This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/ZlEOk-TIMsMt2rNVR03CK6HGKPs.roa File: ZlEOk-TIMsMt2rNVR03CK6HGKPs.roa (raw, json) Hash identifier: jufrm803RDDGrHd8Z13hc4hTCmY6DDUXHEgDiHW/dbk= Subject key identifier: 66:51:0E:93:E4:C8:32:C3:2D:DA:B3:55:47:4D:C2:2B:A1:C6:28:FB Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Certificate serial: 019B7D5B089A9FF7A1EA8DD36120B8F3BBFC Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/ZlEOk-TIMsMt2rNVR03CK6HGKPs.roa Signing time: Fri 02 Jan 2026 06:17:56 +0000 ROA not before: Fri 02 Jan 2026 06:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34376 IP address blocks: 5.104.160.0/21 maxlen: 24 78.142.26.0/23 maxlen: 24 78.142.28.0/24 maxlen: 24 79.124.57.0/24 maxlen: 24 82.118.231.0/24 maxlen: 24 82.118.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:08:9a:9f:f7:a1:ea:8d:d3:61:20:b8:f3:bb:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Validity Not Before: Jan 2 06:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=66510e93e4c832c32ddab355474dc22ba1c628fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:30:95:9c:09:44:25:76:db:54:03:b8:6c:7e: fd:a5:d4:06:9b:2d:ec:9c:8a:83:11:e6:97:00:95: 18:39:58:70:ee:59:97:26:71:09:84:51:0f:fd:82: dc:b5:8b:7e:e2:32:34:7d:3c:e7:37:d4:27:e4:b3: 82:b8:dc:5b:ba:6e:ac:a6:d6:14:ca:29:8f:11:ae: ba:7c:5f:69:0c:1c:5d:1e:19:ea:b2:70:fb:1c:78: b1:46:23:ab:5f:1d:13:91:c3:15:dd:cb:31:99:75: 36:86:2f:d5:8d:da:08:48:53:84:a4:f8:54:c6:d3: a9:97:7a:f7:de:c9:e1:3a:9e:e4:4b:92:45:12:d2: c1:0d:22:a5:51:ff:da:5b:e8:e7:d4:cc:8e:b8:d2: e6:11:b9:12:dd:5e:d7:34:d5:0d:fa:ea:2a:b4:4c: 37:9e:cb:cb:44:d9:ac:b8:7f:89:e4:89:0f:60:75: 6c:ce:44:f1:8a:a4:c2:f5:af:79:de:62:89:fc:c6: 9d:72:b6:d0:0e:36:e1:85:1b:c9:24:dd:bd:0d:1e: 90:13:2a:aa:42:cc:c8:8f:31:0b:d1:80:33:53:89: 42:22:9a:37:39:53:86:22:97:d8:57:c0:38:b7:55: bf:38:91:61:04:b4:e1:8a:bd:7a:65:b6:12:68:75: fd:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:51:0E:93:E4:C8:32:C3:2D:DA:B3:55:47:4D:C2:2B:A1:C6:28:FB X509v3 Authority Key Identifier: keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/ZlEOk-TIMsMt2rNVR03CK6HGKPs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.104.160.0/21 78.142.26.0-78.142.28.255 79.124.57.0/24 82.118.231.0-82.118.232.255 Signature Algorithm: sha256WithRSAEncryption b8:46:22:16:6c:f7:b4:aa:ca:81:20:5d:73:62:e5:46:21:12: cf:32:96:ce:bb:d7:6c:ad:a4:2a:6b:6b:30:6c:07:6f:9a:af: 79:58:55:c5:c5:cf:37:69:bd:bf:32:97:ab:f6:64:0c:e6:e4: 04:41:bb:dc:d4:ef:44:af:dc:dc:31:4c:ee:e3:0e:56:7a:21: 80:1e:29:ef:d6:73:ff:76:42:f6:59:c3:63:12:74:ea:77:5f: 7b:5a:16:43:eb:fe:86:76:76:55:69:1e:ee:66:26:90:15:ee: a0:f8:43:cf:8a:64:3b:83:da:c0:75:27:d4:7c:68:fa:12:80: 24:0b:7a:cc:cf:59:17:d9:02:ff:65:61:99:5d:8d:6e:f2:7f: 44:a4:2f:94:4b:83:94:58:49:19:7c:e5:98:89:39:00:2a:92: d0:65:bc:12:f7:1a:d1:dd:ac:46:b4:8b:53:23:6f:7c:98:85: b1:c5:7b:05:6c:1e:b2:28:43:fd:9c:5b:9d:80:45:e6:41:35: 06:59:87:dc:60:32:15:c0:8d:e7:46:42:c6:de:c7:c0:50:18: 74:30:06:6f:0f:16:ec:ce:cf:09:ee:39:6b:aa:f3:ee:19:ca: 86:94:c1:fd:ef:68:52:b6:de:e2:6e:86:80:f6:81:72:01:90: 97:de:a1:df -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt9Wwian/eh6o3TYSC487v8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1 Y2IyYWEwHhcNMjYwMTAyMDYxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjUxMGU5M2U0YzgzMmMzMmRkYWIzNTU0NzRkYzIyYmExYzYyOGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6jCVnAlEJXbbVAO4bH79pdQGmy3s nIqDEeaXAJUYOVhw7lmXJnEJhFEP/YLctYt+4jI0fTznN9Qn5LOCuNxbum6sptYU yimPEa66fF9pDBxdHhnqsnD7HHixRiOrXx0TkcMV3csxmXU2hi/VjdoISFOEpPhU xtOpl3r33snhOp7kS5JFEtLBDSKlUf/aW+jn1MyOuNLmEbkS3V7XNNUN+uoqtEw3 nsvLRNmsuH+J5IkPYHVszkTxiqTC9a953mKJ/MadcrbQDjbhhRvJJN29DR6QEyqq QszIjzEL0YAzU4lCIpo3OVOGIpfYV8A4t1W/OJFhBLThir16ZbYSaHX92QIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFGZRDpPkyDLDLdqzVUdNwiuhxij7MB8GA1UdIwQY MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt ZGFjYjVmMzU2ZWEzLzEvWmxFT2stVElNc010MnJOVlIwM0NLNkhHS1BzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwQDBWigMAwD BAFOjhoDBABOjhwDBABPfDkwDAMEAFJ25wMEAFJ26DANBgkqhkiG9w0BAQsFAAOC AQEAuEYiFmz3tKrKgSBdc2LlRiESzzKWzrvXbK2kKmtrMGwHb5qveVhVxcXPN2m9 vzKXq/ZkDObkBEG73NTvRK/c3DFM7uMOVnohgB4p79Zz/3ZC9lnDYxJ06ndfe1oW Q+v+hnZ2VWke7mYmkBXuoPhDz4pkO4PawHUn1Hxo+hKAJAt6zM9ZF9kC/2VhmV2N bvJ/RKQvlEuDlFhJGXzlmIk5ACqS0GW8Evca0d2sRrSLUyNvfJiFscV7BWwesihD /ZxbnYBF5kE1BlmH3GAyFcCN50ZCxt7HwFAYdDAGbw8W7M7PCe45a6rz7hnKhpTB /e9oUrbe4m6GgPaBcgGQl96h3w== -----END CERTIFICATE-----Generated at Fri Jan 23 18:49:08 2026 by rpki-client