This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/1ZJlssHe1cqgH6uhHrvZ5q1B_44.roa File: 1ZJlssHe1cqgH6uhHrvZ5q1B_44.roa (raw, json) Hash identifier: a7NHnkscG6OzvwBm8NXSANt6871rXlNEhgTw4CrzMQc= Subject key identifier: D5:92:65:B2:C1:DE:D5:CA:A0:1F:AB:A1:1E:BB:D9:E6:AD:41:FF:8E Certificate issuer: /CN=a4f8436003d37602026b65531755ca8fcd31bed2 Certificate serial: 019B7B3651D56291C9FB9C06A6A911D7B171 Authority key identifier: A4:F8:43:60:03:D3:76:02:02:6B:65:53:17:55:CA:8F:CD:31:BE:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/1ZJlssHe1cqgH6uhHrvZ5q1B_44.roa Signing time: Thu 01 Jan 2026 20:18:36 +0000 ROA not before: Thu 01 Jan 2026 20:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31027 IP address blocks: 5.56.144.0/20 maxlen: 20 5.83.24.0/21 maxlen: 21 5.179.80.0/20 maxlen: 20 37.49.128.0/20 maxlen: 20 46.32.156.0/22 maxlen: 22 62.12.32.0/20 maxlen: 20 62.12.48.0/21 maxlen: 21 62.116.192.0/19 maxlen: 19 77.233.224.0/19 maxlen: 19 78.111.160.0/20 maxlen: 20 78.153.160.0/19 maxlen: 19 80.88.128.0/20 maxlen: 20 80.243.112.0/20 maxlen: 20 82.192.160.0/19 maxlen: 19 83.136.88.0/21 maxlen: 21 83.151.128.0/18 maxlen: 18 87.116.0.0/18 maxlen: 18 88.212.64.0/18 maxlen: 18 89.221.160.0/20 maxlen: 20 91.143.112.0/20 maxlen: 20 92.62.192.0/20 maxlen: 20 93.176.64.0/18 maxlen: 18 94.18.0.0/16 maxlen: 16 109.202.128.0/19 maxlen: 19 130.185.128.0/20 maxlen: 20 176.222.232.0/21 maxlen: 21 185.20.240.0/22 maxlen: 22 185.67.128.0/22 maxlen: 22 188.120.64.0/19 maxlen: 19 188.120.80.0/21 maxlen: 21 193.105.116.0/24 maxlen: 24 193.105.149.0/24 maxlen: 24 194.182.96.0/21 maxlen: 21 195.93.176.0/23 maxlen: 23 195.93.182.0/23 maxlen: 23 195.140.132.0/22 maxlen: 22 212.60.96.0/19 maxlen: 19 212.60.120.0/21 maxlen: 21 212.98.96.0/24 maxlen: 24 217.74.208.0/20 maxlen: 20 217.116.208.0/20 maxlen: 20 217.195.176.0/20 maxlen: 20 217.195.178.0/24 maxlen: 24 2a01:4f0::/32 maxlen: 32 2a02:188::/29 maxlen: 29 2a02:460::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:51:d5:62:91:c9:fb:9c:06:a6:a9:11:d7:b1:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4f8436003d37602026b65531755ca8fcd31bed2 Validity Not Before: Jan 1 20:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d59265b2c1ded5caa01faba11ebbd9e6ad41ff8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:cb:53:df:dc:ab:99:f9:d2:49:2f:89:8e:47: 20:61:01:27:57:58:3f:db:0d:56:b3:34:63:73:48: 83:b0:55:47:e2:4d:16:0d:af:5f:58:75:ac:d3:06: 39:e9:e0:9d:ec:30:31:a1:d4:1c:7f:22:e0:de:45: 00:fe:7d:6f:92:85:93:4c:2d:19:4e:be:58:7b:9d: 17:6f:7b:32:7c:45:c1:06:3e:80:bd:0c:7d:f0:aa: 76:1f:94:65:c6:51:45:f8:72:74:2b:82:2f:0a:09: e7:f1:0a:e9:0c:41:4a:78:04:97:7a:5e:59:42:45: 45:d2:89:7f:ba:b2:2b:1a:6d:d0:e1:75:49:e0:7d: 85:7b:8e:f4:6d:b7:39:00:94:ba:b1:8d:78:86:c8: 50:55:2f:42:19:a2:59:0b:7b:33:26:5f:9c:74:4b: c7:65:05:2a:09:2c:ef:19:23:07:07:0a:1d:22:a6: 97:75:f5:5c:37:4e:2a:95:04:1e:77:8c:89:9a:44: c7:f1:2c:fa:5d:88:ed:bf:7f:c7:a1:e3:1d:d5:76: 38:c7:2d:bb:16:c9:f1:1e:5f:aa:36:db:65:5d:8b: a1:69:dd:c6:2e:b5:01:e7:03:3c:86:25:49:0a:5c: 62:8f:a1:48:ec:69:2d:61:15:09:56:93:aa:20:88: 3a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:92:65:B2:C1:DE:D5:CA:A0:1F:AB:A1:1E:BB:D9:E6:AD:41:FF:8E X509v3 Authority Key Identifier: keyid:A4:F8:43:60:03:D3:76:02:02:6B:65:53:17:55:CA:8F:CD:31:BE:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/1ZJlssHe1cqgH6uhHrvZ5q1B_44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.56.144.0/20 5.83.24.0/21 5.179.80.0/20 37.49.128.0/20 46.32.156.0/22 62.12.32.0-62.12.55.255 62.116.192.0/19 77.233.224.0/19 78.111.160.0/20 78.153.160.0/19 80.88.128.0/20 80.243.112.0/20 82.192.160.0/19 83.136.88.0/21 83.151.128.0/18 87.116.0.0/18 88.212.64.0/18 89.221.160.0/20 91.143.112.0/20 92.62.192.0/20 93.176.64.0/18 94.18.0.0/16 109.202.128.0/19 130.185.128.0/20 176.222.232.0/21 185.20.240.0/22 185.67.128.0/22 188.120.64.0/19 193.105.116.0/24 193.105.149.0/24 194.182.96.0/21 195.93.176.0/23 195.93.182.0/23 195.140.132.0/22 212.60.96.0/19 212.98.96.0/24 217.74.208.0/20 217.116.208.0/20 217.195.176.0/20 IPv6: 2a01:4f0::/32 2a02:188::/29 2a02:460::/32 Signature Algorithm: sha256WithRSAEncryption 5f:db:51:09:e7:d7:c2:07:d2:91:36:e5:49:6a:41:81:08:dc: dc:db:71:d1:ae:b7:27:f5:da:f6:f8:07:4b:92:5b:e4:55:f9: 53:d1:98:e4:aa:1d:74:b4:af:25:58:f3:19:59:f1:81:25:be: e1:50:e9:62:a6:06:21:7e:68:1f:bd:64:d6:27:6c:8d:d3:23: df:85:d8:92:13:3f:8e:58:3e:be:65:e4:86:4a:49:2e:70:7a: 34:18:23:4f:2b:a3:88:c5:9e:36:69:78:0f:60:ce:27:88:06: 3d:a9:1e:17:c7:48:20:08:4d:ec:f1:87:96:c8:93:0c:7f:06: 9d:0f:17:5c:bb:91:8e:b9:3b:f5:75:89:e0:7c:45:48:b3:73: 26:4b:f5:6e:ce:99:36:72:c4:5e:ad:5c:c7:a8:17:f4:3f:38: 4c:a8:46:22:24:74:f0:d2:bf:7a:ba:af:cc:95:86:e8:ff:7f: 78:99:07:20:84:cc:e9:e6:bf:19:af:18:f6:cc:0c:29:d4:69: 3b:50:4c:34:27:00:19:e9:06:a7:0e:a3:e6:36:0d:6a:b2:0a: db:2f:27:67:d0:c4:a8:64:cb:3c:a7:04:f0:48:4d:06:6e:ad: ac:b6:b9:ab:57:4a:ea:10:60:46:94:ff:4b:7d:c8:75:60:18: c6:9f:3d:35 -----BEGIN CERTIFICATE----- MIIGDTCCBPWgAwIBAgISAZt7NlHVYpHJ+5wGpqkR17FxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0Zjg0MzYwMDNkMzc2MDIwMjZiNjU1MzE3NTVjYThmY2Qz MWJlZDIwHhcNMjYwMTAxMjAxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTkyNjViMmMxZGVkNWNhYTAxZmFiYTExZWJiZDllNmFkNDFmZjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8tT39yrmfnSSS+JjkcgYQEnV1g/ 2w1WszRjc0iDsFVH4k0WDa9fWHWs0wY56eCd7DAxodQcfyLg3kUA/n1vkoWTTC0Z Tr5Ye50Xb3syfEXBBj6AvQx98Kp2H5RlxlFF+HJ0K4IvCgnn8QrpDEFKeASXel5Z QkVF0ol/urIrGm3Q4XVJ4H2Fe470bbc5AJS6sY14hshQVS9CGaJZC3szJl+cdEvH ZQUqCSzvGSMHBwodIqaXdfVcN04qlQQed4yJmkTH8Sz6XYjtv3/HoeMd1XY4xy27 FsnxHl+qNttlXYuhad3GLrUB5wM8hiVJClxij6FI7GktYRUJVpOqIIg6bwIDAQAB o4IDGTCCAxUwHQYDVR0OBBYEFNWSZbLB3tXKoB+roR672eatQf+OMB8GA1UdIwQY MBaAFKT4Q2AD03YCAmtlUxdVyo/NMb7SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFBoRFlBUFRkZ0lDYTJWVEYxWEtqODB4dnRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS81MTU2MDgtNTAxMi00YTQwLWIzMjQt MjdiZjgzY2RlZDZiLzEvMVpKbHNzSGUxY3FnSDZ1aEhydlo1cTFCXzQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS81MTU2MDgtNTAxMi00YTQwLWIzMjQtMjdiZjgzY2RlZDZi LzEvcFBoRFlBUFRkZ0lDYTJWVEYxWEtqODB4dnRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBLQYIKwYBBQUHAQcBAf8EggEcMIIBGDCB+AQCAAEwgfED BAQFOJADBAMFUxgDBAQFs1ADBAQlMYADBAIuIJwwDAMEBT4MIAMEAz4MMAMEBT50 wAMEBU3p4AMEBE5voAMEBU6ZoAMEBFBYgAMEBFDzcAMEBVLAoAMEA1OIWAMEBlOX gAMEBld0AAMEBljUQAMEBFndoAMEBFuPcAMEBFw+wAMEBl2wQAMDAF4SAwQFbcqA AwQEgrmAAwQDsN7oAwQCuRTwAwQCuUOAAwQFvHhAAwQAwWl0AwQAwWmVAwQDwrZg AwQBw12wAwQBw122AwQCw4yEAwQF1DxgAwQA1GJgAwQE2UrQAwQE2XTQAwQE2cOw MBsEAgACMBUDBQAqAQTwAwUDKgIBiAMFACoCBGAwDQYJKoZIhvcNAQELBQADggEB AF/bUQnn18IH0pE25UlqQYEI3NzbcdGutyf12vb4B0uSW+RV+VPRmOSqHXS0ryVY 8xlZ8YElvuFQ6WKmBiF+aB+9ZNYnbI3TI9+F2JITP45YPr5l5IZKSS5wejQYI08r o4jFnjZpeA9gzieIBj2pHhfHSCAITezxh5bIkwx/Bp0PF1y7kY65O/V1ieB8RUiz cyZL9W7OmTZyxF6tXMeoF/Q/OEyoRiIkdPDSv3q6r8yVhuj/f3iZByCEzOnmvxmv GPbMDCnUaTtQTDQnABnpBqcOo+Y2DWqyCtsvJ2fQxKhkyzynBPBITQZuray2uatX SuoQYEaU/0t9yHVgGMafPTU= -----END CERTIFICATE-----Generated at Mon Jan 26 00:25:57 2026 by rpki-client