This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/zb3M5sCfdcroGbb7sb_8fFyKbFk.roa File: zb3M5sCfdcroGbb7sb_8fFyKbFk.roa (raw, json) Hash identifier: DT+a2ocZ5cYF7PMlIn/Yq8jpDiPXnKsM/EWJpn65oWM= Subject key identifier: CD:BD:CC:E6:C0:9F:75:CA:E8:19:B6:FB:B1:BF:FC:7C:5C:8A:6C:59 Certificate issuer: /CN=ec05986897d024e48c7cd25e1891c4208ff3bbb2 Certificate serial: 019B7E38324A644BEC8E8CD20FA4ABB71D1B Authority key identifier: EC:05:98:68:97:D0:24:E4:8C:7C:D2:5E:18:91:C4:20:8F:F3:BB:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7AWYaJfQJOSMfNJeGJHEII_zu7I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/zb3M5sCfdcroGbb7sb_8fFyKbFk.roa Signing time: Fri 02 Jan 2026 10:19:30 +0000 ROA not before: Fri 02 Jan 2026 10:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35740 IP address blocks: 195.170.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.crl rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.mft rsync://rpki.ripe.net/repository/DEFAULT/7AWYaJfQJOSMfNJeGJHEII_zu7I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:32:4a:64:4b:ec:8e:8c:d2:0f:a4:ab:b7:1d:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec05986897d024e48c7cd25e1891c4208ff3bbb2 Validity Not Before: Jan 2 10:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cdbdcce6c09f75cae819b6fbb1bffc7c5c8a6c59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e8:2d:68:92:37:4a:98:ee:9f:f2:6a:4f:c9: 42:90:58:bf:e0:bd:57:d2:d8:b5:76:a3:b0:93:61: 28:32:9d:98:39:35:ec:24:44:a7:19:6d:0b:89:01: 2f:52:8d:81:9a:13:aa:3b:08:8d:17:d2:1c:28:0d: 2b:67:d0:65:a7:ac:46:6c:75:84:78:ac:74:e2:fc: 29:e6:70:ec:fa:1d:38:c4:8c:d3:72:66:d8:14:ef: e8:c1:f7:5f:f9:df:c8:ba:08:55:e7:5c:b4:39:aa: fa:d0:3a:e8:4b:2e:69:03:e3:42:a8:4e:ad:79:b6: 17:1c:18:cc:b1:9d:81:b4:91:51:80:7d:ac:2b:83: 05:d4:8b:cf:21:56:bd:24:d9:be:af:05:69:0b:e8: c0:bf:7c:b4:79:22:a9:63:e2:7a:b1:00:9e:80:79: 59:35:72:20:dd:c8:a5:28:d0:33:4f:c2:96:b4:3c: cb:48:b8:26:75:a2:ff:1c:ce:53:55:81:37:4d:d2: 6d:3c:b0:cb:23:c9:c4:c5:5c:81:46:f8:1f:0d:b5: 06:40:2e:af:ee:53:75:2b:12:4c:84:3b:31:e2:8f: d4:e7:80:88:65:ec:d3:98:3f:b7:6a:06:3a:16:73: bc:03:09:aa:b2:7d:df:32:58:b0:06:db:84:f1:af: ba:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:BD:CC:E6:C0:9F:75:CA:E8:19:B6:FB:B1:BF:FC:7C:5C:8A:6C:59 X509v3 Authority Key Identifier: keyid:EC:05:98:68:97:D0:24:E4:8C:7C:D2:5E:18:91:C4:20:8F:F3:BB:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7AWYaJfQJOSMfNJeGJHEII_zu7I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/zb3M5sCfdcroGbb7sb_8fFyKbFk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.170.170.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:82:31:66:ca:23:79:6c:86:4c:7a:89:f4:c8:f9:6c:ff:86: 9a:ee:1a:38:25:db:b5:63:a0:6b:eb:d0:67:29:d6:1b:5e:b6: d2:87:45:bc:92:8e:de:24:81:bd:21:78:9b:a3:41:21:8c:b8: 89:e7:5e:90:3f:df:4e:b8:9d:bf:14:32:5f:48:bb:a1:23:6d: cb:15:8d:a0:d7:3a:9d:2a:8d:09:bb:60:15:50:05:a9:2a:c2: a3:0c:fa:9c:6a:57:68:57:ae:76:8f:62:61:4a:b7:26:a7:bc: 11:27:c0:37:c1:c7:83:12:50:f8:35:4b:18:42:22:14:2d:f1: a6:40:db:74:27:01:99:a6:0d:b0:27:e2:c6:49:be:09:e8:47: 15:e1:85:46:22:41:0b:d2:5c:87:34:c7:77:fc:6c:5a:c1:bd: 88:35:f1:43:16:85:67:b5:8d:08:9a:3d:31:fe:8a:c5:15:31: 57:8f:e2:91:9a:c3:a7:e6:10:42:a0:98:76:02:b3:74:63:d4: bb:94:af:4b:e6:be:83:db:0b:0a:ae:95:fc:0c:cd:8a:27:11: 94:18:33:a0:8d:ea:9c:ca:e1:9f:f9:32:c7:58:e4:dd:c2:df: 21:2d:62:85:82:36:db:07:6d:eb:c3:9e:ef:28:05:cd:19:92: ff:d5:36:00 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ODJKZEvsjozSD6Srtx0bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjMDU5ODY4OTdkMDI0ZTQ4YzdjZDI1ZTE4OTFjNDIwOGZm M2JiYjIwHhcNMjYwMTAyMTAxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZGJkY2NlNmMwOWY3NWNhZTgxOWI2ZmJiMWJmZmM3YzVjOGE2YzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOgtaJI3Spjun/JqT8lCkFi/4L1X 0ti1dqOwk2EoMp2YOTXsJESnGW0LiQEvUo2BmhOqOwiNF9IcKA0rZ9Blp6xGbHWE eKx04vwp5nDs+h04xIzTcmbYFO/owfdf+d/IughV51y0Oar60DroSy5pA+NCqE6t ebYXHBjMsZ2BtJFRgH2sK4MF1IvPIVa9JNm+rwVpC+jAv3y0eSKpY+J6sQCegHlZ NXIg3cilKNAzT8KWtDzLSLgmdaL/HM5TVYE3TdJtPLDLI8nExVyBRvgfDbUGQC6v 7lN1KxJMhDsx4o/U54CIZezTmD+3agY6FnO8Awmqsn3fMliwBtuE8a+6gwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM29zObAn3XK6Bm2+7G//HxcimxZMB8GA1UdIwQY MBaAFOwFmGiX0CTkjHzSXhiRxCCP87uyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0FXWWFKZlFKT1NNZk5KZUdKSEVJSV96dTdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9hZDZhZjAtMDA1Zi00M2EzLWFhOWQt NzY2ZDFmMzI0MzNjLzEvemIzTTVzQ2ZkY3JvR2JiN3NiXzhmRnlLYkZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9hZDZhZjAtMDA1Zi00M2EzLWFhOWQtNzY2ZDFmMzI0MzNj LzEvN0FXWWFKZlFKT1NNZk5KZUdKSEVJSV96dTdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw6qqMA0G CSqGSIb3DQEBCwUAA4IBAQBPgjFmyiN5bIZMeon0yPls/4aa7ho4Jdu1Y6Br69Bn KdYbXrbSh0W8ko7eJIG9IXibo0EhjLiJ516QP99OuJ2/FDJfSLuhI23LFY2g1zqd Ko0Ju2AVUAWpKsKjDPqcaldoV652j2JhSrcmp7wRJ8A3wceDElD4NUsYQiIULfGm QNt0JwGZpg2wJ+LGSb4J6EcV4YVGIkEL0lyHNMd3/Gxawb2INfFDFoVntY0Imj0x /orFFTFXj+KRmsOn5hBCoJh2ArN0Y9S7lK9L5r6D2wsKrpX8DM2KJxGUGDOgjeqc yuGf+TLHWOTdwt8hLWKFgjbbB23rw57vKAXNGZL/1TYA -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:00 2026 by rpki-client