This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/ZIAFcJc_Q5WTUEAaTJwf-OMvIHY.roa File: ZIAFcJc_Q5WTUEAaTJwf-OMvIHY.roa (raw, json) Hash identifier: AivzRL89jrdbGmm522Fsk56KaJ8g9QW8w/g0BhMUzGs= Subject key identifier: 64:80:05:70:97:3F:43:95:93:50:40:1A:4C:9C:1F:F8:E3:2F:20:76 Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf Certificate serial: 019B791081CEFBC8F4B63DE9901C86B14C50 Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/ZIAFcJc_Q5WTUEAaTJwf-OMvIHY.roa Signing time: Thu 01 Jan 2026 10:18:03 +0000 ROA not before: Thu 01 Jan 2026 10:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48678 IP address blocks: 5.180.105.0/24 maxlen: 24 5.180.106.0/24 maxlen: 24 5.180.107.0/24 maxlen: 24 45.131.0.0/24 maxlen: 24 45.131.1.0/24 maxlen: 24 45.131.2.0/24 maxlen: 24 45.131.3.0/24 maxlen: 24 45.136.4.0/24 maxlen: 24 45.141.149.0/24 maxlen: 24 77.83.200.0/24 maxlen: 24 77.83.201.0/24 maxlen: 24 77.83.202.0/24 maxlen: 24 91.208.204.0/24 maxlen: 24 194.116.237.0/24 maxlen: 24 2a09:8780::/29 maxlen: 29 2a0f:b700::/29 maxlen: 29 2a0f:e900::/29 maxlen: 29 2a0f:eb00::/29 maxlen: 29 2a0f:eb05::/32 maxlen: 32 2a0f:eb07::/32 maxlen: 32 2a0f:ed00::/29 maxlen: 29 2a0f:ed03::/32 maxlen: 32 2a0f:f900::/29 maxlen: 29 2a13:a440:7::/48 maxlen: 48 2a13:a441::/32 maxlen: 32 2a13:a445::/32 maxlen: 32 2a13:a447::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:81:ce:fb:c8:f4:b6:3d:e9:90:1c:86:b1:4c:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf Validity Not Before: Jan 1 10:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=64800570973f43959350401a4c9c1ff8e32f2076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cc:e1:d7:0d:dc:0f:78:87:bf:6b:19:00:9c: be:68:d4:bd:b9:38:03:16:5b:b6:26:20:9a:70:f1: 93:fa:e3:cb:ec:9f:b4:8e:e4:9a:ac:0d:40:fe:8a: 8a:7c:77:90:59:8e:d3:a9:12:a1:0b:ed:96:3f:3b: a4:d9:85:a7:71:d0:71:8d:48:b0:94:f8:19:b5:95: 12:a9:fd:4a:d7:69:28:c3:ac:8e:a8:5c:3d:fb:b1: 1a:e9:22:e3:5a:d7:d1:42:10:52:99:8b:75:d1:67: 19:22:ab:b6:d1:ff:9d:d1:c8:95:d6:9f:07:aa:72: d4:25:1d:0f:95:46:47:a0:7c:ab:05:cd:8e:bf:33: 36:e9:67:24:7e:ef:79:40:3a:84:ee:3d:f1:ee:bd: e2:92:6a:b4:51:fe:d8:0c:47:eb:e2:10:62:d7:83: a9:23:94:5b:8b:3a:a0:ef:e7:ec:e4:68:3d:95:90: 55:7d:16:39:44:44:d1:17:e3:2b:67:c1:23:18:9f: d6:d3:be:39:2f:c0:37:cd:e5:39:99:91:29:d4:3c: ba:3c:6e:01:b7:0f:4e:f6:65:f4:51:ff:83:be:52: 1f:dd:ed:91:93:6c:b3:1f:81:36:e0:79:32:33:86: 75:bc:4e:dc:02:44:61:a0:a9:cd:7d:96:af:e1:6c: ce:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:80:05:70:97:3F:43:95:93:50:40:1A:4C:9C:1F:F8:E3:2F:20:76 X509v3 Authority Key Identifier: keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/ZIAFcJc_Q5WTUEAaTJwf-OMvIHY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.105.0-5.180.107.255 45.131.0.0/22 45.136.4.0/24 45.141.149.0/24 77.83.200.0-77.83.202.255 91.208.204.0/24 194.116.237.0/24 IPv6: 2a09:8780::/29 2a0f:b700::/29 2a0f:e900::/29 2a0f:eb00::/29 2a0f:ed00::/29 2a0f:f900::/29 2a13:a440:7::/48 2a13:a441::/32 2a13:a445::/32 2a13:a447::/32 Signature Algorithm: sha256WithRSAEncryption 8c:16:8c:4a:b3:ae:f6:ab:eb:c4:aa:52:30:07:56:ea:ca:39: c2:24:c1:60:62:31:71:61:83:3a:e4:95:f4:b2:7a:53:77:bb: 7e:e9:a9:00:94:40:dc:b0:d5:1e:c6:28:37:12:1d:1a:ac:48: 9e:85:b8:8d:88:cc:f7:1d:81:64:6b:39:5d:25:9c:76:41:92: fc:ed:d5:0c:3a:37:ad:4c:0b:a0:44:04:1f:30:69:45:8c:42: 79:5c:0a:9a:3e:91:02:02:d6:d4:99:6f:fd:e2:47:db:0b:5e: 08:44:63:e1:93:90:cb:92:0e:7b:3d:1b:e6:75:77:cb:c9:4a: 5d:2c:1d:2d:63:ee:d9:7a:b5:31:23:44:ca:89:47:10:a0:d1: fe:75:7a:0f:dc:34:90:7e:d3:dc:cb:54:72:5c:ba:6c:78:e7: e6:6c:18:a9:ad:46:1e:98:c0:8f:bf:c5:b4:64:a9:b4:8b:d8: 8d:59:88:66:cd:23:ad:16:7f:7c:94:cc:df:39:a9:38:f1:a9: a5:d6:13:9d:6c:b6:4b:0c:18:38:7e:10:20:34:da:6b:dd:29: 16:b4:84:c8:8f:2c:4f:99:b4:3c:cc:58:c4:87:21:f2:74:f5: 3d:bb:d7:2d:6a:c7:b4:0c:d1:e6:6d:2a:bc:67:ac:cb:18:5d: 93:f7:38:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgISAZt5EIHO+8j0tj3pkByGsUxQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl ZjVkYWYwHhcNMjYwMTAxMTAxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDgwMDU3MDk3M2Y0Mzk1OTM1MDQwMWE0YzljMWZmOGUzMmYyMDc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuczh1w3cD3iHv2sZAJy+aNS9uTgD Flu2JiCacPGT+uPL7J+0juSarA1A/oqKfHeQWY7TqRKhC+2WPzuk2YWncdBxjUiw lPgZtZUSqf1K12kow6yOqFw9+7Ea6SLjWtfRQhBSmYt10WcZIqu20f+d0ciV1p8H qnLUJR0PlUZHoHyrBc2OvzM26Wckfu95QDqE7j3x7r3ikmq0Uf7YDEfr4hBi14Op I5Rbizqg7+fs5Gg9lZBVfRY5RETRF+MrZ8EjGJ/W0745L8A3zeU5mZEp1Dy6PG4B tw9O9mX0Uf+DvlIf3e2Rk2yzH4E24HkyM4Z1vE7cAkRhoKnNfZav4WzOgwIDAQAB o4ICkDCCAowwHQYDVR0OBBYEFGSABXCXP0OVk1BAGkycH/jjLyB2MB8GA1UdIwQY MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt NWRkNmUyMmViYWIwLzEvWklBRmNKY19RNVdUVUVBYVRKd2YtT012SUhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGlBggrBgEFBQcBBwEB/wSBlTCBkjBABAIAATA6MAwDBAAF tGkDBAIFtGgDBAItgwADBAAtiAQDBAAtjZUwDAMEA01TyAMEAE1TygMEAFvQzAME AMJ07TBOBAIAAjBIAwUDKgmHgAMFAyoPtwADBQMqD+kAAwUDKg/rAAMFAyoP7QAD BQMqD/kAAwcAKhOkQAAHAwUAKhOkQQMFACoTpEUDBQAqE6RHMA0GCSqGSIb3DQEB CwUAA4IBAQCMFoxKs672q+vEqlIwB1bqyjnCJMFgYjFxYYM65JX0snpTd7t+6akA lEDcsNUexig3Eh0arEiehbiNiMz3HYFkazldJZx2QZL87dUMOjetTAugRAQfMGlF jEJ5XAqaPpECAtbUmW/94kfbC14IRGPhk5DLkg57PRvmdXfLyUpdLB0tY+7ZerUx I0TKiUcQoNH+dXoP3DSQftPcy1RyXLpseOfmbBiprUYemMCPv8W0ZKm0i9iNWYhm zSOtFn98lMzfOak48aml1hOdbLZLDBg4fhAgNNpr3SkWtITIjyxPmbQ8zFjEhyHy dPU9u9ctase0DNHmbSq8Z6zLGF2T9ziW -----END CERTIFICATE-----Generated at Mon Jan 19 16:52:00 2026 by rpki-client