This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/zbuFuKdn8FFVoWiKIOgewd-9diY.roa File: zbuFuKdn8FFVoWiKIOgewd-9diY.roa (raw, json) Hash identifier: 36jMzQUc3TxS+/RDyNv/sTqqO15sLlzoMkMaWAxXiIs= Subject key identifier: CD:BB:85:B8:A7:67:F0:51:55:A1:68:8A:20:E8:1E:C1:DF:BD:76:26 Certificate issuer: /CN=e909ee3d618974da0cbd805a2da80410a4989881 Certificate serial: 019B7B36A05AE4B023B90F37ACA3B2C18052 Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/zbuFuKdn8FFVoWiKIOgewd-9diY.roa Signing time: Thu 01 Jan 2026 20:18:56 +0000 ROA not before: Thu 01 Jan 2026 20:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199636 IP address blocks: 45.80.8.0/22 maxlen: 24 45.80.20.0/22 maxlen: 24 45.80.24.0/22 maxlen: 24 45.80.32.0/22 maxlen: 24 82.96.128.0/18 maxlen: 24 88.202.236.0/22 maxlen: 24 88.212.152.0/22 maxlen: 24 89.200.240.0/23 maxlen: 24 91.203.92.0/22 maxlen: 24 95.178.88.0/22 maxlen: 24 130.180.208.0/20 maxlen: 24 141.255.128.0/21 maxlen: 24 185.44.88.0/22 maxlen: 24 185.91.220.0/22 maxlen: 24 185.146.220.0/22 maxlen: 24 212.114.16.0/20 maxlen: 24 2a05:6e00::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:a0:5a:e4:b0:23:b9:0f:37:ac:a3:b2:c1:80:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881 Validity Not Before: Jan 1 20:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cdbb85b8a767f05155a1688a20e81ec1dfbd7626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:80:9c:f1:33:66:07:97:f5:5b:b8:62:34:6a: 46:00:b5:9e:f0:65:c8:e7:35:90:b4:73:79:2d:ab: fc:08:e7:d4:d5:48:07:a9:2d:8b:af:5d:f1:cf:e6: b0:d5:86:e7:7f:5f:9a:a5:9a:38:d0:a7:33:25:ce: 4a:d6:2f:3d:d3:6e:8d:ce:75:f5:c0:47:b2:a8:fe: 73:80:3b:bd:a3:a7:81:2a:bf:20:a1:19:1e:ce:d1: 71:f8:b3:c9:a7:35:8a:3a:32:30:4f:a6:76:2c:92: 50:68:a3:e0:d0:2a:f5:ef:57:87:e6:2b:dd:42:05: 59:60:9a:83:d7:d1:c3:f9:03:52:8a:52:83:05:f8: 8b:64:c1:a2:15:69:92:5f:db:bc:3e:f9:49:05:f9: 28:ef:ee:b4:db:6f:e1:e4:e9:4f:88:f6:a7:56:31: f5:05:60:14:b1:fd:1f:7b:9b:a6:31:b9:2f:b4:30: e3:07:58:9f:8e:56:f8:55:52:1c:2a:80:20:42:7f: ca:26:44:3a:cb:f4:09:8a:4d:2e:1c:fe:45:86:06: e1:07:f2:6a:d1:94:67:71:22:ed:b1:be:7f:68:77: 4a:d5:2e:3f:36:e2:b8:e4:33:3e:33:fc:31:d7:3b: bb:32:13:f0:6b:6c:41:e5:3f:92:68:41:87:47:7f: 91:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:BB:85:B8:A7:67:F0:51:55:A1:68:8A:20:E8:1E:C1:DF:BD:76:26 X509v3 Authority Key Identifier: keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/zbuFuKdn8FFVoWiKIOgewd-9diY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.80.8.0/22 45.80.20.0-45.80.27.255 45.80.32.0/22 82.96.128.0/18 88.202.236.0/22 88.212.152.0/22 89.200.240.0/23 91.203.92.0/22 95.178.88.0/22 130.180.208.0/20 141.255.128.0/21 185.44.88.0/22 185.91.220.0/22 185.146.220.0/22 212.114.16.0/20 IPv6: 2a05:6e00::/29 Signature Algorithm: sha256WithRSAEncryption ad:a1:e9:92:8c:7f:ba:7a:0c:6e:06:0a:fe:b0:b3:bd:5d:00: cc:20:fb:9e:ae:61:3d:98:08:7b:39:1b:cc:0b:ec:2a:15:21: 65:1c:46:2b:51:3d:c6:c3:76:43:ec:39:e7:ae:38:01:df:0c: 93:4b:ba:3a:ad:2f:55:01:01:82:5e:29:25:70:29:22:85:1c: 7c:5c:b4:61:68:77:bf:52:2b:74:41:ba:0a:bb:29:6c:50:54: ad:b9:2d:de:9d:d1:21:a3:80:61:05:f0:9b:36:8a:80:97:f3: e2:e6:77:be:09:85:9f:86:34:53:04:9a:40:62:2b:fe:54:a8: d5:dd:1f:95:4d:51:28:0b:14:14:99:40:0a:44:3d:99:d7:6e: 4c:f4:92:b6:a9:a4:87:ae:bd:40:60:42:2b:08:b9:98:43:2f: dd:9d:45:44:49:e2:f4:34:3f:6f:1a:2f:f1:03:3a:d9:b1:4e: 29:9a:f7:65:97:43:dc:f2:36:a8:f8:d3:63:eb:ab:b9:ab:a1: 19:71:d5:05:2e:b2:40:09:e4:5b:0e:4f:cf:19:8d:53:50:65: 88:da:6d:b8:9d:ef:9a:53:b5:32:a7:5f:4e:57:9a:09:29:bd: fb:21:d5:64:52:24:12:43:0f:76:88:6b:51:50:1c:1d:0c:76: 50:4e:f4:9d -----BEGIN CERTIFICATE----- MIIFaTCCBFGgAwIBAgISAZt7NqBa5LAjuQ83rKOywYBSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MDllZTNkNjE4OTc0ZGEwY2JkODA1YTJkYTgwNDEwYTQ5 ODk4ODEwHhcNMjYwMTAxMjAxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZGJiODViOGE3NjdmMDUxNTVhMTY4OGEyMGU4MWVjMWRmYmQ3NjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYCc8TNmB5f1W7hiNGpGALWe8GXI 5zWQtHN5Lav8COfU1UgHqS2Lr13xz+aw1Ybnf1+apZo40KczJc5K1i89026NznX1 wEeyqP5zgDu9o6eBKr8goRkeztFx+LPJpzWKOjIwT6Z2LJJQaKPg0Cr171eH5ivd QgVZYJqD19HD+QNSilKDBfiLZMGiFWmSX9u8PvlJBfko7+6022/h5OlPiPanVjH1 BWAUsf0fe5umMbkvtDDjB1ifjlb4VVIcKoAgQn/KJkQ6y/QJik0uHP5FhgbhB/Jq 0ZRncSLtsb5/aHdK1S4/NuK45DM+M/wx1zu7MhPwa2xB5T+SaEGHR3+RjwIDAQAB o4ICdTCCAnEwHQYDVR0OBBYEFM27hbinZ/BRVaFoiiDoHsHfvXYmMB8GA1UdIwQY MBaAFOkJ7j1hiXTaDL2AWi2oBBCkmJiBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yYjVmNWYtYmI5Ni00YjMxLThhNmEt ZGQxMTVmOWUzMzAxLzEvemJ1RnVLZG44RkZWb1dpS0lPZ2V3ZC05ZGlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8yYjVmNWYtYmI5Ni00YjMxLThhNmEtZGQxMTVmOWUzMzAx LzEvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGKBggrBgEFBQcBBwEB/wR7MHkwaAQCAAEwYgMEAi1QCDAM AwQCLVAUAwQCLVAYAwQCLVAgAwQGUmCAAwQCWMrsAwQCWNSYAwQBWcjwAwQCW8tc AwQCX7JYAwQEgrTQAwQDjf+AAwQCuSxYAwQCuVvcAwQCuZLcAwQE1HIQMA0EAgAC MAcDBQMqBW4AMA0GCSqGSIb3DQEBCwUAA4IBAQCtoemSjH+6egxuBgr+sLO9XQDM IPuermE9mAh7ORvMC+wqFSFlHEYrUT3Gw3ZD7DnnrjgB3wyTS7o6rS9VAQGCXikl cCkihRx8XLRhaHe/Uit0QboKuylsUFStuS3endEho4BhBfCbNoqAl/Pi5ne+CYWf hjRTBJpAYiv+VKjV3R+VTVEoCxQUmUAKRD2Z125M9JK2qaSHrr1AYEIrCLmYQy/d nUVESeL0ND9vGi/xAzrZsU4pmvdll0Pc8jao+NNj66u5q6EZcdUFLrJACeRbDk/P GY1TUGWI2m24ne+aU7Uyp19OV5oJKb37IdVkUiQSQw92iGtRUBwdDHZQTvSd -----END CERTIFICATE-----Generated at Sun Jan 25 19:35:57 2026 by rpki-client