This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/z7fKjhaiqdZfTrxLi06_j5Ma9Io.roa File: z7fKjhaiqdZfTrxLi06_j5Ma9Io.roa (raw, json) Hash identifier: NfE0Lr+9eeAg6Z/D4db5jY17jz16ffOCdHHbeYcZws8= Subject key identifier: CF:B7:CA:8E:16:A2:A9:D6:5F:4E:BC:4B:8B:4E:BF:8F:93:1A:F4:8A Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019BFA02930FEDE776EA65E61EFA2A535AE7 Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/z7fKjhaiqdZfTrxLi06_j5Ma9Io.roa Signing time: Mon 26 Jan 2026 11:13:51 +0000 ROA not before: Mon 26 Jan 2026 11:13:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52116 IP address blocks: 77.105.11.0/24 maxlen: 24 77.105.31.0/24 maxlen: 24 79.175.116.0/24 maxlen: 24 81.18.49.0/24 maxlen: 24 81.18.50.0/24 maxlen: 24 81.18.52.0/23 maxlen: 23 81.18.61.0/24 maxlen: 24 93.186.67.0/24 maxlen: 24 93.186.72.0/24 maxlen: 24 109.121.60.0/24 maxlen: 24 178.253.207.0/24 maxlen: 24 178.253.213.0/24 maxlen: 24 178.253.214.0/24 maxlen: 24 178.253.219.0/24 maxlen: 24 178.253.236.0/24 maxlen: 24 185.47.88.0/24 maxlen: 24 185.47.90.0/24 maxlen: 24 188.255.130.0/24 maxlen: 24 188.255.190.0/24 maxlen: 24 188.255.208.0/24 maxlen: 24 188.255.213.0/24 maxlen: 24 188.255.219.0/24 maxlen: 24 188.255.226.0/24 maxlen: 24 188.255.244.0/23 maxlen: 23 188.255.246.0/24 maxlen: 24 188.255.252.0/24 maxlen: 24 188.255.254.0/24 maxlen: 24 188.255.255.0/24 maxlen: 24 212.69.7.0/24 maxlen: 24 212.69.12.0/24 maxlen: 24 212.69.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Feb 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:02:93:0f:ed:e7:76:ea:65:e6:1e:fa:2a:53:5a:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Jan 26 11:13:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cfb7ca8e16a2a9d65f4ebc4b8b4ebf8f931af48a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:05:b5:4b:19:75:99:bf:6c:a0:f2:47:bb:2f: 2f:b1:8e:90:b3:6f:34:59:0a:ca:82:2d:0b:03:09: bd:b3:41:c3:1f:bc:b3:d2:ba:45:62:c6:79:65:23: 01:06:b7:a6:89:69:38:ad:9f:c5:2b:40:f2:90:f1: 38:67:bf:3a:a2:cd:74:d1:a3:0b:59:2d:a3:cf:06: 61:b7:cc:c7:23:fb:0a:ae:18:a0:f6:2f:d9:f0:be: fe:c1:bd:f3:a7:43:c6:98:aa:c0:0f:76:13:14:82: 1c:02:13:91:08:54:db:84:bd:4a:17:1d:fd:51:af: 8d:4a:4d:d6:9f:44:23:df:25:64:6f:21:74:ec:71: 95:d4:79:9b:1f:c6:f9:84:2c:24:57:d2:c4:a5:e1: 72:f0:0d:de:b0:ef:17:d7:a3:4e:b2:2e:57:4c:e1: 58:e1:75:1a:13:c9:d6:47:5f:ee:c8:92:14:6a:28: d5:9e:19:ff:fe:92:92:9e:e5:4e:36:20:b4:93:cf: f1:92:bf:d7:9e:0c:4b:01:72:b7:1e:b3:e4:48:7e: 26:52:03:c8:86:ef:ae:a6:c0:69:46:a8:e5:96:60: ff:89:4a:f1:a8:fb:d5:07:24:e7:6b:17:7a:28:3b: 52:36:7a:6f:67:0c:81:25:e9:f2:cc:c1:71:c5:2a: 56:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:B7:CA:8E:16:A2:A9:D6:5F:4E:BC:4B:8B:4E:BF:8F:93:1A:F4:8A X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/z7fKjhaiqdZfTrxLi06_j5Ma9Io.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.105.11.0/24 77.105.31.0/24 79.175.116.0/24 81.18.49.0-81.18.50.255 81.18.52.0/23 81.18.61.0/24 93.186.67.0/24 93.186.72.0/24 109.121.60.0/24 178.253.207.0/24 178.253.213.0-178.253.214.255 178.253.219.0/24 178.253.236.0/24 185.47.88.0/24 185.47.90.0/24 188.255.130.0/24 188.255.190.0/24 188.255.208.0/24 188.255.213.0/24 188.255.219.0/24 188.255.226.0/24 188.255.244.0-188.255.246.255 188.255.252.0/24 188.255.254.0/23 212.69.7.0/24 212.69.12.0/24 212.69.18.0/24 Signature Algorithm: sha256WithRSAEncryption a7:68:e9:36:06:9c:ac:86:fa:26:bb:d7:90:0f:7f:7d:4f:f9: 8f:7c:62:98:1b:a3:82:83:1e:66:52:9f:11:72:0a:e6:a1:2b: 85:f3:ac:7e:c5:2b:13:85:32:d8:37:ed:78:b2:34:80:cf:af: be:fd:7b:f9:18:84:62:3d:03:3d:df:bf:e1:42:e1:9c:b8:c0: 8b:50:83:c2:3e:44:8d:c8:8b:b2:c7:fa:93:d5:7b:6c:6b:af: 6c:e7:82:9a:c6:03:d4:d7:9f:8f:c3:45:0b:f1:2e:78:d5:aa: 24:98:ee:c4:3b:26:ff:9c:d7:cb:c8:7a:9a:95:d2:7b:cd:3e: 2b:78:16:fc:b9:06:c4:a7:3d:77:8d:19:3c:ee:3f:68:43:1b: 68:66:42:d4:e0:21:de:54:f0:64:7a:d1:6c:83:e7:46:00:ec: 89:80:39:1b:10:26:fd:39:c2:9e:0b:be:cb:e7:b8:bf:d5:64: 08:ff:cc:87:d6:d9:c9:f7:8c:1d:86:60:81:03:75:46:c9:70: 33:5a:25:69:d2:6f:c1:af:5d:b5:eb:0a:78:65:1d:30:11:10: e7:09:45:02:19:fd:5c:be:af:78:f8:b9:b1:1d:b5:b6:23:a9: 3c:7b:a3:24:d7:b6:99:1b:05:b7:0d:b9:1a:c7:d4:4d:6a:7a: 0d:50:b2:61 -----BEGIN CERTIFICATE----- MIIFtjCCBJ6gAwIBAgISAZv6ApMP7ed26mXmHvoqU1rnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjYwMTI2MTExMzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZmI3Y2E4ZTE2YTJhOWQ2NWY0ZWJjNGI4YjRlYmY4ZjkzMWFmNDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgW1Sxl1mb9soPJHuy8vsY6Qs280 WQrKgi0LAwm9s0HDH7yz0rpFYsZ5ZSMBBremiWk4rZ/FK0DykPE4Z786os100aML WS2jzwZht8zHI/sKrhig9i/Z8L7+wb3zp0PGmKrAD3YTFIIcAhORCFTbhL1KFx39 Ua+NSk3Wn0Qj3yVkbyF07HGV1HmbH8b5hCwkV9LEpeFy8A3esO8X16NOsi5XTOFY 4XUaE8nWR1/uyJIUaijVnhn//pKSnuVONiC0k8/xkr/XngxLAXK3HrPkSH4mUgPI hu+upsBpRqjllmD/iUrxqPvVByTnaxd6KDtSNnpvZwyBJenyzMFxxSpWJQIDAQAB o4ICwjCCAr4wHQYDVR0OBBYEFM+3yo4WoqnWX068S4tOv4+TGvSKMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvejdmS2poYWlxZFpmVHJ4TGkwNl9qNU1hOUlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHXBggrBgEFBQcBBwEB/wSBxzCBxDCBwQQCAAEwgboDBABN aQsDBABNaR8DBABPr3QwDAMEAFESMQMEAFESMgMEAVESNAMEAFESPQMEAF26QwME AF26SAMEAG15PAMEALL9zzAMAwQAsv3VAwQAsv3WAwQAsv3bAwQAsv3sAwQAuS9Y AwQAuS9aAwQAvP+CAwQAvP++AwQAvP/QAwQAvP/VAwQAvP/bAwQAvP/iMAwDBAK8 //QDBAC8//YDBAC8//wDBAG8//4DBADURQcDBADURQwDBADURRIwDQYJKoZIhvcN AQELBQADggEBAKdo6TYGnKyG+ia715APf31P+Y98Ypgbo4KDHmZSnxFyCuahK4Xz rH7FKxOFMtg37XiyNIDPr779e/kYhGI9Az3fv+FC4Zy4wItQg8I+RI3Ii7LH+pPV e2xrr2zngprGA9TXn4/DRQvxLnjVqiSY7sQ7Jv+c18vIepqV0nvNPit4Fvy5BsSn PXeNGTzuP2hDG2hmQtTgId5U8GR60WyD50YA7ImAORsQJv05wp4LvsvnuL/VZAj/ zIfW2cn3jB2GYIEDdUbJcDNaJWnSb8GvXbXrCnhlHTAREOcJRQIZ/Vy+r3j4ubEd tbYjqTx7oyTXtpkbBbcNuRrH1E1qeg1QsmE= -----END CERTIFICATE-----Generated at Tue Feb 3 12:59:43 2026 by rpki-client