This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/zAJ0lazmtBx4o1ucOt16-rffSKk.roa File: zAJ0lazmtBx4o1ucOt16-rffSKk.roa (raw, json) Hash identifier: buVEFhag2OpamuibkMvazHsfj8TP3y4t5xXWX3couxY= Subject key identifier: CC:02:74:95:AC:E6:B4:1C:78:A3:5B:9C:3A:DD:7A:FA:B7:DF:48:A9 Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Certificate serial: 019B7C809A24B4830DA673242812273CA31E Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/zAJ0lazmtBx4o1ucOt16-rffSKk.roa Signing time: Fri 02 Jan 2026 02:19:21 +0000 ROA not before: Fri 02 Jan 2026 02:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 84.32.4.0/24 maxlen: 24 84.32.11.0/24 maxlen: 24 84.32.14.0/24 maxlen: 24 84.32.27.0/24 maxlen: 24 84.32.28.0/24 maxlen: 24 84.32.29.0/24 maxlen: 24 84.32.30.0/24 maxlen: 24 84.32.31.0/24 maxlen: 24 84.32.42.0/24 maxlen: 24 84.32.43.0/24 maxlen: 24 84.32.62.0/24 maxlen: 24 84.32.65.0/24 maxlen: 24 84.32.68.0/24 maxlen: 24 84.32.76.0/24 maxlen: 24 84.32.77.0/24 maxlen: 24 84.32.79.0/24 maxlen: 24 84.32.85.0/24 maxlen: 24 84.32.88.0/24 maxlen: 24 84.32.89.0/24 maxlen: 24 84.32.90.0/24 maxlen: 24 84.32.92.0/24 maxlen: 24 84.32.93.0/24 maxlen: 24 84.32.94.0/24 maxlen: 24 84.32.105.0/24 maxlen: 24 84.32.150.0/24 maxlen: 24 84.32.153.0/24 maxlen: 24 84.32.155.0/24 maxlen: 24 84.32.157.0/24 maxlen: 24 84.32.158.0/24 maxlen: 24 84.32.159.0/24 maxlen: 24 84.32.172.0/24 maxlen: 24 84.32.174.0/24 maxlen: 24 84.32.175.0/24 maxlen: 24 84.32.211.0/24 maxlen: 24 84.32.212.0/24 maxlen: 24 84.32.213.0/24 maxlen: 24 84.32.219.0/24 maxlen: 24 84.32.221.0/24 maxlen: 24 84.32.222.0/24 maxlen: 24 84.32.224.0/24 maxlen: 24 84.32.226.0/24 maxlen: 24 84.32.228.0/24 maxlen: 24 84.32.229.0/24 maxlen: 24 84.32.232.0/24 maxlen: 24 84.32.233.0/24 maxlen: 24 84.32.234.0/24 maxlen: 24 84.32.235.0/24 maxlen: 24 84.32.237.0/24 maxlen: 24 84.32.238.0/24 maxlen: 24 84.32.239.0/24 maxlen: 24 84.32.240.0/24 maxlen: 24 84.32.241.0/24 maxlen: 24 84.32.242.0/24 maxlen: 24 84.32.243.0/24 maxlen: 24 84.32.245.0/24 maxlen: 24 84.32.246.0/24 maxlen: 24 84.32.247.0/24 maxlen: 24 84.32.252.0/24 maxlen: 24 84.32.253.0/24 maxlen: 24 84.32.254.0/24 maxlen: 24 84.32.255.0/24 maxlen: 24 88.216.0.0/24 maxlen: 24 88.216.1.0/24 maxlen: 24 88.216.3.0/24 maxlen: 24 88.216.16.0/24 maxlen: 24 88.216.18.0/24 maxlen: 24 88.216.22.0/24 maxlen: 24 88.216.23.0/24 maxlen: 24 88.216.32.0/24 maxlen: 24 88.216.33.0/24 maxlen: 24 88.216.35.0/24 maxlen: 24 88.216.38.0/24 maxlen: 24 88.216.40.0/24 maxlen: 24 88.216.42.0/24 maxlen: 24 88.216.47.0/24 maxlen: 24 88.216.58.0/24 maxlen: 24 88.216.64.0/24 maxlen: 24 88.216.65.0/24 maxlen: 24 88.216.94.0/24 maxlen: 24 88.216.95.0/24 maxlen: 24 88.216.97.0/24 maxlen: 24 88.216.101.0/24 maxlen: 24 88.216.102.0/24 maxlen: 24 88.216.109.0/24 maxlen: 24 88.216.110.0/24 maxlen: 24 88.216.111.0/24 maxlen: 24 88.216.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 23:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:9a:24:b4:83:0d:a6:73:24:28:12:27:3c:a3:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Validity Not Before: Jan 2 02:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc027495ace6b41c78a35b9c3add7afab7df48a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ac:9c:77:81:47:c9:a9:39:7d:36:7b:21:42: 29:5a:2e:b6:de:23:af:2f:75:b4:f4:f1:b8:b6:31: 01:1e:b9:bd:4a:57:ce:2e:05:82:2d:37:c6:4a:0e: 22:e7:40:47:45:15:23:f9:87:95:f2:77:69:3c:eb: a0:3e:67:9b:63:42:82:bb:43:cb:1a:86:03:35:f8: bf:d4:68:54:ee:77:d0:90:ee:77:e8:2b:59:c0:6c: 6d:c8:81:db:c1:96:02:e0:52:fa:b4:35:ec:15:d2: 3e:17:4c:45:9c:21:70:e4:2d:27:88:3b:d5:f1:32: 81:54:d6:9b:32:c2:0d:c4:34:c9:6d:a1:93:77:65: 6e:ed:c2:f5:3b:7c:d1:ef:13:16:0c:32:eb:d2:7b: af:8e:6e:fa:ea:54:44:ce:d2:ec:c6:17:c3:c9:77: 66:ff:4f:ff:e0:80:00:7f:b9:81:a9:17:f5:cc:57: d8:a4:b4:8c:9a:a3:c9:5b:57:d4:a5:1d:24:27:96: 18:5f:5a:06:1f:1c:74:ae:63:7d:a3:7e:0f:ed:ea: f8:54:64:22:76:93:17:e1:79:03:96:e3:7e:46:95: 28:a6:e2:87:03:83:0d:b5:0f:25:a1:c6:0f:83:71: 03:ac:0d:fd:56:ec:d6:16:f2:e7:ca:57:67:84:63: bf:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:02:74:95:AC:E6:B4:1C:78:A3:5B:9C:3A:DD:7A:FA:B7:DF:48:A9 X509v3 Authority Key Identifier: keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/zAJ0lazmtBx4o1ucOt16-rffSKk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.32.4.0/24 84.32.11.0/24 84.32.14.0/24 84.32.27.0-84.32.31.255 84.32.42.0/23 84.32.62.0/24 84.32.65.0/24 84.32.68.0/24 84.32.76.0/23 84.32.79.0/24 84.32.85.0/24 84.32.88.0-84.32.90.255 84.32.92.0-84.32.94.255 84.32.105.0/24 84.32.150.0/24 84.32.153.0/24 84.32.155.0/24 84.32.157.0-84.32.159.255 84.32.172.0/24 84.32.174.0/23 84.32.211.0-84.32.213.255 84.32.219.0/24 84.32.221.0-84.32.222.255 84.32.224.0/24 84.32.226.0/24 84.32.228.0/23 84.32.232.0/22 84.32.237.0-84.32.243.255 84.32.245.0-84.32.247.255 84.32.252.0/22 88.216.0.0/23 88.216.3.0/24 88.216.16.0/24 88.216.18.0/24 88.216.22.0/23 88.216.32.0/23 88.216.35.0/24 88.216.38.0/24 88.216.40.0/24 88.216.42.0/24 88.216.47.0/24 88.216.58.0/24 88.216.64.0/23 88.216.94.0/23 88.216.97.0/24 88.216.101.0-88.216.102.255 88.216.109.0-88.216.111.255 88.216.128.0/24 Signature Algorithm: sha256WithRSAEncryption 62:ad:5f:13:db:1f:9d:2f:ea:74:d4:fe:cf:a3:fa:87:4e:21: 11:ed:83:df:ea:39:d4:87:f1:8c:3c:e5:b0:c5:81:64:4f:6e: 9b:3b:05:80:c7:ba:21:41:ac:af:97:42:81:3f:3e:41:37:0a: 32:14:dd:94:82:f5:55:ea:ee:da:ea:d9:6a:a7:46:b1:99:aa: 0e:96:37:5e:c3:49:5b:55:e3:b1:81:df:ea:54:1d:70:13:8b: 94:86:9d:71:8c:97:59:d4:f6:2e:4e:db:77:7a:c4:49:6a:b8: 87:4e:9f:95:9a:7f:f8:f9:34:4f:83:d0:04:af:bc:5b:eb:27: ce:85:a8:00:66:01:61:7b:48:d7:cf:47:bb:41:8d:7f:d1:42: 57:f2:b2:ee:c8:43:4d:1a:31:30:dc:05:b4:9c:0b:4f:e7:e7: c1:64:5a:5c:12:f2:5d:52:ea:12:76:29:d5:30:ac:50:80:89: ad:fe:f8:d5:f3:76:29:36:ca:8f:40:d0:c6:a7:cc:4f:cc:86: 82:b2:b9:c4:24:3f:d1:3b:53:94:ac:0c:82:93:ec:57:62:96: e0:ff:4c:1e:d5:a5:0c:91:06:4e:7f:68:a4:22:71:a5:b4:d5: e2:9d:b0:9a:2c:99:27:e2:e3:a9:03:fa:ad:0b:36:45:6f:e1: 2f:87:f2:a0 -----BEGIN CERTIFICATE----- MIIGcTCCBVmgAwIBAgISAZt8gJoktIMNpnMkKBInPKMeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi ZGEzYzUwHhcNMjYwMTAyMDIxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzAyNzQ5NWFjZTZiNDFjNzhhMzViOWMzYWRkN2FmYWI3ZGY0OGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaycd4FHyak5fTZ7IUIpWi623iOv L3W09PG4tjEBHrm9SlfOLgWCLTfGSg4i50BHRRUj+YeV8ndpPOugPmebY0KCu0PL GoYDNfi/1GhU7nfQkO536CtZwGxtyIHbwZYC4FL6tDXsFdI+F0xFnCFw5C0niDvV 8TKBVNabMsINxDTJbaGTd2Vu7cL1O3zR7xMWDDLr0nuvjm766lREztLsxhfDyXdm /0//4IAAf7mBqRf1zFfYpLSMmqPJW1fUpR0kJ5YYX1oGHxx0rmN9o34P7er4VGQi dpMX4XkDluN+RpUopuKHA4MNtQ8locYPg3EDrA39VuzWFvLnyldnhGO/DQIDAQAB o4IDfTCCA3kwHQYDVR0OBBYEFMwCdJWs5rQceKNbnDrdevq330ipMB8GA1UdIwQY MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt MjM0ODFiZjA5MWMzLzEvekFKMGxhem10Qng0bzF1Y090MTYtcmZmU0trLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBkQYIKwYBBQUHAQcBAf8EggGAMIIBfDCCAXgEAgABMIIB cAMEAFQgBAMEAFQgCwMEAFQgDjAMAwQAVCAbAwQFVCAAAwQBVCAqAwQAVCA+AwQA VCBBAwQAVCBEAwQBVCBMAwQAVCBPAwQAVCBVMAwDBANUIFgDBABUIFowDAMEAlQg XAMEAFQgXgMEAFQgaQMEAFQglgMEAFQgmQMEAFQgmzAMAwQAVCCdAwQFVCCAAwQA VCCsAwQBVCCuMAwDBABUINMDBAFUINQDBABUINswDAMEAFQg3QMEAFQg3gMEAFQg 4AMEAFQg4gMEAVQg5AMEAlQg6DAMAwQAVCDtAwQCVCDwMAwDBABUIPUDBANUIPAD BAJUIPwDBAFY2AADBABY2AMDBABY2BADBABY2BIDBAFY2BYDBAFY2CADBABY2CMD BABY2CYDBABY2CgDBABY2CoDBABY2C8DBABY2DoDBAFY2EADBAFY2F4DBABY2GEw DAMEAFjYZQMEAFjYZjAMAwQAWNhtAwQEWNhgAwQAWNiAMA0GCSqGSIb3DQEBCwUA A4IBAQBirV8T2x+dL+p01P7Po/qHTiER7YPf6jnUh/GMPOWwxYFkT26bOwWAx7oh Qayvl0KBPz5BNwoyFN2UgvVV6u7a6tlqp0axmaoOljdew0lbVeOxgd/qVB1wE4uU hp1xjJdZ1PYuTtt3esRJariHTp+Vmn/4+TRPg9AEr7xb6yfOhagAZgFhe0jXz0e7 QY1/0UJX8rLuyENNGjEw3AW0nAtP5+fBZFpcEvJdUuoSdinVMKxQgImt/vjV83Yp NsqPQNDGp8xPzIaCsrnEJD/RO1OUrAyCk+xXYpbg/0we1aUMkQZOf2ikInGltNXi nbCaLJkn4uOpA/qtCzZFb+Evh/Kg -----END CERTIFICATE-----Generated at Sun Jan 18 08:54:47 2026 by rpki-client