This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/ZvznoF2yyTKB6pJyqzpGeZuFh38.roa File: ZvznoF2yyTKB6pJyqzpGeZuFh38.roa (raw, json) Hash identifier: XpznPyFNyd8U/ZoXrqV7HW6khjk/3kzxWSxwOBbLYoo= Subject key identifier: 66:FC:E7:A0:5D:B2:C9:32:81:EA:92:72:AB:3A:46:79:9B:85:87:7F Certificate issuer: /CN=c6135e4acf96139ce5ff2cfdd95f55a8176d7324 Certificate serial: 019B7D5C22198B09858AD51B49932A8602AA Authority key identifier: C6:13:5E:4A:CF:96:13:9C:E5:FF:2C:FD:D9:5F:55:A8:17:6D:73:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhNeSs-WE5zl_yz92V9VqBdtcyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/ZvznoF2yyTKB6pJyqzpGeZuFh38.roa Signing time: Fri 02 Jan 2026 06:19:08 +0000 ROA not before: Fri 02 Jan 2026 06:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34555 IP address blocks: 31.24.216.0/24 maxlen: 24 31.24.217.0/24 maxlen: 24 31.24.218.0/24 maxlen: 24 31.24.219.0/24 maxlen: 24 31.24.220.0/24 maxlen: 24 31.24.221.0/24 maxlen: 24 31.24.222.0/24 maxlen: 24 31.24.223.0/24 maxlen: 24 185.4.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/xhNeSs-WE5zl_yz92V9VqBdtcyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/xhNeSs-WE5zl_yz92V9VqBdtcyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/xhNeSs-WE5zl_yz92V9VqBdtcyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:22:19:8b:09:85:8a:d5:1b:49:93:2a:86:02:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6135e4acf96139ce5ff2cfdd95f55a8176d7324 Validity Not Before: Jan 2 06:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=66fce7a05db2c93281ea9272ab3a46799b85877f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c4:27:45:9a:c6:5b:c2:70:45:82:42:47:f7: 5d:e9:60:d3:eb:71:af:b8:6d:d8:57:6a:55:2f:55: 7d:38:eb:53:e9:07:2b:5a:f1:6f:01:c9:ba:fe:50: 17:d4:94:20:7c:5c:39:6e:a7:b5:1a:35:d6:e0:b9: b8:bc:2a:45:81:ff:c9:0e:e0:3f:ff:dc:c9:a3:c1: 15:b8:90:84:99:44:6f:18:f3:f0:22:67:b0:9b:06: 78:55:7b:a2:e2:75:9f:05:60:3a:81:73:e9:ad:7e: d8:ed:13:2f:2d:4f:c0:19:d2:6c:56:5a:04:ba:29: f5:27:93:ed:34:cb:80:cb:1d:57:34:6f:5d:14:57: f7:01:b7:f2:ce:99:e1:78:85:e8:17:dd:cd:c5:7d: 61:7e:7f:63:b7:2d:1f:8e:01:45:e1:15:5b:85:02: 7c:93:49:08:f7:dc:dc:69:a3:4a:66:33:6b:93:da: d6:61:87:62:d7:b4:50:af:ab:ef:d8:2c:12:7c:e4: 56:75:41:20:95:64:fd:9b:33:8e:7c:3e:1d:c9:b8: 89:13:94:f0:aa:ea:81:9d:46:6d:1b:8f:70:fb:e3: d7:e4:c6:98:2a:90:f3:0b:38:e2:4c:4d:05:cb:83: 57:21:e2:12:82:f8:4f:51:c5:b9:92:f8:ce:d4:1e: 55:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:FC:E7:A0:5D:B2:C9:32:81:EA:92:72:AB:3A:46:79:9B:85:87:7F X509v3 Authority Key Identifier: keyid:C6:13:5E:4A:CF:96:13:9C:E5:FF:2C:FD:D9:5F:55:A8:17:6D:73:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhNeSs-WE5zl_yz92V9VqBdtcyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/ZvznoF2yyTKB6pJyqzpGeZuFh38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/xhNeSs-WE5zl_yz92V9VqBdtcyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.24.216.0/21 185.4.240.0/22 Signature Algorithm: sha256WithRSAEncryption 3c:39:3a:b2:47:c1:3c:e5:68:4b:8d:4a:3d:44:de:3e:87:0a: 94:f1:80:cc:a6:35:96:6d:aa:ad:5a:17:58:87:89:e9:f2:b9: 2c:6e:08:d9:5e:5f:4c:dc:0b:fa:d5:aa:06:f3:cb:8f:9c:15: 11:19:9d:67:3b:b4:db:92:e4:6a:40:52:e8:83:c5:a7:bb:88: df:68:d0:d8:8c:81:a8:33:54:ae:6d:45:26:f5:0e:e0:c5:f7: 73:0b:50:d1:12:0b:e5:dd:30:10:87:e7:2f:d7:da:7a:fb:fe: cc:dd:85:4d:e8:8a:ed:37:6b:95:7d:b2:82:43:92:60:59:3b: cb:04:65:96:e7:89:af:fd:7c:ac:fa:7b:bb:3d:32:1e:ed:aa: 6c:df:5f:2c:8d:06:22:9c:67:9d:61:db:0d:f3:11:b7:08:4a: 13:49:16:7a:75:4f:a6:02:43:4f:a0:8a:b9:0f:bf:0d:22:ea: a4:d6:49:99:ce:e1:ee:e9:ad:f8:3d:40:c8:2c:0e:d2:7d:88: c3:31:bd:e0:ed:37:bb:aa:63:9e:47:05:60:46:5f:c5:e6:a1: e3:6d:f7:18:5a:1c:8b:00:10:65:4c:39:5b:f8:e1:3e:84:4b: e1:fb:e3:c6:a0:d6:8c:cb:1f:59:73:d5:cc:d7:4d:d2:79:31: 64:f3:7a:6f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XCIZiwmFitUbSZMqhgKqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTM1ZTRhY2Y5NjEzOWNlNWZmMmNmZGQ5NWY1NWE4MTc2 ZDczMjQwHhcNMjYwMTAyMDYxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NmZjZTdhMDVkYjJjOTMyODFlYTkyNzJhYjNhNDY3OTliODU4NzdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcQnRZrGW8JwRYJCR/dd6WDT63Gv uG3YV2pVL1V9OOtT6QcrWvFvAcm6/lAX1JQgfFw5bqe1GjXW4Lm4vCpFgf/JDuA/ /9zJo8EVuJCEmURvGPPwImewmwZ4VXui4nWfBWA6gXPprX7Y7RMvLU/AGdJsVloE uin1J5PtNMuAyx1XNG9dFFf3AbfyzpnheIXoF93NxX1hfn9jty0fjgFF4RVbhQJ8 k0kI99zcaaNKZjNrk9rWYYdi17RQr6vv2CwSfORWdUEglWT9mzOOfD4dybiJE5Tw quqBnUZtG49w++PX5MaYKpDzCzjiTE0Fy4NXIeISgvhPUcW5kvjO1B5VBwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGb856BdsskygeqScqs6RnmbhYd/MB8GA1UdIwQY MBaAFMYTXkrPlhOc5f8s/dlfVagXbXMkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhOZVNzLVdFNXpsX3l6OTJWOVZxQmR0Y3lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS82ZjZmMGQtZTZkZi00ZjJiLTgwZGYt NDY2YjBjZDhiNzVhLzEvWnZ6bm9GMnl5VEtCNnBKeXF6cEdlWnVGaDM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS82ZjZmMGQtZTZkZi00ZjJiLTgwZGYtNDY2YjBjZDhiNzVh LzEveGhOZVNzLVdFNXpsX3l6OTJWOVZxQmR0Y3lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDHxjYAwQC uQTwMA0GCSqGSIb3DQEBCwUAA4IBAQA8OTqyR8E85WhLjUo9RN4+hwqU8YDMpjWW baqtWhdYh4np8rksbgjZXl9M3Av61aoG88uPnBURGZ1nO7TbkuRqQFLog8Wnu4jf aNDYjIGoM1SubUUm9Q7gxfdzC1DREgvl3TAQh+cv19p6+/7M3YVN6IrtN2uVfbKC Q5JgWTvLBGWW54mv/Xys+nu7PTIe7aps318sjQYinGedYdsN8xG3CEoTSRZ6dU+m AkNPoIq5D78NIuqk1kmZzuHu6a34PUDILA7SfYjDMb3g7Te7qmOeRwVgRl/F5qHj bfcYWhyLABBlTDlb+OE+hEvh++PGoNaMyx9Zc9XM103SeTFk83pv -----END CERTIFICATE-----Generated at Tue Feb 10 06:06:26 2026 by rpki-client