This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/74a8f4-0aeb-44b3-8dd4-d3f24ae7b87b/1/ZdackTTtUARwMJsKBd9WE-bdrFQ.roa File: ZdackTTtUARwMJsKBd9WE-bdrFQ.roa (raw, json) Hash identifier: LuOd5plbmyjj2hh2bl4nHakgqxPpc4LSclkTktlZBGQ= Subject key identifier: 65:D6:9C:91:34:ED:50:04:70:30:9B:0A:05:DF:56:13:E6:DD:AC:54 Certificate issuer: /CN=505122f4dea7df3927d4011b3087d4d067f9d19a Certificate serial: 019B79EC63EF3C289A77317B1A2063B4E261 Authority key identifier: 50:51:22:F4:DE:A7:DF:39:27:D4:01:1B:30:87:D4:D0:67:F9:D1:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/74a8f4-0aeb-44b3-8dd4-d3f24ae7b87b/1/ZdackTTtUARwMJsKBd9WE-bdrFQ.roa Signing time: Thu 01 Jan 2026 14:18:13 +0000 ROA not before: Thu 01 Jan 2026 14:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12678 IP address blocks: 31.222.64.0/22 maxlen: 22 31.222.64.0/23 maxlen: 23 31.222.66.0/23 maxlen: 23 31.222.66.0/24 maxlen: 24 31.222.67.0/24 maxlen: 24 31.222.68.0/23 maxlen: 23 31.222.70.0/23 maxlen: 23 31.222.70.0/24 maxlen: 24 31.222.72.0/22 maxlen: 22 31.222.72.0/23 maxlen: 23 31.222.74.0/23 maxlen: 23 31.222.74.0/24 maxlen: 24 31.222.75.0/24 maxlen: 24 31.222.76.0/23 maxlen: 23 31.222.78.0/23 maxlen: 23 31.222.78.0/24 maxlen: 24 159.253.176.0/22 maxlen: 22 159.253.180.0/24 maxlen: 24 159.253.181.0/24 maxlen: 24 185.153.131.0/24 maxlen: 24 2a00:aea0:100::/40 maxlen: 40 2a00:aea0:200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/74a8f4-0aeb-44b3-8dd4-d3f24ae7b87b/1/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/74a8f4-0aeb-44b3-8dd4-d3f24ae7b87b/1/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.mft rsync://rpki.ripe.net/repository/DEFAULT/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:63:ef:3c:28:9a:77:31:7b:1a:20:63:b4:e2:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=505122f4dea7df3927d4011b3087d4d067f9d19a Validity Not Before: Jan 1 14:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=65d69c9134ed500470309b0a05df5613e6ddac54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a8:e0:15:83:13:0a:9f:78:44:a4:5d:22:37: 3e:9d:48:ac:64:e3:ec:80:59:24:d7:13:9f:d1:da: a7:0c:56:85:6d:6e:42:da:e2:2e:f9:ec:27:3f:21: 40:02:b0:7e:f0:82:37:6a:97:2f:d2:09:82:c4:ed: 46:af:9f:ec:56:56:7a:de:b0:f8:77:41:9c:84:26: 67:2a:97:2e:f2:cd:ba:44:9c:9f:a0:88:1b:d9:ac: 68:ca:be:b8:f3:f3:f5:90:81:8c:73:b7:98:0a:ae: bd:0c:3a:c4:fc:aa:8b:fa:63:d1:72:4a:c9:f4:ed: 85:53:6e:22:ee:a1:1b:16:36:d4:78:98:69:77:9a: 63:f2:3b:ae:42:4c:b5:e7:03:71:58:b4:64:4a:34: 11:52:0a:1a:18:41:7e:f5:f1:e5:79:6a:a9:ae:f9: 7f:6b:20:08:de:e6:73:0e:aa:4b:2c:52:42:0b:ae: b1:4b:a0:24:91:b5:e2:04:ef:77:c1:cc:7f:d4:ac: 0e:0e:54:97:4c:0a:f1:eb:58:7b:85:69:7f:94:6f: 70:a4:38:5f:ce:ae:7b:18:30:e6:c2:82:fe:8b:df: 4f:e2:d8:ab:39:0b:1b:72:5b:23:70:f9:aa:6d:10: 82:6e:5a:f9:71:8c:65:aa:0d:33:8a:99:38:0d:cb: 7f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:D6:9C:91:34:ED:50:04:70:30:9B:0A:05:DF:56:13:E6:DD:AC:54 X509v3 Authority Key Identifier: keyid:50:51:22:F4:DE:A7:DF:39:27:D4:01:1B:30:87:D4:D0:67:F9:D1:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/74a8f4-0aeb-44b3-8dd4-d3f24ae7b87b/1/ZdackTTtUARwMJsKBd9WE-bdrFQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/74a8f4-0aeb-44b3-8dd4-d3f24ae7b87b/1/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.222.64.0/20 159.253.176.0-159.253.181.255 185.153.131.0/24 IPv6: 2a00:aea0:100::-2a00:aea0:2ff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 59:a3:25:21:83:e0:d4:e6:26:6b:9d:0b:5c:d6:e3:89:43:be: 66:82:f6:21:b4:07:59:f3:77:14:5e:28:e7:0d:42:82:dc:19: f3:ec:ce:11:78:8d:fe:b8:22:11:97:ec:23:8b:8e:f2:05:1c: e1:7f:86:12:7f:1d:7d:72:e0:9c:96:b0:1a:12:d7:ac:4b:96: ed:74:b0:ec:ca:c1:a9:91:ce:88:ea:0a:67:1d:4d:c2:94:86: ed:de:56:10:fb:55:75:57:6f:4f:22:20:84:4f:97:74:7a:98: d1:f1:b7:8a:92:cf:f6:fb:46:02:0b:2b:f0:d3:d7:8d:a3:56: c4:a9:f0:1e:5e:18:c2:a1:a6:de:f2:91:53:d1:6d:5d:bc:4a: 28:9b:07:56:33:05:be:8a:bd:6c:8f:4a:cf:1a:f7:f3:31:34: 22:dc:7f:7f:de:8f:b2:ae:ae:ce:ca:2b:93:21:5c:96:42:70: 04:b7:78:e8:a6:99:d1:73:b7:c1:7c:0f:3e:5d:33:1e:60:76: 4d:7e:3e:50:a5:14:27:44:02:b0:c4:18:03:72:1d:0e:a3:81: 86:6f:d4:6b:db:1e:6a:0b:1d:78:b2:1f:59:fe:28:9e:e9:f3: e4:27:44:18:81:30:0f:e6:21:03:a0:39:11:b7:33:11:b5:b8: 14:0b:01:c1 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgISAZt57GPvPCiadzF7GiBjtOJhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwNTEyMmY0ZGVhN2RmMzkyN2Q0MDExYjMwODdkNGQwNjdm OWQxOWEwHhcNMjYwMTAxMTQxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NWQ2OWM5MTM0ZWQ1MDA0NzAzMDliMGEwNWRmNTYxM2U2ZGRhYzU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoajgFYMTCp94RKRdIjc+nUisZOPs gFkk1xOf0dqnDFaFbW5C2uIu+ewnPyFAArB+8II3apcv0gmCxO1Gr5/sVlZ63rD4 d0GchCZnKpcu8s26RJyfoIgb2axoyr648/P1kIGMc7eYCq69DDrE/KqL+mPRckrJ 9O2FU24i7qEbFjbUeJhpd5pj8juuQky15wNxWLRkSjQRUgoaGEF+9fHleWqprvl/ ayAI3uZzDqpLLFJCC66xS6AkkbXiBO93wcx/1KwODlSXTArx61h7hWl/lG9wpDhf zq57GDDmwoL+i99P4tirOQsbclsjcPmqbRCCblr5cYxlqg0zipk4Dct/KwIDAQAB o4ICNzCCAjMwHQYDVR0OBBYEFGXWnJE07VAEcDCbCgXfVhPm3axUMB8GA1UdIwQY MBaAFFBRIvTep985J9QBGzCH1NBn+dGaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUZFaTlONm4zemtuMUFFYk1JZlUwR2Y1MFpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC83NGE4ZjQtMGFlYi00NGIzLThkZDQt ZDNmMjRhZTdiODdiLzEvWmRhY2tUVHRVQVJ3TUpzS0JkOVdFLWJkckZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC83NGE4ZjQtMGFlYi00NGIzLThkZDQtZDNmMjRhZTdiODdi LzEvVUZFaTlONm4zemtuMUFFYk1JZlUwR2Y1MFpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDAgBAIAATAaAwQEH95AMAwD BASf/bADBAGf/bQDBAC5mYMwGAQCAAIwEjAQAwYAKgCuoAEDBgAqAK6gAjANBgkq hkiG9w0BAQsFAAOCAQEAWaMlIYPg1OYma50LXNbjiUO+ZoL2IbQHWfN3FF4o5w1C gtwZ8+zOEXiN/rgiEZfsI4uO8gUc4X+GEn8dfXLgnJawGhLXrEuW7XSw7MrBqZHO iOoKZx1NwpSG7d5WEPtVdVdvTyIghE+XdHqY0fG3ipLP9vtGAgsr8NPXjaNWxKnw Hl4YwqGm3vKRU9FtXbxKKJsHVjMFvoq9bI9Kzxr38zE0Itx/f96Psq6uzsorkyFc lkJwBLd46KaZ0XO3wXwPPl0zHmB2TX4+UKUUJ0QCsMQYA3IdDqOBhm/Ua9seagsd eLIfWf4onunz5CdEGIEwD+YhA6A5EbczEbW4FAsBwQ== -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:18 2026 by rpki-client