This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/zw1FZiuUAn64fYNanR7jwJJLdYA.roa File: zw1FZiuUAn64fYNanR7jwJJLdYA.roa (raw, json) Hash identifier: Wptt5pU4Z+Evq7DsTNZ0UeodIyNpidY94R/uBzFPof4= Subject key identifier: CF:0D:45:66:2B:94:02:7E:B8:7D:83:5A:9D:1E:E3:C0:92:4B:75:80 Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019B7BA3FAD29C8244FA1541498BE6CA6157 Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/zw1FZiuUAn64fYNanR7jwJJLdYA.roa Signing time: Thu 01 Jan 2026 22:18:22 +0000 ROA not before: Thu 01 Jan 2026 22:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15440 IP address blocks: 91.103.255.0/24 maxlen: 24 176.118.198.0/24 maxlen: 24 185.40.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:fa:d2:9c:82:44:fa:15:41:49:8b:e6:ca:61:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Jan 1 22:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf0d45662b94027eb87d835a9d1ee3c0924b7580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a9:71:86:0a:d8:16:cf:e4:4f:48:d6:95:20: 4d:20:08:98:ee:ae:92:a3:53:86:7e:7f:94:db:b1: 26:3e:fe:90:17:c9:aa:78:c2:a1:c0:c4:41:70:82: 45:60:52:7f:1d:b9:0c:d5:52:5a:ce:14:96:e6:6d: a6:7d:a3:ab:95:53:de:e5:9b:f7:78:40:7b:4c:81: e2:fa:8d:38:19:c4:86:5c:34:51:42:ff:4b:d6:17: 9a:a4:e3:02:e6:db:c4:2a:b6:38:8f:d7:85:45:ed: 59:c6:b5:96:fa:42:a5:b6:3c:4e:ba:03:25:22:a2: e4:79:14:99:52:d1:9b:39:42:c8:ae:c3:0c:c4:2a: 4e:b6:bc:e2:88:9b:cf:b2:3e:d3:e7:d5:d9:92:e9: 1f:3b:8d:d8:39:d8:d8:46:82:c4:05:0e:64:b6:53: 71:17:af:db:40:81:98:69:e5:a2:8a:b9:d9:50:62: 8d:be:f0:e6:0d:10:18:87:01:63:43:79:ea:6c:3c: de:be:09:92:a6:01:93:3f:30:3f:1a:a2:34:7c:b6: 06:27:a9:22:c3:f0:be:95:84:e4:a3:86:38:ca:ba: 2f:65:d6:3e:fa:c3:02:97:fe:73:da:4b:c8:05:26: 07:6d:03:d1:e4:fa:40:2e:23:80:e4:08:2c:a6:19: 11:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:0D:45:66:2B:94:02:7E:B8:7D:83:5A:9D:1E:E3:C0:92:4B:75:80 X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/zw1FZiuUAn64fYNanR7jwJJLdYA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.103.255.0/24 176.118.198.0/24 185.40.6.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:74:db:03:70:69:bb:ac:2d:1e:6d:86:89:b9:05:05:61:4e: 38:a6:c4:09:12:eb:b7:df:cf:3f:69:60:70:75:33:7d:94:bc: 28:c1:10:20:7e:1c:58:6a:e4:53:8c:30:3e:56:92:05:d8:f3: 32:34:2e:d7:b9:f1:cc:e6:98:7e:d8:79:20:f6:9a:8e:cc:af: f1:a1:8e:26:6f:cd:58:31:66:23:71:b6:5c:d4:90:6d:a2:9a: 1f:18:97:9c:aa:3d:f9:0d:a4:8d:b7:7f:d0:f5:90:3d:32:f2: 0b:99:f3:da:65:b6:44:ef:3d:ae:b3:59:f8:18:fd:c2:6a:15: 3a:41:c1:9c:d4:b1:46:95:6c:5b:9e:72:10:6b:16:fd:69:09: a9:73:70:ba:78:57:a6:55:ba:3d:d5:9a:cb:af:5d:aa:a3:61: 73:14:89:6b:39:91:a3:be:e8:e0:44:62:9e:9c:de:67:79:5b: d2:96:f1:1d:f4:61:61:14:aa:c7:26:59:da:5d:8d:a3:ea:5d: c5:08:63:99:61:a4:3c:27:0b:fb:ef:fe:6e:5b:57:b2:2b:11: 1c:44:82:bd:80:05:84:20:33:6e:1d:1d:f3:e5:08:73:d3:c7: 9d:df:ad:db:16:97:2f:b7:53:e9:57:59:79:5b:9f:e4:18:31: bf:92:bf:dd -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7o/rSnIJE+hVBSYvmymFXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjYwMTAxMjIxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjBkNDU2NjJiOTQwMjdlYjg3ZDgzNWE5ZDFlZTNjMDkyNGI3NTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6lxhgrYFs/kT0jWlSBNIAiY7q6S o1OGfn+U27EmPv6QF8mqeMKhwMRBcIJFYFJ/HbkM1VJazhSW5m2mfaOrlVPe5Zv3 eEB7TIHi+o04GcSGXDRRQv9L1heapOMC5tvEKrY4j9eFRe1ZxrWW+kKltjxOugMl IqLkeRSZUtGbOULIrsMMxCpOtrziiJvPsj7T59XZkukfO43YOdjYRoLEBQ5ktlNx F6/bQIGYaeWiirnZUGKNvvDmDRAYhwFjQ3nqbDzevgmSpgGTPzA/GqI0fLYGJ6ki w/C+lYTko4Y4yrovZdY++sMCl/5z2kvIBSYHbQPR5PpALiOA5AgsphkRpwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFM8NRWYrlAJ+uH2DWp0e48CSS3WAMB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvencxRlppdVVBbjY0ZllOYW5SN2p3SkpMZFlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW2f/AwQA sHbGAwQAuSgGMA0GCSqGSIb3DQEBCwUAA4IBAQAudNsDcGm7rC0ebYaJuQUFYU44 psQJEuu3388/aWBwdTN9lLwowRAgfhxYauRTjDA+VpIF2PMyNC7XufHM5ph+2Hkg 9pqOzK/xoY4mb81YMWYjcbZc1JBtopofGJecqj35DaSNt3/Q9ZA9MvILmfPaZbZE 7z2us1n4GP3CahU6QcGc1LFGlWxbnnIQaxb9aQmpc3C6eFemVbo91ZrLr12qo2Fz FIlrOZGjvujgRGKenN5neVvSlvEd9GFhFKrHJlnaXY2j6l3FCGOZYaQ8Jwv77/5u W1eyKxEcRIK9gAWEIDNuHR3z5Qhz08ed363bFpcvt1PpV1l5W5/kGDG/kr/d -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:10 2026 by rpki-client