This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/z5JkJ805eLdh9_PBzMN4E9jKOKc.roa File: z5JkJ805eLdh9_PBzMN4E9jKOKc.roa (raw, json) Hash identifier: ivUv5kOadHp5o5mSeOVgX0o87k8Q85qesScVE15Jy6M= Subject key identifier: CF:92:64:27:CD:39:78:B7:61:F7:F3:C1:CC:C3:78:13:D8:CA:38:A7 Certificate issuer: /CN=29c2103fd2417c8869145617de94fcc913b085ef Certificate serial: 019B7AC7DB3150F42B4ED08B26C719E344B2 Authority key identifier: 29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/z5JkJ805eLdh9_PBzMN4E9jKOKc.roa Signing time: Thu 01 Jan 2026 18:17:56 +0000 ROA not before: Thu 01 Jan 2026 18:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8368 IP address blocks: 37.26.176.0/21 maxlen: 24 45.134.192.0/22 maxlen: 24 46.247.160.0/19 maxlen: 24 80.253.192.0/20 maxlen: 24 94.143.80.0/21 maxlen: 24 94.247.160.0/21 maxlen: 24 176.53.128.0/22 maxlen: 24 185.8.240.0/22 maxlen: 24 185.12.96.0/22 maxlen: 24 185.48.48.0/22 maxlen: 24 185.50.76.0/22 maxlen: 24 185.117.36.0/22 maxlen: 24 193.239.190.0/23 maxlen: 24 193.243.150.0/23 maxlen: 24 194.105.58.0/23 maxlen: 24 194.105.62.0/23 maxlen: 24 2a01:9720::/32 maxlen: 48 2a01:aa60::/32 maxlen: 48 2a03:bd00::/32 maxlen: 48 2a04:b440::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:db:31:50:f4:2b:4e:d0:8b:26:c7:19:e3:44:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29c2103fd2417c8869145617de94fcc913b085ef Validity Not Before: Jan 1 18:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf926427cd3978b761f7f3c1ccc37813d8ca38a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:59:5b:ad:66:ad:95:e1:e9:f8:04:60:1b:89: 44:69:b5:fb:94:dc:2c:62:b0:fd:58:8b:11:d8:31: fd:10:f4:4e:07:b4:00:2e:80:1a:9b:a2:73:30:11: b1:04:c1:58:53:e8:f4:a3:62:d9:b5:85:1e:1d:56: b8:6f:46:00:81:86:bd:c1:b2:cd:e8:51:7e:76:53: 41:2a:00:01:dc:df:92:7e:95:24:89:d2:89:5b:db: 6e:5b:8a:c0:f1:f0:4c:83:6a:9a:e4:69:06:24:13: 6c:7b:e8:07:57:f3:86:6a:23:2e:c4:81:86:2a:90: a4:bd:ea:07:5e:f6:5d:c7:3c:64:00:37:ed:f9:86: a9:10:9c:90:d9:61:20:6a:b5:1c:4b:04:51:d7:68: 5e:05:57:be:00:d7:98:fd:b4:c3:6c:7b:d4:da:a4: 9d:3a:76:84:2c:fd:1f:fb:79:85:23:5d:71:4d:79: 8a:8b:88:1d:0d:2d:2c:00:e3:8a:d1:bc:70:e4:ba: ec:3b:38:f8:e3:0d:93:66:e0:a1:50:4e:2b:6d:91: 65:1c:50:17:cc:a9:a5:2f:79:7d:d9:fe:27:e4:c0: 6c:87:a1:d5:c5:6a:36:da:f9:1d:68:d0:9c:ec:77: ea:a9:66:2b:8d:54:54:b0:78:f6:fc:de:1c:9b:9f: 9a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:92:64:27:CD:39:78:B7:61:F7:F3:C1:CC:C3:78:13:D8:CA:38:A7 X509v3 Authority Key Identifier: keyid:29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/z5JkJ805eLdh9_PBzMN4E9jKOKc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.26.176.0/21 45.134.192.0/22 46.247.160.0/19 80.253.192.0/20 94.143.80.0/21 94.247.160.0/21 176.53.128.0/22 185.8.240.0/22 185.12.96.0/22 185.48.48.0/22 185.50.76.0/22 185.117.36.0/22 193.239.190.0/23 193.243.150.0/23 194.105.58.0/23 194.105.62.0/23 IPv6: 2a01:9720::/32 2a01:aa60::/32 2a03:bd00::/32 2a04:b440::/29 Signature Algorithm: sha256WithRSAEncryption 5d:f7:92:2f:1e:7b:f9:1d:87:88:cb:5c:70:f0:6b:91:26:8b: b3:62:e5:ad:9c:d2:c0:93:c3:3a:66:80:7f:fb:c4:78:58:75: 60:e7:9e:a3:1e:fc:e7:67:39:09:59:f0:38:95:27:e6:b5:59: 4e:81:9c:00:08:5c:61:10:c6:fb:86:ef:1d:68:bb:0d:7c:9e: 32:61:e8:52:90:c7:db:2e:0b:2b:ba:54:f0:36:62:46:d3:5d: 8c:0f:6f:98:92:bb:a1:a5:3f:fc:80:a4:ae:b1:e8:12:8d:68: 99:53:5e:af:0c:d1:6d:5a:31:3f:8e:7e:57:d5:7d:d1:17:a7: 17:03:4b:6e:5e:82:e5:2e:e7:0b:06:38:32:b7:dc:4d:a2:47: 7f:59:b8:80:d4:15:6a:a9:3b:ab:5c:8d:0b:bd:9a:d8:c3:27: 73:6f:bb:31:b7:f7:02:06:e2:2c:07:d1:4f:38:07:95:6f:3f: 3e:87:4a:80:51:af:50:19:ff:b8:fc:f2:17:8d:ba:3d:11:10: 62:6a:f2:8d:ca:ce:a3:4e:ce:60:ed:f6:d4:d5:55:1c:86:a8: 3e:ac:46:36:90:48:e4:81:e2:bf:9b:8c:ba:51:24:b0:12:74: 27:84:59:a9:1c:5e:78:b2:7e:0b:91:7d:50:eb:3c:69:d2:bc: 23:e5:52:40 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt6x9sxUPQrTtCLJscZ40SyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YzIxMDNmZDI0MTdjODg2OTE0NTYxN2RlOTRmY2M5MTNi MDg1ZWYwHhcNMjYwMTAxMTgxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjkyNjQyN2NkMzk3OGI3NjFmN2YzYzFjY2MzNzgxM2Q4Y2EzOGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VlbrWatleHp+ARgG4lEabX7lNws YrD9WIsR2DH9EPROB7QALoAam6JzMBGxBMFYU+j0o2LZtYUeHVa4b0YAgYa9wbLN 6FF+dlNBKgAB3N+SfpUkidKJW9tuW4rA8fBMg2qa5GkGJBNse+gHV/OGaiMuxIGG KpCkveoHXvZdxzxkADft+YapEJyQ2WEgarUcSwRR12heBVe+ANeY/bTDbHvU2qSd OnaELP0f+3mFI11xTXmKi4gdDS0sAOOK0bxw5LrsOzj44w2TZuChUE4rbZFlHFAX zKmlL3l92f4n5MBsh6HVxWo22vkdaNCc7HfqqWYrjVRUsHj2/N4cm5+abwIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFM+SZCfNOXi3YffzwczDeBPYyjinMB8GA1UdIwQY MBaAFCnCED/SQXyIaRRWF96U/MkTsIXvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2NJUVA5SkJmSWhwRkZZWDNwVDh5Uk93aGU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8yYjhkODItMzlmYi00YTU2LTg5YzUt OWQ1NjU3NTEzZTIwLzEvejVKa0o4MDVlTGRoOV9QQnpNTjRFOWpLT0tjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS8yYjhkODItMzlmYi00YTU2LTg5YzUtOWQ1NjU3NTEzZTIw LzEvS2NJUVA5SkJmSWhwRkZZWDNwVDh5Uk93aGU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGfBggrBgEFBQcBBwEB/wSBjzCBjDBmBAIAATBgAwQDJRqw AwQCLYbAAwQFLvegAwQEUP3AAwQDXo9QAwQDXvegAwQCsDWAAwQCuQjwAwQCuQxg AwQCuTAwAwQCuTJMAwQCuXUkAwQBwe++AwQBwfOWAwQBwmk6AwQBwmk+MCIEAgAC MBwDBQAqAZcgAwUAKgGqYAMFACoDvQADBQMqBLRAMA0GCSqGSIb3DQEBCwUAA4IB AQBd95IvHnv5HYeIy1xw8GuRJouzYuWtnNLAk8M6ZoB/+8R4WHVg556jHvznZzkJ WfA4lSfmtVlOgZwACFxhEMb7hu8daLsNfJ4yYehSkMfbLgsrulTwNmJG012MD2+Y kruhpT/8gKSusegSjWiZU16vDNFtWjE/jn5X1X3RF6cXA0tuXoLlLucLBjgyt9xN okd/WbiA1BVqqTurXI0LvZrYwydzb7sxt/cCBuIsB9FPOAeVbz8+h0qAUa9QGf+4 /PIXjbo9ERBiavKNys6jTs5g7fbU1VUchqg+rEY2kEjkgeK/m4y6USSwEnQnhFmp HF54sn4LkX1Q6zxp0rwj5VJA -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:02 2026 by rpki-client