This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/z_SLOwZzLzTLUlxe9eeHUMNRBV4.roa File: z_SLOwZzLzTLUlxe9eeHUMNRBV4.roa (raw, json) Hash identifier: sXhfTVz/7doOZGLXSWgTb9dJ0tx/PZHzsugITkY48mE= Subject key identifier: CF:F4:8B:3B:06:73:2F:34:CB:52:5C:5E:F5:E7:87:50:C3:51:05:5E Certificate issuer: /CN=b869ee66164d3cb41dbd2df5417817c32f4cea05 Certificate serial: 019B79EC392C355CC8ADDE9094A975CEE77A Authority key identifier: B8:69:EE:66:16:4D:3C:B4:1D:BD:2D:F5:41:78:17:C3:2F:4C:EA:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGnuZhZNPLQdvS31QXgXwy9M6gU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/z_SLOwZzLzTLUlxe9eeHUMNRBV4.roa Signing time: Thu 01 Jan 2026 14:18:02 +0000 ROA not before: Thu 01 Jan 2026 14:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199366 IP address blocks: 2.56.60.0/24 maxlen: 24 2.56.61.0/24 maxlen: 24 2.56.62.0/24 maxlen: 24 46.20.10.0/24 maxlen: 24 46.20.12.0/24 maxlen: 24 46.20.13.0/24 maxlen: 24 95.130.174.0/24 maxlen: 24 185.19.92.0/24 maxlen: 24 185.19.93.0/24 maxlen: 24 185.19.94.0/24 maxlen: 24 185.19.95.0/24 maxlen: 24 185.59.28.0/24 maxlen: 24 185.59.30.0/24 maxlen: 24 185.59.31.0/24 maxlen: 24 185.114.193.0/24 maxlen: 24 185.114.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft rsync://rpki.ripe.net/repository/DEFAULT/uGnuZhZNPLQdvS31QXgXwy9M6gU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:39:2c:35:5c:c8:ad:de:90:94:a9:75:ce:e7:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b869ee66164d3cb41dbd2df5417817c32f4cea05 Validity Not Before: Jan 1 14:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cff48b3b06732f34cb525c5ef5e78750c351055e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:39:fb:ee:de:f0:59:23:e4:0d:e8:61:38:61: 6a:10:c1:0b:03:e8:c2:24:ea:7f:3c:e7:eb:bf:06: 00:4a:ae:d6:db:5b:fb:23:ff:20:2d:ea:d2:0d:da: c9:41:b7:64:76:21:65:9d:5d:57:af:13:40:e1:2a: af:17:9b:b2:fb:ad:f8:47:7e:69:5c:3f:86:84:b0: aa:3e:54:85:73:99:e0:78:61:15:5a:7c:8a:9f:ca: 30:13:d4:ac:82:d7:bb:4c:d8:8b:72:b6:e1:04:24: fd:95:5b:10:f3:53:e6:9f:66:8a:7a:99:84:7e:00: bd:1f:46:55:98:4f:3f:89:1f:76:f1:69:75:74:7d: bf:2b:a8:1c:a3:35:db:25:e7:9c:60:12:15:2a:cb: 9a:40:fa:b9:35:25:ad:13:c4:02:e7:ac:76:e1:02: ee:22:0d:43:b0:63:e4:c8:00:24:b3:c8:c0:f8:7f: 5f:45:5b:7e:27:2c:b7:d4:b1:7b:6c:9b:6b:28:a3: 27:92:3b:1b:02:15:6a:1b:01:2d:23:84:a6:95:00: 9b:68:48:ab:28:21:04:11:22:68:44:62:a1:a2:d2: 5c:05:70:c4:16:50:40:20:91:77:f0:08:0a:2f:39: 62:85:a9:b6:43:97:8c:10:00:5e:3e:e0:26:13:c1: 28:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:F4:8B:3B:06:73:2F:34:CB:52:5C:5E:F5:E7:87:50:C3:51:05:5E X509v3 Authority Key Identifier: keyid:B8:69:EE:66:16:4D:3C:B4:1D:BD:2D:F5:41:78:17:C3:2F:4C:EA:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGnuZhZNPLQdvS31QXgXwy9M6gU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/z_SLOwZzLzTLUlxe9eeHUMNRBV4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.60.0-2.56.62.255 46.20.10.0/24 46.20.12.0/23 95.130.174.0/24 185.19.92.0/22 185.59.28.0/24 185.59.30.0/23 185.114.193.0/24 185.114.195.0/24 Signature Algorithm: sha256WithRSAEncryption 88:dd:35:22:9a:26:7f:07:01:9d:60:52:1d:14:c5:1d:08:f3: 10:0e:47:9c:de:82:09:25:11:72:7e:af:0b:58:bb:f3:99:eb: d4:28:1e:df:27:84:eb:8a:2b:a6:04:22:57:2f:67:31:7b:f1: b2:04:3c:83:1d:e2:b1:3e:31:d3:df:7c:08:67:0f:a3:32:5b: 80:bb:9a:fd:70:b1:88:b5:31:da:fd:e3:b0:f4:bf:f3:cd:0e: 93:6f:ea:c7:fd:4d:86:0d:42:5b:6a:ab:4f:8b:cc:cd:16:af: 9c:6e:06:fd:01:20:35:24:9f:ba:43:36:25:eb:1b:8a:5d:cb: e8:62:b2:b2:f8:50:4e:e5:7c:67:60:a3:c3:f9:6c:02:d1:c1: 22:aa:a2:f8:78:83:e1:6b:f5:02:b7:4c:58:e8:de:c4:f8:9c: 8c:33:89:03:b1:41:7b:7e:62:96:29:d7:3f:e9:c1:59:13:bd: 71:3c:3d:04:92:1f:ad:11:1d:06:62:48:f0:89:29:0f:4d:e3: 8c:71:bd:9d:3e:f8:6f:b4:c4:04:4b:1b:cf:bb:e6:ec:2d:d6: 11:77:a5:3d:07:44:ba:74:9b:54:3f:0b:2a:35:69:fb:85:7a: 2a:5a:83:04:90:f9:38:6b:99:ab:86:bd:20:f9:51:7c:f6:12: e8:45:d4:7c -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgISAZt57DksNVzIrd6QlKl1zud6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4NjllZTY2MTY0ZDNjYjQxZGJkMmRmNTQxNzgxN2MzMmY0 Y2VhMDUwHhcNMjYwMTAxMTQxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZmY0OGIzYjA2NzMyZjM0Y2I1MjVjNWVmNWU3ODc1MGMzNTEwNTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDn77t7wWSPkDehhOGFqEMELA+jC JOp/POfrvwYASq7W21v7I/8gLerSDdrJQbdkdiFlnV1XrxNA4SqvF5uy+634R35p XD+GhLCqPlSFc5ngeGEVWnyKn8owE9Ssgte7TNiLcrbhBCT9lVsQ81Pmn2aKepmE fgC9H0ZVmE8/iR928Wl1dH2/K6gcozXbJeecYBIVKsuaQPq5NSWtE8QC56x24QLu Ig1DsGPkyAAks8jA+H9fRVt+Jyy31LF7bJtrKKMnkjsbAhVqGwEtI4SmlQCbaEir KCEEESJoRGKhotJcBXDEFlBAIJF38AgKLzliham2Q5eMEABePuAmE8EoqQIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFM/0izsGcy80y1JcXvXnh1DDUQVeMB8GA1UdIwQY MBaAFLhp7mYWTTy0Hb0t9UF4F8MvTOoFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUdudVpoWk5QTFFkdlMzMVFYZ1h3eTlNNmdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8xZDVlZTEtYWNjZi00NzRmLWE1ODkt Y2QxZmE0ODQ0MTFiLzEvel9TTE93WnpMelRMVWx4ZTllZUhVTU5SQlY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8xZDVlZTEtYWNjZi00NzRmLWE1ODktY2QxZmE0ODQ0MTFi LzEvdUdudVpoWk5QTFFkdlMzMVFYZ1h3eTlNNmdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+MAwDBAICODwD BAACOD4DBAAuFAoDBAEuFAwDBABfgq4DBAK5E1wDBAC5OxwDBAG5Ox4DBAC5csED BAC5csMwDQYJKoZIhvcNAQELBQADggEBAIjdNSKaJn8HAZ1gUh0UxR0I8xAOR5ze ggklEXJ+rwtYu/OZ69QoHt8nhOuKK6YEIlcvZzF78bIEPIMd4rE+MdPffAhnD6My W4C7mv1wsYi1Mdr947D0v/PNDpNv6sf9TYYNQltqq0+LzM0Wr5xuBv0BIDUkn7pD NiXrG4pdy+hisrL4UE7lfGdgo8P5bALRwSKqovh4g+Fr9QK3TFjo3sT4nIwziQOx QXt+YpYp1z/pwVkTvXE8PQSSH60RHQZiSPCJKQ9N44xxvZ0++G+0xARLG8+75uwt 1hF3pT0HRLp0m1Q/Cyo1afuFeipagwSQ+ThrmauGvSD5UXz2EuhF1Hw= -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:25 2026 by rpki-client