This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/zYE8FUPFtiLYSakQbWMYmGaB8Dk.roa File: zYE8FUPFtiLYSakQbWMYmGaB8Dk.roa (raw, json) Hash identifier: e4WusMf1jCNYs3vcwJpmwZbgUW6eoVWnObCKagC+ZGg= Subject key identifier: CD:81:3C:15:43:C5:B6:22:D8:49:A9:10:6D:63:18:98:66:81:F0:39 Certificate issuer: /CN=d5fb526a33f366aa8946188e5d326bdce46e2c40 Certificate serial: 019B7CEE1FB1224DD58A3DB440134510D08E Authority key identifier: D5:FB:52:6A:33:F3:66:AA:89:46:18:8E:5D:32:6B:DC:E4:6E:2C:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ftSajPzZqqJRhiOXTJr3ORuLEA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/zYE8FUPFtiLYSakQbWMYmGaB8Dk.roa Signing time: Fri 02 Jan 2026 04:18:59 +0000 ROA not before: Fri 02 Jan 2026 04:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57826 IP address blocks: 176.108.64.0/19 maxlen: 19 176.108.64.0/24 maxlen: 24 176.108.65.0/24 maxlen: 24 176.108.66.0/24 maxlen: 24 176.108.67.0/24 maxlen: 24 176.108.68.0/22 maxlen: 22 176.108.72.0/22 maxlen: 22 176.108.76.0/22 maxlen: 22 176.108.80.0/24 maxlen: 24 176.108.81.0/24 maxlen: 24 176.108.82.0/24 maxlen: 24 176.108.83.0/24 maxlen: 24 176.108.84.0/24 maxlen: 24 176.108.85.0/24 maxlen: 24 176.108.86.0/24 maxlen: 24 176.108.87.0/24 maxlen: 24 176.108.88.0/22 maxlen: 22 176.108.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.crl rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft rsync://rpki.ripe.net/repository/DEFAULT/1ftSajPzZqqJRhiOXTJr3ORuLEA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:1f:b1:22:4d:d5:8a:3d:b4:40:13:45:10:d0:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5fb526a33f366aa8946188e5d326bdce46e2c40 Validity Not Before: Jan 2 04:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd813c1543c5b622d849a9106d6318986681f039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:5f:27:e7:c8:74:55:a3:33:57:ba:11:cd:7a: 75:d1:a0:77:fc:0e:c8:2c:59:fa:cd:b7:5a:14:ad: b0:19:a7:49:f1:bc:04:d3:ce:85:6e:aa:47:68:db: 89:4e:49:8f:2d:7e:5c:6c:f6:98:a2:1f:b9:80:87: 85:52:ad:09:be:81:34:8a:f3:76:aa:4b:f0:18:b3: ba:e3:25:27:0c:51:a6:04:38:30:57:12:20:cf:a3: 2d:43:29:14:26:6b:59:ec:c3:99:88:10:63:bd:d6: a4:93:7b:2c:2a:a0:b2:4e:50:5e:e0:4b:81:25:d5: 72:25:28:4c:b7:b5:9e:59:84:10:2d:75:44:84:c3: f1:5a:8e:22:c7:57:d6:a3:f3:30:c2:6c:c6:a9:84: dd:89:06:92:e3:76:19:a0:7b:f3:a6:47:15:dc:cb: 9e:38:bb:a9:6e:9c:76:8a:e5:5a:f9:5c:f2:75:85: 3b:0c:1b:d9:26:98:28:36:e1:35:22:b0:a2:79:06: 9f:7c:2a:52:04:12:65:e0:e8:0f:22:b0:2d:25:ee: 5f:a4:fd:60:62:68:29:03:7a:24:c0:56:23:94:85: b5:f0:ab:5d:1c:57:88:6b:9a:b5:46:e8:4d:fb:f4: 81:a8:f7:3c:01:ff:67:f4:19:01:db:4d:bc:fa:45: c8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:81:3C:15:43:C5:B6:22:D8:49:A9:10:6D:63:18:98:66:81:F0:39 X509v3 Authority Key Identifier: keyid:D5:FB:52:6A:33:F3:66:AA:89:46:18:8E:5D:32:6B:DC:E4:6E:2C:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ftSajPzZqqJRhiOXTJr3ORuLEA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/zYE8FUPFtiLYSakQbWMYmGaB8Dk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.108.64.0/19 Signature Algorithm: sha256WithRSAEncryption 08:c8:0b:e5:44:bf:55:bc:d7:f9:3b:6a:73:6d:5e:8a:36:c8: 9d:c7:49:2f:9a:04:44:93:17:58:c6:8b:3f:0b:2b:b2:80:af: f2:c9:3c:c8:36:f1:89:c3:ff:f8:4b:e9:46:fc:27:89:83:ef: 55:83:4d:55:6c:1f:a1:e3:97:73:3d:36:15:a7:c1:2b:e9:3f: 10:1e:f4:9a:e6:70:c3:85:a0:c7:5a:42:2d:fc:c8:ee:d8:db: 3f:19:cc:31:e0:28:de:da:3a:5a:6c:1b:2c:90:af:cc:e8:4b: ca:d7:a1:b5:0c:aa:fc:bb:6e:3f:55:a1:c4:10:9c:99:ba:70: f9:ac:0e:77:2d:1c:14:a5:54:4f:91:98:52:29:32:17:e5:9a: 31:c8:dc:78:f5:24:6d:10:78:fd:66:a9:d0:1b:4e:9a:da:e9: 34:9c:4b:18:65:5b:02:0e:e5:af:26:53:18:c3:2c:8e:1d:27: 76:12:b2:dd:9a:d1:b4:b2:88:80:a8:3f:a4:a3:98:85:b0:a3: ab:82:0f:c8:87:65:34:66:de:e6:e3:7f:7b:11:2a:a7:aa:f2: 3a:8c:81:c4:8b:49:5d:f2:b5:3e:8f:0f:16:fb:69:92:d2:e4: 92:a4:97:aa:f2:f6:7d:6e:81:50:21:04:c8:43:8b:44:33:1b: dd:85:0c:c0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87h+xIk3Vij20QBNFENCOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ZmI1MjZhMzNmMzY2YWE4OTQ2MTg4ZTVkMzI2YmRjZTQ2 ZTJjNDAwHhcNMjYwMTAyMDQxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDgxM2MxNTQzYzViNjIyZDg0OWE5MTA2ZDYzMTg5ODY2ODFmMDM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkV8n58h0VaMzV7oRzXp10aB3/A7I LFn6zbdaFK2wGadJ8bwE086FbqpHaNuJTkmPLX5cbPaYoh+5gIeFUq0JvoE0ivN2 qkvwGLO64yUnDFGmBDgwVxIgz6MtQykUJmtZ7MOZiBBjvdakk3ssKqCyTlBe4EuB JdVyJShMt7WeWYQQLXVEhMPxWo4ix1fWo/MwwmzGqYTdiQaS43YZoHvzpkcV3Mue OLupbpx2iuVa+VzydYU7DBvZJpgoNuE1IrCieQaffCpSBBJl4OgPIrAtJe5fpP1g YmgpA3okwFYjlIW18KtdHFeIa5q1RuhN+/SBqPc8Af9n9BkB2028+kXIEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM2BPBVDxbYi2EmpEG1jGJhmgfA5MB8GA1UdIwQY MBaAFNX7Umoz82aqiUYYjl0ya9zkbixAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWZ0U2FqUHpacXFKUmhpT1hUSnIzT1J1TEVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS80YTI3Y2ItOGNkNi00NWNjLTgyNDYt MGU5ZDNlY2E0NGMyLzEvellFOEZVUEZ0aUxZU2FrUWJXTVltR2FCOERrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS80YTI3Y2ItOGNkNi00NWNjLTgyNDYtMGU5ZDNlY2E0NGMy LzEvMWZ0U2FqUHpacXFKUmhpT1hUSnIzT1J1TEVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFsGxAMA0G CSqGSIb3DQEBCwUAA4IBAQAIyAvlRL9VvNf5O2pzbV6KNsidx0kvmgREkxdYxos/ CyuygK/yyTzINvGJw//4S+lG/CeJg+9Vg01VbB+h45dzPTYVp8Er6T8QHvSa5nDD haDHWkIt/Mju2Ns/Gcwx4Cje2jpabBsskK/M6EvK16G1DKr8u24/VaHEEJyZunD5 rA53LRwUpVRPkZhSKTIX5ZoxyNx49SRtEHj9ZqnQG06a2uk0nEsYZVsCDuWvJlMY wyyOHSd2ErLdmtG0soiAqD+ko5iFsKOrgg/Ih2U0Zt7m4397ESqnqvI6jIHEi0ld 8rU+jw8W+2mS0uSSpJeq8vZ9boFQIQTIQ4tEMxvdhQzA -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:12 2026 by rpki-client