This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/Z-5kacRmlsjbypw_dPm2XOvUdzs.roa File: Z-5kacRmlsjbypw_dPm2XOvUdzs.roa (raw, json) Hash identifier: T7PFxDunRuitR6QYV9ySXslG8fmxs5dieU0URPzMTpU= Subject key identifier: 67:EE:64:69:C4:66:96:C8:DB:CA:9C:3F:74:F9:B6:5C:EB:D4:77:3B Certificate issuer: /CN=facd901aba0d36b656cf98e0c02917e3aaa289b4 Certificate serial: 019B7CEDABDA578C52887FBF4E4736F21AA3 Authority key identifier: FA:CD:90:1A:BA:0D:36:B6:56:CF:98:E0:C0:29:17:E3:AA:A2:89:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/Z-5kacRmlsjbypw_dPm2XOvUdzs.roa Signing time: Fri 02 Jan 2026 04:18:29 +0000 ROA not before: Fri 02 Jan 2026 04:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51975 IP address blocks: 46.151.208.0/22 maxlen: 22 46.151.212.0/22 maxlen: 22 185.79.248.0/23 maxlen: 23 185.79.250.0/23 maxlen: 23 185.79.251.0/24 maxlen: 24 2a05:78c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:ab:da:57:8c:52:88:7f:bf:4e:47:36:f2:1a:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=facd901aba0d36b656cf98e0c02917e3aaa289b4 Validity Not Before: Jan 2 04:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=67ee6469c46696c8dbca9c3f74f9b65cebd4773b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7d:cf:b8:ec:56:eb:2f:76:19:85:8f:9b:00: 23:44:3d:a6:17:bd:2a:66:9d:1c:69:55:7f:74:f7: 5c:f9:aa:5b:8e:2d:43:14:0c:fe:a7:3f:e6:dd:2f: a5:f3:c5:fd:f3:ea:36:51:04:b1:23:08:c9:f1:68: 68:c9:01:df:1c:85:05:6f:8d:a3:98:29:0c:3c:b2: cf:2d:9b:83:79:54:fa:d8:83:b5:fa:8f:19:8a:aa: a6:1f:cb:b8:5b:c0:63:2b:1b:b0:a8:bc:51:2d:e5: 5b:8e:1a:f4:da:ee:d8:b7:2c:ff:c2:72:a4:0c:23: d4:b9:97:85:24:f1:87:ab:5c:a1:62:32:d0:1d:af: af:d2:ac:c4:7a:c9:60:4b:15:87:54:20:ce:1e:f4: a2:30:b5:64:64:d4:a8:18:58:52:aa:22:a7:2b:7d: a2:6a:b2:95:4a:a3:2c:ea:fe:43:a2:53:1d:26:9c: cb:2a:44:d5:ac:da:e2:06:4d:83:62:c9:d6:4e:89: bd:9f:37:e4:89:9f:cb:2a:42:6a:79:28:78:61:da: cf:10:17:fc:67:e9:fd:fa:69:2b:a2:08:7a:11:80: aa:bb:01:05:c8:93:17:54:3d:f8:5c:ec:18:fa:bd: 7e:bb:7e:c6:fd:36:be:3a:80:7b:04:93:5b:f7:a3: f5:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:EE:64:69:C4:66:96:C8:DB:CA:9C:3F:74:F9:B6:5C:EB:D4:77:3B X509v3 Authority Key Identifier: keyid:FA:CD:90:1A:BA:0D:36:B6:56:CF:98:E0:C0:29:17:E3:AA:A2:89:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/Z-5kacRmlsjbypw_dPm2XOvUdzs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.151.208.0/21 185.79.248.0/22 IPv6: 2a05:78c0::/32 Signature Algorithm: sha256WithRSAEncryption 72:f0:d3:d9:7a:bb:39:dc:e6:94:0a:51:aa:1f:3c:54:d2:f0: e3:38:9c:17:4e:8a:c6:d3:98:2b:f4:95:e4:88:4b:46:9f:29: b3:12:d4:b5:a6:ad:6a:5c:5a:1d:6e:f9:87:14:f0:44:51:36: e5:8d:ae:c1:0f:ad:37:84:aa:f6:be:be:cf:8a:7b:52:d5:4e: 28:54:81:d6:50:f9:1c:17:b5:7e:d2:99:01:57:48:5b:b5:d5: e1:d3:da:05:aa:29:a2:60:7a:be:9d:79:1a:cc:be:cf:57:63: b8:9d:49:1f:38:9c:fb:56:87:89:fa:0a:02:2d:4c:3f:2c:cf: 16:f8:d2:92:a4:19:63:a8:47:46:cc:e0:bf:0b:75:9e:5d:b8: a5:dd:1a:79:b5:6a:39:a5:91:dd:96:d6:97:6c:48:9f:4f:4a: 2a:02:c0:7e:99:56:64:80:f6:b6:13:dc:95:75:a3:91:dc:af: 62:6c:6e:db:ca:52:59:f2:20:6e:bb:c7:0d:16:19:9c:19:c1: 42:c9:78:3f:66:07:c9:c8:23:66:19:86:1b:b0:1f:ef:1f:92: a1:5e:e7:d0:17:7a:14:59:ba:bf:f9:02:7f:93:c8:da:ac:9b: 95:ab:74:32:a7:7a:47:ac:34:08:8c:45:9d:7f:0e:b4:5e:2e: e8:be:75:23 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt87avaV4xSiH+/Tkc28hqjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhY2Q5MDFhYmEwZDM2YjY1NmNmOThlMGMwMjkxN2UzYWFh Mjg5YjQwHhcNMjYwMTAyMDQxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2N2VlNjQ2OWM0NjY5NmM4ZGJjYTljM2Y3NGY5YjY1Y2ViZDQ3NzNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyH3PuOxW6y92GYWPmwAjRD2mF70q Zp0caVV/dPdc+apbji1DFAz+pz/m3S+l88X98+o2UQSxIwjJ8WhoyQHfHIUFb42j mCkMPLLPLZuDeVT62IO1+o8ZiqqmH8u4W8BjKxuwqLxRLeVbjhr02u7Ytyz/wnKk DCPUuZeFJPGHq1yhYjLQHa+v0qzEeslgSxWHVCDOHvSiMLVkZNSoGFhSqiKnK32i arKVSqMs6v5DolMdJpzLKkTVrNriBk2DYsnWTom9nzfkiZ/LKkJqeSh4YdrPEBf8 Z+n9+mkrogh6EYCquwEFyJMXVD34XOwY+r1+u37G/Ta+OoB7BJNb96P1PQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFGfuZGnEZpbI28qcP3T5tlzr1Hc7MB8GA1UdIwQY MBaAFPrNkBq6DTa2Vs+Y4MApF+Oqoom0MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1zMlFHcm9OTnJaV3o1amd3Q2tYNDZxaWliUS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEvYTUyNmNhLTM3OWUtNDk1ZC04ZjE1 LTAwZmUwNWMyYmZjNi8xL1otNWthY1JtbHNqYnlwd19kUG0yWE92VWR6cy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYjEvYTUyNmNhLTM3OWUtNDk1ZC04ZjE1LTAwZmUwNWMyYmZj Ni8xLzEtczJRR3JvTk5yWld6NWpnd0NrWDQ2cWlpYlEuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAMul9AD BAK5T/gwDQQCAAIwBwMFACoFeMAwDQYJKoZIhvcNAQELBQADggEBAHLw09l6uznc 5pQKUaofPFTS8OM4nBdOisbTmCv0leSIS0afKbMS1LWmrWpcWh1u+YcU8ERRNuWN rsEPrTeEqva+vs+Ke1LVTihUgdZQ+RwXtX7SmQFXSFu11eHT2gWqKaJger6deRrM vs9XY7idSR84nPtWh4n6CgItTD8szxb40pKkGWOoR0bM4L8LdZ5duKXdGnm1ajml kd2W1pdsSJ9PSioCwH6ZVmSA9rYT3JV1o5Hcr2JsbtvKUlnyIG67xw0WGZwZwULJ eD9mB8nII2YZhhuwH+8fkqFe59AXehRZur/5An+TyNqsm5WrdDKnekesNAiMRZ1/ DrReLui+dSM= -----END CERTIFICATE-----Generated at Mon Feb 9 22:37:04 2026 by rpki-client