This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/ZpkUGalQzjbOCY8XhdJNlnimnsg.roa File: ZpkUGalQzjbOCY8XhdJNlnimnsg.roa (raw, json) Hash identifier: MXToSyiqqbrIQ6LzLNHLxYBkJdAsscwP6hbYfaiM+Jc= Subject key identifier: 66:99:14:19:A9:50:CE:36:CE:09:8F:17:85:D2:4D:96:78:A6:9E:C8 Certificate issuer: /CN=df3b82005fdbe961020f740ab43c554e5a38451f Certificate serial: 019B7BA431BF791677A59C49DD3CB8746D0C Authority key identifier: DF:3B:82:00:5F:DB:E9:61:02:0F:74:0A:B4:3C:55:4E:5A:38:45:1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/ZpkUGalQzjbOCY8XhdJNlnimnsg.roa Signing time: Thu 01 Jan 2026 22:18:36 +0000 ROA not before: Thu 01 Jan 2026 22:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34265 IP address blocks: 176.106.0.0/21 maxlen: 21 176.106.0.0/24 maxlen: 24 176.106.1.0/24 maxlen: 24 176.112.120.0/21 maxlen: 21 176.112.120.0/24 maxlen: 24 176.112.121.0/24 maxlen: 24 176.112.127.0/24 maxlen: 24 193.138.184.0/22 maxlen: 22 193.138.186.0/24 maxlen: 24 193.138.187.0/24 maxlen: 24 213.108.72.0/21 maxlen: 21 213.108.75.0/24 maxlen: 24 213.108.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:31:bf:79:16:77:a5:9c:49:dd:3c:b8:74:6d:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df3b82005fdbe961020f740ab43c554e5a38451f Validity Not Before: Jan 1 22:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=66991419a950ce36ce098f1785d24d9678a69ec8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7f:7d:af:7e:59:94:e5:e8:c4:14:40:15:6e: ce:d1:c3:b3:a9:73:20:da:22:a2:47:fb:98:22:69: f2:39:92:3c:4f:45:f1:03:ab:4d:db:02:a6:cf:0d: a9:7c:a1:5b:b4:99:22:c7:9a:bc:f1:a4:f7:c5:b2: cf:0b:3a:cc:25:30:6d:a6:b4:f7:28:cf:47:3e:a2: a2:f5:57:b9:6e:ba:15:48:a3:e2:43:16:63:c1:70: a2:aa:0a:87:67:f6:48:ae:29:27:6c:0b:16:b5:62: 98:23:30:78:54:ce:32:b3:3e:28:99:76:39:21:c6: a8:85:55:4e:70:ba:bd:54:3e:fb:ea:3b:01:82:b1: 2a:62:9b:62:2d:5e:09:18:31:73:14:46:01:e0:60: f2:63:10:1c:64:56:cb:5e:36:b5:4a:45:5b:6f:cb: 46:89:18:ac:ff:91:29:61:7b:6f:07:9e:31:53:a6: 8d:7b:18:e9:44:1d:78:d7:49:12:cd:da:be:4c:de: 17:bf:15:c0:d1:4e:c4:d2:3a:33:5b:e2:0c:eb:f5: ae:2c:5e:0f:69:a0:68:8c:7e:27:22:ba:9f:16:b1: 15:56:90:24:0e:bd:b9:e1:33:0e:12:dd:4a:41:85: b9:86:17:c0:23:73:ce:ea:30:3b:19:28:33:7a:ae: 0d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:99:14:19:A9:50:CE:36:CE:09:8F:17:85:D2:4D:96:78:A6:9E:C8 X509v3 Authority Key Identifier: keyid:DF:3B:82:00:5F:DB:E9:61:02:0F:74:0A:B4:3C:55:4E:5A:38:45:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/ZpkUGalQzjbOCY8XhdJNlnimnsg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.106.0.0/21 176.112.120.0/21 193.138.184.0/22 213.108.72.0/21 Signature Algorithm: sha256WithRSAEncryption 24:e9:8d:69:73:c8:ba:2d:d5:b4:5a:39:6c:0f:9d:34:f0:29: 7b:b6:8c:26:be:84:22:5a:09:c2:be:a5:17:db:03:45:37:94: 8a:5a:dc:38:54:a1:04:be:76:d5:5a:9c:38:b1:f7:19:d9:ab: 96:28:c4:29:77:b2:00:97:ca:38:35:25:87:eb:e2:ea:2c:11: f4:7e:00:a5:ce:a9:0e:b7:d4:cc:43:fb:89:68:3f:21:bf:42: 76:29:25:22:17:16:e4:3e:a1:02:9e:30:6d:6c:2e:ba:aa:ca: 81:56:1c:eb:ae:99:ec:31:d0:22:45:77:38:68:82:dd:24:36: cf:77:21:fc:66:5f:5a:55:bf:c9:e1:f8:55:9f:58:ee:d9:49: 8d:ea:a2:4a:38:eb:58:39:e6:b7:ba:3e:32:52:0b:ab:60:bd: a0:7f:0c:3a:42:f5:06:94:d8:97:c6:f0:68:1a:ef:a5:da:0e: b0:ba:07:1d:59:d2:da:a3:f1:34:2f:58:8d:9f:a3:a1:a5:3c: b4:f9:fe:9d:da:44:b7:2e:2b:60:4f:8c:bf:78:59:d6:e1:c3: 32:5e:9f:d5:8d:d6:c6:2a:a1:cb:9b:d5:3d:f1:94:df:47:2d: d4:4e:a8:21:18:9a:5a:05:1b:70:f9:79:83:e3:e7:03:39:4d: 17:31:38:74 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt7pDG/eRZ3pZxJ3Ty4dG0MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmM2I4MjAwNWZkYmU5NjEwMjBmNzQwYWI0M2M1NTRlNWEz ODQ1MWYwHhcNMjYwMTAxMjIxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Njk5MTQxOWE5NTBjZTM2Y2UwOThmMTc4NWQyNGQ5Njc4YTY5ZWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz399r35ZlOXoxBRAFW7O0cOzqXMg 2iKiR/uYImnyOZI8T0XxA6tN2wKmzw2pfKFbtJkix5q88aT3xbLPCzrMJTBtprT3 KM9HPqKi9Ve5broVSKPiQxZjwXCiqgqHZ/ZIriknbAsWtWKYIzB4VM4ysz4omXY5 IcaohVVOcLq9VD776jsBgrEqYptiLV4JGDFzFEYB4GDyYxAcZFbLXja1SkVbb8tG iRis/5EpYXtvB54xU6aNexjpRB1410kSzdq+TN4XvxXA0U7E0jozW+IM6/WuLF4P aaBojH4nIrqfFrEVVpAkDr254TMOEt1KQYW5hhfAI3PO6jA7GSgzeq4N4QIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFGaZFBmpUM42zgmPF4XSTZZ4pp7IMB8GA1UdIwQY MBaAFN87ggBf2+lhAg90CrQ8VU5aOEUfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3p1Q0FGX2I2V0VDRDNRS3REeFZUbG80UlI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8zOGZmMzYtN2Q3My00ODVjLTg5MTAt MzdjMTQwOTJlYjI3LzEvWnBrVUdhbFF6amJPQ1k4WGhkSk5sbmltbnNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS8zOGZmMzYtN2Q3My00ODVjLTg5MTAtMzdjMTQwOTJlYjI3 LzEvM3p1Q0FGX2I2V0VDRDNRS3REeFZUbG80UlI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDsGoAAwQD sHB4AwQCwYq4AwQD1WxIMA0GCSqGSIb3DQEBCwUAA4IBAQAk6Y1pc8i6LdW0Wjls D5008Cl7towmvoQiWgnCvqUX2wNFN5SKWtw4VKEEvnbVWpw4sfcZ2auWKMQpd7IA l8o4NSWH6+LqLBH0fgClzqkOt9TMQ/uJaD8hv0J2KSUiFxbkPqECnjBtbC66qsqB VhzrrpnsMdAiRXc4aILdJDbPdyH8Zl9aVb/J4fhVn1ju2UmN6qJKOOtYOea3uj4y UgurYL2gfww6QvUGlNiXxvBoGu+l2g6wugcdWdLao/E0L1iNn6OhpTy0+f6d2kS3 LitgT4y/eFnW4cMyXp/VjdbGKqHLm9U98ZTfRy3UTqghGJpaBRtw+XmD4+cDOU0X MTh0 -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:18 2026 by rpki-client