This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ZQ9T7yvjN_UaRgsf5cjJhiKeaDc.roa File: ZQ9T7yvjN_UaRgsf5cjJhiKeaDc.roa (raw, json) Hash identifier: vu06bfzau/SLSUf1UdTwdfeWciSmk3cM52BzlOyQTuQ= Subject key identifier: 65:0F:53:EF:2B:E3:37:F5:1A:46:0B:1F:E5:C8:C9:86:22:9E:68:37 Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B7D5D26C9F0C22E8449F256CF9C4353A2 Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ZQ9T7yvjN_UaRgsf5cjJhiKeaDc.roa Signing time: Fri 02 Jan 2026 06:20:15 +0000 ROA not before: Fri 02 Jan 2026 06:20:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5511 IP address blocks: 5.181.114.0/24 maxlen: 24 5.183.226.0/24 maxlen: 24 45.9.92.0/24 maxlen: 24 45.9.184.0/24 maxlen: 24 45.10.186.0/24 maxlen: 24 45.83.29.0/24 maxlen: 24 45.88.20.0/24 maxlen: 24 45.88.22.0/24 maxlen: 24 45.89.36.0/24 maxlen: 24 45.89.38.0/24 maxlen: 24 45.92.2.0/24 maxlen: 24 45.134.138.0/24 maxlen: 24 45.143.54.0/24 maxlen: 24 45.145.46.0/24 maxlen: 24 45.146.187.0/24 maxlen: 24 45.156.157.0/24 maxlen: 24 87.247.148.0/22 maxlen: 24 89.40.160.0/24 maxlen: 24 91.190.96.0/24 maxlen: 24 91.190.99.0/24 maxlen: 24 91.190.104.0/24 maxlen: 24 91.217.250.0/24 maxlen: 24 93.114.246.0/24 maxlen: 24 178.239.205.0/24 maxlen: 24 185.184.135.0/24 maxlen: 24 185.205.189.0/24 maxlen: 24 188.214.27.0/24 maxlen: 24 188.240.75.0/24 maxlen: 24 217.74.16.0/24 maxlen: 24 2a0b:64c1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:26:c9:f0:c2:2e:84:49:f2:56:cf:9c:43:53:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 2 06:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=650f53ef2be337f51a460b1fe5c8c986229e6837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3d:c6:ba:c8:9b:26:c8:82:55:b7:ee:6f:dd: e9:f8:2d:6e:39:f4:55:41:f6:0b:eb:0f:d6:94:27: c7:9c:27:c2:50:f9:75:46:96:d3:6e:1d:26:95:73: 2c:d2:86:f6:22:65:2c:d5:db:96:9d:16:87:84:90: 15:86:e7:d9:9a:c6:f4:bf:cb:13:e5:5a:b3:d6:5e: 6a:d8:15:3d:21:a6:a7:61:ce:c2:ea:13:61:45:06: 90:30:5d:15:f2:5f:6d:22:f0:07:13:cd:05:03:5d: ed:69:39:8e:06:14:eb:c9:a9:35:19:95:dc:27:6e: 74:39:68:ee:57:7f:14:5a:0d:ac:c4:f8:6b:bc:52: 32:d7:63:2e:c1:dc:7b:08:74:d5:e7:13:8a:8e:01: e4:1e:04:ae:db:ca:74:0d:ad:01:35:33:46:ac:27: 40:56:dc:d8:6c:63:53:b5:f7:43:e9:ac:e5:14:07: 19:15:94:55:3c:e5:1a:ca:be:87:31:38:0c:b7:d4: 82:6f:1b:0c:aa:5e:12:15:5a:8b:2a:2b:79:ba:94: 22:f9:f0:73:72:fd:68:d9:91:f2:31:b8:4a:d8:89: d3:3a:37:53:50:9c:31:0b:50:f0:30:41:40:da:ae: d6:32:22:f9:7e:fd:63:0f:e1:ec:00:24:95:73:8d: 69:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:0F:53:EF:2B:E3:37:F5:1A:46:0B:1F:E5:C8:C9:86:22:9E:68:37 X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ZQ9T7yvjN_UaRgsf5cjJhiKeaDc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.114.0/24 5.183.226.0/24 45.9.92.0/24 45.9.184.0/24 45.10.186.0/24 45.83.29.0/24 45.88.20.0/24 45.88.22.0/24 45.89.36.0/24 45.89.38.0/24 45.92.2.0/24 45.134.138.0/24 45.143.54.0/24 45.145.46.0/24 45.146.187.0/24 45.156.157.0/24 87.247.148.0/22 89.40.160.0/24 91.190.96.0/24 91.190.99.0/24 91.190.104.0/24 91.217.250.0/24 93.114.246.0/24 178.239.205.0/24 185.184.135.0/24 185.205.189.0/24 188.214.27.0/24 188.240.75.0/24 217.74.16.0/24 IPv6: 2a0b:64c1::/32 Signature Algorithm: sha256WithRSAEncryption 70:3c:8d:b2:54:ff:98:a6:45:4d:85:fe:aa:20:8d:67:19:2e: ce:2b:ca:fe:02:f4:7f:06:06:c6:30:d0:0f:75:b1:86:72:c9: 8d:b4:3b:51:7c:9d:bc:b4:31:3e:9e:49:10:8d:cf:c0:4c:2b: bb:de:09:c5:42:ee:6f:fe:34:1c:70:d5:f3:e1:7f:53:72:21: 2c:7a:fe:dc:bb:95:9e:58:3e:70:f2:a8:ca:cb:cc:da:a6:3f: 06:ee:36:3a:ad:3f:07:d2:26:76:8b:48:f6:5d:d6:e6:93:c1: 98:8f:a3:b6:35:99:86:a7:4a:60:c6:ca:c4:4d:13:83:07:9f: 45:e7:5b:cc:86:7b:0e:d0:f9:ee:2a:9b:f8:0a:f2:77:5e:03: c7:cd:df:7d:26:fe:b0:91:e6:13:e4:ee:07:9b:48:70:02:44: 43:e0:a2:c6:56:d7:c8:d3:27:87:47:21:d8:96:e7:17:d1:78: 1b:28:a4:0a:90:76:d5:ef:1e:02:65:a3:1a:86:75:93:34:89: aa:c6:e7:1a:d0:1a:7d:b3:4c:c7:d1:e9:8f:2b:51:a6:80:7a: a0:d2:24:07:07:04:78:3c:d5:b7:70:58:80:7e:dc:31:f5:e0: ce:0d:2c:d1:8b:9a:9e:b6:c3:2b:9b:7e:7b:40:2d:ac:c8:36: c9:b2:bd:ef -----BEGIN CERTIFICATE----- MIIFuTCCBKGgAwIBAgISAZt9XSbJ8MIuhEnyVs+cQ1OiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTAyMDYyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTBmNTNlZjJiZTMzN2Y1MWE0NjBiMWZlNWM4Yzk4NjIyOWU2ODM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzj3GusibJsiCVbfub93p+C1uOfRV QfYL6w/WlCfHnCfCUPl1RpbTbh0mlXMs0ob2ImUs1duWnRaHhJAVhufZmsb0v8sT 5Vqz1l5q2BU9IaanYc7C6hNhRQaQMF0V8l9tIvAHE80FA13taTmOBhTryak1GZXc J250OWjuV38UWg2sxPhrvFIy12Muwdx7CHTV5xOKjgHkHgSu28p0Da0BNTNGrCdA VtzYbGNTtfdD6azlFAcZFZRVPOUayr6HMTgMt9SCbxsMql4SFVqLKit5upQi+fBz cv1o2ZHyMbhK2InTOjdTUJwxC1DwMEFA2q7WMiL5fv1jD+HsACSVc41prwIDAQAB o4ICxTCCAsEwHQYDVR0OBBYEFGUPU+8r4zf1GkYLH+XIyYYinmg3MB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvWlE5VDd5dmpOX1VhUmdzZjVjakpoaUtlYURjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHaBggrBgEFBQcBBwEB/wSByjCBxzCBtQQCAAEwga4DBAAF tXIDBAAFt+IDBAAtCVwDBAAtCbgDBAAtCroDBAAtUx0DBAAtWBQDBAAtWBYDBAAt WSQDBAAtWSYDBAAtXAIDBAAthooDBAAtjzYDBAAtkS4DBAAtkrsDBAAtnJ0DBAJX 95QDBABZKKADBABbvmADBABbvmMDBABbvmgDBABb2foDBABdcvYDBACy780DBAC5 uIcDBAC5zb0DBAC81hsDBAC88EsDBADZShAwDQQCAAIwBwMFACoLZMEwDQYJKoZI hvcNAQELBQADggEBAHA8jbJU/5imRU2F/qogjWcZLs4ryv4C9H8GBsYw0A91sYZy yY20O1F8nby0MT6eSRCNz8BMK7veCcVC7m/+NBxw1fPhf1NyISx6/ty7lZ5YPnDy qMrLzNqmPwbuNjqtPwfSJnaLSPZd1uaTwZiPo7Y1mYanSmDGysRNE4MHn0XnW8yG ew7Q+e4qm/gK8ndeA8fN330m/rCR5hPk7gebSHACREPgosZW18jTJ4dHIdiW5xfR eBsopAqQdtXvHgJloxqGdZM0iarG5xrQGn2zTMfR6Y8rUaaAeqDSJAcHBHg81bdw WIB+3DH14M4NLNGLmp62wyubfntALazINsmyve8= -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:33 2026 by rpki-client