This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/zaxUFs8PKz63DcmFdYraCxRfiEE.roa File: zaxUFs8PKz63DcmFdYraCxRfiEE.roa (raw, json) Hash identifier: 4CQKxUpCXQe15Tn5oz096GbfGTrdGscUPd0TFy2Ky9E= Subject key identifier: CD:AC:54:16:CF:0F:2B:3E:B7:0D:C9:85:75:8A:DA:0B:14:5F:88:41 Certificate issuer: /CN=464dcfa96399716692d245a804887c09da451f8f Certificate serial: 019B7F83E6F39A638B284ED1599A9E6AEE1C Authority key identifier: 46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/zaxUFs8PKz63DcmFdYraCxRfiEE.roa Signing time: Fri 02 Jan 2026 16:21:49 +0000 ROA not before: Fri 02 Jan 2026 16:21:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51173 IP address blocks: 37.203.48.0/24 maxlen: 24 37.203.49.0/24 maxlen: 24 37.203.50.0/24 maxlen: 24 37.203.51.0/24 maxlen: 24 37.203.52.0/24 maxlen: 24 37.203.53.0/24 maxlen: 24 89.106.136.0/24 maxlen: 24 89.106.137.0/24 maxlen: 24 89.106.138.0/24 maxlen: 24 89.106.139.0/24 maxlen: 24 89.106.140.0/24 maxlen: 24 89.106.141.0/24 maxlen: 24 89.106.142.0/24 maxlen: 24 89.106.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:e6:f3:9a:63:8b:28:4e:d1:59:9a:9e:6a:ee:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=464dcfa96399716692d245a804887c09da451f8f Validity Not Before: Jan 2 16:21:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cdac5416cf0f2b3eb70dc985758ada0b145f8841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1c:8f:97:12:6f:3a:87:85:57:20:03:6a:78: 8d:9a:37:ee:9b:1f:a4:64:ae:f0:0c:ae:ba:64:cc: 33:f3:b7:1c:25:01:12:e1:bd:ce:15:1c:f6:60:20: 6e:1d:24:47:59:25:b6:16:62:15:6a:94:c4:5e:ab: da:3a:aa:9b:f3:db:39:7c:89:2f:bd:56:f8:26:1e: e2:29:55:ab:ce:55:ab:57:09:45:d9:56:09:7d:b6: 8b:80:4b:0c:0d:d3:a5:8b:c0:91:6d:a4:e0:f1:69: bd:24:fe:b8:3d:c6:e4:bb:4c:e8:40:a4:d9:eb:86: dc:45:d9:d1:dd:16:8e:72:8c:4d:59:67:a6:f3:c0: c8:82:be:29:96:a5:d5:1e:76:00:bb:50:38:b5:43: 3c:1d:db:80:27:25:53:4e:20:58:26:75:50:e1:ee: df:94:50:73:69:84:21:ef:f0:4f:b5:16:d8:b6:d2: da:15:83:19:54:72:48:c5:de:7c:f2:c9:ab:f7:60: fb:d0:65:fa:41:53:29:4b:d9:69:ca:ac:8e:82:0b: ec:4a:ee:40:20:da:c0:09:48:ab:1b:25:de:85:24: f7:c9:ea:d1:da:12:94:1e:7c:d7:c2:96:dc:55:1a: ed:20:aa:b7:bb:b0:1b:e4:9f:c8:57:44:4a:3c:cb: 79:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:AC:54:16:CF:0F:2B:3E:B7:0D:C9:85:75:8A:DA:0B:14:5F:88:41 X509v3 Authority Key Identifier: keyid:46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/zaxUFs8PKz63DcmFdYraCxRfiEE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.203.48.0-37.203.53.255 89.106.136.0/21 Signature Algorithm: sha256WithRSAEncryption 80:c7:ea:0c:c7:77:b7:6b:fe:82:a9:11:2f:b9:83:cb:8c:bf: c2:e3:c6:dd:26:cd:57:18:3a:03:0f:13:0c:b6:3f:20:4b:14: fd:28:f3:6f:3c:ae:1d:18:04:00:fa:a7:26:8c:c0:04:1d:17: 01:33:df:53:5e:53:dc:87:2b:40:c9:c5:2e:3f:0d:85:dd:94: e6:15:4b:c1:09:f4:87:93:0a:81:a8:67:a5:e2:c7:91:53:2b: 4f:30:10:e5:ff:f9:11:6e:17:d3:1a:ac:5e:1f:a3:58:1f:fd: 0e:47:04:8a:14:e1:ad:29:51:f2:d7:0e:d9:96:50:e9:91:77: a7:1e:70:e0:02:7c:50:b0:ee:cc:f8:92:be:7b:ee:5d:db:d5: 04:e9:89:05:a1:78:5d:7e:7c:84:97:37:bb:bb:8e:93:6e:e5: 59:71:9d:36:52:f3:1d:72:99:10:a3:ea:d5:f2:9f:90:a6:2d: 55:ee:91:d7:5f:d0:d5:ca:98:9c:ac:1a:84:b5:ca:3a:16:53: 9d:2a:49:1c:1b:c8:80:0e:5b:81:fd:af:c7:81:d1:4b:59:9f: 33:9c:17:9e:09:a5:bb:29:18:77:b3:ce:a3:4a:1c:68:ee:05: b6:35:bd:38:55:4c:cd:38:bd:95:bb:aa:7a:fd:bd:36:e4:1b: b5:1e:61:48 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt/g+bzmmOLKE7RWZqeau4cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NGRjZmE5NjM5OTcxNjY5MmQyNDVhODA0ODg3YzA5ZGE0 NTFmOGYwHhcNMjYwMTAyMTYyMTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZGFjNTQxNmNmMGYyYjNlYjcwZGM5ODU3NThhZGEwYjE0NWY4ODQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhyPlxJvOoeFVyADaniNmjfumx+k ZK7wDK66ZMwz87ccJQES4b3OFRz2YCBuHSRHWSW2FmIVapTEXqvaOqqb89s5fIkv vVb4Jh7iKVWrzlWrVwlF2VYJfbaLgEsMDdOli8CRbaTg8Wm9JP64Pcbku0zoQKTZ 64bcRdnR3RaOcoxNWWem88DIgr4plqXVHnYAu1A4tUM8HduAJyVTTiBYJnVQ4e7f lFBzaYQh7/BPtRbYttLaFYMZVHJIxd588smr92D70GX6QVMpS9lpyqyOggvsSu5A INrACUirGyXehST3yerR2hKUHnzXwpbcVRrtIKq3u7Ab5J/IV0RKPMt5FQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFM2sVBbPDys+tw3JhXWK2gsUX4hBMB8GA1UdIwQY MBaAFEZNz6ljmXFmktJFqASIfAnaRR+PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmszUHFXT1pjV2FTMGtXb0JJaDhDZHBGSDQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82YmU1YTYtZWIwZS00NGI0LWI2YTct YWYxZjM2ODExMDk4LzEvemF4VUZzOFBLejYzRGNtRmRZcmFDeFJmaUVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS82YmU1YTYtZWIwZS00NGI0LWI2YTctYWYxZjM2ODExMDk4 LzEvUmszUHFXT1pjV2FTMGtXb0JJaDhDZHBGSDQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAQlyzAD BAElyzQDBANZaogwDQYJKoZIhvcNAQELBQADggEBAIDH6gzHd7dr/oKpES+5g8uM v8Ljxt0mzVcYOgMPEwy2PyBLFP0o8288rh0YBAD6pyaMwAQdFwEz31NeU9yHK0DJ xS4/DYXdlOYVS8EJ9IeTCoGoZ6Xix5FTK08wEOX/+RFuF9MarF4fo1gf/Q5HBIoU 4a0pUfLXDtmWUOmRd6cecOACfFCw7sz4kr577l3b1QTpiQWheF1+fISXN7u7jpNu 5VlxnTZS8x1ymRCj6tXyn5CmLVXukddf0NXKmJysGoS1yjoWU50qSRwbyIAOW4H9 r8eB0UtZnzOcF54JpbspGHezzqNKHGjuBbY1vThVTM04vZW7qnr9vTbkG7UeYUg= -----END CERTIFICATE-----Generated at Mon Jan 26 05:32:14 2026 by rpki-client