This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/Z_byLoGDwDVZ1uuZ26kOsOZN0HY.roa File: Z_byLoGDwDVZ1uuZ26kOsOZN0HY.roa (raw, json) Hash identifier: bKumZUvmKCZ3xxOhEBADxpM32rg2Z2evEh7LsRdeEbk= Subject key identifier: 67:F6:F2:2E:81:83:C0:35:59:D6:EB:99:DB:A9:0E:B0:E6:4D:D0:76 Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Certificate serial: 019B7D5CC87E3CCDA16072994F8570B8984B Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/Z_byLoGDwDVZ1uuZ26kOsOZN0HY.roa Signing time: Fri 02 Jan 2026 06:19:51 +0000 ROA not before: Fri 02 Jan 2026 06:19:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43581 IP address blocks: 89.23.105.0/24 maxlen: 24 89.23.106.0/24 maxlen: 24 89.23.110.0/24 maxlen: 24 185.159.128.0/24 maxlen: 24 185.159.129.0/24 maxlen: 24 185.159.130.0/24 maxlen: 24 185.159.131.0/24 maxlen: 24 185.228.232.0/24 maxlen: 24 185.228.233.0/24 maxlen: 24 185.228.234.0/24 maxlen: 24 185.228.235.0/24 maxlen: 24 185.230.190.0/24 maxlen: 24 185.230.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:c8:7e:3c:cd:a1:60:72:99:4f:85:70:b8:98:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Validity Not Before: Jan 2 06:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=67f6f22e8183c03559d6eb99dba90eb0e64dd076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bd:82:3f:b5:41:95:fb:ef:8b:0e:f6:da:0e: f1:29:60:6f:fe:6f:e3:0e:a6:0d:e5:92:61:08:e9: a1:4a:dc:11:f7:83:98:d2:63:ff:96:1d:50:8b:86: 10:27:3d:6f:e1:2c:dc:63:e9:5e:99:c7:41:3b:fc: 01:45:d1:ef:a9:a5:71:fc:dd:d9:13:3b:6f:5f:be: 33:dd:6a:e1:ab:ca:2c:89:7c:5d:0e:09:e7:43:f1: d6:53:40:69:d8:25:41:d8:2e:c3:33:28:26:7b:88: 55:92:24:c7:92:c9:be:4e:45:28:61:1d:40:7f:74: 0f:c5:d8:c4:52:70:c6:b5:93:4a:ff:7e:85:1a:09: 8a:9b:84:fa:7f:7f:86:42:5d:17:83:8d:af:d1:8c: 04:2c:e5:7f:51:76:96:4c:8e:24:e4:89:89:a6:bd: 76:ab:5a:00:c8:37:4a:88:36:da:59:22:ec:10:68: 76:89:4c:ed:ac:1b:5e:c4:04:98:76:96:9d:52:71: 83:dc:60:4b:a9:34:87:f8:c3:95:c1:d0:eb:aa:d3: 5a:d1:b7:a4:18:6f:36:ec:b0:a8:b1:34:95:b8:a5: ed:24:30:b1:43:ac:76:10:d0:57:83:1b:dd:6d:82: 38:c9:20:d7:19:4b:5a:4b:30:6d:95:9c:84:b0:05: ce:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:F6:F2:2E:81:83:C0:35:59:D6:EB:99:DB:A9:0E:B0:E6:4D:D0:76 X509v3 Authority Key Identifier: keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/Z_byLoGDwDVZ1uuZ26kOsOZN0HY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.23.105.0-89.23.106.255 89.23.110.0/24 185.159.128.0/22 185.228.232.0/22 185.230.190.0/23 Signature Algorithm: sha256WithRSAEncryption 33:af:b3:ec:38:7c:2f:55:c8:90:1a:28:f3:2e:27:19:cc:46: 4a:32:f0:cd:ac:9f:be:8e:d0:58:ba:47:4a:b6:1d:1f:66:e7: 04:54:79:fd:4a:31:de:d1:3f:18:89:dd:e8:ad:c0:d0:1b:34: e5:f5:fb:55:36:b9:6d:5d:a5:64:03:b2:f1:f1:c6:90:62:89: c3:d0:7d:ab:5b:f7:b3:37:44:5b:d1:8c:72:0a:e3:be:0d:fd: 58:66:80:c8:f6:61:05:28:2d:1e:21:71:3b:2a:4b:dc:fc:96: af:1e:75:45:b6:80:68:bd:de:01:ca:6a:42:17:44:7a:02:4e: f5:40:08:7a:33:b3:bb:de:94:44:f5:13:be:39:4d:76:a0:5c: 65:f1:15:96:24:a1:97:78:c4:55:14:09:a4:26:4d:b3:1e:4b: 3f:16:bc:0a:e4:a5:04:58:84:e9:0d:41:d4:40:4c:e6:1d:36: ba:57:a6:55:56:e9:ac:fa:52:d1:2b:96:4d:d8:df:bb:aa:a4: 37:dd:f3:7f:e7:4b:16:5c:f9:00:23:19:21:77:51:bc:89:ab: a2:26:8a:a8:49:b1:4c:cf:26:b4:5f:60:dc:66:d4:ea:0c:37: 10:ee:5a:ce:a5:41:b8:c0:32:ff:19:da:1f:79:29:15:40:b1: 13:37:24:37 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt9XMh+PM2hYHKZT4VwuJhLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl NWVjZjIwHhcNMjYwMTAyMDYxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2N2Y2ZjIyZTgxODNjMDM1NTlkNmViOTlkYmE5MGViMGU2NGRkMDc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwb2CP7VBlfvviw722g7xKWBv/m/j DqYN5ZJhCOmhStwR94OY0mP/lh1Qi4YQJz1v4SzcY+lemcdBO/wBRdHvqaVx/N3Z EztvX74z3Wrhq8osiXxdDgnnQ/HWU0Bp2CVB2C7DMygme4hVkiTHksm+TkUoYR1A f3QPxdjEUnDGtZNK/36FGgmKm4T6f3+GQl0Xg42v0YwELOV/UXaWTI4k5ImJpr12 q1oAyDdKiDbaWSLsEGh2iUztrBtexASYdpadUnGD3GBLqTSH+MOVwdDrqtNa0bek GG827LCosTSVuKXtJDCxQ6x2ENBXgxvdbYI4ySDXGUtaSzBtlZyEsAXO1wIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFGf28i6Bg8A1WdbrmdupDrDmTdB2MB8GA1UdIwQY MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt MTcxYzM2N2JlNzgyLzEvWl9ieUxvR0R3RFZaMXV1WjI2a09zT1pOMEhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmMAwDBABZF2kD BABZF2oDBABZF24DBAK5n4ADBAK55OgDBAG55r4wDQYJKoZIhvcNAQELBQADggEB ADOvs+w4fC9VyJAaKPMuJxnMRkoy8M2sn76O0Fi6R0q2HR9m5wRUef1KMd7RPxiJ 3eitwNAbNOX1+1U2uW1dpWQDsvHxxpBiicPQfatb97M3RFvRjHIK474N/VhmgMj2 YQUoLR4hcTsqS9z8lq8edUW2gGi93gHKakIXRHoCTvVACHozs7velET1E745TXag XGXxFZYkoZd4xFUUCaQmTbMeSz8WvArkpQRYhOkNQdRATOYdNrpXplVW6az6UtEr lk3Y37uqpDfd83/nSxZc+QAjGSF3UbyJq6ImiqhJsUzPJrRfYNxm1OoMNxDuWs6l QbjAMv8Z2h95KRVAsRM3JDc= -----END CERTIFICATE-----Generated at Mon Jan 19 19:58:13 2026 by rpki-client