This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/pZgHDj4hvS94RIqJfJW0GK3sUvA.roa File: pZgHDj4hvS94RIqJfJW0GK3sUvA.roa (raw, json) Hash identifier: VLF2J7q+tozZoy1cKh3llz5KHuhO4EGPUGXVA7erfso= Subject key identifier: A5:98:07:0E:3E:21:BD:2F:78:44:8A:89:7C:95:B4:18:AD:EC:52:F0 Certificate issuer: /CN=6525d8b7f19e2fb75cb7f95789d9118f6b1b9705 Certificate serial: 019B7B3573F41C5DD6D973752B315E034247 Authority key identifier: 65:25:D8:B7:F1:9E:2F:B7:5C:B7:F9:57:89:D9:11:8F:6B:1B:97:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZSXYt_GeL7dct_lXidkRj2sblwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/pZgHDj4hvS94RIqJfJW0GK3sUvA.roa Signing time: Thu 01 Jan 2026 20:17:39 +0000 ROA not before: Thu 01 Jan 2026 20:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8393 IP address blocks: 91.203.20.0/24 maxlen: 24 91.203.21.0/24 maxlen: 24 91.203.22.0/24 maxlen: 24 149.154.190.0/23 maxlen: 23 185.217.16.0/24 maxlen: 24 185.217.17.0/24 maxlen: 24 185.217.18.0/24 maxlen: 24 185.217.19.0/24 maxlen: 24 193.193.224.0/24 maxlen: 24 193.193.225.0/24 maxlen: 24 193.193.226.0/24 maxlen: 24 193.193.227.0/24 maxlen: 24 193.193.228.0/24 maxlen: 24 193.193.229.0/24 maxlen: 24 193.193.230.0/24 maxlen: 24 193.193.231.0/24 maxlen: 24 193.193.232.0/24 maxlen: 24 193.193.233.0/24 maxlen: 24 193.193.234.0/24 maxlen: 24 193.193.235.0/24 maxlen: 24 193.193.236.0/24 maxlen: 24 193.193.237.0/24 maxlen: 24 193.193.238.0/24 maxlen: 24 193.193.239.0/24 maxlen: 24 193.193.240.0/24 maxlen: 24 193.193.241.0/24 maxlen: 24 193.193.242.0/24 maxlen: 24 193.193.243.0/24 maxlen: 24 193.193.244.0/24 maxlen: 24 193.193.245.0/24 maxlen: 24 193.193.246.0/24 maxlen: 24 193.193.247.0/24 maxlen: 24 193.193.248.0/24 maxlen: 24 193.193.249.0/24 maxlen: 24 193.193.250.0/24 maxlen: 24 193.193.251.0/24 maxlen: 24 193.193.252.0/23 maxlen: 23 193.193.254.0/24 maxlen: 24 193.193.255.0/24 maxlen: 24 213.157.32.0/24 maxlen: 24 213.157.33.0/24 maxlen: 24 213.157.34.0/24 maxlen: 24 213.157.35.0/24 maxlen: 24 213.157.36.0/24 maxlen: 24 213.157.37.0/24 maxlen: 24 213.157.38.0/24 maxlen: 24 213.157.39.0/24 maxlen: 24 213.157.40.0/24 maxlen: 24 213.157.41.0/24 maxlen: 24 213.157.42.0/24 maxlen: 24 213.157.43.0/24 maxlen: 24 213.157.44.0/24 maxlen: 24 213.157.45.0/24 maxlen: 24 213.157.46.0/24 maxlen: 24 213.157.47.0/24 maxlen: 24 213.157.48.0/24 maxlen: 24 213.157.49.0/24 maxlen: 24 213.157.50.0/24 maxlen: 24 213.157.51.0/24 maxlen: 24 213.157.52.0/24 maxlen: 24 213.157.53.0/24 maxlen: 24 213.157.54.0/23 maxlen: 23 213.157.56.0/24 maxlen: 24 213.157.57.0/24 maxlen: 24 213.157.58.0/23 maxlen: 23 213.157.60.0/24 maxlen: 24 213.157.61.0/24 maxlen: 24 213.157.62.0/24 maxlen: 24 213.157.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft rsync://rpki.ripe.net/repository/DEFAULT/ZSXYt_GeL7dct_lXidkRj2sblwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:73:f4:1c:5d:d6:d9:73:75:2b:31:5e:03:42:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6525d8b7f19e2fb75cb7f95789d9118f6b1b9705 Validity Not Before: Jan 1 20:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a598070e3e21bd2f78448a897c95b418adec52f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8f:85:b1:77:df:2e:e6:ca:88:da:d8:cc:d2: ac:19:45:f2:38:70:a7:c8:db:49:09:33:70:21:fa: 18:d7:a8:27:88:58:62:37:a0:3a:92:e6:8e:d1:53: 11:ee:2f:b2:ff:47:73:2c:ff:fd:c9:61:ec:f9:d6: ec:10:94:41:58:51:09:8c:83:35:51:59:8f:e8:f2: cc:0a:ff:76:fc:b8:65:d5:f1:59:76:d6:a9:26:81: b3:de:50:9e:2e:d3:13:d4:83:9e:08:98:51:45:97: 78:f0:14:b2:26:15:5b:55:9c:ac:80:42:b6:e9:95: ac:36:be:5d:44:e0:45:3e:e5:50:57:b8:e1:39:7a: 7a:f3:da:fc:ae:3d:88:a5:16:e7:b8:02:28:f3:50: 27:18:91:36:33:f8:92:10:f8:94:a0:18:60:e0:44: 28:49:c7:75:7d:bf:83:88:c1:72:45:79:b5:cb:35: 29:87:fd:68:01:b0:d2:21:fe:c1:7b:a4:52:64:66: e2:67:3f:fb:92:82:74:96:e7:f2:c6:5d:37:93:b8: ff:f1:c2:38:7b:5c:4c:67:55:c2:73:8f:86:1e:07: 8b:b9:22:f7:a7:4f:79:9c:d4:a9:a5:aa:f5:ac:f2: 20:6a:b8:19:9e:c2:7e:1f:24:64:11:bf:d0:eb:18: eb:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:98:07:0E:3E:21:BD:2F:78:44:8A:89:7C:95:B4:18:AD:EC:52:F0 X509v3 Authority Key Identifier: keyid:65:25:D8:B7:F1:9E:2F:B7:5C:B7:F9:57:89:D9:11:8F:6B:1B:97:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZSXYt_GeL7dct_lXidkRj2sblwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/pZgHDj4hvS94RIqJfJW0GK3sUvA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.203.20.0-91.203.22.255 149.154.190.0/23 185.217.16.0/22 193.193.224.0/19 213.157.32.0/19 Signature Algorithm: sha256WithRSAEncryption 5c:1e:50:51:c2:fc:b8:e5:0e:a9:f4:b3:da:0d:f4:60:3b:a4: e8:d3:fe:24:08:cb:b4:52:3d:c4:d9:42:63:d3:48:08:73:8f: 48:88:fe:40:df:3d:2b:08:9d:ee:71:6e:1e:92:48:86:88:03: b6:ad:f1:92:bd:74:e8:d6:e2:54:bc:6a:29:b8:66:c0:d8:08: 5c:93:de:57:71:b7:98:a9:b0:9d:bc:c2:f2:9c:7c:1f:e9:c4: fa:79:db:c5:8d:37:63:74:fd:01:87:f9:10:95:fe:c3:ed:32: b1:41:22:a4:a0:b7:9f:36:5c:c6:1a:7d:da:f2:78:6a:c3:24: 28:fa:fd:6e:3a:2f:fd:14:7e:43:6d:8c:16:8c:ed:50:8d:78: b8:2d:39:7b:cc:c9:4f:db:a4:12:fa:4b:52:ee:26:ab:69:cd: 1f:10:ff:44:1b:a8:70:85:79:28:78:62:bb:04:86:d5:a4:e3: d3:e3:eb:c4:d2:2c:2e:42:27:67:82:ec:24:56:b5:62:08:2e: b2:19:58:6c:73:e1:78:74:fd:cf:96:84:37:3b:41:92:01:ff: 6c:49:e3:57:6c:c0:b5:cb:c5:30:6c:ca:89:20:44:e2:17:93: c1:b2:de:e2:98:07:98:1b:c7:d9:31:b6:18:8e:4b:02:b4:f5: c7:f3:54:06 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt7NXP0HF3W2XN1KzFeA0JHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1MjVkOGI3ZjE5ZTJmYjc1Y2I3Zjk1Nzg5ZDkxMThmNmIx Yjk3MDUwHhcNMjYwMTAxMjAxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTk4MDcwZTNlMjFiZDJmNzg0NDhhODk3Yzk1YjQxOGFkZWM1MmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvo+FsXffLubKiNrYzNKsGUXyOHCn yNtJCTNwIfoY16gniFhiN6A6kuaO0VMR7i+y/0dzLP/9yWHs+dbsEJRBWFEJjIM1 UVmP6PLMCv92/Lhl1fFZdtapJoGz3lCeLtMT1IOeCJhRRZd48BSyJhVbVZysgEK2 6ZWsNr5dROBFPuVQV7jhOXp689r8rj2IpRbnuAIo81AnGJE2M/iSEPiUoBhg4EQo Scd1fb+DiMFyRXm1yzUph/1oAbDSIf7Be6RSZGbiZz/7koJ0lufyxl03k7j/8cI4 e1xMZ1XCc4+GHgeLuSL3p095nNSppar1rPIgargZnsJ+HyRkEb/Q6xjrwwIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFKWYBw4+Ib0veESKiXyVtBit7FLwMB8GA1UdIwQY MBaAFGUl2Lfxni+3XLf5V4nZEY9rG5cFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlNYWXRfR2VMN2RjdF9sWGlka1JqMnNibHdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9jYWEzODUtYjJhNS00MzIzLWFkYzUt NDY2MDNkZTgwNWVjLzEvcFpnSERqNGh2Uzk0UklxSmZKVzBHSzNzVXZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9jYWEzODUtYjJhNS00MzIzLWFkYzUtNDY2MDNkZTgwNWVj LzEvWlNYWXRfR2VMN2RjdF9sWGlka1JqMnNibHdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmMAwDBAJbyxQD BABbyxYDBAGVmr4DBAK52RADBAXBweADBAXVnSAwDQYJKoZIhvcNAQELBQADggEB AFweUFHC/LjlDqn0s9oN9GA7pOjT/iQIy7RSPcTZQmPTSAhzj0iI/kDfPSsIne5x bh6SSIaIA7at8ZK9dOjW4lS8aim4ZsDYCFyT3ldxt5ipsJ28wvKcfB/pxPp528WN N2N0/QGH+RCV/sPtMrFBIqSgt582XMYafdryeGrDJCj6/W46L/0UfkNtjBaM7VCN eLgtOXvMyU/bpBL6S1LuJqtpzR8Q/0QbqHCFeSh4YrsEhtWk49Pj68TSLC5CJ2eC 7CRWtWIILrIZWGxz4Xh0/c+WhDc7QZIB/2xJ41dswLXLxTBsyokgROIXk8Gy3uKY B5gbx9kxthiOSwK09cfzVAY= -----END CERTIFICATE-----Generated at Tue Feb 10 04:27:43 2026 by rpki-client