This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/z-6NzODp7V-uHJv_U1uqHFUWgdY.roa File: z-6NzODp7V-uHJv_U1uqHFUWgdY.roa (raw, json) Hash identifier: Wpr01XsM6HL09hxowv58BJM3hnt+sJz/9fzPyIg61hU= Subject key identifier: CF:EE:8D:CC:E0:E9:ED:5F:AE:1C:9B:FF:53:5B:AA:1C:55:16:81:D6 Certificate issuer: /CN=add353933674a5608f6d1ee2dab4f64c8bff8f39 Certificate serial: 019BE08F5DE448E2BC8987D583E3C768C8D5 Authority key identifier: AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/z-6NzODp7V-uHJv_U1uqHFUWgdY.roa Signing time: Wed 21 Jan 2026 12:37:30 +0000 ROA not before: Wed 21 Jan 2026 12:37:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 91.84.0.0/18 maxlen: 24 91.84.128.0/17 maxlen: 24 91.85.32.0/19 maxlen: 24 91.85.64.0/18 maxlen: 24 91.85.128.0/19 maxlen: 24 91.85.192.0/18 maxlen: 24 194.46.36.0/24 maxlen: 24 194.46.37.0/24 maxlen: 24 194.46.45.0/24 maxlen: 24 194.46.46.0/24 maxlen: 24 194.46.64.0/22 maxlen: 24 194.46.72.0/22 maxlen: 24 194.46.80.0/23 maxlen: 24 194.46.81.0/24 maxlen: 24 194.46.82.0/24 maxlen: 24 212.104.129.0/24 maxlen: 24 212.104.130.0/24 maxlen: 24 212.104.132.0/24 maxlen: 24 212.104.136.0/24 maxlen: 24 212.104.143.0/24 maxlen: 24 212.104.149.0/24 maxlen: 24 212.104.150.0/24 maxlen: 24 212.104.152.0/24 maxlen: 24 212.104.155.0/24 maxlen: 24 212.104.156.0/24 maxlen: 24 212.104.159.0/24 maxlen: 24 212.108.88.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:8f:5d:e4:48:e2:bc:89:87:d5:83:e3:c7:68:c8:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=add353933674a5608f6d1ee2dab4f64c8bff8f39 Validity Not Before: Jan 21 12:37:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cfee8dcce0e9ed5fae1c9bff535baa1c551681d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9c:16:b7:76:c4:94:e6:5c:91:9d:ae:c1:24: 52:bd:9e:bd:73:72:ce:92:0a:7f:3b:c9:c6:6b:ec: 53:82:03:49:08:aa:3c:ac:56:55:76:42:92:7d:a9: 5a:07:dc:a3:b3:f9:b5:cc:f5:db:6d:18:79:e9:2f: ee:78:25:1a:32:c1:0e:4e:e1:2f:05:ae:b5:02:4b: d6:9a:0f:f5:da:42:40:8d:16:e6:22:c6:40:bd:40: 7f:17:44:d7:43:5c:e1:72:00:6f:c5:9e:e2:12:69: 51:52:aa:2f:6a:3e:c1:a2:13:d0:40:92:4a:a0:be: d6:39:ef:ec:19:ee:23:86:ff:5d:07:4a:3b:d0:68: 70:0a:a1:ba:53:18:19:87:f8:34:d4:26:de:10:9b: 3a:96:37:5e:60:ca:38:0a:9c:93:3c:89:d1:1f:8e: 04:3b:4d:63:ea:e7:be:78:f6:68:c7:18:8f:d5:96: 20:bd:cf:4b:48:20:18:4b:cb:57:ac:6d:9e:e0:ee: a2:78:58:d9:45:04:d9:fa:01:e0:be:5c:da:30:b7: d2:90:59:21:fd:93:c0:b2:b4:18:84:f3:22:07:21: 2a:dd:25:c4:2f:ce:6e:18:6e:08:64:ab:38:0c:59: 14:4e:ec:13:de:bc:af:56:88:b5:29:94:94:44:ec: 35:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:EE:8D:CC:E0:E9:ED:5F:AE:1C:9B:FF:53:5B:AA:1C:55:16:81:D6 X509v3 Authority Key Identifier: keyid:AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/z-6NzODp7V-uHJv_U1uqHFUWgdY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.84.0.0/18 91.84.128.0/17 91.85.32.0-91.85.159.255 91.85.192.0/18 194.46.36.0/23 194.46.45.0-194.46.46.255 194.46.64.0/22 194.46.72.0/22 194.46.80.0-194.46.82.255 212.104.129.0-212.104.130.255 212.104.132.0/24 212.104.136.0/24 212.104.143.0/24 212.104.149.0-212.104.150.255 212.104.152.0/24 212.104.155.0-212.104.156.255 212.104.159.0/24 212.108.88.0/23 Signature Algorithm: sha256WithRSAEncryption 33:24:83:48:c2:8c:ef:14:1c:72:b9:78:42:e5:9f:32:91:2a: 33:5a:00:d0:12:8e:8a:ca:d4:01:b4:81:69:14:02:72:6d:5e: 3a:48:3d:00:cb:62:10:b3:bc:76:ec:fc:8d:ed:28:f5:94:ad: 74:2f:a5:49:2e:60:81:db:bd:ee:91:52:4c:4f:3a:c6:49:8a: 61:b0:02:92:8e:45:09:a0:08:d2:fa:0c:6b:03:5a:89:da:3d: 6c:84:d0:5b:82:7d:22:60:91:c9:8a:84:ab:52:c9:b3:f5:75: 33:9f:fa:8e:f9:90:a4:eb:e3:0f:77:0b:eb:d3:c7:50:ff:f5: ac:e3:39:c8:5b:3c:7b:36:d0:b7:89:27:89:6d:dd:7a:7b:d5: 94:a0:46:46:e4:be:f1:b4:4b:7e:bb:09:1e:37:f2:6f:d3:fd: 8d:cc:e4:e5:34:0c:2f:2d:5f:7c:17:5f:e7:21:9f:21:97:f8: b5:be:14:41:9e:af:66:ce:aa:80:98:6f:fa:f6:a5:b2:96:84: 4b:f9:15:87:c4:22:e9:73:cf:77:fd:87:b7:63:6d:e4:d2:11: 1d:bc:63:24:16:49:9b:37:a1:59:de:6a:2c:32:58:f4:40:7b: 91:ef:e4:bd:0c:e4:56:0b:4b:d8:53:26:66:43:9a:d5:ee:62: 37:a5:55:24 -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgISAZvgj13kSOK8iYfVg+PHaMjVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkZDM1MzkzMzY3NGE1NjA4ZjZkMWVlMmRhYjRmNjRjOGJm ZjhmMzkwHhcNMjYwMTIxMTIzNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZmVlOGRjY2UwZTllZDVmYWUxYzliZmY1MzViYWExYzU1MTY4MWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5wWt3bElOZckZ2uwSRSvZ69c3LO kgp/O8nGa+xTggNJCKo8rFZVdkKSfalaB9yjs/m1zPXbbRh56S/ueCUaMsEOTuEv Ba61AkvWmg/12kJAjRbmIsZAvUB/F0TXQ1zhcgBvxZ7iEmlRUqovaj7BohPQQJJK oL7WOe/sGe4jhv9dB0o70GhwCqG6UxgZh/g01CbeEJs6ljdeYMo4CpyTPInRH44E O01j6ue+ePZoxxiP1ZYgvc9LSCAYS8tXrG2e4O6ieFjZRQTZ+gHgvlzaMLfSkFkh /ZPAsrQYhPMiByEq3SXEL85uGG4IZKs4DFkUTuwT3ryvVoi1KZSUROw17QIDAQAB o4ICpDCCAqAwHQYDVR0OBBYEFM/ujczg6e1frhyb/1NbqhxVFoHWMB8GA1UdIwQY MBaAFK3TU5M2dKVgj20e4tq09kyL/485MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmROVGt6WjBwV0NQYlI3aTJyVDJUSXZfanprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy80OGI0MDctNmQ5NC00OWFlLWEzZDgt NzJjODMxMjg3NjFiLzEvei02TnpPRHA3Vi11SEp2X1UxdXFIRlVXZ2RZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy80OGI0MDctNmQ5NC00OWFlLWEzZDgtNzJjODMxMjg3NjFi LzEvcmROVGt6WjBwV0NQYlI3aTJyVDJUSXZfanprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG5BggrBgEFBQcBBwEB/wSBqTCBpjCBowQCAAEwgZwDBAZb VAADBAdbVIAwDAMEBVtVIAMEBVtVgAMEBltVwAMEAcIuJDAMAwQAwi4tAwQAwi4u AwQCwi5AAwQCwi5IMAwDBATCLlADBADCLlIwDAMEANRogQMEANRoggMEANRohAME ANRoiAMEANRojzAMAwQA1GiVAwQA1GiWAwQA1GiYMAwDBADUaJsDBADUaJwDBADU aJ8DBAHUbFgwDQYJKoZIhvcNAQELBQADggEBADMkg0jCjO8UHHK5eELlnzKRKjNa ANASjorK1AG0gWkUAnJtXjpIPQDLYhCzvHbs/I3tKPWUrXQvpUkuYIHbve6RUkxP OsZJimGwApKORQmgCNL6DGsDWonaPWyE0FuCfSJgkcmKhKtSybP1dTOf+o75kKTr 4w93C+vTx1D/9azjOchbPHs20LeJJ4lt3Xp71ZSgRkbkvvG0S367CR438m/T/Y3M 5OU0DC8tX3wXX+chnyGX+LW+FEGer2bOqoCYb/r2pbKWhEv5FYfEIulzz3f9h7dj beTSER28YyQWSZs3oVneaiwyWPRAe5Hv5L0M5FYLS9hTJmZDmtXuYjelVSQ= -----END CERTIFICATE-----Generated at Fri Jan 23 11:16:59 2026 by rpki-client