This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/ZNiTNi4wFos__ExMRHiaoXsxHJw.roa File: ZNiTNi4wFos__ExMRHiaoXsxHJw.roa (raw, json) Hash identifier: Ujd1vfD/OD4m+lnAcq9imGk846YksvVOqFb7FjwbeCI= Subject key identifier: 64:D8:93:36:2E:30:16:8B:3F:FC:4C:4C:44:78:9A:A1:7B:31:1C:9C Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603 Certificate serial: 019B79111855C884A94C56F275EB48E4BBA1 Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/ZNiTNi4wFos__ExMRHiaoXsxHJw.roa Signing time: Thu 01 Jan 2026 10:18:42 +0000 ROA not before: Thu 01 Jan 2026 10:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43350 IP address blocks: 107.181.137.0/24 maxlen: 24 185.53.128.0/24 maxlen: 24 185.53.129.0/24 maxlen: 24 185.53.130.0/24 maxlen: 24 185.53.131.0/24 maxlen: 24 185.83.216.0/24 maxlen: 24 185.83.217.0/24 maxlen: 24 185.83.218.0/24 maxlen: 24 185.83.219.0/24 maxlen: 24 2a02:2ca0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.mft rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:18:55:c8:84:a9:4c:56:f2:75:eb:48:e4:bb:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603 Validity Not Before: Jan 1 10:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=64d893362e30168b3ffc4c4c44789aa17b311c9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a4:32:49:44:38:c0:0d:f2:65:44:15:1c:b2: 42:81:f0:50:46:b2:a4:fd:f8:41:45:71:a5:a8:a6: 0e:e1:ab:e7:68:28:5c:47:fc:7b:58:ff:c0:6e:55: bf:f9:3c:a4:7a:09:1f:83:59:08:c3:f5:af:c1:b6: 76:9e:ce:71:b4:b4:1c:a2:46:d2:a4:0e:3b:58:75: a8:8c:84:70:e6:cc:7f:96:98:10:2e:19:ec:20:1d: 73:91:32:fd:45:de:98:36:0a:d8:43:76:18:3d:e5: ac:d8:8e:6d:7e:d3:d9:db:dd:6c:a8:63:2e:d3:3c: 74:0e:e3:b2:2c:40:ba:67:0e:1d:70:69:d9:60:0e: e5:72:39:78:05:b7:5d:bc:26:a6:04:11:61:af:ad: 00:12:0a:48:5e:68:54:31:c6:7f:f5:24:72:6a:29: 13:8a:da:32:69:8b:8c:95:da:75:f3:24:74:8a:56: e4:3c:fb:a4:c9:e1:84:fa:91:24:60:7d:17:64:9e: d8:03:51:e3:df:d4:b1:a2:14:43:db:18:2d:fa:4b: 65:fc:fa:38:be:fa:89:7e:47:cb:53:9c:d0:55:5a: 60:4f:cc:5b:54:87:b2:bf:64:9d:c8:8f:a8:18:67: 53:82:b0:16:c3:31:b7:e3:9d:f6:89:5c:20:30:22: c6:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:D8:93:36:2E:30:16:8B:3F:FC:4C:4C:44:78:9A:A1:7B:31:1C:9C X509v3 Authority Key Identifier: keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/ZNiTNi4wFos__ExMRHiaoXsxHJw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.181.137.0/24 185.53.128.0/22 185.83.216.0/22 IPv6: 2a02:2ca0::/29 Signature Algorithm: sha256WithRSAEncryption 71:92:42:29:6c:3f:6f:e8:f3:78:50:6a:02:44:a4:58:0a:3c: d7:74:01:95:b3:82:35:a0:61:c3:02:57:22:b6:60:9d:e5:f3: 0c:00:aa:bf:f1:e5:3a:15:e6:4c:d3:f2:c9:1c:33:0e:91:30: 28:d5:1e:1d:77:3f:2e:6f:c6:c9:fe:42:93:a3:00:fe:48:56: 42:cf:7b:be:82:dd:90:9b:f3:36:63:ad:3a:d4:b8:d5:58:47: 6e:c1:7e:9d:7b:5f:f1:4a:d2:7e:18:f7:88:bb:88:94:0d:52: fc:6b:37:00:f4:e4:e2:8c:02:1d:b2:d8:4b:b0:f9:10:af:88: 74:e3:f6:80:74:63:ca:c8:11:ae:c2:5c:85:92:e8:ed:49:63: 1b:dc:3e:53:cd:a4:bd:04:98:4b:05:0c:20:18:58:43:10:1d: 18:62:e1:8c:8f:c6:34:1f:ab:2d:06:42:a6:74:aa:01:66:48: 22:52:96:94:ae:8b:51:ad:27:83:99:a7:ea:52:ff:dc:aa:51: e7:44:5a:ad:14:3d:83:b2:40:93:37:a2:22:6d:ed:d8:34:ec: c4:b8:22:46:0e:42:e3:ca:ac:a3:12:83:65:a6:01:3b:6d:1f: dd:e6:16:77:e7:2e:a8:36:85:8a:32:f2:7a:29:8b:dd:7c:1c: ae:28:a4:24 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt5ERhVyISpTFbydetI5LuhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NTRjMzQ3ZDY4ZDE1NDkzZGU3MWJiOTYyZjBhNTY3ZTEz NGQ2MDMwHhcNMjYwMTAxMTAxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NGQ4OTMzNjJlMzAxNjhiM2ZmYzRjNGM0NDc4OWFhMTdiMzExYzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06QySUQ4wA3yZUQVHLJCgfBQRrKk /fhBRXGlqKYO4avnaChcR/x7WP/AblW/+Tykegkfg1kIw/WvwbZ2ns5xtLQcokbS pA47WHWojIRw5sx/lpgQLhnsIB1zkTL9Rd6YNgrYQ3YYPeWs2I5tftPZ291sqGMu 0zx0DuOyLEC6Zw4dcGnZYA7lcjl4BbddvCamBBFhr60AEgpIXmhUMcZ/9SRyaikT itoyaYuMldp18yR0ilbkPPukyeGE+pEkYH0XZJ7YA1Hj39SxohRD2xgt+ktl/Po4 vvqJfkfLU5zQVVpgT8xbVIeyv2SdyI+oGGdTgrAWwzG34532iVwgMCLG1QIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFGTYkzYuMBaLP/xMTER4mqF7MRycMB8GA1UdIwQY MBaAFOdUw0fWjRVJPecbuWLwpWfhNNYDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTFURFI5YU5GVWs5NXh1NVl2Q2xaLUUwMWdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80NmRiM2EtYTU3My00ZjI4LWI0M2It MzdiNjJkMjIzOTI0LzEvWk5pVE5pNHdGb3NfX0V4TVJIaWFvWHN4SEp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80NmRiM2EtYTU3My00ZjI4LWI0M2ItMzdiNjJkMjIzOTI0 LzEvNTFURFI5YU5GVWs5NXh1NVl2Q2xaLUUwMWdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAa7WJAwQC uTWAAwQCuVPYMA0EAgACMAcDBQMqAiygMA0GCSqGSIb3DQEBCwUAA4IBAQBxkkIp bD9v6PN4UGoCRKRYCjzXdAGVs4I1oGHDAlcitmCd5fMMAKq/8eU6FeZM0/LJHDMO kTAo1R4ddz8ub8bJ/kKTowD+SFZCz3u+gt2Qm/M2Y6061LjVWEduwX6de1/xStJ+ GPeIu4iUDVL8azcA9OTijAIdsthLsPkQr4h04/aAdGPKyBGuwlyFkujtSWMb3D5T zaS9BJhLBQwgGFhDEB0YYuGMj8Y0H6stBkKmdKoBZkgiUpaUrotRrSeDmafqUv/c qlHnRFqtFD2DskCTN6Iibe3YNOzEuCJGDkLjyqyjEoNlpgE7bR/d5hZ35y6oNoWK MvJ6KYvdfByuKKQk -----END CERTIFICATE-----Generated at Sat Jan 3 03:24:59 2026 by rpki-client