This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/ZKlKzuP-3KIu0ytUKTqCxBGN9TM.roa File: ZKlKzuP-3KIu0ytUKTqCxBGN9TM.roa (raw, json) Hash identifier: SDs87Jaxku1PQ7oFYG+wM5Er0JvuQEL/e/JKQfxtyCo= Subject key identifier: 64:A9:4A:CE:E3:FE:DC:A2:2E:D3:2B:54:29:3A:82:C4:11:8D:F5:33 Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec Certificate serial: 019ABF5ED8D33E5AAFF4106A6CC69C2CFB96 Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/ZKlKzuP-3KIu0ytUKTqCxBGN9TM.roa Signing time: Wed 26 Nov 2025 08:54:15 +0000 ROA not before: Wed 26 Nov 2025 08:54:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 44486 IP address blocks: 37.114.32.0/24 maxlen: 24 37.114.34.0/24 maxlen: 24 37.114.35.0/24 maxlen: 24 37.114.36.0/24 maxlen: 24 37.114.38.0/23 maxlen: 24 37.114.42.0/24 maxlen: 24 37.114.43.0/24 maxlen: 24 37.114.45.0/24 maxlen: 24 37.114.47.0/24 maxlen: 24 37.114.48.0/24 maxlen: 24 37.114.49.0/24 maxlen: 24 37.114.51.0/24 maxlen: 24 37.114.52.0/24 maxlen: 24 37.114.53.0/24 maxlen: 24 37.114.54.0/24 maxlen: 24 37.114.55.0/24 maxlen: 24 37.114.56.0/24 maxlen: 24 37.114.57.0/24 maxlen: 24 37.114.59.0/24 maxlen: 24 37.114.60.0/24 maxlen: 24 37.114.61.0/24 maxlen: 24 37.114.62.0/24 maxlen: 24 103.252.88.0/22 maxlen: 22 176.100.32.0/24 maxlen: 24 176.100.33.0/24 maxlen: 24 176.100.34.0/24 maxlen: 24 176.100.35.0/24 maxlen: 24 176.100.38.0/24 maxlen: 24 185.14.94.0/24 maxlen: 24 185.14.95.0/24 maxlen: 24 2a00:ccc1:100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 29 Nov 2025 14:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bf:5e:d8:d3:3e:5a:af:f4:10:6a:6c:c6:9c:2c:fb:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec Validity Not Before: Nov 26 08:54:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=64a94acee3fedca22ed32b54293a82c4118df533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1f:79:12:fc:d0:2d:e0:a9:5b:5c:ab:1c:b2: 17:c5:75:5c:93:42:f5:8d:29:94:b1:af:d2:37:f6: e8:b9:e0:bf:91:99:e7:ec:40:1b:a4:9b:72:82:91: 56:5d:4c:b7:13:48:d1:5b:eb:27:f6:a0:c4:43:d5: dc:c3:9c:df:52:17:6a:18:51:99:10:70:49:24:55: 5b:6e:3f:40:47:a0:24:fd:ff:6b:8a:bc:2c:da:47: 83:67:2c:87:e2:6f:30:ac:49:f9:39:c3:b6:de:6f: ed:a7:66:1d:0b:88:74:df:27:e1:68:b1:63:53:32: a8:9b:9a:b6:fe:fc:9b:cf:f4:6e:7a:68:fd:31:7e: 43:ee:dd:a8:cd:16:19:dd:01:d9:b9:dd:fe:15:df: 43:21:f5:88:b2:a1:ce:f1:4d:fe:15:c0:91:36:3b: b5:b7:08:86:55:dd:1a:a6:b6:31:a0:50:1e:14:d4: 3e:8a:60:9d:0c:5f:de:22:86:95:06:2f:91:38:d3: eb:8c:be:5a:31:d3:59:7a:d5:ad:64:38:f9:7b:3f: 47:92:f0:c1:a8:75:16:05:55:cf:4e:ef:18:76:c0: c2:92:64:f2:af:59:a4:75:f2:c3:40:e8:33:3c:6c: 83:d9:05:a0:a0:ed:8c:60:15:13:30:a0:b5:51:b2: d4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:A9:4A:CE:E3:FE:DC:A2:2E:D3:2B:54:29:3A:82:C4:11:8D:F5:33 X509v3 Authority Key Identifier: keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/ZKlKzuP-3KIu0ytUKTqCxBGN9TM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.114.32.0/24 37.114.34.0-37.114.36.255 37.114.38.0/23 37.114.42.0/23 37.114.45.0/24 37.114.47.0-37.114.49.255 37.114.51.0-37.114.57.255 37.114.59.0-37.114.62.255 103.252.88.0/22 176.100.32.0/22 176.100.38.0/24 185.14.94.0/23 IPv6: 2a00:ccc1:100::/40 Signature Algorithm: sha256WithRSAEncryption 3d:8b:c6:a5:a9:80:72:92:78:3a:40:52:be:75:9a:30:61:4b: fc:e4:af:b3:88:02:13:e3:22:f6:b6:03:68:77:54:06:41:d4: cc:4e:35:4f:0f:2d:8b:04:18:34:96:14:d2:cc:58:dc:16:fd: 05:a2:01:b1:8f:86:ab:c0:01:e9:51:87:ce:29:c4:2e:7f:22: ac:4f:f9:78:31:3d:3f:d1:ac:bf:8b:e5:08:2f:54:07:0d:b3: 0b:65:62:84:d3:be:7d:85:b9:41:9a:6a:8e:6a:4d:e7:2f:37: c4:8e:6e:13:43:56:05:85:7f:b2:61:b6:7b:4e:d4:05:5b:ec: 6f:15:0f:2e:77:18:d0:35:84:30:8c:a1:3c:4e:bb:c0:dc:d6: ee:97:5b:a1:34:81:79:94:4d:1c:fe:28:4a:dc:71:dd:69:48: 95:ae:55:43:af:8a:5a:33:59:27:30:66:b1:ee:32:44:e2:94: 1e:07:cd:c8:83:b8:7a:4e:70:b4:3f:07:1e:73:e9:25:71:1f: ab:fc:38:30:63:2b:b2:db:90:4a:c6:88:8a:8b:0c:9c:be:02: 7f:ec:53:20:1a:5a:b3:78:64:73:32:c6:68:5e:a0:ed:e5:9d: 6d:8c:d9:91:ea:ba:97:d6:33:c3:08:ef:80:84:7c:d6:5f:69: 1b:16:62:cb -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgISAZq/XtjTPlqv9BBqbMacLPuWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NjU5M2I3NDdlNzZhNTY0OTI1MTFiYjM2MTJlNGQ1ZTRj YmU3ZWMwHhcNMjUxMTI2MDg1NDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NGE5NGFjZWUzZmVkY2EyMmVkMzJiNTQyOTNhODJjNDExOGRmNTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0B95EvzQLeCpW1yrHLIXxXVck0L1 jSmUsa/SN/boueC/kZnn7EAbpJtygpFWXUy3E0jRW+sn9qDEQ9Xcw5zfUhdqGFGZ EHBJJFVbbj9AR6Ak/f9rirws2keDZyyH4m8wrEn5OcO23m/tp2YdC4h03yfhaLFj UzKom5q2/vybz/Ruemj9MX5D7t2ozRYZ3QHZud3+Fd9DIfWIsqHO8U3+FcCRNju1 twiGVd0aprYxoFAeFNQ+imCdDF/eIoaVBi+RONPrjL5aMdNZetWtZDj5ez9HkvDB qHUWBVXPTu8YdsDCkmTyr1mkdfLDQOgzPGyD2QWgoO2MYBUTMKC1UbLUWQIDAQAB o4ICfjCCAnowHQYDVR0OBBYEFGSpSs7j/tyiLtMrVCk6gsQRjfUzMB8GA1UdIwQY MBaAFCllk7dH52pWSSURuzYS5NXky+fsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1dXVHQwZm5hbFpKSlJHN05oTGsxZVRMNS13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNThiZGMtMTRlNy00OTljLTlkOWMt MWI3Y2JiMDhkNzNmLzEvWktsS3p1UC0zS0l1MHl0VUtUcUN4QkdOOVRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9jNThiZGMtMTRlNy00OTljLTlkOWMtMWI3Y2JiMDhkNzNm LzEvS1dXVHQwZm5hbFpKSlJHN05oTGsxZVRMNS13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGTBggrBgEFBQcBBwEB/wSBgzCBgDBuBAIAATBoAwQAJXIg MAwDBAElciIDBAAlciQDBAElciYDBAElcioDBAAlci0wDAMEACVyLwMEASVyMDAM AwQAJXIzAwQBJXI4MAwDBAAlcjsDBAAlcj4DBAJn/FgDBAKwZCADBACwZCYDBAG5 Dl4wDgQCAAIwCAMGACoAzMEBMA0GCSqGSIb3DQEBCwUAA4IBAQA9i8alqYBykng6 QFK+dZowYUv85K+ziAIT4yL2tgNod1QGQdTMTjVPDy2LBBg0lhTSzFjcFv0FogGx j4arwAHpUYfOKcQufyKsT/l4MT0/0ay/i+UIL1QHDbMLZWKE0759hblBmmqOak3n LzfEjm4TQ1YFhX+yYbZ7TtQFW+xvFQ8udxjQNYQwjKE8TrvA3Nbul1uhNIF5lE0c /ihK3HHdaUiVrlVDr4paM1knMGax7jJE4pQeB83Ig7h6TnC0Pwcec+klcR+r/Dgw Yyuy25BKxoiKiwycvgJ/7FMgGlqzeGRzMsZoXqDt5Z1tjNmR6rqX1jPDCO+AhHzW X2kbFmLL -----END CERTIFICATE-----Generated at Fri Nov 28 22:12:31 2025 by rpki-client