This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/8Z-EzuThtebO4TCJ4sXK6ZwkF-U.roa File: 8Z-EzuThtebO4TCJ4sXK6ZwkF-U.roa (raw, json) Hash identifier: nLXaQxJqeWy3EVhvO0P+XRy5zmHbKG5lRbAYJ4bV64g= Subject key identifier: F1:9F:84:CE:E4:E1:B5:E6:CE:E1:30:89:E2:C5:CA:E9:9C:24:17:E5 Certificate issuer: /CN=c9e7aac3d724d9d49f3027133633ba119bb367fb Certificate serial: 019B7F83D77EFAF8C0C219A2C626F70CFE55 Authority key identifier: C9:E7:AA:C3:D7:24:D9:D4:9F:30:27:13:36:33:BA:11:9B:B3:67:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/8Z-EzuThtebO4TCJ4sXK6ZwkF-U.roa Signing time: Fri 02 Jan 2026 16:21:45 +0000 ROA not before: Fri 02 Jan 2026 16:21:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48815 IP address blocks: 109.233.120.0/24 maxlen: 24 109.233.121.0/24 maxlen: 24 109.233.122.0/24 maxlen: 24 109.233.123.0/24 maxlen: 24 109.233.124.0/24 maxlen: 24 109.233.125.0/24 maxlen: 24 109.233.126.0/24 maxlen: 24 109.233.127.0/24 maxlen: 24 176.221.48.0/24 maxlen: 24 176.221.49.0/24 maxlen: 24 176.221.50.0/24 maxlen: 24 176.221.51.0/24 maxlen: 24 176.221.52.0/24 maxlen: 24 176.221.53.0/24 maxlen: 24 176.221.54.0/24 maxlen: 24 176.221.55.0/24 maxlen: 24 185.49.204.0/24 maxlen: 24 185.49.207.0/24 maxlen: 24 195.88.6.0/23 maxlen: 23 212.112.64.0/24 maxlen: 24 212.112.65.0/24 maxlen: 24 212.112.67.0/24 maxlen: 24 212.112.72.0/24 maxlen: 24 212.112.73.0/24 maxlen: 24 212.112.74.0/24 maxlen: 24 212.112.75.0/24 maxlen: 24 212.112.84.0/22 maxlen: 22 212.112.88.0/24 maxlen: 24 212.112.91.0/24 maxlen: 24 212.112.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.mft rsync://rpki.ripe.net/repository/DEFAULT/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:d7:7e:fa:f8:c0:c2:19:a2:c6:26:f7:0c:fe:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9e7aac3d724d9d49f3027133633ba119bb367fb Validity Not Before: Jan 2 16:21:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f19f84cee4e1b5e6cee13089e2c5cae99c2417e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:33:92:6b:f2:3e:c1:21:77:9e:d9:4e:42:7f: 28:5b:52:2b:a6:e3:51:57:4a:ff:4e:45:e9:f0:8f: 28:ab:7f:ad:38:ae:59:fa:f5:13:cc:c6:f1:8d:07: c7:a8:3c:93:8e:8a:b6:00:9a:76:61:7f:d4:e0:89: 91:98:3f:43:21:f6:bd:f0:7a:fe:ca:93:f2:71:af: b5:89:99:e4:b0:c1:51:4f:f2:61:c7:b2:a1:7d:42: 56:4e:31:80:19:d1:3b:84:f7:34:64:19:f7:bd:b8: 0d:13:61:8f:42:ac:42:1c:98:03:60:11:0c:af:7b: 0a:58:14:17:d4:96:0c:27:fd:fa:e7:c6:87:d4:c7: d8:05:aa:b5:a0:2a:32:c8:75:37:25:a5:45:6b:63: 7b:70:8d:ed:8a:fa:e0:4c:21:14:d2:b8:05:52:95: 57:0a:fe:20:f4:4d:e2:9c:47:30:57:66:3e:52:8b: 56:4d:6b:50:a1:5f:ee:27:27:cc:2c:34:8f:35:7b: 8b:b8:37:f5:4a:9b:8f:c7:62:d5:6d:68:0d:29:fa: 25:02:65:d7:ad:13:5d:f0:a4:3d:5d:0f:a2:09:ed: 9a:30:92:68:46:19:e7:ab:60:86:cd:f5:58:dc:46: 9f:7f:20:21:26:a4:04:59:3f:9c:73:93:3b:75:48: ca:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:9F:84:CE:E4:E1:B5:E6:CE:E1:30:89:E2:C5:CA:E9:9C:24:17:E5 X509v3 Authority Key Identifier: keyid:C9:E7:AA:C3:D7:24:D9:D4:9F:30:27:13:36:33:BA:11:9B:B3:67:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/8Z-EzuThtebO4TCJ4sXK6ZwkF-U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.233.120.0/21 176.221.48.0/21 185.49.204.0/24 185.49.207.0/24 195.88.6.0/23 212.112.64.0/23 212.112.67.0/24 212.112.72.0/22 212.112.84.0-212.112.88.255 212.112.91.0-212.112.95.255 Signature Algorithm: sha256WithRSAEncryption a8:91:0c:c2:7c:54:70:aa:a2:31:d6:46:d6:51:7a:36:24:dc: 69:37:8e:03:c5:58:5b:16:46:bb:61:aa:1d:90:c9:49:58:02: 42:ca:29:e6:3b:7a:af:9e:3f:1f:2e:be:70:03:55:62:9c:e0: b5:45:07:8a:f4:bf:da:31:57:60:42:34:b6:6c:ee:7b:ff:2f: cc:73:95:9a:32:b6:3d:9f:4a:92:ba:b3:41:ba:96:6a:f6:11: 71:91:42:5f:b6:1e:a8:9f:5f:ad:8f:45:af:06:b5:15:02:d7: 39:8e:d7:7c:d9:8e:3a:b6:14:d5:0d:26:8f:6b:80:0b:50:d1: 6e:f4:ff:b0:bf:b9:b9:3c:aa:03:d2:67:bb:08:fc:6f:64:a1: b0:ca:f6:42:76:7b:0e:6f:69:b8:5c:34:12:52:2b:65:cf:f8: f9:13:69:ea:97:d7:31:35:13:cb:9d:c2:ff:f3:b9:d1:bf:24: 14:46:37:f2:b0:7d:72:6f:47:99:5d:fd:88:ef:bd:bd:22:b2: 5c:28:36:b4:04:f7:da:32:67:e1:e7:06:7a:04:9c:d9:86:ee: a2:9d:94:c2:02:6a:7a:c1:7b:a4:4b:8c:41:a7:96:9e:96:63: ce:21:1c:99:7d:46:de:ce:f1:85:39:41:f1:0e:cf:3f:ca:77: ee:64:4e:fd -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgISAZt/g9d++vjAwhmixib3DP5VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZTdhYWMzZDcyNGQ5ZDQ5ZjMwMjcxMzM2MzNiYTExOWJi MzY3ZmIwHhcNMjYwMTAyMTYyMTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTlmODRjZWU0ZTFiNWU2Y2VlMTMwODllMmM1Y2FlOTljMjQxN2U1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TOSa/I+wSF3ntlOQn8oW1IrpuNR V0r/TkXp8I8oq3+tOK5Z+vUTzMbxjQfHqDyTjoq2AJp2YX/U4ImRmD9DIfa98Hr+ ypPyca+1iZnksMFRT/Jhx7KhfUJWTjGAGdE7hPc0ZBn3vbgNE2GPQqxCHJgDYBEM r3sKWBQX1JYMJ/3658aH1MfYBaq1oCoyyHU3JaVFa2N7cI3tivrgTCEU0rgFUpVX Cv4g9E3inEcwV2Y+UotWTWtQoV/uJyfMLDSPNXuLuDf1SpuPx2LVbWgNKfolAmXX rRNd8KQ9XQ+iCe2aMJJoRhnnq2CGzfVY3EaffyAhJqQEWT+cc5M7dUjKbQIDAQAB o4ICTzCCAkswHQYDVR0OBBYEFPGfhM7k4bXmzuEwieLFyumcJBflMB8GA1UdIwQY MBaAFMnnqsPXJNnUnzAnEzYzuhGbs2f7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWVlcXc5Y2syZFNmTUNjVE5qTzZFWnV6Wl9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80Zjc1MWQtYTM1NS00MGYzLWFhNDQt N2NjYTY3NzM2MDFhLzEvOFotRXp1VGh0ZWJPNFRDSjRzWEs2WndrRi1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS80Zjc1MWQtYTM1NS00MGYzLWFhNDQtN2NjYTY3NzM2MDFh LzEveWVlcXc5Y2syZFNmTUNjVE5qTzZFWnV6Wl9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDBSBAIAATBMAwQDbel4AwQD sN0wAwQAuTHMAwQAuTHPAwQBw1gGAwQB1HBAAwQA1HBDAwQC1HBIMAwDBALUcFQD BADUcFgwDAMEANRwWwMEBdRwQDANBgkqhkiG9w0BAQsFAAOCAQEAqJEMwnxUcKqi MdZG1lF6NiTcaTeOA8VYWxZGu2GqHZDJSVgCQsop5jt6r54/Hy6+cANVYpzgtUUH ivS/2jFXYEI0tmzue/8vzHOVmjK2PZ9KkrqzQbqWavYRcZFCX7YeqJ9frY9Frwa1 FQLXOY7XfNmOOrYU1Q0mj2uAC1DRbvT/sL+5uTyqA9Jnuwj8b2ShsMr2QnZ7Dm9p uFw0ElIrZc/4+RNp6pfXMTUTy53C//O50b8kFEY38rB9cm9HmV39iO+9vSKyXCg2 tAT32jJn4ecGegSc2Ybuop2UwgJqesF7pEuMQaeWnpZjziEcmX1G3s7xhTlB8Q7P P8p37mRO/Q== -----END CERTIFICATE-----Generated at Mon Feb 2 15:55:25 2026 by rpki-client