This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/zlhw-jAxoemoTIks6djA6_OWm2M.roa File: zlhw-jAxoemoTIks6djA6_OWm2M.roa (raw, json) Hash identifier: eUMhTHWA1q88LqwjqhnxT2MrHSmM53zMVpcctjWcXdE= Subject key identifier: CE:58:70:FA:30:31:A1:E9:A8:4C:89:2C:E9:D8:C0:EB:F3:96:9B:63 Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019B7F854143315721AD323ADD5D4144A035 Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/zlhw-jAxoemoTIks6djA6_OWm2M.roa Signing time: Fri 02 Jan 2026 16:23:18 +0000 ROA not before: Fri 02 Jan 2026 16:23:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9123 IP address blocks: 62.76.233.0/24 maxlen: 24 193.108.115.0/24 maxlen: 24 193.124.47.0/24 maxlen: 24 194.87.43.0/24 maxlen: 24 194.87.56.0/24 maxlen: 24 194.87.76.0/24 maxlen: 24 194.87.84.0/24 maxlen: 24 194.87.86.0/24 maxlen: 24 194.87.104.0/24 maxlen: 24 194.87.118.0/24 maxlen: 24 194.87.131.0/24 maxlen: 24 194.87.133.0/24 maxlen: 24 194.87.138.0/24 maxlen: 24 194.87.140.0/24 maxlen: 24 194.87.143.0/24 maxlen: 24 194.87.151.0/24 maxlen: 24 194.87.161.0/24 maxlen: 24 194.87.187.0/24 maxlen: 24 194.87.190.0/24 maxlen: 24 194.87.201.0/24 maxlen: 24 194.87.215.0/24 maxlen: 24 194.87.226.0/24 maxlen: 24 194.135.36.0/24 maxlen: 24 195.58.34.0/24 maxlen: 24 195.58.36.0/24 maxlen: 24 195.58.37.0/24 maxlen: 24 195.58.61.0/24 maxlen: 24 195.133.25.0/24 maxlen: 24 195.133.27.0/24 maxlen: 24 195.133.30.0/24 maxlen: 24 195.133.50.0/24 maxlen: 24 195.133.73.0/24 maxlen: 24 195.133.194.0/24 maxlen: 24 212.192.220.0/24 maxlen: 24 212.193.24.0/24 maxlen: 24 212.193.26.0/24 maxlen: 24 212.193.27.0/24 maxlen: 24 212.193.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:41:43:31:57:21:ad:32:3a:dd:5d:41:44:a0:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Jan 2 16:23:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ce5870fa3031a1e9a84c892ce9d8c0ebf3969b63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d1:f7:bd:ae:0d:b0:24:50:51:74:5c:a1:c5: 28:ee:1f:99:67:95:43:b0:6b:ba:30:92:98:57:80: a8:38:fc:b4:3d:e2:9b:5a:4d:45:55:19:fb:86:14: b7:fb:40:62:34:e4:02:38:13:2b:98:2a:68:ff:ad: 9e:39:d4:d9:29:25:a8:99:c7:a1:2e:ed:0e:89:cd: 3d:4e:7d:70:1c:a3:c0:c5:23:96:57:39:fb:69:77: 65:e4:2d:29:b7:06:d0:28:a9:37:04:fe:45:f8:7b: ea:39:d9:0e:71:d4:9e:c9:cc:e1:58:95:53:d8:3d: fd:15:8b:04:13:ae:3f:63:3c:86:02:2e:a8:6b:16: 5e:a8:e9:19:16:34:62:e5:cc:31:ac:f1:60:5b:94: e2:4f:c3:12:1f:0d:1a:4b:83:2c:f4:e4:b2:a9:70: 5b:70:f3:b9:cf:26:5a:66:d5:90:46:95:a2:4b:e5: 67:fd:1f:86:83:3c:75:f0:89:b7:3e:c7:96:ea:e1: 62:0f:f7:69:26:1c:25:6d:b3:7b:ad:ef:f1:11:ec: 79:5d:4b:87:45:dc:13:ef:ba:0e:d4:6d:62:56:b2: b1:8d:6f:d9:ad:24:8e:b9:9a:bd:4c:29:fd:a3:6d: cb:b7:84:ba:8e:98:0a:68:06:97:42:96:9d:9a:1f: de:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:58:70:FA:30:31:A1:E9:A8:4C:89:2C:E9:D8:C0:EB:F3:96:9B:63 X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/zlhw-jAxoemoTIks6djA6_OWm2M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.76.233.0/24 193.108.115.0/24 193.124.47.0/24 194.87.43.0/24 194.87.56.0/24 194.87.76.0/24 194.87.84.0/24 194.87.86.0/24 194.87.104.0/24 194.87.118.0/24 194.87.131.0/24 194.87.133.0/24 194.87.138.0/24 194.87.140.0/24 194.87.143.0/24 194.87.151.0/24 194.87.161.0/24 194.87.187.0/24 194.87.190.0/24 194.87.201.0/24 194.87.215.0/24 194.87.226.0/24 194.135.36.0/24 195.58.34.0/24 195.58.36.0/23 195.58.61.0/24 195.133.25.0/24 195.133.27.0/24 195.133.30.0/24 195.133.50.0/24 195.133.73.0/24 195.133.194.0/24 212.192.220.0/24 212.193.24.0/24 212.193.26.0/23 212.193.30.0/24 Signature Algorithm: sha256WithRSAEncryption 80:f7:de:37:ed:27:c9:db:4e:4d:96:7f:d8:da:f7:5f:ca:70: a2:c7:1a:b4:fa:60:7e:3a:4f:4f:82:85:26:d2:d7:f8:31:5a: 12:c3:b4:d9:3c:30:7a:e0:09:36:fb:bc:c6:ca:68:76:f7:b8: 2e:b2:5a:51:65:bb:50:d3:84:ab:1a:44:c1:e7:cd:5d:52:b8: 48:22:11:d8:f3:2a:c7:c7:1c:2f:34:0e:4c:d2:53:d0:bb:36: 7d:63:1f:f8:6b:a7:1b:05:a8:77:7c:e8:dc:87:a7:5a:11:b6: 3f:89:dd:f0:e0:8f:42:86:15:67:78:86:8b:51:1e:39:53:26: 9a:8f:28:c9:4c:e2:c3:43:37:5d:66:04:e2:4f:87:e5:e2:64: 1b:83:88:6f:ba:e6:7e:b9:52:72:4b:6b:93:b0:59:22:d1:e8: 6c:9e:78:91:98:6b:34:50:0c:17:89:47:2b:1c:89:7c:4f:c4: 5b:d6:0c:c1:15:44:fd:a8:df:9c:61:1b:99:35:5e:c3:ff:be: 41:8a:10:43:0c:5e:b3:a2:1b:7e:17:7c:7d:b5:24:8c:49:36: 64:c8:dd:df:c7:64:2b:48:d5:c1:f6:c7:b7:58:28:4f:92:99: e3:05:6f:40:74:f3:ab:3a:8f:c5:b2:4d:0a:b1:62:fb:e9:c3: 4a:71:1e:21 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgISAZt/hUFDMVchrTI63V1BRKA1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjYwMTAyMTYyMzE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTU4NzBmYTMwMzFhMWU5YTg0Yzg5MmNlOWQ4YzBlYmYzOTY5YjYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19H3va4NsCRQUXRcocUo7h+ZZ5VD sGu6MJKYV4CoOPy0PeKbWk1FVRn7hhS3+0BiNOQCOBMrmCpo/62eOdTZKSWomceh Lu0Oic09Tn1wHKPAxSOWVzn7aXdl5C0ptwbQKKk3BP5F+HvqOdkOcdSeyczhWJVT 2D39FYsEE64/YzyGAi6oaxZeqOkZFjRi5cwxrPFgW5TiT8MSHw0aS4Ms9OSyqXBb cPO5zyZaZtWQRpWiS+Vn/R+Ggzx18Im3PseW6uFiD/dpJhwlbbN7re/xEex5XUuH RdwT77oO1G1iVrKxjW/ZrSSOuZq9TCn9o23Lt4S6jpgKaAaXQpadmh/e0QIDAQAB o4IC4DCCAtwwHQYDVR0OBBYEFM5YcPowMaHpqEyJLOnYwOvzlptjMB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvemxody1qQXhvZW1vVElrczZkakE2X09XbTJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIH1BggrBgEFBQcBBwEB/wSB5TCB4jCB3wQCAAEwgdgDBAA+ TOkDBADBbHMDBADBfC8DBADCVysDBADCVzgDBADCV0wDBADCV1QDBADCV1YDBADC V2gDBADCV3YDBADCV4MDBADCV4UDBADCV4oDBADCV4wDBADCV48DBADCV5cDBADC V6EDBADCV7sDBADCV74DBADCV8kDBADCV9cDBADCV+IDBADChyQDBADDOiIDBAHD OiQDBADDOj0DBADDhRkDBADDhRsDBADDhR4DBADDhTIDBADDhUkDBADDhcIDBADU wNwDBADUwRgDBAHUwRoDBADUwR4wDQYJKoZIhvcNAQELBQADggEBAID33jftJ8nb Tk2Wf9ja91/KcKLHGrT6YH46T0+ChSbS1/gxWhLDtNk8MHrgCTb7vMbKaHb3uC6y WlFlu1DThKsaRMHnzV1SuEgiEdjzKsfHHC80DkzSU9C7Nn1jH/hrpxsFqHd86NyH p1oRtj+J3fDgj0KGFWd4hotRHjlTJpqPKMlM4sNDN11mBOJPh+XiZBuDiG+65n65 UnJLa5OwWSLR6GyeeJGYazRQDBeJRysciXxPxFvWDMEVRP2o35xhG5k1XsP/vkGK EEMMXrOiG34XfH21JIxJNmTI3d/HZCtI1cH2x7dYKE+SmeMFb0B086s6j8WyTQqx Yvvpw0pxHiE= -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:43 2026 by rpki-client