This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/ZbOlnPA6eBi7lfnx-bMIDhnPlTs.roa File: ZbOlnPA6eBi7lfnx-bMIDhnPlTs.roa (raw, json) Hash identifier: 5nftwGk/Uz83q8GaAtwNqws3YmEvcE0dicM0TAYf3go= Subject key identifier: 65:B3:A5:9C:F0:3A:78:18:BB:95:F9:F1:F9:B3:08:0E:19:CF:95:3B Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Certificate serial: 019B7E38E257F88D62BDB6896040C6A96845 Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/ZbOlnPA6eBi7lfnx-bMIDhnPlTs.roa Signing time: Fri 02 Jan 2026 10:20:15 +0000 ROA not before: Fri 02 Jan 2026 10:20:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397240 IP address blocks: 37.209.192.0/24 maxlen: 24 37.209.194.0/24 maxlen: 24 37.209.196.0/24 maxlen: 24 37.209.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:e2:57:f8:8d:62:bd:b6:89:60:40:c6:a9:68:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Validity Not Before: Jan 2 10:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=65b3a59cf03a7818bb95f9f1f9b3080e19cf953b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:82:e1:d6:99:cc:37:c2:8a:d9:89:9f:e9:66: 2b:36:38:62:05:3a:9f:dc:d2:d9:b7:79:1d:c7:9b: 03:bf:fe:c9:8d:dd:c9:05:93:cb:b3:3f:63:8f:b2: 06:e3:b3:ad:2e:0a:ff:16:a8:26:0f:a7:5e:c8:36: d8:a5:48:19:0c:cc:f5:ef:1a:5b:e7:f5:dc:af:0c: b1:38:b2:66:0b:7c:14:0f:1f:8d:b6:f8:9a:64:c0: a2:91:e9:6a:b2:a5:47:9d:9b:f2:7f:8b:ca:fa:81: 85:b9:b7:24:20:44:5c:ac:d8:f9:c5:e8:04:ff:66: d1:bf:ec:a4:a7:e8:dd:43:38:d4:6d:85:49:77:88: c3:d1:36:7f:60:e5:e1:66:26:24:b9:11:1f:ef:5d: 55:c4:86:13:20:8b:47:58:26:66:ca:34:f0:3b:1e: 87:52:1a:a5:ce:21:30:a8:f2:27:7d:95:06:5e:d4: 58:e4:11:79:ac:77:24:5f:4a:7f:1f:67:60:f8:9e: 6d:6d:3f:56:da:0a:e0:66:b6:82:65:2c:e7:81:0a: af:06:c5:5d:e9:e6:e3:e4:60:f8:8a:57:f8:d2:f8: b2:62:85:14:0d:b1:6b:95:1d:6a:72:e5:74:08:4c: 9a:53:8b:fe:ae:b9:99:f1:f7:07:8d:51:61:f2:98: 88:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:B3:A5:9C:F0:3A:78:18:BB:95:F9:F1:F9:B3:08:0E:19:CF:95:3B X509v3 Authority Key Identifier: keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/ZbOlnPA6eBi7lfnx-bMIDhnPlTs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.209.192.0/24 37.209.194.0/24 37.209.196.0/24 37.209.198.0/24 Signature Algorithm: sha256WithRSAEncryption 34:61:af:34:20:c8:5f:52:bd:a5:c3:80:4a:53:e9:a0:0c:97: e7:7e:3f:55:92:e3:4c:6a:c8:9b:6c:f1:7e:91:b7:0e:40:09: 8b:98:8a:80:54:23:07:f7:e2:02:6c:1a:4c:88:4a:08:c2:9e: 32:7f:cf:bd:0a:8c:84:98:43:7e:02:a6:c8:fe:d1:bd:97:c3: 4e:21:92:6f:41:03:44:9d:ea:ff:19:58:31:13:a6:75:7a:5b: 22:b3:46:b7:fc:54:8f:ff:9a:85:aa:01:db:0d:2c:c1:c5:f0: d6:81:df:6c:87:52:c7:ef:12:4a:51:29:bb:52:1e:3a:d8:c2: 13:a9:e2:d1:57:e8:13:17:95:49:16:d8:3b:d1:36:54:c5:c8: fc:44:b4:53:f1:8e:c4:cb:7e:c7:da:90:85:d6:cf:d9:31:b0: 59:d6:6c:a4:40:29:df:4c:26:67:4c:8b:75:05:99:9c:28:b1: ab:0e:80:14:13:34:43:29:73:91:09:4f:ba:70:cc:52:59:f3: 23:fc:42:aa:b1:f7:00:b3:3b:ab:3e:e6:a7:89:1d:c3:5d:92: 97:1a:2c:07:01:e8:44:f7:53:46:c7:6e:b6:ea:f4:92:56:44: 4b:e9:a1:93:38:60:6f:eb:04:1b:c1:e5:c5:c2:3b:4c:f2:ae: 35:51:b9:b3 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt+OOJX+I1ivbaJYEDGqWhFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YWU4YTNkOGJkYWFiZjQ3NjVmZGE3OWQ1NWVjYThjNjlj OGJmMmMwHhcNMjYwMTAyMTAyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NWIzYTU5Y2YwM2E3ODE4YmI5NWY5ZjFmOWIzMDgwZTE5Y2Y5NTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YLh1pnMN8KK2Ymf6WYrNjhiBTqf 3NLZt3kdx5sDv/7Jjd3JBZPLsz9jj7IG47OtLgr/FqgmD6deyDbYpUgZDMz17xpb 5/XcrwyxOLJmC3wUDx+NtviaZMCikelqsqVHnZvyf4vK+oGFubckIERcrNj5xegE /2bRv+ykp+jdQzjUbYVJd4jD0TZ/YOXhZiYkuREf711VxIYTIItHWCZmyjTwOx6H UhqlziEwqPInfZUGXtRY5BF5rHckX0p/H2dg+J5tbT9W2grgZraCZSzngQqvBsVd 6ebj5GD4ilf40viyYoUUDbFrlR1qcuV0CEyaU4v+rrmZ8fcHjVFh8piI9wIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFGWzpZzwOngYu5X58fmzCA4Zz5U7MB8GA1UdIwQY MBaAFKWuij2L2qv0dl/aedVeyoxpyL8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEt NDE2Zjg1ZWUyMzdiLzEvWmJPbG5QQTZlQmk3bGZueC1iTUlEaG5QbFRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEtNDE2Zjg1ZWUyMzdi LzEvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAJdHAAwQA JdHCAwQAJdHEAwQAJdHGMA0GCSqGSIb3DQEBCwUAA4IBAQA0Ya80IMhfUr2lw4BK U+mgDJfnfj9VkuNMasibbPF+kbcOQAmLmIqAVCMH9+ICbBpMiEoIwp4yf8+9CoyE mEN+AqbI/tG9l8NOIZJvQQNEner/GVgxE6Z1elsis0a3/FSP/5qFqgHbDSzBxfDW gd9sh1LH7xJKUSm7Uh462MITqeLRV+gTF5VJFtg70TZUxcj8RLRT8Y7Ey37H2pCF 1s/ZMbBZ1mykQCnfTCZnTIt1BZmcKLGrDoAUEzRDKXORCU+6cMxSWfMj/EKqsfcA szurPuaniR3DXZKXGiwHAehE91NGx2626vSSVkRL6aGTOGBv6wQbweXFwjtM8q41 Ubmz -----END CERTIFICATE-----Generated at Sun Jan 25 12:01:47 2026 by rpki-client