This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/ZBh08H6VA6CHko16OZIamGu1xf8.roa File: ZBh08H6VA6CHko16OZIamGu1xf8.roa (raw, json) Hash identifier: k9NrPgoQfkYKCXaBLD0TbREzH8yEwImKG9PJRAocjEM= Subject key identifier: 64:18:74:F0:7E:95:03:A0:87:92:8D:7A:39:92:1A:98:6B:B5:C5:FF Certificate issuer: /CN=e801f23ce821c264d67727536ec183537594c5f2 Certificate serial: 019B7EA497945F9218DE33A8158E9124AEA5 Authority key identifier: E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/ZBh08H6VA6CHko16OZIamGu1xf8.roa Signing time: Fri 02 Jan 2026 12:17:54 +0000 ROA not before: Fri 02 Jan 2026 12:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25176 IP address blocks: 193.10.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:97:94:5f:92:18:de:33:a8:15:8e:91:24:ae:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e801f23ce821c264d67727536ec183537594c5f2 Validity Not Before: Jan 2 12:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=641874f07e9503a087928d7a39921a986bb5c5ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:81:b1:18:42:03:ca:43:c2:aa:65:34:bd:c9: 2b:22:60:f0:3e:df:e0:82:5f:b0:6c:14:a4:f2:f2: 98:39:ce:e8:78:fe:5d:d8:76:7f:02:6c:b1:58:21: 44:9d:b0:6d:d8:2b:0b:7f:81:45:eb:1e:b9:03:f2: 91:f2:b7:18:7b:76:b9:64:9c:74:2f:09:aa:fa:d6: a8:c1:01:b9:7d:8b:b9:d5:eb:f3:ad:f1:85:d2:e2: 34:bd:a0:f0:9a:47:72:a9:7f:cc:9d:9e:71:a5:81: a6:3e:42:87:5a:c9:ea:ae:7b:7f:ab:65:28:23:33: 11:5b:42:e5:bf:5b:ff:4a:6b:98:9f:d0:db:ac:e0: a0:d3:9e:62:c4:17:76:9d:3c:64:8a:20:48:3a:03: 91:f9:ec:10:d0:77:a3:71:d2:c2:93:60:46:a5:1a: e7:48:53:1e:5b:8c:0f:02:58:3c:d4:8c:37:6a:c3: 13:e6:7b:8b:8b:f3:e7:b7:95:1a:fc:81:b7:f0:d8: 56:b9:bf:8e:75:ce:c3:9c:1c:20:c8:44:3d:ce:e0: 02:eb:03:9a:48:06:69:3c:b8:45:9b:58:60:3f:bc: 6a:8c:e7:91:f8:dd:57:a0:94:c9:e8:ee:f7:62:85: 8a:8e:5e:b8:c2:0a:32:fb:73:3d:a3:4c:f3:9d:da: e2:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:18:74:F0:7E:95:03:A0:87:92:8D:7A:39:92:1A:98:6B:B5:C5:FF X509v3 Authority Key Identifier: keyid:E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/ZBh08H6VA6CHko16OZIamGu1xf8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.10.32.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:64:98:b6:86:40:3d:02:39:df:0c:d4:b9:d1:15:4d:54:e7: 6a:37:60:ba:89:1f:ea:df:fc:d9:49:10:f8:01:9f:88:2d:4a: f1:5e:c4:c0:9a:d7:10:a0:f8:3f:a1:a2:34:38:bd:c3:df:b1: dc:a3:1f:69:4a:4d:12:d0:20:80:37:c8:c1:b4:c0:94:83:43: 12:a7:49:e6:81:87:06:fd:38:9b:4e:0c:2f:91:55:de:91:e8: 93:28:e9:9b:c5:d1:c7:64:11:3b:5d:1b:ea:ee:8c:75:a8:06: 3a:ed:dc:0f:3f:36:1d:b7:61:8f:c0:a7:b6:2c:59:19:91:a3: 84:90:74:b9:ef:a2:46:a1:04:f7:d1:6e:71:51:8d:42:71:f9: fe:6b:0b:06:54:c7:2c:5e:a9:4d:b6:ab:43:f1:52:69:56:4d: 86:4a:d4:43:08:44:02:3a:f2:b6:55:27:1c:a8:f1:ca:80:49: b4:e8:34:bf:8b:b0:c3:c6:cf:6d:c1:4f:cd:f4:61:ec:09:e8: a5:c2:32:6e:89:27:5e:33:79:ea:5a:94:c7:d2:f3:fc:c8:74: 68:45:8d:ac:91:ff:13:12:03:27:0c:89:02:8e:84:6e:43:35: 95:67:ed:64:41:bc:61:e0:9a:8d:89:4b:4f:95:a8:d3:1e:b7: 45:0c:ad:6d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pJeUX5IY3jOoFY6RJK6lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4MDFmMjNjZTgyMWMyNjRkNjc3Mjc1MzZlYzE4MzUzNzU5 NGM1ZjIwHhcNMjYwMTAyMTIxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDE4NzRmMDdlOTUwM2EwODc5MjhkN2EzOTkyMWE5ODZiYjVjNWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04GxGEIDykPCqmU0vckrImDwPt/g gl+wbBSk8vKYOc7oeP5d2HZ/AmyxWCFEnbBt2CsLf4FF6x65A/KR8rcYe3a5ZJx0 Lwmq+taowQG5fYu51evzrfGF0uI0vaDwmkdyqX/MnZ5xpYGmPkKHWsnqrnt/q2Uo IzMRW0Llv1v/SmuYn9DbrOCg055ixBd2nTxkiiBIOgOR+ewQ0HejcdLCk2BGpRrn SFMeW4wPAlg81Iw3asMT5nuLi/Pnt5Ua/IG38NhWub+Odc7DnBwgyEQ9zuAC6wOa SAZpPLhFm1hgP7xqjOeR+N1XoJTJ6O73YoWKjl64wgoy+3M9o0zzndriMQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGQYdPB+lQOgh5KNejmSGphrtcX/MB8GA1UdIwQY MBaAFOgB8jzoIcJk1ncnU27Bg1N1lMXyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lYWI0ZDgtNmFmZC00ZjgxLWFiMTAt NDY0ZWIxODNiNTY4LzEvWkJoMDhINlZBNkNIa28xNk9aSWFtR3UxeGY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9lYWI0ZDgtNmFmZC00ZjgxLWFiMTAtNDY0ZWIxODNiNTY4 LzEvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQogMA0G CSqGSIb3DQEBCwUAA4IBAQBLZJi2hkA9AjnfDNS50RVNVOdqN2C6iR/q3/zZSRD4 AZ+ILUrxXsTAmtcQoPg/oaI0OL3D37Hcox9pSk0S0CCAN8jBtMCUg0MSp0nmgYcG /TibTgwvkVXekeiTKOmbxdHHZBE7XRvq7ox1qAY67dwPPzYdt2GPwKe2LFkZkaOE kHS576JGoQT30W5xUY1Ccfn+awsGVMcsXqlNtqtD8VJpVk2GStRDCEQCOvK2VScc qPHKgEm06DS/i7DDxs9twU/N9GHsCeilwjJuiSdeM3nqWpTH0vP8yHRoRY2skf8T EgMnDIkCjoRuQzWVZ+1kQbxh4JqNiUtPlajTHrdFDK1t -----END CERTIFICATE-----Generated at Sun Jan 25 15:02:13 2026 by rpki-client