This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/zRr5zo4vzdBhkq1qbPubljxB4EU.roa File: zRr5zo4vzdBhkq1qbPubljxB4EU.roa (raw, json) Hash identifier: cabHGFo/0oEEfQ6XBa6BalqOenhqiZJQQeeX3LsKyDA= Subject key identifier: CD:1A:F9:CE:8E:2F:CD:D0:61:92:AD:6A:6C:FB:9B:96:3C:41:E0:45 Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b Certificate serial: 019B7CED92898AB80BFAEA5ECC99EC909ED3 Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/zRr5zo4vzdBhkq1qbPubljxB4EU.roa Signing time: Fri 02 Jan 2026 04:18:22 +0000 ROA not before: Fri 02 Jan 2026 04:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210154 IP address blocks: 46.254.135.0/24 maxlen: 24 151.237.20.0/24 maxlen: 24 151.237.21.0/24 maxlen: 24 151.237.22.0/24 maxlen: 24 151.237.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:92:89:8a:b8:0b:fa:ea:5e:cc:99:ec:90:9e:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b Validity Not Before: Jan 2 04:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd1af9ce8e2fcdd06192ad6a6cfb9b963c41e045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:cf:2d:7a:2f:df:b9:d4:ec:51:57:c7:88:58: 29:8f:fc:bd:ee:fa:fb:c9:57:8b:83:c1:6f:b3:f7: e4:fb:89:d8:22:14:c4:49:7b:f0:40:2d:26:79:a2: 2b:c0:e0:d3:f3:46:89:6a:37:b9:c2:5a:05:ff:b1: 33:ee:33:e9:38:0c:c0:c9:03:8a:81:d5:94:7f:13: f3:0c:a5:a1:5e:a4:60:b2:e8:da:d2:c3:74:d0:70: 2d:b7:80:c9:b8:09:07:bf:fa:4e:fe:e4:29:2d:fa: 9d:b5:e8:4c:be:84:5e:21:d9:ac:2c:c2:5e:ad:29: b3:63:ec:e3:a7:47:82:4f:ff:23:4c:86:b0:f6:c2: 55:5f:4c:a3:fb:5e:16:91:b2:cf:b3:64:8b:f3:8b: e8:29:2d:e8:ba:31:1c:a1:d1:d8:3f:fe:06:d4:ec: 14:11:cb:fb:c8:8f:d0:f0:5a:ee:0c:d7:9b:45:98: 42:14:ea:a9:6f:83:29:72:ac:2a:c8:2d:f9:7b:33: 61:69:c7:ca:c4:96:77:a1:66:52:a3:e7:07:56:cf: 87:28:e5:49:41:10:8b:4b:0f:07:25:c1:91:a4:52: db:b7:7f:3c:46:b8:79:2e:66:56:f9:fd:7d:77:82: 51:65:5f:6a:eb:cf:af:f1:82:ee:7c:62:b5:bc:28: 3a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:1A:F9:CE:8E:2F:CD:D0:61:92:AD:6A:6C:FB:9B:96:3C:41:E0:45 X509v3 Authority Key Identifier: keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/zRr5zo4vzdBhkq1qbPubljxB4EU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.254.135.0/24 151.237.20.0-151.237.22.255 151.237.32.0/24 Signature Algorithm: sha256WithRSAEncryption 21:64:c5:c5:c2:43:3d:3e:c5:ff:d6:f5:99:90:33:67:d4:97: 06:8c:53:4c:bf:fe:86:de:6c:8e:fa:06:bb:d6:d6:8a:5d:34: 09:d5:e2:c9:25:77:40:10:0e:aa:72:d1:e6:8d:49:3a:53:99: c8:19:22:b2:ee:b1:67:5f:78:04:61:54:23:e9:70:18:58:92: 8f:ee:d8:e0:a6:27:58:93:d1:38:10:da:ab:e2:e1:84:dc:42: 99:a7:06:d0:9d:8e:23:af:28:36:6c:1a:aa:35:0a:01:77:82: 6f:5d:2e:f0:f0:82:ca:e0:15:42:31:bd:ab:03:ec:f9:c9:0f: 71:76:40:fb:07:01:34:ba:e6:ce:6e:78:78:f7:68:10:12:7f: 7e:8d:e1:05:ca:b8:11:18:9c:1a:87:cf:38:b7:34:3c:58:9b: 5f:84:f8:bb:d1:9d:2e:e1:e7:50:62:03:49:b4:7f:cc:5f:44: bf:3a:03:46:fa:90:71:69:51:9c:3f:f4:94:47:95:8a:67:7d: 67:fb:43:52:38:67:58:99:09:b1:55:62:83:f6:7f:1e:88:c9: 9b:f7:ae:e2:b7:94:94:c4:33:b2:4a:09:a0:8b:0a:4a:9c:64: a8:d1:1d:d9:ba:35:04:c1:0d:9e:88:bb:f1:67:b6:1a:26:34: 43:c6:80:8d -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt87ZKJirgL+upezJnskJ7TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl NGQxMWIwHhcNMjYwMTAyMDQxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDFhZjljZThlMmZjZGQwNjE5MmFkNmE2Y2ZiOWI5NjNjNDFlMDQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6s8tei/fudTsUVfHiFgpj/y97vr7 yVeLg8Fvs/fk+4nYIhTESXvwQC0meaIrwODT80aJaje5wloF/7Ez7jPpOAzAyQOK gdWUfxPzDKWhXqRgsuja0sN00HAtt4DJuAkHv/pO/uQpLfqdtehMvoReIdmsLMJe rSmzY+zjp0eCT/8jTIaw9sJVX0yj+14WkbLPs2SL84voKS3oujEcodHYP/4G1OwU Ecv7yI/Q8FruDNebRZhCFOqpb4MpcqwqyC35ezNhacfKxJZ3oWZSo+cHVs+HKOVJ QRCLSw8HJcGRpFLbt388Rrh5LmZW+f19d4JRZV9q68+v8YLufGK1vCg6bwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFM0a+c6OL83QYZKtamz7m5Y8QeBFMB8GA1UdIwQY MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt YTk3YzBkYzBhNzQ5LzEvelJyNXpvNHZ6ZEJoa3ExcWJQdWJsanhCNEVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5 LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQALv6HMAwD BAKX7RQDBACX7RYDBACX7SAwDQYJKoZIhvcNAQELBQADggEBACFkxcXCQz0+xf/W 9ZmQM2fUlwaMU0y//obebI76BrvW1opdNAnV4skld0AQDqpy0eaNSTpTmcgZIrLu sWdfeARhVCPpcBhYko/u2OCmJ1iT0TgQ2qvi4YTcQpmnBtCdjiOvKDZsGqo1CgF3 gm9dLvDwgsrgFUIxvasD7PnJD3F2QPsHATS65s5ueHj3aBASf36N4QXKuBEYnBqH zzi3NDxYm1+E+LvRnS7h51BiA0m0f8xfRL86A0b6kHFpUZw/9JRHlYpnfWf7Q1I4 Z1iZCbFVYoP2fx6IyZv3ruK3lJTEM7JKCaCLCkqcZKjRHdm6NQTBDZ6Iu/Fnthom NEPGgI0= -----END CERTIFICATE-----Generated at Mon Jan 26 20:26:06 2026 by rpki-client