This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/1ZEZ_4_9QN7r4Lgh9hvQE-l6ktw.roa File: 1ZEZ_4_9QN7r4Lgh9hvQE-l6ktw.roa (raw, json) Hash identifier: SmyioRAh7P6hmUC0dOolcHWUBZAopj2nWHBjYGfsnTU= Subject key identifier: D5:91:19:FF:8F:FD:40:DE:EB:E0:B8:21:F6:1B:D0:13:E9:7A:92:DC Certificate issuer: /CN=5ae8c78f161397ae1dbd0ac322584f62fb740097 Certificate serial: 019B77C760607D547AEFED2DDABE00714216 Authority key identifier: 5A:E8:C7:8F:16:13:97:AE:1D:BD:0A:C3:22:58:4F:62:FB:74:00:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WujHjxYTl64dvQrDIlhPYvt0AJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/1ZEZ_4_9QN7r4Lgh9hvQE-l6ktw.roa Signing time: Thu 01 Jan 2026 04:18:33 +0000 ROA not before: Thu 01 Jan 2026 04:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6893 IP address blocks: 62.220.128.0/19 maxlen: 19 62.220.149.0/24 maxlen: 24 62.220.150.0/24 maxlen: 24 62.220.158.0/24 maxlen: 24 185.125.196.0/22 maxlen: 22 185.125.196.0/23 maxlen: 23 185.125.196.0/24 maxlen: 24 185.125.197.0/24 maxlen: 24 185.125.198.0/24 maxlen: 24 2001:788::/29 maxlen: 29 2001:788::/32 maxlen: 32 2001:789::/32 maxlen: 32 2001:78a::/40 maxlen: 40 2001:78c::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.crl rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.mft rsync://rpki.ripe.net/repository/DEFAULT/WujHjxYTl64dvQrDIlhPYvt0AJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 10:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:60:60:7d:54:7a:ef:ed:2d:da:be:00:71:42:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ae8c78f161397ae1dbd0ac322584f62fb740097 Validity Not Before: Jan 1 04:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d59119ff8ffd40deebe0b821f61bd013e97a92dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7f:77:04:cb:23:73:94:92:86:b3:f2:bd:71: a2:52:f7:6a:a4:78:33:fb:c7:83:68:40:73:f6:4e: e2:e0:97:d0:88:01:8b:bb:fc:08:47:11:7f:0b:d2: ca:77:78:ae:1c:c2:1b:46:eb:67:0d:c7:57:b1:2f: 1d:17:07:30:29:d7:b4:51:6a:50:4b:be:7b:a5:3d: 8c:6c:70:6a:84:3d:86:46:50:64:75:62:5f:25:bb: dc:51:47:c5:c5:41:45:bc:3c:bc:68:b9:57:90:1a: fb:5f:ae:72:8d:06:0b:49:76:b7:8b:23:43:bd:e3: 8b:ae:5b:ee:d6:cc:22:ed:2b:31:98:a6:d4:bd:97: 10:b1:4e:08:80:cd:39:e3:7f:95:6e:3b:1a:5d:fd: 2b:e9:39:ae:91:99:34:df:db:4c:30:4f:16:65:3d: f4:cb:44:19:4d:34:91:3b:c1:66:7b:d2:5c:cc:34: 2b:ca:50:a5:2f:10:df:33:ea:26:8f:33:f5:85:78: 26:d1:a4:31:77:b6:74:da:d2:61:36:ce:21:1c:43: 21:58:8e:3f:7c:b3:77:87:ef:e4:e3:35:66:af:24: 80:5f:5f:4f:ea:32:f8:c4:54:6b:8f:1b:e6:be:66: 8a:93:e8:dd:c3:8b:5f:08:a8:80:2e:80:94:fd:22: a5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:91:19:FF:8F:FD:40:DE:EB:E0:B8:21:F6:1B:D0:13:E9:7A:92:DC X509v3 Authority Key Identifier: keyid:5A:E8:C7:8F:16:13:97:AE:1D:BD:0A:C3:22:58:4F:62:FB:74:00:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WujHjxYTl64dvQrDIlhPYvt0AJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/1ZEZ_4_9QN7r4Lgh9hvQE-l6ktw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.220.128.0/19 185.125.196.0/22 IPv6: 2001:788::/29 Signature Algorithm: sha256WithRSAEncryption 4f:28:b1:32:20:09:7b:b7:6e:3b:4d:25:5a:61:20:fa:d1:ec: 8c:45:74:79:d8:28:dd:22:12:22:03:b6:b5:b2:ed:fd:02:3f: fd:c0:eb:3c:7d:6e:20:98:09:59:ee:30:43:dd:3e:29:49:78: 52:57:46:4d:d7:26:86:60:7e:09:32:23:a4:5f:2b:c9:ae:ee: ed:71:24:47:98:a3:58:1d:37:57:c7:3b:84:19:bc:8c:2e:01: 31:00:06:cf:1b:51:81:19:58:f4:da:6a:1a:58:22:eb:cc:bf: b2:45:a1:49:d2:5b:08:ae:61:43:b9:4e:0c:ff:1d:6a:c4:7b: b2:3d:42:c3:e0:6a:fa:71:34:0e:fc:5c:80:f9:56:93:1a:95: a9:d2:4c:13:60:67:5e:41:fe:6f:e8:6d:5e:23:b9:47:e5:0a: 43:f0:5a:42:11:e1:a2:f5:e3:09:2a:bc:a2:61:7d:bf:f8:7c: 35:83:c7:09:6c:62:2b:4d:dc:d6:f2:56:68:5a:52:ba:e8:7f: b0:82:8f:bb:f3:9b:b2:48:8a:d6:2e:56:32:9a:bc:48:ce:9f: 42:f4:17:87:0e:d4:b1:5b:c5:92:4f:e2:da:40:3a:b7:b2:7d: 2d:53:67:cf:f1:b2:2d:22:1c:49:16:f1:46:7b:4e:14:dd:d9: 28:96:ef:ff -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt3x2BgfVR67+0t2r4AcUIWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhZThjNzhmMTYxMzk3YWUxZGJkMGFjMzIyNTg0ZjYyZmI3 NDAwOTcwHhcNMjYwMTAxMDQxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTkxMTlmZjhmZmQ0MGRlZWJlMGI4MjFmNjFiZDAxM2U5N2E5MmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzH93BMsjc5SShrPyvXGiUvdqpHgz +8eDaEBz9k7i4JfQiAGLu/wIRxF/C9LKd3iuHMIbRutnDcdXsS8dFwcwKde0UWpQ S757pT2MbHBqhD2GRlBkdWJfJbvcUUfFxUFFvDy8aLlXkBr7X65yjQYLSXa3iyND veOLrlvu1swi7SsxmKbUvZcQsU4IgM0543+VbjsaXf0r6TmukZk039tMME8WZT30 y0QZTTSRO8Fme9JczDQrylClLxDfM+omjzP1hXgm0aQxd7Z02tJhNs4hHEMhWI4/ fLN3h+/k4zVmrySAX19P6jL4xFRrjxvmvmaKk+jdw4tfCKiALoCU/SKl4wIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFNWRGf+P/UDe6+C4IfYb0BPpepLcMB8GA1UdIwQY MBaAFFrox48WE5euHb0KwyJYT2L7dACXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3VqSGp4WVRsNjRkdlFyRElsaFBZdnQwQUpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni80ZDI3YmItZjg1Yy00YmZkLWIxYzMt NDdiY2QzOWMzZDg2LzEvMVpFWl80XzlRTjdyNExnaDlodlFFLWw2a3R3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni80ZDI3YmItZjg1Yy00YmZkLWIxYzMtNDdiY2QzOWMzZDg2 LzEvV3VqSGp4WVRsNjRkdlFyRElsaFBZdnQwQUpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQFPtyAAwQC uX3EMA0EAgACMAcDBQMgAQeIMA0GCSqGSIb3DQEBCwUAA4IBAQBPKLEyIAl7t247 TSVaYSD60eyMRXR52CjdIhIiA7a1su39Aj/9wOs8fW4gmAlZ7jBD3T4pSXhSV0ZN 1yaGYH4JMiOkXyvJru7tcSRHmKNYHTdXxzuEGbyMLgExAAbPG1GBGVj02moaWCLr zL+yRaFJ0lsIrmFDuU4M/x1qxHuyPULD4Gr6cTQO/FyA+VaTGpWp0kwTYGdeQf5v 6G1eI7lH5QpD8FpCEeGi9eMJKryiYX2/+Hw1g8cJbGIrTdzW8lZoWlK66H+wgo+7 85uySIrWLlYymrxIzp9C9BeHDtSxW8WST+LaQDq3sn0tU2fP8bItIhxJFvFGe04U 3dkolu// -----END CERTIFICATE-----Generated at Mon Feb 2 17:19:03 2026 by rpki-client