This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/ZyRWAC7NCFedZIOpxUg9JU9IHfM.roa File: ZyRWAC7NCFedZIOpxUg9JU9IHfM.roa (raw, json) Hash identifier: djiwnDUBrkX+JjGnUgH9ECdWKDO/0XRL0v5VkTR1fr4= Subject key identifier: 67:24:56:00:2E:CD:08:57:9D:64:83:A9:C5:48:3D:25:4F:48:1D:F3 Certificate issuer: /CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb Certificate serial: 019B8DF1D2C2539202D937E9ADD8329B0B97 Authority key identifier: 5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/ZyRWAC7NCFedZIOpxUg9JU9IHfM.roa Signing time: Mon 05 Jan 2026 11:36:34 +0000 ROA not before: Mon 05 Jan 2026 11:36:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201771 IP address blocks: 46.49.128.0/24 maxlen: 24 46.49.133.0/24 maxlen: 24 46.49.138.0/24 maxlen: 24 46.49.150.0/24 maxlen: 24 46.49.151.0/24 maxlen: 24 46.49.154.0/24 maxlen: 24 46.49.157.0/24 maxlen: 24 46.49.159.0/24 maxlen: 24 46.49.186.0/24 maxlen: 24 46.49.192.0/24 maxlen: 24 46.49.200.0/23 maxlen: 23 46.49.202.0/23 maxlen: 23 46.49.209.0/24 maxlen: 24 46.49.211.0/24 maxlen: 24 95.177.146.0/24 maxlen: 24 95.177.147.0/24 maxlen: 24 95.177.150.0/24 maxlen: 24 95.177.151.0/24 maxlen: 24 95.177.154.0/24 maxlen: 24 95.177.160.0/19 maxlen: 19 134.239.12.0/24 maxlen: 24 134.239.64.0/19 maxlen: 19 134.239.128.0/19 maxlen: 19 134.239.192.0/22 maxlen: 22 2a02:df0::/29 maxlen: 29 2a02:df1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8d:f1:d2:c2:53:92:02:d9:37:e9:ad:d8:32:9b:0b:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb Validity Not Before: Jan 5 11:36:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=672456002ecd08579d6483a9c5483d254f481df3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d0:49:22:e0:3b:72:9d:18:5c:c4:16:76:fc: 3e:43:f0:35:cd:7e:d0:9b:16:24:21:8d:92:2c:d7: 10:88:c4:1f:7a:af:c2:1f:58:5f:e3:0f:2d:3c:d5: 9e:06:9c:b6:77:89:b1:7d:57:86:df:07:ac:7a:46: 2d:ff:fa:d9:e6:44:4f:2a:e7:5a:01:ed:f6:33:bf: b2:b5:e6:b6:c3:0d:ce:66:73:cc:31:4c:24:46:87: 90:fd:1c:2c:e8:5d:c8:45:07:ce:9d:89:13:20:82: 47:e9:0a:0c:23:e4:9a:ed:7b:20:70:29:a6:75:ac: 19:06:b1:2a:dc:02:5e:56:17:3a:d4:3b:11:dc:ba: be:d7:2d:6e:8b:90:22:60:d7:8b:23:b1:cb:c6:4c: b4:f9:a3:79:4d:f1:1a:0a:e3:50:59:44:89:e7:12: 1c:1d:9d:dd:89:b7:9b:a0:4a:1c:fc:75:c8:b2:d2: 3d:e4:bf:3a:cd:9a:5e:a4:2b:ad:25:6e:cd:d6:3b: 47:53:05:2a:f7:4b:e0:38:66:2a:42:30:69:6a:26: 5a:10:4c:b3:29:2a:23:70:66:77:a8:54:61:9c:cd: 7c:f8:b6:25:7a:39:3b:fd:3f:80:9a:1e:17:84:1c: 45:3d:81:38:36:8f:38:a6:3b:3d:74:7b:44:22:b0: ce:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:24:56:00:2E:CD:08:57:9D:64:83:A9:C5:48:3D:25:4F:48:1D:F3 X509v3 Authority Key Identifier: keyid:5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/ZyRWAC7NCFedZIOpxUg9JU9IHfM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.49.128.0/24 46.49.133.0/24 46.49.138.0/24 46.49.150.0/23 46.49.154.0/24 46.49.157.0/24 46.49.159.0/24 46.49.186.0/24 46.49.192.0/24 46.49.200.0/22 46.49.209.0/24 46.49.211.0/24 95.177.146.0/23 95.177.150.0/23 95.177.154.0/24 95.177.160.0/19 134.239.12.0/24 134.239.64.0/19 134.239.128.0/19 134.239.192.0/22 IPv6: 2a02:df0::/29 Signature Algorithm: sha256WithRSAEncryption 50:25:d9:dc:85:9c:81:f2:89:c2:31:a5:4a:1d:9e:48:df:dc: 05:03:ea:16:56:36:d4:a9:6d:60:a6:87:0e:91:4b:e1:69:e1: a4:d0:67:1a:8d:22:3f:75:69:08:b7:cd:31:90:08:51:48:fc: 49:10:81:67:56:9c:de:53:04:a6:96:e3:d7:e7:5e:83:52:ef: fb:ac:32:40:b4:34:00:fd:f7:5c:c4:3e:77:fb:8f:de:c6:72: bb:4d:6b:39:dd:90:90:45:f8:ea:7f:c4:4f:a3:70:52:ec:9f: a5:2c:c2:8e:1c:bd:5d:e8:82:24:14:91:ef:33:87:ec:c6:24: 6c:b1:8e:0f:ed:a2:69:b1:55:e7:27:68:c8:06:5c:28:68:c0: 2e:1d:03:fa:21:32:13:2e:ab:1d:d6:ad:36:7c:3f:58:ab:49: d9:88:32:6b:4e:f1:b4:e3:e8:ce:9f:33:d1:49:56:6d:ec:53: 3a:50:55:f8:ab:2c:23:ec:fc:91:f3:db:9d:dc:8a:08:00:95: 16:ca:2a:08:b8:8c:e1:15:f7:44:78:c8:c1:76:1b:f9:4c:8b: b9:ed:18:95:c1:0f:43:4f:b3:72:0e:46:2b:c0:aa:7a:b3:1d: fb:6f:a7:bd:0e:91:d7:5d:d5:88:e2:0f:28:2c:8e:f2:bc:96: c7:02:7a:1d -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgISAZuN8dLCU5IC2TfprdgymwuXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhNDNlOWUyNjc5NTZlN2YyNjJjMTdmMDA4OWYwZjYwYmE3 YWJlZmIwHhcNMjYwMTA1MTEzNjM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NzI0NTYwMDJlY2QwODU3OWQ2NDgzYTljNTQ4M2QyNTRmNDgxZGYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39BJIuA7cp0YXMQWdvw+Q/A1zX7Q mxYkIY2SLNcQiMQfeq/CH1hf4w8tPNWeBpy2d4mxfVeG3wesekYt//rZ5kRPKuda Ae32M7+ytea2ww3OZnPMMUwkRoeQ/Rws6F3IRQfOnYkTIIJH6QoMI+Sa7XsgcCmm dawZBrEq3AJeVhc61DsR3Lq+1y1ui5AiYNeLI7HLxky0+aN5TfEaCuNQWUSJ5xIc HZ3dibeboEoc/HXIstI95L86zZpepCutJW7N1jtHUwUq90vgOGYqQjBpaiZaEEyz KSojcGZ3qFRhnM18+LYlejk7/T+Amh4XhBxFPYE4No84pjs9dHtEIrDOdQIDAQAB o4ICjTCCAokwHQYDVR0OBBYEFGckVgAuzQhXnWSDqcVIPSVPSB3zMB8GA1UdIwQY MBaAFFpD6eJnlW5/JiwX8AifD2C6er77MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2tQcDRtZVZibjhtTEJmd0NKOFBZTHA2dnZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8wNjQ0NGMtOWQ5Yi00YzZiLTk1MGIt NzljODk4N2E4YjFjLzEvWnlSV0FDN05DRmVkWklPcHhVZzlKVTlJSGZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8wNjQ0NGMtOWQ5Yi00YzZiLTk1MGItNzljODk4N2E4YjFj LzEvV2tQcDRtZVZibjhtTEJmd0NKOFBZTHA2dnZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGiBggrBgEFBQcBBwEB/wSBkjCBjzB+BAIAATB4AwQALjGA AwQALjGFAwQALjGKAwQBLjGWAwQALjGaAwQALjGdAwQALjGfAwQALjG6AwQALjHA AwQCLjHIAwQALjHRAwQALjHTAwQBX7GSAwQBX7GWAwQAX7GaAwQFX7GgAwQAhu8M AwQFhu9AAwQFhu+AAwQChu/AMA0EAgACMAcDBQMqAg3wMA0GCSqGSIb3DQEBCwUA A4IBAQBQJdnchZyB8onCMaVKHZ5I39wFA+oWVjbUqW1gpocOkUvhaeGk0GcajSI/ dWkIt80xkAhRSPxJEIFnVpzeUwSmluPX516DUu/7rDJAtDQA/fdcxD53+4/exnK7 TWs53ZCQRfjqf8RPo3BS7J+lLMKOHL1d6IIkFJHvM4fsxiRssY4P7aJpsVXnJ2jI BlwoaMAuHQP6ITITLqsd1q02fD9Yq0nZiDJrTvG04+jOnzPRSVZt7FM6UFX4qywj 7PyR89ud3IoIAJUWyioIuIzhFfdEeMjBdhv5TIu57RiVwQ9DT7NyDkYrwKp6sx37 b6e9DpHXXdWI4g8oLI7yvJbHAnod -----END CERTIFICATE-----Generated at Mon Jan 26 00:37:17 2026 by rpki-client