This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/Z6Q4KeAqCeUZBMyI5LZnxQHmUaY.roa File: Z6Q4KeAqCeUZBMyI5LZnxQHmUaY.roa (raw, json) Hash identifier: QHGhTNF2b+j3X0I7mApfXWLpTEdb1W60sJaF7U5ztFs= Subject key identifier: 67:A4:38:29:E0:2A:09:E5:19:04:CC:88:E4:B6:67:C5:01:E6:51:A6 Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3 Certificate serial: 019B7C8055414DE0F7FE7BFB43345580DD1B Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/Z6Q4KeAqCeUZBMyI5LZnxQHmUaY.roa Signing time: Fri 02 Jan 2026 02:19:03 +0000 ROA not before: Fri 02 Jan 2026 02:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50261 IP address blocks: 37.220.128.0/20 maxlen: 20 77.111.112.0/22 maxlen: 22 77.111.124.0/22 maxlen: 22 77.111.124.0/24 maxlen: 24 77.111.127.0/24 maxlen: 24 80.64.64.0/21 maxlen: 21 80.64.72.0/21 maxlen: 21 109.74.48.0/20 maxlen: 20 194.152.130.0/24 maxlen: 24 194.152.131.0/24 maxlen: 24 194.152.134.0/24 maxlen: 24 194.152.135.0/24 maxlen: 24 194.152.138.0/24 maxlen: 24 194.152.143.0/24 maxlen: 24 194.152.144.0/24 maxlen: 24 194.152.145.0/24 maxlen: 24 194.152.146.0/24 maxlen: 24 194.152.149.0/24 maxlen: 24 194.152.152.0/24 maxlen: 24 2a02:d400::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:55:41:4d:e0:f7:fe:7b:fb:43:34:55:80:dd:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3 Validity Not Before: Jan 2 02:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=67a43829e02a09e51904cc88e4b667c501e651a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:16:30:cd:75:36:a0:c1:51:c2:8c:94:4c:54: b1:1e:d6:c7:84:1c:6f:ba:28:2f:7e:14:11:d2:c8: df:f8:9e:0c:d0:c9:09:ee:ca:44:22:2f:b8:a2:b0: f6:8d:1b:47:b9:bb:8d:82:9d:41:29:99:45:a5:00: 64:ee:92:6f:2d:16:26:7e:82:aa:8a:be:a7:12:4a: cd:db:0f:e6:e9:a5:cd:bf:6b:79:46:94:3e:a0:9e: 1d:b1:be:86:c1:cb:d6:45:25:24:39:e6:26:d6:45: 5a:19:06:eb:3f:93:8b:64:2b:48:07:65:ac:e6:c1: f7:12:00:95:5d:0a:ce:59:f5:8e:e9:0b:ab:ae:71: d6:34:92:b7:35:a1:27:1d:06:89:7a:3a:a8:46:f0: ca:b7:ee:e4:09:23:8a:89:f2:4c:4a:bd:49:18:1d: 5a:8b:91:e5:2b:e9:2b:4e:74:c8:95:46:29:ed:ec: 25:00:a6:de:a7:cf:16:59:db:0f:28:0a:de:1c:b3: a0:85:26:d5:43:7d:dd:9f:a7:b4:6a:31:9d:fa:59: ef:56:b7:15:e7:1c:f7:4a:5d:df:b1:08:95:1f:1c: 68:af:0f:78:2f:04:35:f9:05:93:25:c3:5e:f3:ae: 49:58:c3:11:b6:70:d4:df:68:e3:60:8a:da:c4:c2: 6c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:A4:38:29:E0:2A:09:E5:19:04:CC:88:E4:B6:67:C5:01:E6:51:A6 X509v3 Authority Key Identifier: keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/Z6Q4KeAqCeUZBMyI5LZnxQHmUaY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.220.128.0/20 77.111.112.0/22 77.111.124.0/22 80.64.64.0/20 109.74.48.0/20 194.152.130.0/23 194.152.134.0/23 194.152.138.0/24 194.152.143.0-194.152.146.255 194.152.149.0/24 194.152.152.0/24 IPv6: 2a02:d400::/29 Signature Algorithm: sha256WithRSAEncryption 5e:76:0e:5f:6e:72:99:54:cf:f0:04:12:96:3e:f5:13:e3:10: 20:d7:ae:2e:9a:d7:83:9d:75:7a:f9:4e:d5:15:0b:da:af:64: d1:ff:a4:d7:8a:7c:23:1a:db:60:4e:54:18:01:4b:c5:89:dd: b4:e1:e7:2c:e8:57:da:32:c7:22:0a:d5:77:c3:dd:ec:1c:e8: 34:9b:3e:c1:bc:de:23:51:09:15:6b:25:24:98:1d:7e:04:25: 7b:81:19:b2:05:41:bf:49:79:2b:d7:5d:db:6a:ae:13:67:30: 97:2b:6d:7b:e2:f6:ba:79:86:f5:9e:fd:0c:0f:32:5e:87:02: 50:98:73:92:85:df:26:e7:9f:91:84:b1:16:6b:71:80:1f:11: ab:b2:00:27:8c:af:b1:96:5f:63:5f:62:20:4d:ba:2c:e5:59: 9c:72:1c:80:37:c9:4c:5f:f9:27:ca:67:67:bc:ff:87:0c:b7: de:1a:04:1c:77:ec:e7:d3:87:9b:9a:a1:eb:a9:1f:c0:39:48: 58:b8:8f:22:c4:bd:b6:07:c1:f1:13:b7:35:a4:da:3f:30:b8: a2:bd:5b:42:05:08:6d:b7:0a:d3:98:bf:d5:fa:27:f3:99:7b: ae:c4:8c:37:64:07:75:3b:d1:de:e3:15:ec:42:ae:3a:94:84: c2:dc:3a:9f -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgISAZt8gFVBTeD3/nv7QzRVgN0bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0MTk3NTU4M2IyNTAzNjJjODE1MGY2M2FkYjMwYTBmNmEw YzZmYzMwHhcNMjYwMTAyMDIxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2N2E0MzgyOWUwMmEwOWU1MTkwNGNjODhlNGI2NjdjNTAxZTY1MWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhYwzXU2oMFRwoyUTFSxHtbHhBxv uigvfhQR0sjf+J4M0MkJ7spEIi+4orD2jRtHubuNgp1BKZlFpQBk7pJvLRYmfoKq ir6nEkrN2w/m6aXNv2t5RpQ+oJ4dsb6GwcvWRSUkOeYm1kVaGQbrP5OLZCtIB2Ws 5sH3EgCVXQrOWfWO6QurrnHWNJK3NaEnHQaJejqoRvDKt+7kCSOKifJMSr1JGB1a i5HlK+krTnTIlUYp7ewlAKbep88WWdsPKAreHLOghSbVQ33dn6e0ajGd+lnvVrcV 5xz3Sl3fsQiVHxxorw94LwQ1+QWTJcNe865JWMMRtnDU32jjYIraxMJsHwIDAQAB o4ICXDCCAlgwHQYDVR0OBBYEFGekOCngKgnlGQTMiOS2Z8UB5lGmMB8GA1UdIwQY MBaAFGQZdVg7JQNiyBUPY62zCg9qDG/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQt ZjFjMzNhYTJmZDUwLzEvWjZRNEtlQXFDZVVaQk15STVMWm54UUhtVWFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQtZjFjMzNhYTJmZDUw LzEvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHIGCCsGAQUFBwEHAQH/BGMwYTBQBAIAATBKAwQEJdyAAwQC TW9wAwQCTW98AwQEUEBAAwQEbUowAwQBwpiCAwQBwpiGAwQAwpiKMAwDBADCmI8D BADCmJIDBADCmJUDBADCmJgwDQQCAAIwBwMFAyoC1AAwDQYJKoZIhvcNAQELBQAD ggEBAF52Dl9ucplUz/AEEpY+9RPjECDXri6a14OddXr5TtUVC9qvZNH/pNeKfCMa 22BOVBgBS8WJ3bTh5yzoV9oyxyIK1XfD3ewc6DSbPsG83iNRCRVrJSSYHX4EJXuB GbIFQb9JeSvXXdtqrhNnMJcrbXvi9rp5hvWe/QwPMl6HAlCYc5KF3ybnn5GEsRZr cYAfEauyACeMr7GWX2NfYiBNuizlWZxyHIA3yUxf+SfKZ2e8/4cMt94aBBx37OfT h5uaoeupH8A5SFi4jyLEvbYHwfETtzWk2j8wuKK9W0IFCG23CtOYv9X6J/OZe67E jDdkB3U70d7jFexCrjqUhMLcOp8= -----END CERTIFICATE-----Generated at Wed Jan 21 08:21:11 2026 by rpki-client