqAuOAMA0GCSqGSIb3DQEB CwUAA4IBAQCKZlL68b417zV70d40pgCouHHQtdRZ6KrlzmVGDE0zFIzG/dr4Ft/B 2SERrd2V9Fes4XuK7CMV3vUkHF1b4amYRpzQfxl79mA4FqqhC4V/K3H4ESjostxY 4eMEZCmgEjVMzODH5oKE5WGiJBpq1GM0FlGr/eWHw41etpMsT2IOiBTaMOxb2wD3 KQNfUVFUYPD7sHS0eo5YRyeTj+52UtOthOa/bcIMYZ00cvsY6l+jdfvnEFtMCvnH KPti+MIjztJJEcb4FHnKQFKPo2h/vm/HfF12xvpL+TuMju7Nrpc6QczBZuuZzCQz GF7ImJs3pHZPaYpZtw/lXauwqoXvjs9m -----END CERTIFICATE-----Generated at Sun Jan 25 18:07:04 2026 by rpki-client