This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/zzR0T8nuGBnLDT5TR9QLzgrFKOY.roa File: zzR0T8nuGBnLDT5TR9QLzgrFKOY.roa (raw, json) Hash identifier: X43uh4hZzcZkWBxBKcbQJsdhOv8+IPkaUXVjt0zRC6s= Subject key identifier: CF:34:74:4F:C9:EE:18:19:CB:0D:3E:53:47:D4:0B:CE:0A:C5:28:E6 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019BCD5E7E03B4219615754CA333AC6A6432 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/zzR0T8nuGBnLDT5TR9QLzgrFKOY.roa Signing time: Sat 17 Jan 2026 19:11:20 +0000 ROA not before: Sat 17 Jan 2026 19:11:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9304 IP address blocks: 37.202.212.0/24 maxlen: 24 151.240.29.0/24 maxlen: 24 151.240.146.0/24 maxlen: 24 151.240.147.0/24 maxlen: 24 151.240.148.0/24 maxlen: 24 151.240.149.0/24 maxlen: 24 151.240.150.0/24 maxlen: 24 151.240.154.0/24 maxlen: 24 151.240.161.0/24 maxlen: 24 151.240.169.0/24 maxlen: 24 151.240.179.0/24 maxlen: 24 151.241.9.0/24 maxlen: 24 151.241.13.0/24 maxlen: 24 151.241.168.0/24 maxlen: 24 151.241.174.0/24 maxlen: 24 151.241.213.0/24 maxlen: 24 151.241.222.0/24 maxlen: 24 151.241.223.0/24 maxlen: 24 151.242.101.0/24 maxlen: 24 151.242.105.0/24 maxlen: 24 151.242.143.0/24 maxlen: 24 151.243.138.0/23 maxlen: 24 151.243.144.0/23 maxlen: 24 151.243.148.0/24 maxlen: 24 151.243.166.0/23 maxlen: 24 151.243.173.0/24 maxlen: 24 151.243.176.0/24 maxlen: 24 151.243.177.0/24 maxlen: 24 151.243.178.0/23 maxlen: 24 151.243.196.0/24 maxlen: 24 151.243.200.0/24 maxlen: 24 151.243.207.0/24 maxlen: 24 151.243.208.0/24 maxlen: 24 151.243.209.0/24 maxlen: 24 151.243.224.0/24 maxlen: 24 151.243.225.0/24 maxlen: 24 151.243.247.0/24 maxlen: 24 151.245.60.0/24 maxlen: 24 151.245.122.0/24 maxlen: 24 151.245.123.0/24 maxlen: 24 151.245.124.0/24 maxlen: 24 151.245.125.0/24 maxlen: 24 151.245.126.0/24 maxlen: 24 151.245.148.0/24 maxlen: 24 151.245.150.0/24 maxlen: 24 151.245.194.0/24 maxlen: 24 151.245.226.0/23 maxlen: 24 151.245.230.0/24 maxlen: 24 151.246.164.0/23 maxlen: 24 151.246.180.0/24 maxlen: 24 151.246.181.0/24 maxlen: 24 151.246.184.0/24 maxlen: 24 151.246.185.0/24 maxlen: 24 151.246.186.0/24 maxlen: 24 151.246.187.0/24 maxlen: 24 151.246.189.0/24 maxlen: 24 151.246.246.0/23 maxlen: 24 151.246.249.0/24 maxlen: 24 151.246.250.0/23 maxlen: 24 151.246.255.0/24 maxlen: 24 151.247.137.0/24 maxlen: 24 151.247.161.0/24 maxlen: 24 151.247.164.0/24 maxlen: 24 151.247.165.0/24 maxlen: 24 151.247.169.0/24 maxlen: 24 151.247.177.0/24 maxlen: 24 151.247.250.0/24 maxlen: 24 151.247.253.0/24 maxlen: 24 151.247.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:cd:5e:7e:03:b4:21:96:15:75:4c:a3:33:ac:6a:64:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 17 19:11:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf34744fc9ee1819cb0d3e5347d40bce0ac528e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d0:25:b0:8d:04:9a:f7:78:b5:cd:8b:da:36: 91:37:c2:1c:94:6b:10:45:79:76:1e:38:d5:10:22: 43:98:fd:75:c5:bf:40:0e:de:db:f9:26:ce:75:7f: a5:e3:7d:e6:1d:c1:f6:e1:bd:85:d2:ec:25:50:ad: e6:07:18:09:ec:6f:fa:bb:90:fe:c8:d7:41:74:bd: bd:5e:49:7f:fb:45:f7:d5:22:f2:c0:f2:7d:d1:e9: cd:9a:9f:fc:e4:98:32:4e:be:1e:87:b0:7e:7f:0f: d8:a2:a4:e4:29:ce:eb:bd:85:5b:e1:96:4a:b1:e6: c3:51:c5:86:f7:89:20:4b:2a:39:38:57:24:14:64: 4e:df:16:81:44:0e:c2:d3:6d:79:83:2a:92:51:77: 75:dd:14:6a:c7:40:a7:f2:4d:1d:6e:95:82:63:6d: 32:ef:fc:f4:d3:98:33:c2:67:cf:20:fa:d1:6c:36: c5:b4:31:6c:9e:d3:45:70:06:e9:15:ec:9a:e3:cd: 3a:ed:81:a6:79:dd:69:0c:7a:70:73:c7:55:f3:49: cc:fc:e7:4d:bd:a8:c4:f1:eb:17:3f:f8:7c:9c:47: b5:cc:f1:4e:65:97:ac:cb:0a:97:9b:77:eb:00:10: ff:e3:80:9a:1c:39:dd:dc:b5:95:3b:f5:82:6f:16: 04:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:34:74:4F:C9:EE:18:19:CB:0D:3E:53:47:D4:0B:CE:0A:C5:28:E6 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/zzR0T8nuGBnLDT5TR9QLzgrFKOY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.202.212.0/24 151.240.29.0/24 151.240.146.0-151.240.150.255 151.240.154.0/24 151.240.161.0/24 151.240.169.0/24 151.240.179.0/24 151.241.9.0/24 151.241.13.0/24 151.241.168.0/24 151.241.174.0/24 151.241.213.0/24 151.241.222.0/23 151.242.101.0/24 151.242.105.0/24 151.242.143.0/24 151.243.138.0/23 151.243.144.0/23 151.243.148.0/24 151.243.166.0/23 151.243.173.0/24 151.243.176.0/22 151.243.196.0/24 151.243.200.0/24 151.243.207.0-151.243.209.255 151.243.224.0/23 151.243.247.0/24 151.245.60.0/24 151.245.122.0-151.245.126.255 151.245.148.0/24 151.245.150.0/24 151.245.194.0/24 151.245.226.0/23 151.245.230.0/24 151.246.164.0/23 151.246.180.0/23 151.246.184.0/22 151.246.189.0/24 151.246.246.0/23 151.246.249.0-151.246.251.255 151.246.255.0/24 151.247.137.0/24 151.247.161.0/24 151.247.164.0/23 151.247.169.0/24 151.247.177.0/24 151.247.250.0/24 151.247.253.0-151.247.254.255 Signature Algorithm: sha256WithRSAEncryption 64:16:ef:99:e5:76:eb:db:42:2d:d2:b0:c0:00:bf:b7:88:24: ef:67:74:2c:98:7b:04:7f:b1:a4:2f:02:f9:eb:99:ec:f2:c7: 68:58:79:4f:b0:c8:ba:b7:ac:4a:e7:75:f7:3f:4b:15:ca:16: 32:47:c8:70:12:45:65:a9:e8:49:77:02:b6:60:2b:a0:d8:96: 79:37:19:fd:e4:d2:d3:39:49:1f:81:c3:65:db:d8:13:40:45: 68:32:79:d6:bf:64:fc:d8:05:4f:e7:27:b4:57:37:24:9f:50: cf:ed:f9:08:d3:b3:cd:1c:3d:9d:f7:4d:00:ff:eb:87:03:eb: f2:10:00:cc:28:14:36:c2:4f:7f:4f:7b:43:3e:46:84:d7:b5: 57:c8:b4:53:b5:ba:4e:79:47:50:80:e7:70:4b:39:c4:fc:2b: 71:af:c7:13:d7:77:a0:57:51:68:51:24:6c:38:63:d4:41:73: a1:3c:f5:a9:2a:13:2e:c1:c9:e9:9a:f7:64:e2:fc:c6:1b:de: c1:bf:70:83:d7:fa:d9:fb:be:f6:24:16:ca:96:0a:14:3d:84: 05:2e:66:0f:85:57:7b:b4:3a:10:0b:de:17:fc:b7:10:9d:b6: 8f:eb:81:13:ac:72:e3:77:47:a8:a9:71:db:a4:c3:f1:9d:fb: 6a:0c:98:db -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgISAZvNXn4DtCGWFXVMozOsamQyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTE3MTkxMTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjM0NzQ0ZmM5ZWUxODE5Y2IwZDNlNTM0N2Q0MGJjZTBhYzUyOGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdAlsI0Emvd4tc2L2jaRN8IclGsQ RXl2HjjVECJDmP11xb9ADt7b+SbOdX+l433mHcH24b2F0uwlUK3mBxgJ7G/6u5D+ yNdBdL29Xkl/+0X31SLywPJ90enNmp/85JgyTr4eh7B+fw/YoqTkKc7rvYVb4ZZK sebDUcWG94kgSyo5OFckFGRO3xaBRA7C0215gyqSUXd13RRqx0Cn8k0dbpWCY20y 7/z005gzwmfPIPrRbDbFtDFsntNFcAbpFeya48067YGmed1pDHpwc8dV80nM/OdN vajE8esXP/h8nEe1zPFOZZesywqXm3frABD/44CaHDnd3LWVO/WCbxYEoQIDAQAB o4IDVTCCA1EwHQYDVR0OBBYEFM80dE/J7hgZyw0+U0fUC84KxSjmMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvenpSMFQ4bnVHQm5MRFQ1VFI5UUx6Z3JGS09ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBaQYIKwYBBQUHAQcBAf8EggFYMIIBVDCCAVAEAgABMIIB SAMEACXK1AMEAJfwHTAMAwQBl/CSAwQAl/CWAwQAl/CaAwQAl/ChAwQAl/CpAwQA l/CzAwQAl/EJAwQAl/ENAwQAl/GoAwQAl/GuAwQAl/HVAwQBl/HeAwQAl/JlAwQA l/JpAwQAl/KPAwQBl/OKAwQBl/OQAwQAl/OUAwQBl/OmAwQAl/OtAwQCl/OwAwQA l/PEAwQAl/PIMAwDBACX888DBAGX89ADBAGX8+ADBACX8/cDBACX9TwwDAMEAZf1 egMEAJf1fgMEAJf1lAMEAJf1lgMEAJf1wgMEAZf14gMEAJf15gMEAZf2pAMEAZf2 tAMEApf2uAMEAJf2vQMEAZf29jAMAwQAl/b5AwQCl/b4AwQAl/b/AwQAl/eJAwQA l/ehAwQBl/ekAwQAl/epAwQAl/exAwQAl/f6MAwDBACX9/0DBACX9/4wDQYJKoZI hvcNAQELBQADggEBAGQW75nlduvbQi3SsMAAv7eIJO9ndCyYewR/saQvAvnrmezy x2hYeU+wyLq3rErndfc/SxXKFjJHyHASRWWp6El3ArZgK6DYlnk3Gf3k0tM5SR+B w2Xb2BNARWgyeda/ZPzYBU/nJ7RXNySfUM/t+QjTs80cPZ33TQD/64cD6/IQAMwo FDbCT39Pe0M+RoTXtVfItFO1uk55R1CA53BLOcT8K3GvxxPXd6BXUWhRJGw4Y9RB c6E89akqEy7Byema92Ti/MYb3sG/cIPX+tn7vvYkFsqWChQ9hAUuZg+FV3u0OhAL 3hf8txCdto/rgROscuN3R6ipcdukw/Gd+2oMmNs= -----END CERTIFICATE-----Generated at Sun Jan 18 06:29:13 2026 by rpki-client