This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/Zteu6LpHyKBYuI-NEFQj3cAgyfQ.roa File: Zteu6LpHyKBYuI-NEFQj3cAgyfQ.roa (raw, json) Hash identifier: P11t+kwQnqI3kW3ZxTjDZFiJEM3aRQP5One4Rpc6tsg= Subject key identifier: 66:D7:AE:E8:BA:47:C8:A0:58:B8:8F:8D:10:54:23:DD:C0:20:C9:F4 Certificate issuer: /CN=ad109dee6fbdc256df911460ccc915d066a8ff8b Certificate serial: 019B78A337B00C6AAF5BC5D2553743A57EA1 Authority key identifier: AD:10:9D:EE:6F:BD:C2:56:DF:91:14:60:CC:C9:15:D0:66:A8:FF:8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/Zteu6LpHyKBYuI-NEFQj3cAgyfQ.roa Signing time: Thu 01 Jan 2026 08:18:41 +0000 ROA not before: Thu 01 Jan 2026 08:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33924 IP address blocks: 84.20.64.0/19 maxlen: 19 84.20.64.0/20 maxlen: 20 84.20.64.0/21 maxlen: 21 84.20.64.0/22 maxlen: 22 84.20.64.0/24 maxlen: 24 84.20.65.0/24 maxlen: 24 84.20.66.0/24 maxlen: 24 84.20.67.0/24 maxlen: 24 84.20.68.0/22 maxlen: 22 84.20.68.0/24 maxlen: 24 84.20.69.0/24 maxlen: 24 84.20.70.0/24 maxlen: 24 84.20.71.0/24 maxlen: 24 84.20.72.0/22 maxlen: 22 84.20.72.0/24 maxlen: 24 84.20.73.0/24 maxlen: 24 84.20.74.0/24 maxlen: 24 84.20.75.0/24 maxlen: 24 84.20.76.0/22 maxlen: 22 84.20.76.0/23 maxlen: 23 84.20.76.0/24 maxlen: 24 84.20.77.0/24 maxlen: 24 84.20.78.0/23 maxlen: 23 84.20.78.0/24 maxlen: 24 84.20.79.0/24 maxlen: 24 84.20.80.0/21 maxlen: 21 84.20.80.0/22 maxlen: 22 84.20.80.0/24 maxlen: 24 84.20.81.0/24 maxlen: 24 84.20.82.0/24 maxlen: 24 84.20.83.0/24 maxlen: 24 84.20.84.0/22 maxlen: 22 84.20.84.0/24 maxlen: 24 84.20.85.0/24 maxlen: 24 84.20.86.0/24 maxlen: 24 84.20.87.0/24 maxlen: 24 84.20.88.0/22 maxlen: 22 84.20.88.0/23 maxlen: 23 84.20.88.0/24 maxlen: 24 84.20.89.0/24 maxlen: 24 84.20.90.0/24 maxlen: 24 84.20.91.0/24 maxlen: 24 84.20.92.0/24 maxlen: 24 84.20.95.0/24 maxlen: 24 2a00:6b80::/29 maxlen: 29 2a00:6b80::/32 maxlen: 32 2a00:6b81::/32 maxlen: 32 2a00:6b82::/32 maxlen: 32 2a00:6b83::/32 maxlen: 32 2a00:6b84::/32 maxlen: 32 2a00:6b85::/32 maxlen: 32 2a00:6b86::/32 maxlen: 32 2a00:6b87::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.crl rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 08:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:37:b0:0c:6a:af:5b:c5:d2:55:37:43:a5:7e:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad109dee6fbdc256df911460ccc915d066a8ff8b Validity Not Before: Jan 1 08:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=66d7aee8ba47c8a058b88f8d105423ddc020c9f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:dd:25:fd:7b:b9:ac:ed:08:4f:a4:ba:4b:5b: 9c:df:d8:53:52:fa:fc:09:38:a0:12:7a:8b:3b:73: 5f:2c:90:ab:83:b2:e2:59:0a:38:1e:0a:ef:43:46: 4c:9f:0e:66:42:f9:aa:31:de:7a:be:bc:33:33:87: 00:ba:bd:de:c2:ba:46:6a:0a:e1:79:62:55:3d:f2: b4:2d:ed:0c:2d:35:aa:18:19:3e:5f:e1:9f:2e:c3: 0d:bc:93:2f:90:b7:73:fe:f5:15:08:b2:93:0d:67: e4:58:f6:f6:9c:5a:ed:b7:ab:f9:35:c2:6b:34:10: 63:52:90:b3:30:dd:a2:b3:81:d1:bd:6c:e3:07:5d: 7f:8a:d6:32:bf:21:5f:74:7e:65:1d:98:15:6b:9c: 1b:ca:43:0b:b6:3b:be:2e:96:04:9d:6d:e8:08:33: a3:68:92:06:40:d3:96:14:06:ab:10:57:91:ff:b3: 6a:ca:f1:4b:69:d6:f2:7f:f8:ba:b0:97:f3:11:2d: ec:e6:80:9b:58:eb:a3:43:87:ea:23:43:35:db:0e: 37:11:34:1d:7a:ca:8d:ad:ff:17:95:46:d8:59:92: d4:eb:4d:de:b9:f1:89:e5:65:3f:6e:a1:1a:d3:27: 16:b2:d2:37:8d:be:a7:ea:57:dc:62:b2:73:d4:b4: af:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:D7:AE:E8:BA:47:C8:A0:58:B8:8F:8D:10:54:23:DD:C0:20:C9:F4 X509v3 Authority Key Identifier: keyid:AD:10:9D:EE:6F:BD:C2:56:DF:91:14:60:CC:C9:15:D0:66:A8:FF:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/Zteu6LpHyKBYuI-NEFQj3cAgyfQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.20.64.0/19 IPv6: 2a00:6b80::/29 Signature Algorithm: sha256WithRSAEncryption 53:0c:8a:9a:bb:b1:04:a5:f7:b6:35:38:b6:0b:bd:fc:ba:b1: 26:93:21:54:35:02:33:3c:b0:3d:8d:16:cb:84:69:b5:df:33: 1a:a6:1a:9e:49:99:31:6b:c7:02:ea:58:b0:bf:26:f5:f9:a9: c8:2e:4e:30:cb:73:d6:67:c2:c5:59:d2:5d:6f:00:4a:5b:a0: 99:18:32:e3:08:eb:01:1c:2d:c4:76:40:a7:75:f7:d3:67:41: b1:26:e8:04:ad:9d:3f:0d:e9:40:73:cc:6c:c6:04:25:5a:88: 78:48:a7:3a:80:8d:44:7f:6b:48:ea:a5:43:6b:f7:ab:bc:2d: 52:9c:83:2d:0e:f4:26:99:06:8b:35:21:3a:ec:04:fd:3d:5e: 1b:dc:23:35:c3:4b:79:76:d3:9f:07:36:6b:87:d3:27:ef:6e: ca:5c:d1:37:b0:29:4d:a8:e8:26:35:3b:a9:61:89:69:81:8c: 9f:48:a4:34:7d:04:8e:c6:11:99:00:6d:98:70:ca:c8:f3:8b: 2d:8d:ec:e4:a6:96:79:28:5e:03:67:00:12:cb:0f:2d:78:1b: 09:01:5a:80:6f:69:14:b8:19:b5:94:59:a4:af:08:b9:7d:15: 51:d5:fd:53:71:97:6c:fb:09:dc:71:46:f3:17:af:8a:d8:c7: c9:73:0f:8c -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4ozewDGqvW8XSVTdDpX6hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMTA5ZGVlNmZiZGMyNTZkZjkxMTQ2MGNjYzkxNWQwNjZh OGZmOGIwHhcNMjYwMTAxMDgxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NmQ3YWVlOGJhNDdjOGEwNThiODhmOGQxMDU0MjNkZGMwMjBjOWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3t0l/Xu5rO0IT6S6S1uc39hTUvr8 CTigEnqLO3NfLJCrg7LiWQo4HgrvQ0ZMnw5mQvmqMd56vrwzM4cAur3ewrpGagrh eWJVPfK0Le0MLTWqGBk+X+GfLsMNvJMvkLdz/vUVCLKTDWfkWPb2nFrtt6v5NcJr NBBjUpCzMN2is4HRvWzjB11/itYyvyFfdH5lHZgVa5wbykMLtju+LpYEnW3oCDOj aJIGQNOWFAarEFeR/7NqyvFLadbyf/i6sJfzES3s5oCbWOujQ4fqI0M12w43ETQd esqNrf8XlUbYWZLU603eufGJ5WU/bqEa0ycWstI3jb6n6lfcYrJz1LSvOQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFGbXrui6R8igWLiPjRBUI93AIMn0MB8GA1UdIwQY MBaAFK0Qne5vvcJW35EUYMzJFdBmqP+LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclJDZDdtLTl3bGJma1JSZ3pNa1YwR2FvXzRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi80NjE1YmUtZTU2Ni00MjUzLTgzZWYt ZjY2MjZiNjMzODNlLzEvWnRldTZMcEh5S0JZdUktTkVGUWozY0FneWZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi80NjE1YmUtZTU2Ni00MjUzLTgzZWYtZjY2MjZiNjMzODNl LzEvclJDZDdtLTl3bGJma1JSZ3pNa1YwR2FvXzRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQFVBRAMA0E AgACMAcDBQMqAGuAMA0GCSqGSIb3DQEBCwUAA4IBAQBTDIqau7EEpfe2NTi2C738 urEmkyFUNQIzPLA9jRbLhGm13zMaphqeSZkxa8cC6liwvyb1+anILk4wy3PWZ8LF WdJdbwBKW6CZGDLjCOsBHC3EdkCndffTZ0GxJugErZ0/DelAc8xsxgQlWoh4SKc6 gI1Ef2tI6qVDa/ervC1SnIMtDvQmmQaLNSE67AT9PV4b3CM1w0t5dtOfBzZrh9Mn 727KXNE3sClNqOgmNTupYYlpgYyfSKQ0fQSOxhGZAG2YcMrI84stjezkppZ5KF4D ZwASyw8teBsJAVqAb2kUuBm1lFmkrwi5fRVR1f1TcZds+wnccUbzF6+K2MfJcw+M -----END CERTIFICATE-----Generated at Wed Jan 7 15:53:20 2026 by rpki-client