This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ZNoxY9UKF-oYb8UIQ_VifEDFvAQ.roa File: ZNoxY9UKF-oYb8UIQ_VifEDFvAQ.roa (raw, json) Hash identifier: 6EJ+HVPdUvE2oddU0muSX2IBgQvHQDnJEm5nLmpI7qQ= Subject key identifier: 64:DA:31:63:D5:0A:17:EA:18:6F:C5:08:43:F5:62:7C:40:C5:BC:04 Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019B9252DD0A07E708239839B600F822F22D Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ZNoxY9UKF-oYb8UIQ_VifEDFvAQ.roa Signing time: Tue 06 Jan 2026 08:01:02 +0000 ROA not before: Tue 06 Jan 2026 08:01:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58061 IP address blocks: 45.88.14.0/24 maxlen: 24 62.192.152.0/24 maxlen: 24 77.81.182.0/24 maxlen: 24 89.34.106.0/24 maxlen: 24 89.37.192.0/24 maxlen: 24 89.40.36.0/24 maxlen: 24 89.40.215.0/24 maxlen: 24 89.47.36.0/24 maxlen: 24 93.115.107.0/24 maxlen: 24 93.118.36.0/24 maxlen: 24 94.198.171.0/24 maxlen: 24 128.0.41.0/24 maxlen: 24 185.198.233.0/24 maxlen: 24 188.241.221.0/24 maxlen: 24 193.178.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:92:52:dd:0a:07:e7:08:23:98:39:b6:00:f8:22:f2:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Jan 6 08:01:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=64da3163d50a17ea186fc50843f5627c40c5bc04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:cd:58:da:fc:c1:c8:44:a5:bf:80:10:14:f3: 23:32:d1:a4:4a:57:0e:10:f0:b0:59:ec:b6:80:16: 95:90:0d:b0:07:78:c0:71:2a:c5:42:3c:4a:60:88: f8:dc:7b:af:2e:39:e3:74:a9:cf:31:55:3e:8b:e6: df:15:ac:9a:51:45:82:13:29:ab:68:3f:fb:76:b0: 6f:f4:29:d1:39:e2:53:6e:71:2f:ab:c0:99:d4:70: 39:3e:ef:39:e2:2c:fe:f8:b8:02:83:57:30:90:b8: 4a:be:e5:00:95:99:95:fd:e4:0f:6e:3e:45:62:77: d8:68:a1:2a:14:e6:c9:7f:33:a7:58:20:4d:73:ca: cd:2e:70:5a:74:dc:2e:d2:b7:ed:ed:89:f0:e1:64: 8a:b8:73:7d:9b:04:aa:88:54:4e:54:38:fc:b8:a3: 0f:b4:d5:e1:3f:b3:62:5f:93:55:31:2a:c8:3f:db: 97:e2:9a:4e:0c:b7:0f:af:7c:53:b5:93:6e:ca:62: 6e:ae:bc:4c:0b:d4:42:2b:05:92:ac:36:67:7c:3e: d9:85:ec:49:10:b2:e5:b3:0d:77:27:cf:43:34:26: e5:ba:7d:95:47:c2:93:9f:fd:3d:1c:56:0a:d6:1c: 3c:10:50:8d:22:16:c1:df:26:46:58:5b:06:c3:2e: 8e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:DA:31:63:D5:0A:17:EA:18:6F:C5:08:43:F5:62:7C:40:C5:BC:04 X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ZNoxY9UKF-oYb8UIQ_VifEDFvAQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.88.14.0/24 62.192.152.0/24 77.81.182.0/24 89.34.106.0/24 89.37.192.0/24 89.40.36.0/24 89.40.215.0/24 89.47.36.0/24 93.115.107.0/24 93.118.36.0/24 94.198.171.0/24 128.0.41.0/24 185.198.233.0/24 188.241.221.0/24 193.178.134.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:ef:97:c4:e7:58:b9:55:15:04:24:51:d6:ae:73:40:d7:8c: 75:39:e0:7c:2f:cd:30:56:c9:0b:4d:53:7b:ec:75:56:99:a3: b5:39:ee:1c:03:a6:aa:56:6d:96:7c:ba:bf:ac:c5:99:20:af: 20:fd:5e:67:13:4b:a1:f6:f9:c2:62:d1:61:12:e0:44:5c:f5: 40:22:bd:e6:1a:45:b6:1f:ba:df:4e:99:7b:d2:d8:f2:6c:bf: 50:f1:2e:e6:41:b9:1c:4f:12:5e:19:4f:02:84:39:5f:62:36: 2e:90:6c:6c:28:af:c2:0a:09:02:7b:e1:da:ab:de:b2:7f:7e: ab:e1:9e:1c:e7:91:a1:8f:d4:b3:37:a0:74:d0:b6:c0:af:7c: 8c:23:03:42:b4:00:1d:52:50:e3:f3:0e:7c:6e:96:de:ae:23: bb:1b:31:09:3f:8c:46:c6:71:8c:fe:2c:fa:6f:4c:4b:11:6b: 4a:06:be:b9:4a:26:6f:3e:97:1d:55:4c:4a:eb:d9:4d:4a:1d: 92:75:59:ac:c3:75:37:e3:5b:b1:42:7a:af:ec:60:5c:26:7d: c7:e9:77:d5:90:ec:57:43:e3:40:33:aa:81:01:8a:f8:f9:9c: 77:6b:82:3a:45:23:8f:45:3b:a2:e1:a1:27:b1:e2:81:e2:be: 15:c9:84:ad -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgISAZuSUt0KB+cII5g5tgD4IvItMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjYwMTA2MDgwMTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NGRhMzE2M2Q1MGExN2VhMTg2ZmM1MDg0M2Y1NjI3YzQwYzViYzA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvM1Y2vzByESlv4AQFPMjMtGkSlcO EPCwWey2gBaVkA2wB3jAcSrFQjxKYIj43HuvLjnjdKnPMVU+i+bfFayaUUWCEymr aD/7drBv9CnROeJTbnEvq8CZ1HA5Pu854iz++LgCg1cwkLhKvuUAlZmV/eQPbj5F YnfYaKEqFObJfzOnWCBNc8rNLnBadNwu0rft7Ynw4WSKuHN9mwSqiFROVDj8uKMP tNXhP7NiX5NVMSrIP9uX4ppODLcPr3xTtZNuymJurrxMC9RCKwWSrDZnfD7ZhexJ ELLlsw13J89DNCblun2VR8KTn/09HFYK1hw8EFCNIhbB3yZGWFsGwy6OoQIDAQAB o4ICXTCCAlkwHQYDVR0OBBYEFGTaMWPVChfqGG/FCEP1YnxAxbwEMB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvWk5veFk5VUtGLW9ZYjhVSVFfVmlmRURGdkFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjBgBAIAATBaAwQALVgOAwQA PsCYAwQATVG2AwQAWSJqAwQAWSXAAwQAWSgkAwQAWSjXAwQAWS8kAwQAXXNrAwQA XXYkAwQAXsarAwQAgAApAwQAucbpAwQAvPHdAwQAwbKGMA0GCSqGSIb3DQEBCwUA A4IBAQCK75fE51i5VRUEJFHWrnNA14x1OeB8L80wVskLTVN77HVWmaO1Oe4cA6aq Vm2WfLq/rMWZIK8g/V5nE0uh9vnCYtFhEuBEXPVAIr3mGkW2H7rfTpl70tjybL9Q 8S7mQbkcTxJeGU8ChDlfYjYukGxsKK/CCgkCe+Haq96yf36r4Z4c55Ghj9SzN6B0 0LbAr3yMIwNCtAAdUlDj8w58bpberiO7GzEJP4xGxnGM/iz6b0xLEWtKBr65SiZv PpcdVUxK69lNSh2SdVmsw3U341uxQnqv7GBcJn3H6XfVkOxXQ+NAM6qBAYr4+Zx3 a4I6RSOPRTui4aEnseKB4r4VyYSt -----END CERTIFICATE-----Generated at Mon Jan 19 14:37:35 2026 by rpki-client