This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/zS0wzQLKSW80VXv0ZOoMSI3tvJ0.roa File: zS0wzQLKSW80VXv0ZOoMSI3tvJ0.roa (raw, json) Hash identifier: 2I/sSelw5VmBQuf5YaJq9EbH4rTmj1lcBC5rreXqiWE= Subject key identifier: CD:2D:30:CD:02:CA:49:6F:34:55:7B:F4:64:EA:0C:48:8D:ED:BC:9D Certificate issuer: /CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd Certificate serial: 019B7BA33768949CDC8FC6BF59FCA6AF2305 Authority key identifier: A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/zS0wzQLKSW80VXv0ZOoMSI3tvJ0.roa Signing time: Thu 01 Jan 2026 22:17:32 +0000 ROA not before: Thu 01 Jan 2026 22:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6461 IP address blocks: 45.89.212.0/22 maxlen: 24 45.94.8.0/22 maxlen: 24 45.94.10.0/24 maxlen: 24 94.26.93.0/24 maxlen: 24 94.26.95.0/24 maxlen: 24 94.26.97.0/24 maxlen: 24 94.26.98.0/23 maxlen: 24 94.26.101.0/24 maxlen: 24 94.26.103.0/24 maxlen: 24 94.26.109.0/24 maxlen: 24 94.190.196.0/22 maxlen: 24 94.190.196.0/24 maxlen: 24 94.190.197.0/24 maxlen: 24 94.190.198.0/24 maxlen: 24 94.190.199.0/24 maxlen: 24 104.255.128.0/21 maxlen: 24 153.94.56.0/21 maxlen: 24 185.9.212.0/22 maxlen: 24 185.49.216.0/22 maxlen: 24 185.75.80.0/22 maxlen: 24 185.83.148.0/23 maxlen: 24 185.83.150.0/23 maxlen: 24 185.94.76.0/23 maxlen: 24 185.94.78.0/23 maxlen: 24 192.190.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.crl rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:37:68:94:9c:dc:8f:c6:bf:59:fc:a6:af:23:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd Validity Not Before: Jan 1 22:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd2d30cd02ca496f34557bf464ea0c488dedbc9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3a:9a:aa:20:bf:9c:2f:c8:9a:85:44:8a:b3: 80:77:a6:e5:f1:e5:19:df:ae:7f:91:be:ac:5d:15: bc:37:ed:5a:4b:c6:a5:07:29:6d:5e:34:42:14:9e: 30:8c:83:18:99:65:cb:52:b0:73:94:04:d7:4a:97: e5:22:04:e2:dd:52:06:e6:ff:f0:2d:a9:f4:f4:20: 64:e6:64:dc:ce:dc:52:ee:55:4a:b7:5b:9a:ad:72: bb:d6:33:e2:35:2e:fd:80:a0:eb:16:a1:2b:16:93: c1:98:86:ae:40:ba:f1:a0:3c:c9:36:d2:b5:12:7e: 32:b4:35:e8:d8:10:19:f4:60:be:f8:a5:84:a7:e3: ec:97:8f:7e:39:35:8f:a7:83:6b:b0:e7:81:fe:19: de:c6:2c:f6:12:58:9c:c7:91:4c:02:94:15:5f:f2: b6:66:95:90:07:4e:50:73:c0:22:f1:52:65:d7:db: ee:f4:d7:94:38:bf:48:31:a6:e3:ea:c9:4b:65:23: 76:c4:7b:62:4e:e0:fd:b4:28:19:a6:b7:c7:34:fe: 64:04:5e:d3:07:c9:99:34:44:b5:3d:fd:63:74:80: ff:de:9c:d8:15:07:4e:2f:4d:59:d3:60:f0:13:71: 7f:fd:b4:97:4c:74:0c:2e:50:80:2d:26:54:11:c2: 8c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:2D:30:CD:02:CA:49:6F:34:55:7B:F4:64:EA:0C:48:8D:ED:BC:9D X509v3 Authority Key Identifier: keyid:A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/zS0wzQLKSW80VXv0ZOoMSI3tvJ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.89.212.0/22 45.94.8.0/22 94.26.93.0/24 94.26.95.0/24 94.26.97.0-94.26.99.255 94.26.101.0/24 94.26.103.0/24 94.26.109.0/24 94.190.196.0/22 104.255.128.0/21 153.94.56.0/21 185.9.212.0/22 185.49.216.0/22 185.75.80.0/22 185.83.148.0/22 185.94.76.0/22 192.190.168.0/22 Signature Algorithm: sha256WithRSAEncryption 50:20:29:ce:10:8c:ca:e9:26:5a:a1:a1:af:30:67:6f:8a:0f: 2a:5d:8b:04:7c:7f:d9:65:ab:9d:75:53:9d:94:a6:8d:5b:a1: 82:bf:d3:05:70:5e:cf:fb:08:18:94:5c:14:9b:af:4d:f9:62: 4a:fb:6a:65:5d:e8:0d:92:a9:8a:bd:08:2c:2f:af:d5:bf:ad: 3d:61:67:c2:b0:b0:ba:27:4c:01:06:60:a9:5f:3e:a7:53:02: 3a:12:c4:96:34:51:8c:d7:c8:10:1d:90:92:f6:10:07:b9:b8: d1:07:6b:d1:83:58:36:9c:44:25:60:51:b1:d9:c6:9f:0b:13: 5c:91:40:9b:f1:0c:9f:3f:d1:29:f2:09:cc:79:8f:82:1c:8b: 4f:0e:f0:cf:f7:24:de:cb:22:e2:5d:24:7b:ac:3b:60:74:3a: 3e:95:89:0f:49:5c:5a:67:6b:4e:91:f3:46:2c:a6:9e:ef:cf: ed:37:0e:41:7e:80:2b:4c:1a:33:46:fc:f6:d2:b7:ac:fa:ca: bf:53:ca:bd:24:6f:33:02:6d:68:9f:ac:f3:8c:d8:e2:e4:4c: b5:0e:b2:85:ac:4e:02:1d:c8:14:f1:4e:8c:a9:ca:84:10:85: bb:ab:4f:87:f9:34:8b:fc:0d:1f:c1:05:ff:30:38:37:ac:91: af:86:b1:e5 -----BEGIN CERTIFICATE----- MIIFZjCCBE6gAwIBAgISAZt7ozdolJzcj8a/WfymryMFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0OWM0ZTBjZjVjOGRiYmI2YTY3Y2YxZGEyZjMxZjQxNjI3 NDlmZGQwHhcNMjYwMTAxMjIxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDJkMzBjZDAyY2E0OTZmMzQ1NTdiZjQ2NGVhMGM0ODhkZWRiYzlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TqaqiC/nC/ImoVEirOAd6bl8eUZ 365/kb6sXRW8N+1aS8alByltXjRCFJ4wjIMYmWXLUrBzlATXSpflIgTi3VIG5v/w Lan09CBk5mTcztxS7lVKt1uarXK71jPiNS79gKDrFqErFpPBmIauQLrxoDzJNtK1 En4ytDXo2BAZ9GC++KWEp+Psl49+OTWPp4NrsOeB/hnexiz2Elicx5FMApQVX/K2 ZpWQB05Qc8Ai8VJl19vu9NeUOL9IMabj6slLZSN2xHtiTuD9tCgZprfHNP5kBF7T B8mZNES1Pf1jdID/3pzYFQdOL01Z02DwE3F//bSXTHQMLlCALSZUEcKMlwIDAQAB o4ICcjCCAm4wHQYDVR0OBBYEFM0tMM0CyklvNFV79GTqDEiN7bydMB8GA1UdIwQY MBaAFKScTgz1yNu7amfPHaLzH0FidJ/dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEp4T0RQWEkyN3RxWjg4ZG92TWZRV0owbjkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC85ZTE5YzYtZGVmZC00NTVmLTkwYTMt ODhlZDhkNzcxN2E0LzEvelMwd3pRTEtTVzgwVlh2MFpPb01TSTN0dkowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC85ZTE5YzYtZGVmZC00NTVmLTkwYTMtODhlZDhkNzcxN2E0 LzEvcEp4T0RQWEkyN3RxWjg4ZG92TWZRV0owbjkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGHBggrBgEFBQcBBwEB/wR4MHYwdAQCAAEwbgMEAi1Z1AME Ai1eCAMEAF4aXQMEAF4aXzAMAwQAXhphAwQCXhpgAwQAXhplAwQAXhpnAwQAXhpt AwQCXr7EAwQDaP+AAwQDmV44AwQCuQnUAwQCuTHYAwQCuUtQAwQCuVOUAwQCuV5M AwQCwL6oMA0GCSqGSIb3DQEBCwUAA4IBAQBQICnOEIzK6SZaoaGvMGdvig8qXYsE fH/ZZauddVOdlKaNW6GCv9MFcF7P+wgYlFwUm69N+WJK+2plXegNkqmKvQgsL6/V v609YWfCsLC6J0wBBmCpXz6nUwI6EsSWNFGM18gQHZCS9hAHubjRB2vRg1g2nEQl YFGx2cafCxNckUCb8QyfP9Ep8gnMeY+CHItPDvDP9yTeyyLiXSR7rDtgdDo+lYkP SVxaZ2tOkfNGLKae78/tNw5BfoArTBozRvz20res+sq/U8q9JG8zAm1on6zzjNji 5Ey1DrKFrE4CHcgU8U6MqcqEEIW7q0+H+TSL/A0fwQX/MDg3rJGvhrHl -----END CERTIFICATE-----Generated at Tue Jan 20 01:21:59 2026 by rpki-client