This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/zvfze04wd9Ww6fC_EKoJBvHb03A.roa File: zvfze04wd9Ww6fC_EKoJBvHb03A.roa (raw, json) Hash identifier: hqV4t/kgHH9kucLz+TkShbpTOt1VzgMM/WaloxQJWb0= Subject key identifier: CE:F7:F3:7B:4E:30:77:D5:B0:E9:F0:BF:10:AA:09:06:F1:DB:D3:70 Certificate issuer: /CN=77e3c2900b599754283f27f3b4e8d7f6c4510972 Certificate serial: 019B7E38BD68640E1683A83344F5D55D072B Authority key identifier: 77:E3:C2:90:0B:59:97:54:28:3F:27:F3:B4:E8:D7:F6:C4:51:09:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/zvfze04wd9Ww6fC_EKoJBvHb03A.roa Signing time: Fri 02 Jan 2026 10:20:06 +0000 ROA not before: Fri 02 Jan 2026 10:20:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41750 IP address blocks: 77.235.0.0/19 maxlen: 19 77.235.0.0/20 maxlen: 20 77.235.4.0/24 maxlen: 24 77.235.5.0/24 maxlen: 24 77.235.6.0/24 maxlen: 24 77.235.7.0/24 maxlen: 24 77.235.16.0/20 maxlen: 20 77.235.22.0/24 maxlen: 24 92.245.96.0/19 maxlen: 19 92.245.96.0/20 maxlen: 20 92.245.112.0/20 maxlen: 20 109.201.160.0/19 maxlen: 19 158.181.0.0/19 maxlen: 19 158.181.0.0/20 maxlen: 20 158.181.16.0/20 maxlen: 20 158.181.128.0/17 maxlen: 17 158.181.128.0/20 maxlen: 20 158.181.144.0/20 maxlen: 20 158.181.160.0/20 maxlen: 20 158.181.176.0/20 maxlen: 20 158.181.192.0/20 maxlen: 20 158.181.208.0/20 maxlen: 20 158.181.224.0/20 maxlen: 20 158.181.240.0/20 maxlen: 20 176.123.224.0/19 maxlen: 19 185.138.100.0/22 maxlen: 22 2a04:5600::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.mft rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:bd:68:64:0e:16:83:a8:33:44:f5:d5:5d:07:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77e3c2900b599754283f27f3b4e8d7f6c4510972 Validity Not Before: Jan 2 10:20:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cef7f37b4e3077d5b0e9f0bf10aa0906f1dbd370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:20:4f:08:10:0b:28:d5:0d:a4:4c:61:45:bb: ae:1e:f2:63:a9:ed:a6:5e:57:62:21:ef:57:09:66: 98:3d:c4:05:f3:32:b1:a8:67:37:1e:67:06:ee:04: 67:6c:22:86:6d:cf:77:db:10:48:fe:c3:4f:90:37: 65:86:18:19:92:b5:ea:bf:20:20:1b:82:3b:3f:a1: 08:78:80:b9:7d:05:43:71:ed:48:5b:90:b6:9c:5d: b6:5c:e6:68:e3:1c:8b:bc:58:56:00:3b:28:ce:7f: eb:9d:39:b1:05:8f:7b:3e:ac:d8:e9:83:c2:22:e0: 9e:be:59:55:32:32:44:8b:07:4c:e7:e5:69:e6:71: 88:8f:bc:71:08:ae:67:82:23:a0:53:e1:d4:f1:34: 2d:cd:4e:9d:ef:3f:40:3d:b7:44:27:ba:05:e6:fa: 1b:3a:b7:40:91:a2:61:bf:04:72:7f:c3:56:08:e7: 7a:19:88:ab:47:0f:96:4e:ce:6c:1c:31:fe:71:a3: 48:e2:72:e3:11:28:02:a0:a0:8c:52:9d:c1:a1:c4: 7a:47:15:8a:ca:60:3f:91:6c:fa:f5:ac:8f:d3:da: d8:bf:dd:e9:38:09:e2:0b:b5:05:ae:b0:41:e0:08: 27:ee:58:53:ee:25:d8:2c:66:9f:7b:9e:94:21:83: a6:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:F7:F3:7B:4E:30:77:D5:B0:E9:F0:BF:10:AA:09:06:F1:DB:D3:70 X509v3 Authority Key Identifier: keyid:77:E3:C2:90:0B:59:97:54:28:3F:27:F3:B4:E8:D7:F6:C4:51:09:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/zvfze04wd9Ww6fC_EKoJBvHb03A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.235.0.0/19 92.245.96.0/19 109.201.160.0/19 158.181.0.0/19 158.181.128.0/17 176.123.224.0/19 185.138.100.0/22 IPv6: 2a04:5600::/29 Signature Algorithm: sha256WithRSAEncryption 7e:f4:2e:98:b9:55:26:6c:3b:5c:44:fd:92:71:1f:63:a6:fe: 43:f5:5d:47:04:ae:c7:38:a8:61:79:cf:33:46:3f:5e:27:60: 1f:ab:e4:6e:43:69:2b:5b:ce:ce:2f:f8:16:47:ae:e8:49:77: 4e:11:9f:5a:87:7e:d4:ff:ca:27:d3:1e:49:8b:ae:8c:c4:5c: 02:92:4f:43:24:b3:95:9c:9c:4a:df:ba:b0:77:25:50:ab:4d: 37:4d:35:fd:9a:a4:90:a7:d1:19:49:a5:15:38:0c:00:81:c1: 6d:fc:c1:75:d0:70:02:b7:5d:ea:30:90:ef:31:ee:3d:5d:bf: 82:e6:b7:d4:71:76:25:53:ef:be:ab:6e:a1:a4:91:2a:1b:e4: b6:82:98:84:c1:f4:7a:1c:97:15:be:dc:03:f8:70:d8:39:24: 03:9c:30:bf:95:3c:95:5e:ff:6a:1e:53:73:d0:50:57:ae:69: 80:ac:32:b6:24:d9:53:04:09:73:3a:ed:05:91:22:8e:b1:33: df:c2:55:84:e1:f1:aa:98:9b:89:8a:2c:c4:5d:94:c0:14:7f: a4:b9:18:27:f5:01:5b:61:91:7b:f7:91:b5:dd:11:25:c6:d4: b1:1a:a1:99:3d:9d:43:76:ae:b2:53:24:2d:34:f4:30:41:53: 80:bb:02:c1 -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgISAZt+OL1oZA4Wg6gzRPXVXQcrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3ZTNjMjkwMGI1OTk3NTQyODNmMjdmM2I0ZThkN2Y2YzQ1 MTA5NzIwHhcNMjYwMTAyMTAyMDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZWY3ZjM3YjRlMzA3N2Q1YjBlOWYwYmYxMGFhMDkwNmYxZGJkMzcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziBPCBALKNUNpExhRbuuHvJjqe2m XldiIe9XCWaYPcQF8zKxqGc3HmcG7gRnbCKGbc932xBI/sNPkDdlhhgZkrXqvyAg G4I7P6EIeIC5fQVDce1IW5C2nF22XOZo4xyLvFhWADsozn/rnTmxBY97PqzY6YPC IuCevllVMjJEiwdM5+Vp5nGIj7xxCK5ngiOgU+HU8TQtzU6d7z9APbdEJ7oF5vob OrdAkaJhvwRyf8NWCOd6GYirRw+WTs5sHDH+caNI4nLjESgCoKCMUp3BocR6RxWK ymA/kWz69ayP09rYv93pOAniC7UFrrBB4Agn7lhT7iXYLGafe56UIYOmEQIDAQAB o4ICPDCCAjgwHQYDVR0OBBYEFM7383tOMHfVsOnwvxCqCQbx29NwMB8GA1UdIwQY MBaAFHfjwpALWZdUKD8n87To1/bEUQlyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZC1QQ2tBdFpsMVFvUHlmenRPalg5c1JSQ1hJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9lZjJiNDktMDM1Zi00MGE0LWFlNTEt ZDNjNTVkNGZkYTlkLzEvenZmemUwNHdkOVd3NmZDX0VLb0pCdkhiMDNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9lZjJiNDktMDM1Zi00MGE0LWFlNTEtZDNjNTVkNGZkYTlk LzEvZC1QQ2tBdFpsMVFvUHlmenRPalg5c1JSQ1hJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQFTesAAwQF XPVgAwQFbcmgAwQFnrUAAwQHnrWAAwQFsHvgAwQCuYpkMA0EAgACMAcDBQMqBFYA MA0GCSqGSIb3DQEBCwUAA4IBAQB+9C6YuVUmbDtcRP2ScR9jpv5D9V1HBK7HOKhh ec8zRj9eJ2Afq+RuQ2krW87OL/gWR67oSXdOEZ9ah37U/8on0x5Ji66MxFwCkk9D JLOVnJxK37qwdyVQq003TTX9mqSQp9EZSaUVOAwAgcFt/MF10HACt13qMJDvMe49 Xb+C5rfUcXYlU+++q26hpJEqG+S2gpiEwfR6HJcVvtwD+HDYOSQDnDC/lTyVXv9q HlNz0FBXrmmArDK2JNlTBAlzOu0FkSKOsTPfwlWE4fGqmJuJiizEXZTAFH+kuRgn 9QFbYZF795G13RElxtSxGqGZPZ1Ddq6yUyQtNPQwQVOAuwLB -----END CERTIFICATE-----Generated at Tue Feb 10 01:29:06 2026 by rpki-client