This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/zRLI_XnW-YoHiodpzhxfbCWkVZo.roa File: zRLI_XnW-YoHiodpzhxfbCWkVZo.roa (raw, json) Hash identifier: I8VTCVMtI4awNqhceNYMKEzYn52i5zIhYy/GzccL/RM= Subject key identifier: CD:12:C8:FD:79:D6:F9:8A:07:8A:87:69:CE:1C:5F:6C:25:A4:55:9A Certificate issuer: /CN=f3cab68fbb0c979476594bdfc56c192042b8dedf Certificate serial: 019B79EC9E23F18686780CF2FE53840007BB Authority key identifier: F3:CA:B6:8F:BB:0C:97:94:76:59:4B:DF:C5:6C:19:20:42:B8:DE:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/88q2j7sMl5R2WUvfxWwZIEK43t8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/zRLI_XnW-YoHiodpzhxfbCWkVZo.roa Signing time: Thu 01 Jan 2026 14:18:28 +0000 ROA not before: Thu 01 Jan 2026 14:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42277 IP address blocks: 5.249.192.0/19 maxlen: 19 37.188.0.0/18 maxlen: 20 46.62.0.0/17 maxlen: 17 77.241.16.0/21 maxlen: 21 77.241.20.0/22 maxlen: 22 94.247.248.0/22 maxlen: 24 94.247.248.0/24 maxlen: 24 94.247.252.0/22 maxlen: 22 176.241.192.0/19 maxlen: 19 178.249.240.0/21 maxlen: 21 2a02:51c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.crl rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.mft rsync://rpki.ripe.net/repository/DEFAULT/88q2j7sMl5R2WUvfxWwZIEK43t8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:9e:23:f1:86:86:78:0c:f2:fe:53:84:00:07:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3cab68fbb0c979476594bdfc56c192042b8dedf Validity Not Before: Jan 1 14:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd12c8fd79d6f98a078a8769ce1c5f6c25a4559a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:49:14:d6:b5:04:3c:6f:33:a7:dc:4b:cd:4d: 7e:69:86:28:83:c8:1d:e3:9d:8f:83:36:e9:fd:96: 3c:ab:1b:bc:02:bd:37:67:45:e1:c6:d6:82:28:8c: 95:05:00:66:3f:fb:da:22:49:9d:74:f8:65:d5:38: c2:e2:53:d9:2a:0b:e8:f0:b4:8c:e7:2a:81:52:0f: e2:4e:69:a4:90:2b:d4:7c:45:9c:39:97:8a:9e:63: fc:4c:f5:42:73:71:17:6a:16:c1:97:dc:5f:83:5a: 02:c6:64:ee:f3:d0:24:fc:b1:94:93:2f:50:5d:05: b0:14:d3:b0:53:9c:33:50:35:af:8c:69:d9:c9:6b: 4e:7b:a8:b7:9b:a1:14:ed:9c:5a:63:5d:02:d2:26: 24:3b:6a:98:93:a4:52:f7:7f:77:47:eb:83:20:f5: 2a:be:c9:bf:22:84:5f:e7:ed:a4:d6:fe:38:7e:dd: 77:be:90:51:80:2e:32:de:48:01:24:9c:03:90:82: e6:82:94:f2:aa:b2:e5:58:97:03:85:98:a9:30:d2: 4d:05:ec:a6:28:b5:61:42:cd:05:85:bb:92:01:32: c6:aa:e1:a2:d7:a1:3f:f4:9b:03:ab:5f:2e:2f:43: 2a:78:f4:e1:74:03:42:aa:0f:61:dc:3e:c6:cb:e2: 7e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:12:C8:FD:79:D6:F9:8A:07:8A:87:69:CE:1C:5F:6C:25:A4:55:9A X509v3 Authority Key Identifier: keyid:F3:CA:B6:8F:BB:0C:97:94:76:59:4B:DF:C5:6C:19:20:42:B8:DE:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88q2j7sMl5R2WUvfxWwZIEK43t8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/zRLI_XnW-YoHiodpzhxfbCWkVZo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.249.192.0/19 37.188.0.0/18 46.62.0.0/17 77.241.16.0/21 94.247.248.0/21 176.241.192.0/19 178.249.240.0/21 IPv6: 2a02:51c0::/32 Signature Algorithm: sha256WithRSAEncryption 1b:81:89:3a:0a:73:a5:7e:ac:7f:9f:8e:fd:c6:9f:5f:7e:90: 4c:87:fa:e5:32:1b:ae:88:28:88:b1:d9:48:b3:27:5a:9b:4c: 7c:83:b8:37:6a:64:69:4f:1a:95:87:86:9b:3f:49:00:71:c7: fb:0c:96:31:ec:be:80:d4:14:c8:72:51:f1:f6:35:a5:0b:ef: f6:0f:71:e0:e7:5f:de:79:41:32:60:41:2f:86:6b:30:f1:fb: 0d:cc:db:61:c6:d2:d0:ff:a7:f3:36:a6:5b:25:fe:f7:b7:44: 65:93:a6:3e:55:50:5a:0b:04:7c:74:fb:1e:d3:9c:9d:39:ca: 51:42:85:cb:ed:a9:9d:6e:be:a1:ce:ef:dc:b4:49:1e:3c:9d: d8:db:e1:ab:33:3c:70:c4:6c:14:42:c1:95:ca:18:45:8f:ce: 4e:07:fc:04:98:40:44:b0:fd:5e:87:97:49:88:17:f5:a8:9d: 7b:23:9c:f4:8f:12:3e:22:a2:f5:cb:36:d3:67:dc:2e:77:18: d9:09:20:9f:b5:b8:26:02:8f:59:88:3a:d8:7a:f1:91:6a:e6: fb:5e:bb:f0:da:7d:2f:7d:77:02:1f:56:79:19:5a:22:7a:58: e6:be:fe:4f:22:bb:13:f5:ec:3d:73:95:04:aa:81:4d:9e:fd: af:97:cb:45 -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgISAZt57J4j8YaGeAzy/lOEAAe7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzY2FiNjhmYmIwYzk3OTQ3NjU5NGJkZmM1NmMxOTIwNDJi OGRlZGYwHhcNMjYwMTAxMTQxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDEyYzhmZDc5ZDZmOThhMDc4YTg3NjljZTFjNWY2YzI1YTQ1NTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEkU1rUEPG8zp9xLzU1+aYYog8gd 452Pgzbp/ZY8qxu8Ar03Z0XhxtaCKIyVBQBmP/vaIkmddPhl1TjC4lPZKgvo8LSM 5yqBUg/iTmmkkCvUfEWcOZeKnmP8TPVCc3EXahbBl9xfg1oCxmTu89Ak/LGUky9Q XQWwFNOwU5wzUDWvjGnZyWtOe6i3m6EU7ZxaY10C0iYkO2qYk6RS9393R+uDIPUq vsm/IoRf5+2k1v44ft13vpBRgC4y3kgBJJwDkILmgpTyqrLlWJcDhZipMNJNBeym KLVhQs0FhbuSATLGquGi16E/9JsDq18uL0MqePThdANCqg9h3D7Gy+J+vQIDAQAB o4ICPDCCAjgwHQYDVR0OBBYEFM0SyP151vmKB4qHac4cX2wlpFWaMB8GA1UdIwQY MBaAFPPKto+7DJeUdllL38VsGSBCuN7fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODhxMmo3c01sNVIyV1V2ZnhXd1pJRUs0M3Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9hNDQzMzUtNDE0Zi00NDc5LWE3ZmUt YWE0YTgxYTJlYjIzLzEvelJMSV9YblctWW9IaW9kcHpoeGZiQ1drVlpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9hNDQzMzUtNDE0Zi00NDc5LWE3ZmUtYWE0YTgxYTJlYjIz LzEvODhxMmo3c01sNVIyV1V2ZnhXd1pJRUs0M3Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQFBfnAAwQG JbwAAwQHLj4AAwQDTfEQAwQDXvf4AwQFsPHAAwQDsvnwMA0EAgACMAcDBQAqAlHA MA0GCSqGSIb3DQEBCwUAA4IBAQAbgYk6CnOlfqx/n479xp9ffpBMh/rlMhuuiCiI sdlIsydam0x8g7g3amRpTxqVh4abP0kAccf7DJYx7L6A1BTIclHx9jWlC+/2D3Hg 51/eeUEyYEEvhmsw8fsNzNthxtLQ/6fzNqZbJf73t0Rlk6Y+VVBaCwR8dPse05yd OcpRQoXL7amdbr6hzu/ctEkePJ3Y2+GrMzxwxGwUQsGVyhhFj85OB/wEmEBEsP1e h5dJiBf1qJ17I5z0jxI+IqL1yzbTZ9wudxjZCSCftbgmAo9ZiDrYevGRaub7Xrvw 2n0vfXcCH1Z5GVoieljmvv5PIrsT9ew9c5UEqoFNnv2vl8tF -----END CERTIFICATE-----Generated at Tue Feb 10 00:29:10 2026 by rpki-client