This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zGv39sxT-IgxK9wQigpzw1dL81k.roa File: zGv39sxT-IgxK9wQigpzw1dL81k.roa (raw, json) Hash identifier: +TgYlQl9Z+mDQd/s9Yb0REr9Dx/C5mDs1i0ouWI4Pcw= Subject key identifier: CC:6B:F7:F6:CC:53:F8:88:31:2B:DC:10:8A:0A:73:C3:57:4B:F3:59 Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10 Certificate serial: 019B7F84DA1327C28EEEBAC1AB735E9F0040 Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zGv39sxT-IgxK9wQigpzw1dL81k.roa Signing time: Fri 02 Jan 2026 16:22:51 +0000 ROA not before: Fri 02 Jan 2026 16:22:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7018 IP address blocks: 5.182.114.0/24 maxlen: 24 77.242.159.0/24 maxlen: 24 88.151.63.0/24 maxlen: 24 88.209.203.0/24 maxlen: 24 88.209.229.0/24 maxlen: 24 88.209.230.0/24 maxlen: 24 88.209.232.0/24 maxlen: 24 88.209.233.0/24 maxlen: 24 88.209.234.0/24 maxlen: 24 88.209.235.0/24 maxlen: 24 88.209.255.0/24 maxlen: 24 92.52.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 03:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:da:13:27:c2:8e:ee:ba:c1:ab:73:5e:9f:00:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10 Validity Not Before: Jan 2 16:22:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc6bf7f6cc53f888312bdc108a0a73c3574bf359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:36:31:08:19:a2:6e:01:68:fa:b2:c5:54:44: 93:1e:9a:b1:22:0e:f5:88:14:7e:46:21:a7:8c:22: 49:13:68:76:7f:2e:60:2c:8f:5a:85:af:80:d0:02: b9:e5:20:84:3e:eb:d6:03:12:3e:c4:eb:3c:fd:d5: ed:9b:9a:d9:a9:ef:f7:36:6d:05:7d:12:d8:3f:5c: d7:c9:77:b9:ef:56:72:67:10:b9:94:79:8f:e8:36: 4e:11:5d:61:f6:a4:43:f1:60:30:82:cc:42:7e:51: 2e:f8:cf:40:5f:aa:77:f1:f5:06:d7:b2:81:01:b2: 9c:c0:73:2f:ec:33:d7:30:85:fa:77:85:eb:18:3c: 05:bd:21:d5:0d:a3:a0:64:d7:60:10:2f:d2:c1:f6: 4e:09:30:97:5e:93:ce:98:42:20:3b:04:b1:33:3d: f4:46:44:cd:ea:d4:ad:76:91:8e:5c:21:2d:e5:3b: 14:76:66:24:4a:bd:02:80:7c:ca:ab:55:39:0d:5d: e8:09:e3:13:43:29:2b:b4:7f:94:94:04:9b:35:55: 95:f1:bf:ca:c0:f0:fa:cb:72:30:8c:bb:6d:a0:81: d7:13:c7:19:93:b9:41:08:42:88:82:3a:2d:6e:55: b4:a9:58:14:88:b2:53:3a:c6:45:7c:40:4d:2d:59: e5:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:6B:F7:F6:CC:53:F8:88:31:2B:DC:10:8A:0A:73:C3:57:4B:F3:59 X509v3 Authority Key Identifier: keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zGv39sxT-IgxK9wQigpzw1dL81k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.114.0/24 77.242.159.0/24 88.151.63.0/24 88.209.203.0/24 88.209.229.0-88.209.230.255 88.209.232.0/22 88.209.255.0/24 92.52.214.0/24 Signature Algorithm: sha256WithRSAEncryption 68:52:89:a8:0c:ea:d4:90:7a:7d:5a:d2:86:0e:02:0a:73:fe: 09:31:2f:05:df:61:a4:7f:a0:df:47:de:8c:d9:2e:7d:96:e9: 77:c0:e2:cd:16:de:f2:03:ae:86:b6:0a:bd:42:04:cf:57:21: 81:db:9d:99:44:ab:9d:d7:6c:71:48:6a:3a:60:16:47:43:2c: ec:1d:f9:9a:62:0a:d6:c4:f9:69:25:7a:22:df:62:ad:80:a4: 05:25:10:73:0e:7b:a8:a0:46:b3:2a:1c:c6:14:7e:ba:39:af: 81:ab:69:0d:f8:10:c0:2b:a9:f0:5e:42:2e:ba:94:ad:53:75: 29:48:67:eb:de:02:e7:41:db:f3:27:24:cb:f9:c6:22:e2:d9: 68:c6:5b:c7:b2:06:5a:13:0d:22:9e:86:fe:65:45:14:c9:c2: ec:b1:00:a8:95:de:f1:be:05:02:f7:d6:5b:85:20:64:4b:a4: 51:a5:a1:c8:08:2a:17:08:f1:b5:9b:de:33:45:79:b8:77:1a: 2b:e1:76:0a:44:b2:1e:e7:a3:fc:7a:94:9a:20:b3:ce:4e:1b: ea:c3:f6:f9:6c:eb:2f:bf:b8:7e:47:74:fb:8f:3c:63:b6:e6: f9:e3:fc:0b:e6:2f:99:d0:bb:6b:d5:c6:7d:58:2d:87:8d:3a: da:48:3d:15 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgISAZt/hNoTJ8KO7rrBq3NenwBAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx MWRhMTAwHhcNMjYwMTAyMTYyMjUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzZiZjdmNmNjNTNmODg4MzEyYmRjMTA4YTBhNzNjMzU3NGJmMzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujYxCBmibgFo+rLFVESTHpqxIg71 iBR+RiGnjCJJE2h2fy5gLI9aha+A0AK55SCEPuvWAxI+xOs8/dXtm5rZqe/3Nm0F fRLYP1zXyXe571ZyZxC5lHmP6DZOEV1h9qRD8WAwgsxCflEu+M9AX6p38fUG17KB AbKcwHMv7DPXMIX6d4XrGDwFvSHVDaOgZNdgEC/SwfZOCTCXXpPOmEIgOwSxMz30 RkTN6tStdpGOXCEt5TsUdmYkSr0CgHzKq1U5DV3oCeMTQykrtH+UlASbNVWV8b/K wPD6y3IwjLttoIHXE8cZk7lBCEKIgjotblW0qVgUiLJTOsZFfEBNLVnlBwIDAQAB o4ICOzCCAjcwHQYDVR0OBBYEFMxr9/bMU/iIMSvcEIoKc8NXS/NZMB8GA1UdIwQY MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt N2U0ZDZmNmY2ZTY2LzEvekd2MzlzeFQtSWd4Szl3UWlncHp3MWRMODFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2 LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQABbZyAwQA TfKfAwQAWJc/AwQAWNHLMAwDBABY0eUDBABY0eYDBAJY0egDBABY0f8DBABcNNYw DQYJKoZIhvcNAQELBQADggEBAGhSiagM6tSQen1a0oYOAgpz/gkxLwXfYaR/oN9H 3ozZLn2W6XfA4s0W3vIDroa2Cr1CBM9XIYHbnZlEq53XbHFIajpgFkdDLOwd+Zpi CtbE+WkleiLfYq2ApAUlEHMOe6igRrMqHMYUfro5r4GraQ34EMArqfBeQi66lK1T dSlIZ+veAudB2/MnJMv5xiLi2WjGW8eyBloTDSKehv5lRRTJwuyxAKiV3vG+BQL3 1luFIGRLpFGlocgIKhcI8bWb3jNFebh3GivhdgpEsh7no/x6lJogs85OG+rD9vls 6y+/uH5HdPuPPGO25vnj/AvmL5nQu2vVxn1YLYeNOtpIPRU= -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:20 2026 by rpki-client