This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/zib85lalNfDUXLnbOxY6qMczZjs.roa File: zib85lalNfDUXLnbOxY6qMczZjs.roa (raw, json) Hash identifier: jphImNCP2svx9og7fDdI/KwoYuS28d452U+DOyXWGsw= Subject key identifier: CE:26:FC:E6:56:A5:35:F0:D4:5C:B9:DB:3B:16:3A:A8:C7:33:66:3B Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Certificate serial: 019B7B35F461C9203F546BAF68AB067EFF22 Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/zib85lalNfDUXLnbOxY6qMczZjs.roa Signing time: Thu 01 Jan 2026 20:18:12 +0000 ROA not before: Thu 01 Jan 2026 20:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 4637 IP address blocks: 95.170.21.0/24 maxlen: 24 95.170.24.0/24 maxlen: 24 95.170.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:f4:61:c9:20:3f:54:6b:af:68:ab:06:7e:ff:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Validity Not Before: Jan 1 20:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ce26fce656a535f0d45cb9db3b163aa8c733663b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:23:44:cc:de:59:d2:74:a4:e8:61:be:3b:ce: 25:a8:23:d9:35:a2:90:2f:4b:c1:56:2d:92:f7:45: 94:ee:b3:7f:5f:1a:e5:61:91:59:82:39:b8:dc:ec: bc:cd:7b:bc:ab:ce:c8:2e:7b:5d:db:46:f3:ee:f6: 91:a0:ac:45:b9:66:53:a7:46:de:c5:60:d3:52:29: d6:d3:eb:ce:a5:c0:21:68:37:51:8d:c3:e6:10:02: 52:a3:37:22:03:b0:72:3a:70:2d:7c:11:4d:e3:e5: 19:94:96:cf:c1:27:d1:3f:93:74:23:3d:d3:74:51: e5:8e:12:d5:d3:69:ca:30:ea:1b:c0:44:86:68:18: d8:2e:50:94:13:75:68:07:04:5f:fb:e7:ba:f7:74: 10:a9:f8:ad:90:87:6a:68:31:1b:e2:af:7d:f6:2d: 78:1f:4a:60:eb:2b:e3:63:c6:12:99:4b:ec:f0:b5: 4c:33:b4:74:da:f9:77:ce:de:6c:87:fe:99:2f:c4: 29:c2:24:f5:6d:54:fd:6f:4a:f6:ef:ad:99:49:9a: 5d:a8:4c:0c:39:de:b5:22:2e:8e:a0:ea:bc:d9:6e: 16:c6:1a:ba:1a:ae:19:a4:08:c5:2c:23:63:72:0d: 48:64:93:78:d8:c1:74:dc:57:2b:8e:d8:39:17:ee: ea:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:26:FC:E6:56:A5:35:F0:D4:5C:B9:DB:3B:16:3A:A8:C7:33:66:3B X509v3 Authority Key Identifier: keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/zib85lalNfDUXLnbOxY6qMczZjs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.170.21.0/24 95.170.24.0/24 95.170.31.0/24 Signature Algorithm: sha256WithRSAEncryption 88:2e:a3:9d:11:ee:f6:e5:47:34:56:c9:ef:a4:c5:65:a7:c7: ee:94:a7:b2:e6:06:7d:5a:6e:56:a5:f0:4b:01:57:82:51:08: 56:23:a8:45:3e:d3:fd:8e:e2:73:89:d0:8d:43:97:d4:b5:c2: cc:d8:ca:fa:9f:c7:bc:95:1f:4e:bd:48:3a:96:cc:c9:e8:2b: f4:db:7b:3f:47:af:3a:b5:f1:df:0c:b7:6c:77:1b:7b:f2:52: af:f4:d7:af:25:b9:9c:7b:80:d3:d9:6e:a7:f8:50:bf:f5:9a: 5f:9f:28:3e:d9:ec:65:c6:dc:4c:9b:16:65:d5:c3:5f:f0:aa: 04:64:9d:84:8c:f4:46:11:8d:7e:89:09:b1:56:e6:1d:1c:7d: 4b:6c:0e:03:f7:a3:4c:7b:a8:04:68:a5:ef:b6:b0:44:d0:da: 8e:f7:58:89:20:44:d0:50:30:72:64:b2:24:01:58:bb:f7:56: 38:a0:ce:04:83:9b:f3:a4:78:37:0b:8c:4b:33:61:fc:80:ca: 70:43:b3:81:ec:a9:45:f7:dd:96:c7:11:e0:36:ea:e8:78:92: 0d:e2:0f:e4:02:b6:37:bc:9b:8f:10:29:07:a1:02:43:2b:19: cc:6c:fa:bb:23:86:ce:a6:fc:45:91:c1:34:df:3b:52:6a:91: 71:f1:0b:98 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7NfRhySA/VGuvaKsGfv8iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZTQyNWEzMmI2MmQzOTgxOGM0Y2JiMDA4MTA3NTY4NmZj NGM4ZTgwHhcNMjYwMTAxMjAxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTI2ZmNlNjU2YTUzNWYwZDQ1Y2I5ZGIzYjE2M2FhOGM3MzM2NjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSNEzN5Z0nSk6GG+O84lqCPZNaKQ L0vBVi2S90WU7rN/XxrlYZFZgjm43Oy8zXu8q87ILntd20bz7vaRoKxFuWZTp0be xWDTUinW0+vOpcAhaDdRjcPmEAJSozciA7ByOnAtfBFN4+UZlJbPwSfRP5N0Iz3T dFHljhLV02nKMOobwESGaBjYLlCUE3VoBwRf++e693QQqfitkIdqaDEb4q999i14 H0pg6yvjY8YSmUvs8LVMM7R02vl3zt5sh/6ZL8QpwiT1bVT9b0r2762ZSZpdqEwM Od61Ii6OoOq82W4Wxhq6Gq4ZpAjFLCNjcg1IZJN42MF03Fcrjtg5F+7qIQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFM4m/OZWpTXw1Fy52zsWOqjHM2Y7MB8GA1UdIwQY MBaAFCDkJaMrYtOYGMTLsAgQdWhvxMjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGIt ZWNkMjk2NWNiN2U3LzEvemliODVsYWxOZkRVWExuYk94WTZxTWN6WmpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGItZWNkMjk2NWNiN2U3 LzEvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAX6oVAwQA X6oYAwQAX6ofMA0GCSqGSIb3DQEBCwUAA4IBAQCILqOdEe725Uc0VsnvpMVlp8fu lKey5gZ9Wm5WpfBLAVeCUQhWI6hFPtP9juJzidCNQ5fUtcLM2Mr6n8e8lR9OvUg6 lszJ6Cv023s/R686tfHfDLdsdxt78lKv9NevJbmce4DT2W6n+FC/9Zpfnyg+2exl xtxMmxZl1cNf8KoEZJ2EjPRGEY1+iQmxVuYdHH1LbA4D96NMe6gEaKXvtrBE0NqO 91iJIETQUDByZLIkAVi791Y4oM4Eg5vzpHg3C4xLM2H8gMpwQ7OB7KlF992WxxHg NuroeJIN4g/kArY3vJuPECkHoQJDKxnMbPq7I4bOpvxFkcE03ztSapFx8QuY -----END CERTIFICATE-----Generated at Sun Jan 25 07:16:37 2026 by rpki-client