This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/ZYYW2YyeBb0Vke3KSj4OjgEGFfc.roa File: ZYYW2YyeBb0Vke3KSj4OjgEGFfc.roa (raw, json) Hash identifier: u7pN5ljdbNEvOih+IElC9REF80H4zBHq4YEQ5TRtftU= Subject key identifier: 65:86:16:D9:8C:9E:05:BD:15:91:ED:CA:4A:3E:0E:8E:01:06:15:F7 Certificate issuer: /CN=baaa64cd29c94ccde14448f61a172c763b1e4050 Certificate serial: 019B7F842EA4F3591897AB5F0C45D687F6F0 Authority key identifier: BA:AA:64:CD:29:C9:4C:CD:E1:44:48:F6:1A:17:2C:76:3B:1E:40:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqpkzSnJTM3hREj2GhcsdjseQFA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/ZYYW2YyeBb0Vke3KSj4OjgEGFfc.roa Signing time: Fri 02 Jan 2026 16:22:07 +0000 ROA not before: Fri 02 Jan 2026 16:22:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30815 IP address blocks: 88.209.128.0/22 maxlen: 22 88.209.128.0/24 maxlen: 24 88.209.129.0/24 maxlen: 24 88.209.130.0/24 maxlen: 24 88.209.132.0/22 maxlen: 22 88.209.132.0/24 maxlen: 24 88.209.133.0/24 maxlen: 24 88.209.135.0/24 maxlen: 24 88.209.136.0/24 maxlen: 24 88.209.137.0/24 maxlen: 24 88.209.138.0/24 maxlen: 24 88.209.139.0/24 maxlen: 24 88.209.160.0/21 maxlen: 21 88.209.160.0/22 maxlen: 22 88.209.160.0/24 maxlen: 24 88.209.161.0/24 maxlen: 24 88.209.162.0/24 maxlen: 24 88.209.163.0/24 maxlen: 24 88.209.164.0/22 maxlen: 22 88.209.164.0/23 maxlen: 23 88.209.164.0/24 maxlen: 24 88.209.165.0/24 maxlen: 24 88.209.166.0/24 maxlen: 24 88.209.167.0/24 maxlen: 24 88.209.190.0/24 maxlen: 24 88.209.191.0/24 maxlen: 24 93.189.96.0/21 maxlen: 21 93.189.96.0/23 maxlen: 23 93.189.96.0/24 maxlen: 24 93.189.97.0/24 maxlen: 24 93.189.98.0/23 maxlen: 23 93.189.98.0/24 maxlen: 24 93.189.99.0/24 maxlen: 24 93.189.100.0/23 maxlen: 23 93.189.100.0/24 maxlen: 24 93.189.101.0/24 maxlen: 24 93.189.102.0/23 maxlen: 23 93.189.102.0/24 maxlen: 24 93.189.103.0/24 maxlen: 24 185.63.232.0/22 maxlen: 22 185.63.232.0/23 maxlen: 23 185.63.232.0/24 maxlen: 24 185.63.233.0/24 maxlen: 24 185.63.234.0/24 maxlen: 24 185.63.235.0/24 maxlen: 24 2a03:11e0::/32 maxlen: 32 2a03:11e0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.crl rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.mft rsync://rpki.ripe.net/repository/DEFAULT/uqpkzSnJTM3hREj2GhcsdjseQFA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:2e:a4:f3:59:18:97:ab:5f:0c:45:d6:87:f6:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baaa64cd29c94ccde14448f61a172c763b1e4050 Validity Not Before: Jan 2 16:22:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=658616d98c9e05bd1591edca4a3e0e8e010615f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7b:73:23:2e:ae:c2:10:92:fb:52:9b:36:8c: 3b:31:6d:49:8e:a5:19:f6:40:97:5f:89:f1:81:aa: a7:62:55:66:a4:c6:57:bb:7f:e0:0b:f8:06:92:57: 21:e4:0c:96:66:04:19:bc:27:7b:47:f8:68:d0:26: 7a:4e:1c:5e:1a:d6:c9:4d:d8:a8:5c:f6:9f:8f:a8: ee:d5:22:c1:0e:f4:bb:4e:c1:80:8d:92:2c:a6:f3: 00:ea:b7:9e:b7:ff:72:28:35:cb:c6:bb:58:a4:f3: 98:50:f1:45:9e:35:f6:f3:63:1e:09:95:6c:7f:7a: fd:ba:04:eb:42:02:4d:4a:da:d6:8f:f2:7b:cb:51: c7:f2:19:b3:8e:15:0c:1d:ab:cb:1f:81:5d:70:f9: 4b:39:1a:a1:ef:58:5a:9d:55:9d:ed:0e:1f:85:36: 67:e7:4f:f3:d2:62:05:9e:8b:8f:e7:65:90:59:8f: a9:cc:12:d6:4f:5f:01:6b:72:30:6e:0d:0e:ec:dd: 8a:a1:0d:59:76:59:6d:f1:68:31:88:a7:6f:96:2c: 3e:44:85:bc:17:2d:02:6f:50:3e:86:ff:d2:70:86: cc:12:22:8e:61:fc:9b:7f:fe:d5:7b:8d:4c:4d:04: 72:f8:7e:ea:bd:c2:8f:11:0a:58:6e:a2:d1:28:6c: d2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:86:16:D9:8C:9E:05:BD:15:91:ED:CA:4A:3E:0E:8E:01:06:15:F7 X509v3 Authority Key Identifier: keyid:BA:AA:64:CD:29:C9:4C:CD:E1:44:48:F6:1A:17:2C:76:3B:1E:40:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqpkzSnJTM3hREj2GhcsdjseQFA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/ZYYW2YyeBb0Vke3KSj4OjgEGFfc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.209.128.0-88.209.139.255 88.209.160.0/21 88.209.190.0/23 93.189.96.0/21 185.63.232.0/22 IPv6: 2a03:11e0::/32 Signature Algorithm: sha256WithRSAEncryption 0b:26:94:53:20:f5:d4:51:65:80:7c:6e:6f:36:23:a5:90:41: 1f:fb:39:d8:40:c8:0e:76:d6:64:2a:10:fc:d7:4b:d3:e5:c0: e9:64:e0:a2:ad:58:60:d4:1e:9f:c0:6e:06:5e:26:c8:78:9a: 34:ec:f6:b4:52:4b:75:8d:61:69:b2:b7:91:ed:72:3c:e1:91: c2:59:e4:97:da:6b:59:54:82:ab:6a:5d:e3:7b:9d:67:55:7f: 58:10:91:8f:30:2a:4a:27:9e:2f:86:a6:54:14:18:53:2a:2d: 66:96:e8:99:ec:06:c6:0c:43:20:8a:97:3b:54:e3:36:21:2b: f9:8f:ae:31:06:b3:6a:a1:96:b5:46:0d:e0:69:03:a5:11:5d: 08:f6:76:68:66:8f:c1:9c:9d:ea:ba:53:48:10:1c:b4:f6:4e: 08:cd:b1:c3:32:9d:e7:2d:98:40:d1:dc:77:16:18:f8:3d:44: 85:2c:5a:5a:8d:86:c4:16:e4:2f:6d:ce:d4:ec:43:91:c6:c3: 3f:8a:7b:e9:ce:04:dd:dc:97:4b:14:95:0e:80:3f:5f:eb:76: e7:dd:bc:89:23:a4:4d:ae:27:f5:cf:9f:2c:2a:f8:65:00:93: 30:3f:81:3e:f9:77:b7:5a:fe:68:e1:cc:bd:92:03:ff:66:95: a9:4c:fb:fe -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgISAZt/hC6k81kYl6tfDEXWh/bwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYWE2NGNkMjljOTRjY2RlMTQ0NDhmNjFhMTcyYzc2M2Ix ZTQwNTAwHhcNMjYwMTAyMTYyMjA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTg2MTZkOThjOWUwNWJkMTU5MWVkY2E0YTNlMGU4ZTAxMDYxNWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnntzIy6uwhCS+1KbNow7MW1JjqUZ 9kCXX4nxgaqnYlVmpMZXu3/gC/gGklch5AyWZgQZvCd7R/ho0CZ6ThxeGtbJTdio XPafj6ju1SLBDvS7TsGAjZIspvMA6reet/9yKDXLxrtYpPOYUPFFnjX282MeCZVs f3r9ugTrQgJNStrWj/J7y1HH8hmzjhUMHavLH4FdcPlLORqh71hanVWd7Q4fhTZn 50/z0mIFnouP52WQWY+pzBLWT18Ba3Iwbg0O7N2KoQ1Zdllt8WgxiKdvliw+RIW8 Fy0Cb1A+hv/ScIbMEiKOYfybf/7Ve41MTQRy+H7qvcKPEQpYbqLRKGzS6QIDAQAB o4ICODCCAjQwHQYDVR0OBBYEFGWGFtmMngW9FZHtyko+Do4BBhX3MB8GA1UdIwQY MBaAFLqqZM0pyUzN4URI9hoXLHY7HkBQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFwa3pTbkpUTTNoUkVqMkdoY3NkanNlUUZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS83MWY0MzktMmIxYi00ZWYwLWI2YTUt OGZjYWE2OTM2YzZjLzEvWllZVzJZeWVCYjBWa2UzS1NqNE9qZ0VHRmZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS83MWY0MzktMmIxYi00ZWYwLWI2YTUtOGZjYWE2OTM2YzZj LzEvdXFwa3pTbkpUTTNoUkVqMkdoY3NkanNlUUZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAsBAIAATAmMAwDBAdY0YAD BAJY0YgDBANY0aADBAFY0b4DBANdvWADBAK5P+gwDQQCAAIwBwMFACoDEeAwDQYJ KoZIhvcNAQELBQADggEBAAsmlFMg9dRRZYB8bm82I6WQQR/7OdhAyA521mQqEPzX S9PlwOlk4KKtWGDUHp/AbgZeJsh4mjTs9rRSS3WNYWmyt5HtcjzhkcJZ5Jfaa1lU gqtqXeN7nWdVf1gQkY8wKkonni+GplQUGFMqLWaW6JnsBsYMQyCKlztU4zYhK/mP rjEGs2qhlrVGDeBpA6URXQj2dmhmj8Gcneq6U0gQHLT2TgjNscMynectmEDR3HcW GPg9RIUsWlqNhsQW5C9tztTsQ5HGwz+Ke+nOBN3cl0sUlQ6AP1/rdufdvIkjpE2u J/XPnywq+GUAkzA/gT75d7da/mjhzL2SA/9mlalM+/4= -----END CERTIFICATE-----Generated at Tue Feb 10 07:11:06 2026 by rpki-client