This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/Z0Yd5ryo6CVHolrVfgTJW3VNRio.roa File: Z0Yd5ryo6CVHolrVfgTJW3VNRio.roa (raw, json) Hash identifier: qAoF6R0Ct6kB3sTz/3lrppb3yX+381mHA9jGPvlKM8Y= Subject key identifier: 67:46:1D:E6:BC:A8:E8:25:47:A2:5A:D5:7E:04:C9:5B:75:4D:46:2A Certificate issuer: /CN=0a41a5a2a18339629cc1303e6dec8bb605ddca65 Certificate serial: 019B797F0BB12E5D6CCF2114A522F712FA6D Authority key identifier: 0A:41:A5:A2:A1:83:39:62:9C:C1:30:3E:6D:EC:8B:B6:05:DD:CA:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/Z0Yd5ryo6CVHolrVfgTJW3VNRio.roa Signing time: Thu 01 Jan 2026 12:18:47 +0000 ROA not before: Thu 01 Jan 2026 12:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29182 IP address blocks: 37.46.128.0/23 maxlen: 23 37.46.130.0/23 maxlen: 23 37.46.132.0/23 maxlen: 23 37.46.134.0/23 maxlen: 23 45.141.208.0/22 maxlen: 22 45.150.8.0/22 maxlen: 22 62.109.0.0/20 maxlen: 20 62.109.0.0/21 maxlen: 21 62.109.8.0/21 maxlen: 21 62.109.16.0/21 maxlen: 21 62.109.24.0/22 maxlen: 22 62.109.28.0/22 maxlen: 22 77.246.156.0/22 maxlen: 22 77.246.156.0/23 maxlen: 23 77.246.158.0/23 maxlen: 23 80.87.192.0/23 maxlen: 23 80.87.194.0/23 maxlen: 23 80.87.196.0/23 maxlen: 23 80.87.198.0/23 maxlen: 23 80.87.200.0/23 maxlen: 23 80.87.202.0/24 maxlen: 24 80.87.203.0/24 maxlen: 24 82.146.32.0/21 maxlen: 21 82.146.32.0/23 maxlen: 23 82.146.34.0/23 maxlen: 23 82.146.36.0/23 maxlen: 23 82.146.38.0/23 maxlen: 23 82.146.40.0/21 maxlen: 21 82.146.48.0/23 maxlen: 23 82.146.50.0/23 maxlen: 23 82.146.52.0/23 maxlen: 23 82.146.54.0/23 maxlen: 23 82.146.56.0/21 maxlen: 21 82.202.160.0/23 maxlen: 23 82.202.162.0/23 maxlen: 23 82.202.165.0/24 maxlen: 24 82.202.166.0/23 maxlen: 23 82.202.168.0/23 maxlen: 23 82.202.170.0/23 maxlen: 23 82.202.172.0/23 maxlen: 23 82.202.174.0/23 maxlen: 23 83.220.168.0/23 maxlen: 23 83.220.170.0/23 maxlen: 23 83.220.172.0/23 maxlen: 23 83.220.174.0/23 maxlen: 23 85.198.72.0/23 maxlen: 23 85.198.74.0/23 maxlen: 23 85.198.116.0/23 maxlen: 23 85.198.118.0/23 maxlen: 23 89.169.40.0/23 maxlen: 23 89.169.42.0/23 maxlen: 23 91.240.84.0/23 maxlen: 23 91.240.86.0/23 maxlen: 23 92.63.96.0/21 maxlen: 21 92.63.104.0/22 maxlen: 22 92.63.108.0/22 maxlen: 22 92.63.108.0/24 maxlen: 24 92.63.109.0/24 maxlen: 24 92.63.110.0/23 maxlen: 23 176.12.64.0/21 maxlen: 21 185.43.4.0/23 maxlen: 23 185.43.6.0/23 maxlen: 23 185.63.188.0/22 maxlen: 22 185.146.156.0/23 maxlen: 23 185.146.158.0/23 maxlen: 23 185.246.64.0/23 maxlen: 23 185.246.66.0/23 maxlen: 23 185.253.32.0/23 maxlen: 23 185.253.34.0/23 maxlen: 23 195.140.144.0/23 maxlen: 23 195.140.146.0/23 maxlen: 23 212.109.192.0/22 maxlen: 22 212.109.196.0/23 maxlen: 23 212.109.198.0/23 maxlen: 23 212.109.216.0/23 maxlen: 23 212.109.218.0/23 maxlen: 23 212.109.220.0/23 maxlen: 23 212.109.222.0/24 maxlen: 24 212.109.223.0/24 maxlen: 24 213.159.208.0/23 maxlen: 23 213.159.210.0/23 maxlen: 23 213.159.212.0/23 maxlen: 23 213.159.214.0/23 maxlen: 23 2a09:f900::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:0b:b1:2e:5d:6c:cf:21:14:a5:22:f7:12:fa:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a41a5a2a18339629cc1303e6dec8bb605ddca65 Validity Not Before: Jan 1 12:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=67461de6bca8e82547a25ad57e04c95b754d462a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3e:4e:47:58:5b:77:b6:2d:ae:d9:a5:64:d2: b5:84:71:dd:a4:84:8a:0f:89:c8:42:69:ac:a7:89: 11:3d:14:8c:5b:bd:d4:0b:c4:90:b6:8f:84:28:42: 75:57:91:c4:cc:59:b8:2c:7b:8c:ef:d1:49:36:49: d0:e1:f8:b0:20:f0:43:aa:5b:e8:12:47:11:dc:16: 2f:a9:d2:aa:86:17:06:e0:f3:1a:a9:54:ec:af:94: ad:14:c2:68:d8:0d:e5:da:34:ab:2c:ab:86:e9:b4: da:5e:c9:24:fe:05:2f:ad:cc:4f:69:c6:a1:7a:c0: d3:2f:e4:1f:ca:89:a8:ca:3f:57:1d:9d:4b:5f:fe: 89:a3:c0:b4:08:4c:b8:38:4c:57:cb:60:af:ac:8a: 6f:a0:47:f8:3a:1b:a8:5a:d7:93:cd:9a:c6:94:d3: 0a:3f:8b:39:a6:93:01:49:72:a9:a4:96:ef:60:2c: 92:ff:92:b2:9a:df:1d:8d:0d:13:aa:ce:f8:5e:4f: 5c:db:e8:e7:60:cc:a0:e6:c1:71:e1:65:a0:b0:a9: f3:18:88:d9:52:2c:59:49:71:f4:dc:3c:ac:f3:5f: ad:4d:5b:b2:d0:4d:0c:bd:88:41:e8:f1:63:01:b8: ca:39:ca:0c:6a:57:de:83:df:36:97:6e:9c:e0:d8: b3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:46:1D:E6:BC:A8:E8:25:47:A2:5A:D5:7E:04:C9:5B:75:4D:46:2A X509v3 Authority Key Identifier: keyid:0A:41:A5:A2:A1:83:39:62:9C:C1:30:3E:6D:EC:8B:B6:05:DD:CA:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/Z0Yd5ryo6CVHolrVfgTJW3VNRio.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.46.128.0/21 45.141.208.0/22 45.150.8.0/22 62.109.0.0/19 77.246.156.0/22 80.87.192.0-80.87.203.255 82.146.32.0/19 82.202.160.0/22 82.202.165.0-82.202.175.255 83.220.168.0/21 85.198.72.0/22 85.198.116.0/22 89.169.40.0/22 91.240.84.0/22 92.63.96.0/20 176.12.64.0/21 185.43.4.0/22 185.63.188.0/22 185.146.156.0/22 185.246.64.0/22 185.253.32.0/22 195.140.144.0/22 212.109.192.0/21 212.109.216.0/21 213.159.208.0/21 IPv6: 2a09:f900::/48 Signature Algorithm: sha256WithRSAEncryption 60:c8:bb:fa:34:63:93:31:9e:fa:90:5c:4e:71:5c:5f:0b:06: bb:68:89:c6:64:9b:e1:e2:5a:1a:20:2f:c8:28:2f:e0:fd:55: 62:d3:ce:6b:0c:54:78:c5:ed:d4:d8:27:66:fb:e3:6e:31:48: ef:54:f4:68:b1:69:e9:ba:a1:5b:ea:12:f0:08:5c:ce:cb:b0: c0:5c:fb:74:c1:dc:cd:98:55:4a:58:cb:28:57:04:d5:50:71: a2:d9:99:25:95:c9:61:e1:a7:2c:fd:e9:43:56:e2:b1:64:70: 3b:0b:d2:5e:7b:cf:aa:55:6e:f0:87:98:c5:de:85:b3:cc:c2: d9:62:12:f5:9e:72:26:95:21:6c:35:30:e2:38:5e:a8:9e:ca: 25:c3:d9:b6:24:b1:ff:1c:1b:da:8b:aa:f9:04:7d:b8:f0:64: 17:ed:55:dd:a5:db:94:0f:b4:d9:b6:c9:37:f1:ec:45:0e:a6: 9a:8c:3c:cf:b6:50:d6:47:91:78:8d:8e:a9:f4:f9:08:29:1f: 29:62:b3:69:a5:b9:97:14:a2:ae:bf:a7:09:8b:00:57:f1:c2: ba:93:8d:9e:23:5e:cd:e1:26:31:e9:94:66:a2:8a:d5:88:0a: d4:4f:f4:56:99:2b:44:f8:1a:b1:99:bb:92:9d:d3:34:4e:da: 84:f2:f0:bf -----BEGIN CERTIFICATE----- MIIFszCCBJugAwIBAgISAZt5fwuxLl1szyEUpSL3EvptMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNDFhNWEyYTE4MzM5NjI5Y2MxMzAzZTZkZWM4YmI2MDVk ZGNhNjUwHhcNMjYwMTAxMTIxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NzQ2MWRlNmJjYThlODI1NDdhMjVhZDU3ZTA0Yzk1Yjc1NGQ0NjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApT5OR1hbd7YtrtmlZNK1hHHdpISK D4nIQmmsp4kRPRSMW73UC8SQto+EKEJ1V5HEzFm4LHuM79FJNknQ4fiwIPBDqlvo EkcR3BYvqdKqhhcG4PMaqVTsr5StFMJo2A3l2jSrLKuG6bTaXskk/gUvrcxPacah esDTL+Qfyomoyj9XHZ1LX/6Jo8C0CEy4OExXy2CvrIpvoEf4OhuoWteTzZrGlNMK P4s5ppMBSXKppJbvYCyS/5Kymt8djQ0Tqs74Xk9c2+jnYMyg5sFx4WWgsKnzGIjZ UixZSXH03Dys81+tTVuy0E0MvYhB6PFjAbjKOcoMalfeg982l26c4Niz4QIDAQAB o4ICvzCCArswHQYDVR0OBBYEFGdGHea8qOglR6Ja1X4EyVt1TUYqMB8GA1UdIwQY MBaAFApBpaKhgzlinMEwPm3si7YF3cplMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2tHbG9xR0RPV0tjd1RBLWJleUx0Z1hkeW1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9kNDNjMmMtNzRlOS00N2Q0LWJmNjIt ODBmN2ZkNmVhOWM5LzEvWjBZZDVyeW82Q1ZIb2xyVmZnVEpXM1ZOUmlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9kNDNjMmMtNzRlOS00N2Q0LWJmNjItODBmN2ZkNmVhOWM5 LzEvQ2tHbG9xR0RPV0tjd1RBLWJleUx0Z1hkeW1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHUBggrBgEFBQcBBwEB/wSBxDCBwTCBrQQCAAEwgaYDBAMl LoADBAItjdADBAItlggDBAU+bQADBAJN9pwwDAMEBlBXwAMEAlBXyAMEBVKSIAME AlLKoDAMAwQAUsqlAwQEUsqgAwQDU9yoAwQCVcZIAwQCVcZ0AwQCWakoAwQCW/BU AwQEXD9gAwQDsAxAAwQCuSsEAwQCuT+8AwQCuZKcAwQCufZAAwQCuf0gAwQCw4yQ AwQD1G3AAwQD1G3YAwQD1Z/QMA8EAgACMAkDBwAqCfkAAAAwDQYJKoZIhvcNAQEL BQADggEBAGDIu/o0Y5MxnvqQXE5xXF8LBrtoicZkm+HiWhogL8goL+D9VWLTzmsM VHjF7dTYJ2b7424xSO9U9Gixaem6oVvqEvAIXM7LsMBc+3TB3M2YVUpYyyhXBNVQ caLZmSWVyWHhpyz96UNW4rFkcDsL0l57z6pVbvCHmMXehbPMwtliEvWeciaVIWw1 MOI4XqieyiXD2bYksf8cG9qLqvkEfbjwZBftVd2l25QPtNm2yTfx7EUOppqMPM+2 UNZHkXiNjqn0+QgpHylis2mluZcUoq6/pwmLAFfxwrqTjZ4jXs3hJjHplGaiitWI CtRP9FaZK0T4GrGZu5Kd0zRO2oTy8L8= -----END CERTIFICATE-----Generated at Mon Jan 26 09:23:01 2026 by rpki-client