This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/Z7tPkv-KOS--LcH3raWeWv6mob4.roa File: Z7tPkv-KOS--LcH3raWeWv6mob4.roa (raw, json) Hash identifier: 2730/QIDnBMlH2saKFE8sJJcRwFrjnSocRmwgcVBh5M= Subject key identifier: 67:BB:4F:92:FF:8A:39:2F:BE:2D:C1:F7:AD:A5:9E:5A:FE:A6:A1:BE Certificate issuer: /CN=d77796e16b565d727366986cc9ca9ca63d1a4e58 Certificate serial: 019B7FF2709C0CBC89F8F6080082DD354814 Authority key identifier: D7:77:96:E1:6B:56:5D:72:73:66:98:6C:C9:CA:9C:A6:3D:1A:4E:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13eW4WtWXXJzZphsycqcpj0aTlg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/Z7tPkv-KOS--LcH3raWeWv6mob4.roa Signing time: Fri 02 Jan 2026 18:22:33 +0000 ROA not before: Fri 02 Jan 2026 18:22:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52148 IP address blocks: 37.26.104.0/21 maxlen: 21 91.204.208.0/22 maxlen: 22 91.238.160.0/22 maxlen: 22 91.238.164.0/23 maxlen: 23 185.73.8.0/24 maxlen: 24 185.73.9.0/24 maxlen: 24 185.73.10.0/24 maxlen: 24 185.73.11.0/24 maxlen: 24 193.33.186.0/23 maxlen: 23 193.105.61.0/24 maxlen: 24 213.5.176.0/22 maxlen: 22 213.5.180.0/22 maxlen: 22 2a00:c980::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.crl rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft rsync://rpki.ripe.net/repository/DEFAULT/13eW4WtWXXJzZphsycqcpj0aTlg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:70:9c:0c:bc:89:f8:f6:08:00:82:dd:35:48:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d77796e16b565d727366986cc9ca9ca63d1a4e58 Validity Not Before: Jan 2 18:22:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=67bb4f92ff8a392fbe2dc1f7ada59e5afea6a1be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5c:63:e2:98:53:ce:4d:5e:a7:64:a4:78:4b: 24:ca:f9:04:db:12:a6:68:20:65:49:78:9d:1d:f4: d0:a8:7b:f8:1f:a1:ed:52:e0:2d:ca:d9:56:45:49: 2c:75:2d:76:6b:55:a2:a7:32:82:28:a8:8e:cf:12: 49:23:6f:63:c3:e6:93:fb:85:55:66:aa:38:28:91: f9:8e:06:e2:e0:db:3f:80:30:29:0d:22:01:b1:09: e1:79:46:93:5b:1e:3a:98:c5:d2:7a:6d:05:d3:1c: 8d:57:c1:bc:3b:bf:bb:03:91:36:e2:67:b2:57:ed: 81:d2:64:50:36:d7:8f:f7:db:07:0e:53:75:b1:d9: 78:90:f1:a0:34:b7:67:03:e2:44:3d:b8:67:94:44: 6c:63:ed:8e:19:2e:4b:a7:de:a3:c9:09:7d:c5:4c: 2c:5f:fb:79:d0:0d:14:0c:fa:ae:24:ba:e2:c7:15: de:23:5f:94:87:e3:48:17:3e:22:d0:45:09:54:3c: 1d:1d:e1:57:22:5f:e3:3a:e3:8e:36:3b:84:37:c7: b3:0a:2f:44:3a:46:dd:af:e9:81:b2:e6:5c:7e:80: 5b:d1:44:08:67:e4:9b:18:b0:45:aa:3a:d5:fe:13: d5:6e:a3:0a:df:5e:6e:c3:d7:0c:30:ce:b4:06:58: 4b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:BB:4F:92:FF:8A:39:2F:BE:2D:C1:F7:AD:A5:9E:5A:FE:A6:A1:BE X509v3 Authority Key Identifier: keyid:D7:77:96:E1:6B:56:5D:72:73:66:98:6C:C9:CA:9C:A6:3D:1A:4E:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13eW4WtWXXJzZphsycqcpj0aTlg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/Z7tPkv-KOS--LcH3raWeWv6mob4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.26.104.0/21 91.204.208.0/22 91.238.160.0-91.238.165.255 185.73.8.0/22 193.33.186.0/23 193.105.61.0/24 213.5.176.0/21 IPv6: 2a00:c980::/29 Signature Algorithm: sha256WithRSAEncryption 84:fe:07:df:17:fd:7b:30:47:9a:3d:37:a9:f6:cd:27:36:92: 54:be:16:7a:67:a4:76:72:b5:e1:a9:82:21:0c:87:e9:27:59: ab:08:29:70:1d:e9:dd:98:93:bf:f5:a6:82:2e:56:b2:80:03: 5b:f5:a5:b8:b8:6d:21:0f:18:5b:b1:7b:e9:f1:d2:c2:24:92: 35:6c:12:a8:54:5c:46:aa:02:96:4d:35:6d:71:6f:ee:a2:3d: 2d:5a:c1:11:dd:a7:14:c8:61:3e:2f:d9:79:fe:6f:ea:0c:f0: 94:fc:d4:b1:04:7d:f3:49:d3:e9:90:6a:d0:b6:56:a8:0e:34: 9c:12:85:28:2d:17:6d:6a:aa:c0:21:6f:58:c6:1a:72:37:83: 51:1c:be:1b:c7:01:c6:f5:ee:6b:f0:17:c7:e9:b3:fc:e8:32: 28:49:40:5e:1a:5d:08:5a:5d:13:1b:2f:67:89:d0:b7:cd:d6: db:dc:fe:83:56:d2:ab:38:0c:b6:d2:19:8e:f9:08:cf:cd:8f: 33:33:22:a1:90:f3:10:d4:9f:2e:14:f4:66:0b:b5:c2:ad:cd: 9d:bd:8c:a1:44:2b:34:ec:a8:25:2a:13:79:25:43:06:ae:23: 31:93:21:db:d8:8c:43:06:f9:b3:8b:7a:de:8c:25:1e:fd:b4: 07:d1:eb:7e -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgISAZt/8nCcDLyJ+PYIAILdNUgUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3Nzc5NmUxNmI1NjVkNzI3MzY2OTg2Y2M5Y2E5Y2E2M2Qx YTRlNTgwHhcNMjYwMTAyMTgyMjMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2N2JiNGY5MmZmOGEzOTJmYmUyZGMxZjdhZGE1OWU1YWZlYTZhMWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslxj4phTzk1ep2SkeEskyvkE2xKm aCBlSXidHfTQqHv4H6HtUuAtytlWRUksdS12a1WipzKCKKiOzxJJI29jw+aT+4VV Zqo4KJH5jgbi4Ns/gDApDSIBsQnheUaTWx46mMXSem0F0xyNV8G8O7+7A5E24mey V+2B0mRQNteP99sHDlN1sdl4kPGgNLdnA+JEPbhnlERsY+2OGS5Lp96jyQl9xUws X/t50A0UDPquJLrixxXeI1+Uh+NIFz4i0EUJVDwdHeFXIl/jOuOONjuEN8ezCi9E Okbdr+mBsuZcfoBb0UQIZ+SbGLBFqjrV/hPVbqMK315uw9cMMM60BlhLrQIDAQAB o4ICRDCCAkAwHQYDVR0OBBYEFGe7T5L/ijkvvi3B962lnlr+pqG+MB8GA1UdIwQY MBaAFNd3luFrVl1yc2aYbMnKnKY9Gk5YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTNlVzRXdFdYWEp6WnBoc3ljcWNwajBhVGxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My81NDI5ZDgtZjQxMS00NjkyLWIwYTct MTU1ZmQwYjQzZjlmLzEvWjd0UGt2LUtPUy0tTGNIM3JhV2VXdjZtb2I0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My81NDI5ZDgtZjQxMS00NjkyLWIwYTctMTU1ZmQwYjQzZjlm LzEvMTNlVzRXdFdYWEp6WnBoc3ljcWNwajBhVGxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFoGCCsGAQUFBwEHAQH/BEswSTA4BAIAATAyAwQDJRpoAwQC W8zQMAwDBAVb7qADBAFb7qQDBAK5SQgDBAHBIboDBADBaT0DBAPVBbAwDQQCAAIw BwMFAyoAyYAwDQYJKoZIhvcNAQELBQADggEBAIT+B98X/XswR5o9N6n2zSc2klS+ FnpnpHZyteGpgiEMh+knWasIKXAd6d2Yk7/1poIuVrKAA1v1pbi4bSEPGFuxe+nx 0sIkkjVsEqhUXEaqApZNNW1xb+6iPS1awRHdpxTIYT4v2Xn+b+oM8JT81LEEffNJ 0+mQatC2VqgONJwShSgtF21qqsAhb1jGGnI3g1EcvhvHAcb17mvwF8fps/zoMihJ QF4aXQhaXRMbL2eJ0LfN1tvc/oNW0qs4DLbSGY75CM/NjzMzIqGQ8xDUny4U9GYL tcKtzZ29jKFEKzTsqCUqE3klQwauIzGTIdvYjEMG+bOLet6MJR79tAfR634= -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:42 2026 by rpki-client