This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/ZVxmSBETjhow2Dvw8dLziJ1lvXw.roa File: ZVxmSBETjhow2Dvw8dLziJ1lvXw.roa (raw, json) Hash identifier: K3u9nBj800cWFoVnX+a4/3jpRW4e4OV1gjemZubRC+A= Subject key identifier: 65:5C:66:48:11:13:8E:1A:30:D8:3B:F0:F1:D2:F3:88:9D:65:BD:7C Certificate issuer: /CN=2e252a477242fb45f20bb08020a403a2bb466a9b Certificate serial: 019C09A31BF86844E1E8D5D84636EAAAE3AF Authority key identifier: 2E:25:2A:47:72:42:FB:45:F2:0B:B0:80:20:A4:03:A2:BB:46:6A:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/ZVxmSBETjhow2Dvw8dLziJ1lvXw.roa Signing time: Thu 29 Jan 2026 12:03:30 +0000 ROA not before: Thu 29 Jan 2026 12:03:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200446 IP address blocks: 31.170.240.0/21 maxlen: 21 31.171.48.0/21 maxlen: 21 31.171.56.0/21 maxlen: 21 31.171.68.0/22 maxlen: 22 31.171.72.0/22 maxlen: 22 31.171.80.0/21 maxlen: 21 31.171.88.0/21 maxlen: 21 62.212.229.0/24 maxlen: 24 85.132.108.0/24 maxlen: 24 85.132.110.0/24 maxlen: 24 94.20.54.0/24 maxlen: 24 94.20.123.0/24 maxlen: 24 94.20.148.0/22 maxlen: 22 94.20.172.0/22 maxlen: 22 94.20.180.0/22 maxlen: 22 94.20.192.0/23 maxlen: 23 94.20.204.0/22 maxlen: 22 94.20.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.crl rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.mft rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Feb 2026 19:43:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:09:a3:1b:f8:68:44:e1:e8:d5:d8:46:36:ea:aa:e3:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e252a477242fb45f20bb08020a403a2bb466a9b Validity Not Before: Jan 29 12:03:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=655c664811138e1a30d83bf0f1d2f3889d65bd7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7f:b3:b9:4c:5d:d4:dc:2e:52:84:85:b3:68: 00:05:c8:b2:37:b2:c1:fc:e0:d7:89:3b:95:25:f4: fc:73:47:ff:9c:d9:e7:37:79:9e:35:43:a9:f5:0d: 02:23:31:0c:9c:ef:c4:5b:c9:7d:5a:c3:4b:d9:ab: f7:bb:10:bb:9f:23:91:66:d0:b4:66:85:f8:53:e4: b0:f6:ab:51:42:ab:f1:12:3e:78:9b:31:13:b2:af: 53:ad:32:f9:50:cb:cd:aa:b9:9d:7b:ac:b3:fb:a3: 5a:eb:f4:5b:28:ec:91:d6:8d:81:c0:a2:4f:1f:56: fe:36:50:b0:e6:56:33:5c:b3:95:51:fe:c7:15:fa: e2:a0:5c:a4:6a:45:ee:0d:9b:04:9d:18:9b:fe:ab: e5:bd:3d:58:3b:67:5d:40:68:3a:14:ee:5d:75:a5: df:f2:ab:0b:4e:de:d7:9c:86:e2:b5:52:99:a9:1d: ff:81:a8:07:20:f7:26:53:6b:27:15:3d:83:31:e8: 0b:1d:7f:c0:f1:c1:e3:e7:02:c1:5f:da:70:5b:c7: c1:8c:73:ef:d8:01:de:a5:42:57:c3:c9:83:1b:8e: 87:71:61:c5:2b:e9:c0:c9:40:c3:b6:46:1e:f1:a1: 16:d1:25:9f:73:d2:83:18:1c:c5:34:e0:1f:df:b6: c2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:5C:66:48:11:13:8E:1A:30:D8:3B:F0:F1:D2:F3:88:9D:65:BD:7C X509v3 Authority Key Identifier: keyid:2E:25:2A:47:72:42:FB:45:F2:0B:B0:80:20:A4:03:A2:BB:46:6A:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/ZVxmSBETjhow2Dvw8dLziJ1lvXw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.170.240.0/21 31.171.48.0/20 31.171.68.0-31.171.75.255 31.171.80.0/20 62.212.229.0/24 85.132.108.0/24 85.132.110.0/24 94.20.54.0/24 94.20.123.0/24 94.20.148.0/22 94.20.172.0/22 94.20.180.0/22 94.20.192.0/23 94.20.204.0-94.20.215.255 Signature Algorithm: sha256WithRSAEncryption 65:7b:f5:12:2e:66:5a:1f:c6:67:86:cd:11:a9:47:26:d3:c7: 8a:76:b1:aa:4b:1a:34:2d:da:f6:4c:9e:14:db:57:6d:37:bb: 1d:da:6d:4b:93:43:21:9d:1e:87:c2:c5:ee:5d:b2:fe:20:f2: b2:29:64:ed:3a:ce:f3:0f:63:fa:c1:da:44:22:df:aa:ea:11: 9b:21:cd:df:36:41:5c:71:16:42:0f:a7:b1:4c:26:99:36:17: f1:cc:b9:7e:4e:ae:e4:c9:eb:e7:51:4d:8a:c0:6e:cc:b8:b8: 7d:93:b2:f7:76:0b:33:05:ad:29:ce:2e:cd:15:be:e6:32:7c: b1:51:23:6d:04:6d:cc:5a:d6:27:64:19:5f:f3:8b:e9:a6:eb: aa:43:89:7b:a7:d8:d5:9c:32:c7:38:37:e8:3e:27:35:54:15: f4:45:bc:30:53:28:27:1f:f9:07:05:d5:42:f2:90:d1:2d:03: 6a:3d:ae:55:19:08:aa:7a:fc:87:39:8f:96:96:2a:61:15:98: 8b:1f:9a:f9:9e:89:26:7f:34:02:1c:0f:8e:78:5e:00:55:f1: 1a:b7:40:74:68:f4:b0:b9:59:1b:1d:aa:ed:7c:13:e1:cc:64: af:78:10:3c:42:c1:fc:4d:dd:33:66:ee:a6:b8:6d:14:bd:e8: 05:7f:43:c1 -----BEGIN CERTIFICATE----- MIIFWzCCBEOgAwIBAgISAZwJoxv4aETh6NXYRjbqquOvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMjUyYTQ3NzI0MmZiNDVmMjBiYjA4MDIwYTQwM2EyYmI0 NjZhOWIwHhcNMjYwMTI5MTIwMzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTVjNjY0ODExMTM4ZTFhMzBkODNiZjBmMWQyZjM4ODlkNjViZDdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3+zuUxd1NwuUoSFs2gABciyN7LB /ODXiTuVJfT8c0f/nNnnN3meNUOp9Q0CIzEMnO/EW8l9WsNL2av3uxC7nyORZtC0 ZoX4U+Sw9qtRQqvxEj54mzETsq9TrTL5UMvNqrmde6yz+6Na6/RbKOyR1o2BwKJP H1b+NlCw5lYzXLOVUf7HFfrioFykakXuDZsEnRib/qvlvT1YO2ddQGg6FO5ddaXf 8qsLTt7XnIbitVKZqR3/gagHIPcmU2snFT2DMegLHX/A8cHj5wLBX9pwW8fBjHPv 2AHepUJXw8mDG46HcWHFK+nAyUDDtkYe8aEW0SWfc9KDGBzFNOAf37bCYwIDAQAB o4ICZzCCAmMwHQYDVR0OBBYEFGVcZkgRE44aMNg78PHS84idZb18MB8GA1UdIwQY MBaAFC4lKkdyQvtF8guwgCCkA6K7RmqbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGlVcVIzSkMtMFh5QzdDQUlLUURvcnRHYXBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9iMTA1NjItMjZhMS00NjQ1LThkMmIt MTZmMTQ2YmVmOTk1LzEvWlZ4bVNCRVRqaG93MkR2dzhkTHppSjFsdlh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9iMTA1NjItMjZhMS00NjQ1LThkMmItMTZmMTQ2YmVmOTk1 LzEvTGlVcVIzSkMtMFh5QzdDQUlLUURvcnRHYXBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMH0GCCsGAQUFBwEHAQH/BG4wbDBqBAIAATBkAwQDH6rwAwQE H6swMAwDBAIfq0QDBAIfq0gDBAQfq1ADBAA+1OUDBABVhGwDBABVhG4DBABeFDYD BABeFHsDBAJeFJQDBAJeFKwDBAJeFLQDBAFeFMAwDAMEAl4UzAMEA14U0DANBgkq hkiG9w0BAQsFAAOCAQEAZXv1Ei5mWh/GZ4bNEalHJtPHinaxqksaNC3a9kyeFNtX bTe7HdptS5NDIZ0eh8LF7l2y/iDysilk7TrO8w9j+sHaRCLfquoRmyHN3zZBXHEW Qg+nsUwmmTYX8cy5fk6u5Mnr51FNisBuzLi4fZOy93YLMwWtKc4uzRW+5jJ8sVEj bQRtzFrWJ2QZX/OL6abrqkOJe6fY1Zwyxzg36D4nNVQV9EW8MFMoJx/5BwXVQvKQ 0S0Daj2uVRkIqnr8hzmPlpYqYRWYix+a+Z6JJn80AhwPjnheAFXxGrdAdGj0sLlZ Gx2q7XwT4cxkr3gQPELB/E3dM2buprhtFL3oBX9DwQ== -----END CERTIFICATE-----Generated at Wed Feb 4 02:14:16 2026 by rpki-client