This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/zweolzwrHnk3xZX75Vx487OApyI.roa File: zweolzwrHnk3xZX75Vx487OApyI.roa (raw, json) Hash identifier: fsFWViG1G306jQcDvI1DY5zG2KP6QpQyeNFqGF9udOI= Subject key identifier: CF:07:A8:97:3C:2B:1E:79:37:C5:95:FB:E5:5C:78:F3:B3:80:A7:22 Certificate issuer: /CN=f4b769a53dd86352d3440f222bdf907cf09c2dba Certificate serial: 019BA28E503D4C4E2F94FE90F4EC6D08D232 Authority key identifier: F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/zweolzwrHnk3xZX75Vx487OApyI.roa Signing time: Fri 09 Jan 2026 11:39:54 +0000 ROA not before: Fri 09 Jan 2026 11:39:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50436 IP address blocks: 5.28.64.0/18 maxlen: 19 5.28.64.0/19 maxlen: 19 5.28.96.0/19 maxlen: 19 37.120.0.0/17 maxlen: 18 77.64.128.0/17 maxlen: 24 77.64.172.0/24 maxlen: 24 77.64.176.0/23 maxlen: 23 77.64.183.0/24 maxlen: 24 77.64.220.0/23 maxlen: 24 83.221.64.0/19 maxlen: 24 92.206.0.0/16 maxlen: 24 92.206.8.0/21 maxlen: 24 92.206.22.0/23 maxlen: 24 92.206.32.0/20 maxlen: 24 92.206.48.0/20 maxlen: 24 92.206.76.0/22 maxlen: 24 92.206.208.0/24 maxlen: 24 92.206.209.0/24 maxlen: 24 92.206.250.0/23 maxlen: 23 92.206.254.0/23 maxlen: 24 94.139.0.0/19 maxlen: 20 94.139.28.0/23 maxlen: 23 217.68.167.0/24 maxlen: 24 2a02:2455:8000::/36 maxlen: 36 2a02:2455:9000::/36 maxlen: 40 2a02:2455:a000::/36 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a2:8e:50:3d:4c:4e:2f:94:fe:90:f4:ec:6d:08:d2:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4b769a53dd86352d3440f222bdf907cf09c2dba Validity Not Before: Jan 9 11:39:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf07a8973c2b1e7937c595fbe55c78f3b380a722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:93:b9:ad:5e:db:03:91:33:92:8c:32:73:e3: fd:a5:a4:68:8f:22:cd:d7:81:4e:1c:17:2d:48:12: 44:c5:ef:3e:0b:87:9f:79:c9:5b:50:13:fd:62:d9: 6b:0a:86:fc:74:2e:fd:47:f9:ce:81:b0:4e:7d:c5: 64:e6:6b:b0:34:93:b2:ce:b9:0a:69:a2:63:a5:8c: 3d:95:ec:1a:47:e4:b3:75:2b:bd:9f:64:b3:2a:67: a9:0a:08:e6:96:ad:2a:7c:e4:b8:bb:06:7c:e6:c9: 64:44:70:40:72:6b:b5:d8:5b:11:87:7d:45:cc:82: ed:ec:6d:e5:61:ff:a4:cb:60:35:6f:ce:fd:e7:c0: 67:15:86:da:96:16:eb:00:3d:8b:b6:3b:bf:41:12: 2f:cf:f2:09:e5:f0:da:61:d5:97:6d:10:d6:9c:ba: 54:00:6d:15:ef:06:c8:36:2b:19:d9:0c:65:7d:65: 05:88:9b:f4:08:b8:a7:ea:0c:88:d8:4a:8a:4d:c1: 34:5d:ab:4c:b4:8d:aa:71:13:ca:5f:43:e0:0f:f6: 90:cc:3b:ef:ba:32:5e:f9:9a:72:7e:87:c8:f9:73: 6f:5c:86:5c:7e:88:38:d8:5c:5c:45:11:79:a5:3e: 0f:6c:35:e9:a9:71:26:85:ef:d3:e3:e0:63:fb:70: 9d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:07:A8:97:3C:2B:1E:79:37:C5:95:FB:E5:5C:78:F3:B3:80:A7:22 X509v3 Authority Key Identifier: keyid:F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/zweolzwrHnk3xZX75Vx487OApyI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.28.64.0/18 37.120.0.0/17 77.64.128.0/17 83.221.64.0/19 92.206.0.0/16 94.139.0.0/19 217.68.167.0/24 IPv6: 2a02:2455:8000::-2a02:2455:afff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 69:a3:a8:e8:50:61:54:c3:ab:0d:01:06:90:cb:ea:19:b0:9c: 60:df:e6:8b:50:ea:6a:22:91:d9:3a:22:9e:5a:9d:e6:92:b7: c7:65:d1:03:77:2f:62:72:b4:e6:4c:84:6d:d1:52:29:f4:d5: 63:87:29:ec:64:ac:ec:3b:f1:74:15:c8:da:b5:8c:db:5a:4a: 2d:af:a3:ad:14:7c:43:f1:80:8a:4b:48:c9:fc:06:82:fd:20: e5:83:3d:f5:f3:73:d8:ee:0f:32:9b:6a:d4:d7:1b:84:ce:27: 58:33:60:2b:b3:a4:0e:08:ae:c8:47:73:1d:06:6f:7a:19:17: 7b:a1:3c:cf:af:53:16:99:20:4d:0c:33:41:00:4e:5f:01:26: 4a:e0:a4:95:24:47:a1:18:d0:c1:78:c0:0f:3b:0e:f2:00:1d: d4:ab:e7:9c:48:cf:03:37:45:04:82:ac:71:86:7a:2a:d6:b3: 92:73:14:02:2d:e8:c4:88:44:b6:dd:fa:c0:e3:49:f9:d8:b2: 34:74:48:8f:d0:67:b5:73:6c:3d:73:c1:fa:6c:ff:40:fa:af: 1c:c8:6c:ea:d6:dc:15:b1:ca:fd:36:99:81:fd:0d:ae:e4:e8: c7:19:d8:48:88:4a:2d:3e:e0:4a:da:af:85:7d:5f:b2:c9:27: 2c:2b:63:6b -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgISAZuijlA9TE4vlP6Q9OxtCNIyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0Yjc2OWE1M2RkODYzNTJkMzQ0MGYyMjJiZGY5MDdjZjA5 YzJkYmEwHhcNMjYwMTA5MTEzOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjA3YTg5NzNjMmIxZTc5MzdjNTk1ZmJlNTVjNzhmM2IzODBhNzIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZO5rV7bA5Ezkowyc+P9paRojyLN 14FOHBctSBJExe8+C4efeclbUBP9YtlrCob8dC79R/nOgbBOfcVk5muwNJOyzrkK aaJjpYw9lewaR+SzdSu9n2SzKmepCgjmlq0qfOS4uwZ85slkRHBAcmu12FsRh31F zILt7G3lYf+ky2A1b87958BnFYbalhbrAD2Ltju/QRIvz/IJ5fDaYdWXbRDWnLpU AG0V7wbINisZ2QxlfWUFiJv0CLin6gyI2EqKTcE0XatMtI2qcRPKX0PgD/aQzDvv ujJe+ZpyfofI+XNvXIZcfog42FxcRRF5pT4PbDXpqXEmhe/T4+Bj+3Cd3QIDAQAB o4ICRjCCAkIwHQYDVR0OBBYEFM8HqJc8Kx55N8WV++VcePOzgKciMB8GA1UdIwQY MBaAFPS3aaU92GNS00QPIivfkHzwnC26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUxkcHBUM1lZMUxUUkE4aUs5LVFmUENjTGJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83MGQ1MGYtZmYzYy00ZjYzLThkZWMt ZDdjMzZjMjdjMDg3LzEvendlb2x6d3JIbmszeFpYNzVWeDQ4N09BcHlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy83MGQ1MGYtZmYzYy00ZjYzLThkZWMtZDdjMzZjMjdjMDg3 LzEvOUxkcHBUM1lZMUxUUkE4aUs5LVFmUENjTGJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFwGCCsGAQUFBwEHAQH/BE0wSzAvBAIAATApAwQGBRxAAwQH JXgAAwQHTUCAAwQFU91AAwMAXM4DBAVeiwADBADZRKcwGAQCAAIwEjAQAwYHKgIk VYADBgQqAiRVoDANBgkqhkiG9w0BAQsFAAOCAQEAaaOo6FBhVMOrDQEGkMvqGbCc YN/mi1DqaiKR2Toinlqd5pK3x2XRA3cvYnK05kyEbdFSKfTVY4cp7GSs7DvxdBXI 2rWM21pKLa+jrRR8Q/GAiktIyfwGgv0g5YM99fNz2O4PMptq1NcbhM4nWDNgK7Ok DgiuyEdzHQZvehkXe6E8z69TFpkgTQwzQQBOXwEmSuCklSRHoRjQwXjADzsO8gAd 1KvnnEjPAzdFBIKscYZ6KtazknMUAi3oxIhEtt36wONJ+diyNHRIj9BntXNsPXPB +mz/QPqvHMhs6tbcFbHK/TaZgf0NruToxxnYSIhKLT7gStqvhX1fssknLCtjaw== -----END CERTIFICATE-----Generated at Mon Jan 26 21:32:12 2026 by rpki-client