This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/zn4F63TYgWqEf5oY3C0aSoOPaXU.roa File: zn4F63TYgWqEf5oY3C0aSoOPaXU.roa (raw, json) Hash identifier: 4XzpBGSKIpqrgzYV8bDUbJCBoMSY0ytUeCyMxChhVnE= Subject key identifier: CE:7E:05:EB:74:D8:81:6A:84:7F:9A:18:DC:2D:1A:4A:83:8F:69:75 Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Certificate serial: 019B78343FD5DB4A92E214D8929F072B81D8 Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/zn4F63TYgWqEf5oY3C0aSoOPaXU.roa Signing time: Thu 01 Jan 2026 06:17:28 +0000 ROA not before: Thu 01 Jan 2026 06:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49037 IP address blocks: 46.226.160.0/21 maxlen: 32 80.72.16.0/21 maxlen: 32 85.198.120.0/21 maxlen: 32 89.169.52.0/22 maxlen: 32 92.118.72.0/22 maxlen: 32 92.246.132.0/22 maxlen: 32 92.246.136.0/21 maxlen: 32 93.185.144.0/20 maxlen: 32 94.141.100.0/22 maxlen: 32 95.174.96.0/19 maxlen: 32 178.212.139.0/24 maxlen: 32 185.9.184.0/22 maxlen: 32 185.136.32.0/22 maxlen: 32 185.230.240.0/22 maxlen: 32 185.230.241.0/24 maxlen: 24 185.230.242.0/24 maxlen: 24 213.108.20.0/22 maxlen: 32 217.144.176.0/20 maxlen: 32 2a00:8740::/32 maxlen: 128 2a0b:1c40::/29 maxlen: 128 2a12:3280::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:3f:d5:db:4a:92:e2:14:d8:92:9f:07:2b:81:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Validity Not Before: Jan 1 06:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ce7e05eb74d8816a847f9a18dc2d1a4a838f6975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fd:4a:a3:92:84:30:81:6c:34:1a:2a:de:72: 56:d3:56:65:dd:96:ea:52:c6:e2:28:cf:90:80:aa: b0:d8:75:8a:cb:99:0f:f8:26:25:12:a1:40:b4:a0: 5a:2d:6f:31:2b:6a:55:a1:32:c9:eb:54:39:57:9d: 47:51:d7:51:08:cd:7f:8d:64:63:b5:26:86:1b:a9: 51:75:f1:6c:9a:48:27:32:f0:2a:35:82:f7:06:15: 61:38:84:13:f6:9a:6c:ba:4f:f1:12:64:7c:30:ab: 85:37:43:98:7f:04:dd:43:26:e4:f3:92:99:7b:90: 5a:82:fa:ba:ff:18:b4:ac:b5:ff:65:ec:c2:03:2c: 72:af:62:4a:1a:4e:b0:4b:e3:d3:98:9e:7f:61:21: 3c:67:74:78:53:a3:3a:5d:9a:04:f6:bb:7b:7e:2d: a2:4c:dd:98:80:23:89:4c:6e:03:bf:e5:4a:b6:49: 9c:56:99:63:54:0f:c6:41:4c:1d:8b:04:1f:f2:a5: 49:92:4a:60:26:9f:02:66:79:c3:5f:6a:1d:d7:fd: a1:d3:57:02:da:14:25:f9:c8:b1:52:63:b2:fa:58: 03:04:6f:2f:78:80:d6:0f:e8:0d:dd:cb:ec:32:33: a8:39:3b:56:0e:fb:83:f5:04:fb:d3:d0:bf:e6:c9: 62:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:7E:05:EB:74:D8:81:6A:84:7F:9A:18:DC:2D:1A:4A:83:8F:69:75 X509v3 Authority Key Identifier: keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/zn4F63TYgWqEf5oY3C0aSoOPaXU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.226.160.0/21 80.72.16.0/21 85.198.120.0/21 89.169.52.0/22 92.118.72.0/22 92.246.132.0-92.246.143.255 93.185.144.0/20 94.141.100.0/22 95.174.96.0/19 178.212.139.0/24 185.9.184.0/22 185.136.32.0/22 185.230.240.0/22 213.108.20.0/22 217.144.176.0/20 IPv6: 2a00:8740::/32 2a0b:1c40::/29 2a12:3280::/32 Signature Algorithm: sha256WithRSAEncryption 5f:d5:e4:7a:57:e2:00:b4:da:2c:72:6e:80:45:82:31:ec:43: a5:98:6e:f4:ed:35:47:9b:9e:d5:d8:24:8f:5e:3f:1b:d7:4c: 44:3a:77:c7:2f:4d:4a:ec:c9:9f:c0:2d:3e:a0:ac:a9:7c:84: 6c:c9:f0:2b:a8:9f:bc:3e:79:d2:4b:dc:8f:65:83:80:8c:1d: 00:a9:10:03:45:de:60:78:8f:02:06:be:10:56:60:84:89:6a: 19:55:81:8a:02:2b:bc:e4:63:8b:f7:d5:91:03:5f:cf:29:9f: 38:04:cb:af:51:29:79:2d:ac:c0:6c:c9:c5:9e:53:f7:c6:dc: 60:93:d8:d5:48:08:35:7a:54:9d:f9:3b:8c:18:6e:89:cf:31: e2:9f:4b:06:b6:8c:98:77:23:09:ff:ef:98:3d:2f:83:b0:9a: 2d:94:74:aa:60:05:8b:d5:93:9b:6a:96:1d:87:d5:e2:f9:f0: b6:ff:01:4a:c2:1c:1e:0b:f4:cd:e5:c1:2d:03:e5:e0:75:c6: 42:b2:2c:97:a8:2d:16:50:80:67:21:a5:48:35:e2:b5:41:7b: a1:32:cd:aa:20:1d:1f:8c:14:77:bb:1a:4d:d7:24:c5:8e:52: bf:53:fa:43:45:06:8b:3a:b3:bf:b3:b4:08:de:54:2d:96:0a: 13:fd:65:48 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgISAZt4ND/V20qS4hTYkp8HK4HYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZTk3MDMzYTM2YWE5YmNjMGMyZjE2N2U2MjBkN2NhMTQ5 M2NiZWEwHhcNMjYwMTAxMDYxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTdlMDVlYjc0ZDg4MTZhODQ3ZjlhMThkYzJkMWE0YTgzOGY2OTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwP1Ko5KEMIFsNBoq3nJW01Zl3Zbq UsbiKM+QgKqw2HWKy5kP+CYlEqFAtKBaLW8xK2pVoTLJ61Q5V51HUddRCM1/jWRj tSaGG6lRdfFsmkgnMvAqNYL3BhVhOIQT9ppsuk/xEmR8MKuFN0OYfwTdQybk85KZ e5Bagvq6/xi0rLX/ZezCAyxyr2JKGk6wS+PTmJ5/YSE8Z3R4U6M6XZoE9rt7fi2i TN2YgCOJTG4Dv+VKtkmcVpljVA/GQUwdiwQf8qVJkkpgJp8CZnnDX2od1/2h01cC 2hQl+cixUmOy+lgDBG8veIDWD+gN3cvsMjOoOTtWDvuD9QT709C/5sli0wIDAQAB o4IChTCCAoEwHQYDVR0OBBYEFM5+Bet02IFqhH+aGNwtGkqDj2l1MB8GA1UdIwQY MBaAFNPpcDOjaqm8wMLxZ+Yg18oUk8vqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMt ZGJmOWQ0MWYxNzk4LzEvem40RjYzVFlnV3FFZjVvWTNDMGFTb09QYVhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMtZGJmOWQ0MWYxNzk4 LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGaBggrBgEFBQcBBwEB/wSBijCBhzBoBAIAATBiAwQDLuKg AwQDUEgQAwQDVcZ4AwQCWak0AwQCXHZIMAwDBAJc9oQDBARc9oADBARduZADBAJe jWQDBAVfrmADBACy1IsDBAK5CbgDBAK5iCADBAK55vADBALVbBQDBATZkLAwGwQC AAIwFQMFACoAh0ADBQMqCxxAAwUAKhIygDANBgkqhkiG9w0BAQsFAAOCAQEAX9Xk elfiALTaLHJugEWCMexDpZhu9O01R5ue1dgkj14/G9dMRDp3xy9NSuzJn8AtPqCs qXyEbMnwK6ifvD550kvcj2WDgIwdAKkQA0XeYHiPAga+EFZghIlqGVWBigIrvORj i/fVkQNfzymfOATLr1EpeS2swGzJxZ5T98bcYJPY1UgINXpUnfk7jBhuic8x4p9L BraMmHcjCf/vmD0vg7CaLZR0qmAFi9WTm2qWHYfV4vnwtv8BSsIcHgv0zeXBLQPl 4HXGQrIsl6gtFlCAZyGlSDXitUF7oTLNqiAdH4wUd7saTdckxY5Sv1P6Q0UGizqz v7O0CN5ULZYKE/1lSA== -----END CERTIFICATE-----Generated at Mon Jan 26 03:03:30 2026 by rpki-client