This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/zO6oWxgMXvv1E7No-VDUZLT2hYA.roa File: zO6oWxgMXvv1E7No-VDUZLT2hYA.roa (raw, json) Hash identifier: a+qLzMk3gjifCi7ls2zl3kNVE9LPAd8t8Cx6dxnL76U= Subject key identifier: CC:EE:A8:5B:18:0C:5E:FB:F5:13:B3:68:F9:50:D4:64:B4:F6:85:80 Certificate issuer: /CN=e4b1306101cc9ec9fce985280c1db0f37c135a3a Certificate serial: 019B7D5B371ED30175636AA2C36D08B7F119 Authority key identifier: E4:B1:30:61:01:CC:9E:C9:FC:E9:85:28:0C:1D:B0:F3:7C:13:5A:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/zO6oWxgMXvv1E7No-VDUZLT2hYA.roa Signing time: Fri 02 Jan 2026 06:18:08 +0000 ROA not before: Fri 02 Jan 2026 06:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47165 IP address blocks: 46.233.192.0/18 maxlen: 18 94.137.0.0/20 maxlen: 20 94.137.16.0/20 maxlen: 20 94.137.32.0/20 maxlen: 20 94.137.48.0/20 maxlen: 20 109.120.0.0/20 maxlen: 20 109.120.16.0/20 maxlen: 20 109.120.32.0/20 maxlen: 20 109.120.48.0/20 maxlen: 20 176.62.64.0/18 maxlen: 18 178.74.64.0/18 maxlen: 18 185.13.176.0/22 maxlen: 22 217.25.208.0/20 maxlen: 20 2a02:ddc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.crl rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:37:1e:d3:01:75:63:6a:a2:c3:6d:08:b7:f1:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4b1306101cc9ec9fce985280c1db0f37c135a3a Validity Not Before: Jan 2 06:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cceea85b180c5efbf513b368f950d464b4f68580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ce:eb:cf:7c:4d:b6:ac:3f:68:a4:34:74:2d: e2:d3:94:4e:5d:16:11:a0:71:3a:4f:ec:d5:ac:23: 27:d3:d7:25:15:3c:5e:cb:ef:7c:11:c5:b4:69:c0: af:cd:45:26:2e:71:2e:46:8f:b8:42:6f:fb:39:f2: 60:ed:90:18:78:70:75:ab:0c:d3:8c:98:6a:c9:ba: 88:29:0d:80:92:39:35:ec:82:c8:84:71:c7:16:47: 11:f7:71:6a:fd:dc:23:e3:aa:56:a3:71:9f:77:d0: ae:71:d8:a1:72:4f:2c:7e:d9:28:f2:23:80:83:b0: f1:86:c0:f8:5a:39:85:65:2d:34:e6:d7:2a:2d:39: d5:d6:21:2e:89:1a:2d:2f:a3:9d:f9:67:d8:2a:d9: 7d:6f:da:96:49:0c:36:0f:f3:6d:95:9e:c1:a2:99: bf:6a:36:11:d1:ec:40:a2:7a:07:f7:25:96:6d:64: 69:11:d9:56:04:87:b7:c4:39:13:92:7c:29:f1:8b: 41:6b:33:c1:c3:87:b6:99:18:73:8e:e8:fe:ab:1d: 33:58:11:95:58:b7:25:76:09:16:c9:60:6f:d9:23: c7:7f:c0:aa:0e:a8:b3:8e:6f:9e:03:6b:97:5c:01: 3d:39:16:91:17:ef:8f:88:4c:6f:a0:f5:af:af:2a: 0f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:EE:A8:5B:18:0C:5E:FB:F5:13:B3:68:F9:50:D4:64:B4:F6:85:80 X509v3 Authority Key Identifier: keyid:E4:B1:30:61:01:CC:9E:C9:FC:E9:85:28:0C:1D:B0:F3:7C:13:5A:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/zO6oWxgMXvv1E7No-VDUZLT2hYA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.233.192.0/18 94.137.0.0/18 109.120.0.0/18 176.62.64.0/18 178.74.64.0/18 185.13.176.0/22 217.25.208.0/20 IPv6: 2a02:ddc0::/29 Signature Algorithm: sha256WithRSAEncryption 4c:9e:ff:74:fa:92:ef:23:de:a3:c9:55:07:86:0e:fe:55:fc: 2c:7c:17:9e:2c:77:32:e0:e3:e5:8c:3c:86:b3:e8:bf:db:ba: 50:04:91:0f:66:7c:18:72:39:c8:02:52:e8:ec:30:c5:52:a6: a6:b2:d8:32:bd:c1:70:da:d5:9b:4b:8a:64:d9:a1:0a:e2:4a: 5a:a7:17:71:29:41:76:4a:ae:9b:9f:e1:06:6f:57:ff:b9:75: 7a:ec:e5:80:cc:51:8e:8b:78:4c:0d:07:1d:4e:0f:78:48:e5: 2b:e4:c3:54:ac:fb:53:89:73:46:b2:c8:68:c2:ee:fc:8f:b0: 84:cb:6e:09:e5:df:38:97:58:60:f3:fc:b9:3a:95:32:12:17: 16:16:d7:da:0a:1d:29:83:00:2c:db:ac:56:d5:05:96:c1:b8: 9b:61:d5:15:e2:0c:4b:57:79:67:a2:cc:ec:66:18:49:01:bf: 9c:f9:ab:a2:22:ff:cd:c9:ee:e4:9c:b0:fe:90:ad:f7:ad:af: 0d:a9:93:06:30:d7:e4:3a:ff:ef:81:9c:9b:c4:a6:5c:bf:d3: a1:4a:66:67:bd:87:96:57:47:60:43:0d:c4:3f:94:ca:cd:3c: 95:94:0b:4e:d8:e2:e7:55:f7:06:a7:f3:e0:5d:b2:ad:7e:e2: e2:fc:8d:20 -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgISAZt9Wzce0wF1Y2qiw20It/EZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YjEzMDYxMDFjYzllYzlmY2U5ODUyODBjMWRiMGYzN2Mx MzVhM2EwHhcNMjYwMTAyMDYxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjY2VlYTg1YjE4MGM1ZWZiZjUxM2IzNjhmOTUwZDQ2NGI0ZjY4NTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArs7rz3xNtqw/aKQ0dC3i05ROXRYR oHE6T+zVrCMn09clFTxey+98EcW0acCvzUUmLnEuRo+4Qm/7OfJg7ZAYeHB1qwzT jJhqybqIKQ2Akjk17ILIhHHHFkcR93Fq/dwj46pWo3Gfd9Cucdihck8sftko8iOA g7DxhsD4WjmFZS005tcqLTnV1iEuiRotL6Od+WfYKtl9b9qWSQw2D/NtlZ7Bopm/ ajYR0exAonoH9yWWbWRpEdlWBIe3xDkTknwp8YtBazPBw4e2mRhzjuj+qx0zWBGV WLcldgkWyWBv2SPHf8CqDqizjm+eA2uXXAE9ORaRF++PiExvoPWvryoPMQIDAQAB o4ICPDCCAjgwHQYDVR0OBBYEFMzuqFsYDF779ROzaPlQ1GS09oWAMB8GA1UdIwQY MBaAFOSxMGEBzJ7J/OmFKAwdsPN8E1o6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUxFd1lRSE1uc244NllVb0RCMnc4M3dUV2pvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS80ZDA4OWUtNWQxYy00ZTM0LTk0NjUt ZmE2MzQ4ZjY5NWI1LzEvek82b1d4Z01YdnYxRTdOby1WRFVaTFQyaFlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS80ZDA4OWUtNWQxYy00ZTM0LTk0NjUtZmE2MzQ4ZjY5NWI1 LzEvNUxFd1lRSE1uc244NllVb0RCMnc4M3dUV2pvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQGLunAAwQG XokAAwQGbXgAAwQGsD5AAwQGskpAAwQCuQ2wAwQE2RnQMA0EAgACMAcDBQMqAt3A MA0GCSqGSIb3DQEBCwUAA4IBAQBMnv90+pLvI96jyVUHhg7+VfwsfBeeLHcy4OPl jDyGs+i/27pQBJEPZnwYcjnIAlLo7DDFUqamstgyvcFw2tWbS4pk2aEK4kpapxdx KUF2Sq6bn+EGb1f/uXV67OWAzFGOi3hMDQcdTg94SOUr5MNUrPtTiXNGsshowu78 j7CEy24J5d84l1hg8/y5OpUyEhcWFtfaCh0pgwAs26xW1QWWwbibYdUV4gxLV3ln oszsZhhJAb+c+auiIv/Nye7knLD+kK33ra8NqZMGMNfkOv/vgZybxKZcv9OhSmZn vYeWV0dgQw3EP5TKzTyVlAtO2OLnVfcGp/PgXbKtfuLi/I0g -----END CERTIFICATE-----Generated at Fri Jan 2 09:50:07 2026 by rpki-client