This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/ZUTPmES_I92lge3VqoMKVsiadL8.roa File: ZUTPmES_I92lge3VqoMKVsiadL8.roa (raw, json) Hash identifier: EYCn+DNcKMqEruiNAkvCDVx9dzY2G8BAuiKbjATbTdE= Subject key identifier: 65:44:CF:98:44:BF:23:DD:A5:81:ED:D5:AA:83:0A:56:C8:9A:74:BF Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec Certificate serial: 019B7A5AB45792D460659761E3A39E00DD83 Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/ZUTPmES_I92lge3VqoMKVsiadL8.roa Signing time: Thu 01 Jan 2026 16:18:43 +0000 ROA not before: Thu 01 Jan 2026 16:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60461 IP address blocks: 37.114.32.0/19 maxlen: 32 37.114.39.0/24 maxlen: 24 37.114.43.0/24 maxlen: 24 37.114.44.0/24 maxlen: 24 37.114.45.0/24 maxlen: 24 37.114.46.0/24 maxlen: 24 37.114.48.0/24 maxlen: 24 37.114.49.0/24 maxlen: 24 37.114.50.0/24 maxlen: 24 37.114.51.0/24 maxlen: 24 37.114.52.0/24 maxlen: 24 37.114.54.0/24 maxlen: 24 37.114.55.0/24 maxlen: 24 37.114.58.0/24 maxlen: 24 37.114.63.0/24 maxlen: 24 43.251.160.0/24 maxlen: 24 43.251.161.0/24 maxlen: 24 94.154.50.0/24 maxlen: 24 94.154.55.0/24 maxlen: 24 176.100.36.0/24 maxlen: 24 176.100.37.0/24 maxlen: 24 176.100.38.0/24 maxlen: 24 176.100.39.0/24 maxlen: 24 185.14.92.0/24 maxlen: 24 185.14.93.0/24 maxlen: 24 2a00:ccc3::/32 maxlen: 32 2a00:ccc5::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 19:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:b4:57:92:d4:60:65:97:61:e3:a3:9e:00:dd:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec Validity Not Before: Jan 1 16:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6544cf9844bf23dda581edd5aa830a56c89a74bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:35:b6:97:df:91:75:77:5a:33:f5:dc:63:bd: 52:d8:54:35:46:27:38:d8:c1:b0:31:3e:bb:a6:45: 43:dd:a8:1c:be:93:48:dd:92:e3:51:f9:99:9a:ee: 31:e2:ac:45:27:df:0e:7c:9f:89:e6:e9:4b:91:b0: 21:7c:ba:4a:f3:69:ef:4f:00:19:8e:fb:f1:e7:70: 3f:ac:fa:4c:77:76:d4:72:d9:22:94:ae:5c:c5:ff: 30:54:79:ab:50:1a:27:31:56:6c:88:01:ae:6a:79: 0e:67:1f:1b:e9:e7:50:54:ea:2c:9a:75:b3:3a:dd: 6a:8f:b4:2d:a4:1a:ac:47:11:20:b4:05:a3:1e:55: d1:78:6f:2f:0a:3f:fe:3d:04:09:32:70:cc:8a:a7: 54:07:44:b5:6f:d5:58:44:b9:49:a4:16:3d:49:7c: f1:a1:a7:53:8e:31:da:cb:56:0f:b8:40:06:82:1e: 05:f1:ed:12:b1:4d:90:6e:54:98:bc:c4:91:09:7c: 37:56:b1:8b:e2:20:d5:6f:f9:a1:dd:a0:d4:9f:73: 1f:5f:46:d8:00:a6:10:a8:b7:71:a9:13:ad:58:bd: 4f:b9:22:91:a9:a8:36:d6:83:ba:3b:7b:76:fa:ae: 0b:de:18:98:f9:f3:fd:78:af:e5:15:93:57:3e:6c: 86:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:44:CF:98:44:BF:23:DD:A5:81:ED:D5:AA:83:0A:56:C8:9A:74:BF X509v3 Authority Key Identifier: keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/ZUTPmES_I92lge3VqoMKVsiadL8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.114.32.0/19 43.251.160.0/23 94.154.50.0/24 94.154.55.0/24 176.100.36.0/22 185.14.92.0/23 IPv6: 2a00:ccc3::/32 2a00:ccc5::/32 Signature Algorithm: sha256WithRSAEncryption 20:95:a3:66:9f:cf:9f:cc:8a:6e:11:2a:f9:49:ea:21:7f:a5: ff:fb:33:6b:2e:b0:2d:45:66:85:06:78:e1:d2:ee:b8:64:b7: 42:86:4b:4a:99:69:fd:a7:e1:a5:ec:59:bd:f0:5e:01:41:0d: 98:c9:28:eb:d0:a9:af:b7:1a:76:e9:a3:b2:f3:db:fe:f6:a8: c8:f7:fa:dd:25:3b:99:97:c1:25:2d:9c:e4:c5:f4:9b:a0:7d: 24:e4:58:9a:e1:47:b9:bf:68:df:26:b2:46:ca:b9:22:b6:80: 83:1c:4e:69:4c:f0:1a:cb:d7:31:b0:63:8e:80:2b:bc:12:75: 1d:75:74:05:b2:68:75:1f:db:b6:ec:99:f3:8c:99:b8:e6:96: 0f:27:36:0a:bb:76:3b:1b:7b:c3:30:ef:60:1a:91:bc:c3:91: 95:e0:d4:c1:ca:68:23:fc:49:fb:d6:0c:8f:26:c3:c0:65:37: 62:c5:33:ca:5f:90:63:d7:fa:65:89:a9:a5:dc:95:d4:fe:5f: 7a:aa:52:b5:4b:d9:17:0b:f0:67:a0:b3:0c:77:4d:d4:3c:9c: ab:5d:87:0e:30:34:67:bd:b0:9b:3d:bf:d2:28:a4:e3:cc:e6: eb:33:85:17:7e:2f:55:49:40:19:30:6d:ed:06:bf:44:e1:67: 20:cb:69:f8 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgISAZt6WrRXktRgZZdh46OeAN2DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NjU5M2I3NDdlNzZhNTY0OTI1MTFiYjM2MTJlNGQ1ZTRj YmU3ZWMwHhcNMjYwMTAxMTYxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTQ0Y2Y5ODQ0YmYyM2RkYTU4MWVkZDVhYTgzMGE1NmM4OWE3NGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTW2l9+RdXdaM/XcY71S2FQ1Ric4 2MGwMT67pkVD3agcvpNI3ZLjUfmZmu4x4qxFJ98OfJ+J5ulLkbAhfLpK82nvTwAZ jvvx53A/rPpMd3bUctkilK5cxf8wVHmrUBonMVZsiAGuankOZx8b6edQVOosmnWz Ot1qj7QtpBqsRxEgtAWjHlXReG8vCj/+PQQJMnDMiqdUB0S1b9VYRLlJpBY9SXzx oadTjjHay1YPuEAGgh4F8e0SsU2QblSYvMSRCXw3VrGL4iDVb/mh3aDUn3MfX0bY AKYQqLdxqROtWL1PuSKRqag21oO6O3t2+q4L3hiY+fP9eK/lFZNXPmyGGQIDAQAB o4ICPTCCAjkwHQYDVR0OBBYEFGVEz5hEvyPdpYHt1aqDClbImnS/MB8GA1UdIwQY MBaAFCllk7dH52pWSSURuzYS5NXky+fsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1dXVHQwZm5hbFpKSlJHN05oTGsxZVRMNS13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNThiZGMtMTRlNy00OTljLTlkOWMt MWI3Y2JiMDhkNzNmLzEvWlVUUG1FU19JOTJsZ2UzVnFvTUtWc2lhZEw4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9jNThiZGMtMTRlNy00OTljLTlkOWMtMWI3Y2JiMDhkNzNm LzEvS1dXVHQwZm5hbFpKSlJHN05oTGsxZVRMNS13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFMGCCsGAQUFBwEHAQH/BEQwQjAqBAIAATAkAwQFJXIgAwQB K/ugAwQAXpoyAwQAXpo3AwQCsGQkAwQBuQ5cMBQEAgACMA4DBQAqAMzDAwUAKgDM xTANBgkqhkiG9w0BAQsFAAOCAQEAIJWjZp/Pn8yKbhEq+UnqIX+l//szay6wLUVm hQZ44dLuuGS3QoZLSplp/afhpexZvfBeAUENmMko69Cpr7cadumjsvPb/vaoyPf6 3SU7mZfBJS2c5MX0m6B9JORYmuFHub9o3yayRsq5IraAgxxOaUzwGsvXMbBjjoAr vBJ1HXV0BbJodR/btuyZ84yZuOaWDyc2Crt2Oxt7wzDvYBqRvMORleDUwcpoI/xJ +9YMjybDwGU3YsUzyl+QY9f6ZYmppdyV1P5feqpStUvZFwvwZ6CzDHdN1Dycq12H DjA0Z72wmz2/0iik48zm6zOFF34vVUlAGTBt7Qa/ROFnIMtp+A== -----END CERTIFICATE-----Generated at Wed Jan 21 06:05:50 2026 by rpki-client