This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/ZBthpRszRnWPefnQslvGVVRB_Ss.roa File: ZBthpRszRnWPefnQslvGVVRB_Ss.roa (raw, json) Hash identifier: /MipCJsyzaVKfbqwd9l/2ank8ZfA/0lQtm26p9j7ZRw= Subject key identifier: 64:1B:61:A5:1B:33:46:75:8F:79:F9:D0:B2:5B:C6:55:54:41:FD:2B Certificate issuer: /CN=18e0e9a3d20cfac6cbe3ccf74ab5784a77682933 Certificate serial: 019B7BA4E6C360A2726D20298F27E3CAB5F8 Authority key identifier: 18:E0:E9:A3:D2:0C:FA:C6:CB:E3:CC:F7:4A:B5:78:4A:77:68:29:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GODpo9IM-sbL48z3SrV4SndoKTM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/ZBthpRszRnWPefnQslvGVVRB_Ss.roa Signing time: Thu 01 Jan 2026 22:19:23 +0000 ROA not before: Thu 01 Jan 2026 22:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12826 IP address blocks: 91.151.64.0/20 maxlen: 20 91.151.64.0/24 maxlen: 24 91.151.65.0/24 maxlen: 24 91.151.66.0/24 maxlen: 24 91.151.67.0/24 maxlen: 24 91.151.68.0/24 maxlen: 24 91.151.69.0/24 maxlen: 24 91.151.70.0/23 maxlen: 23 91.151.72.0/23 maxlen: 23 91.151.74.0/24 maxlen: 24 91.151.76.0/24 maxlen: 24 91.151.77.0/24 maxlen: 24 185.55.164.0/22 maxlen: 22 2a00:ef60::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.mft rsync://rpki.ripe.net/repository/DEFAULT/GODpo9IM-sbL48z3SrV4SndoKTM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:e6:c3:60:a2:72:6d:20:29:8f:27:e3:ca:b5:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18e0e9a3d20cfac6cbe3ccf74ab5784a77682933 Validity Not Before: Jan 1 22:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=641b61a51b3346758f79f9d0b25bc6555441fd2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:40:b5:4b:1b:e6:ae:2d:be:1e:90:04:92:c0: d5:70:db:ab:ef:b9:6e:16:53:fe:3c:77:5b:5f:e2: 12:07:06:dd:b6:88:dc:22:ff:41:bb:c8:0a:fa:ea: 01:8e:04:07:1f:17:ea:c0:72:c7:61:ac:81:ed:ce: 8f:ef:f2:42:97:1e:0a:ad:d0:e2:26:32:52:58:a7: b7:58:dd:26:66:c8:a5:47:97:f3:cc:af:e4:38:51: 78:90:75:19:e7:fb:48:52:5a:23:96:ef:6a:b9:56: ed:74:05:03:0d:45:69:9e:56:9a:bd:5e:61:1a:cb: bc:68:16:0b:f9:64:38:dd:91:db:57:30:1d:f6:9f: 07:60:45:89:52:74:8f:fb:6a:71:46:22:7e:ad:3b: a9:b3:f1:9a:5b:5d:93:e9:17:9c:4a:f7:da:58:3c: 51:1b:d5:9f:0c:ae:8a:1e:44:3b:c3:a0:d3:68:85: 59:12:5f:18:8b:0d:55:77:36:26:91:ef:da:c0:5e: 07:ee:ba:63:87:2e:77:8e:1c:5a:b5:d9:84:0a:a2: a9:ec:6a:8b:f7:61:b5:cb:3a:ad:9f:5a:ff:6b:f9: aa:af:55:9e:d2:56:03:5c:64:56:61:33:1e:9d:22: 03:36:2c:89:5d:98:ca:61:3d:37:72:4c:f8:16:9a: 18:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:1B:61:A5:1B:33:46:75:8F:79:F9:D0:B2:5B:C6:55:54:41:FD:2B X509v3 Authority Key Identifier: keyid:18:E0:E9:A3:D2:0C:FA:C6:CB:E3:CC:F7:4A:B5:78:4A:77:68:29:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GODpo9IM-sbL48z3SrV4SndoKTM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/ZBthpRszRnWPefnQslvGVVRB_Ss.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.151.64.0/20 185.55.164.0/22 IPv6: 2a00:ef60::/32 Signature Algorithm: sha256WithRSAEncryption 65:e7:c8:20:de:14:a0:41:14:e7:34:84:f2:55:73:6a:85:26: e3:9a:bc:98:25:e4:13:a6:55:d0:c2:24:00:11:4c:7c:12:a2: 88:cc:11:ad:50:02:1f:69:e4:71:0d:d4:6f:ec:c7:8d:85:31: 41:5a:91:34:8d:74:82:44:66:b8:21:25:66:f3:be:ba:4f:8c: 41:a6:e7:bb:56:d5:4b:64:ad:bb:b7:2e:13:b8:c1:1d:de:49: 83:00:ea:18:6b:10:94:6d:78:bb:18:56:84:d6:e9:46:21:5d: 9f:36:0d:57:77:69:65:c4:04:a8:f1:cc:03:85:63:d5:de:38: 38:2e:50:21:c5:be:71:67:7e:01:2e:53:ff:14:55:40:e3:e9: 15:94:12:66:53:0c:75:8e:32:f9:f6:00:3d:bc:1b:b7:79:b0: 44:de:88:c9:ec:ba:e1:05:23:ef:ac:b2:95:a3:81:e7:bb:95: d3:35:00:47:56:45:f9:42:b6:52:d3:d0:5a:90:b4:be:fa:d0: d0:09:6a:6c:9c:51:79:2c:28:0e:07:eb:c9:a8:b5:4e:7c:ca: e7:51:51:7f:c6:b7:42:4c:07:72:de:63:e1:8b:7c:34:a2:2a: 1e:72:e6:c2:8d:64:3a:4a:bd:f3:77:08:8f:53:14:67:4b:e6: e3:fe:ae:c4 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt7pObDYKJybSApjyfjyrX4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4ZTBlOWEzZDIwY2ZhYzZjYmUzY2NmNzRhYjU3ODRhNzc2 ODI5MzMwHhcNMjYwMTAxMjIxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDFiNjFhNTFiMzM0Njc1OGY3OWY5ZDBiMjViYzY1NTU0NDFmZDJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkC1Sxvmri2+HpAEksDVcNur77lu FlP+PHdbX+ISBwbdtojcIv9Bu8gK+uoBjgQHHxfqwHLHYayB7c6P7/JClx4KrdDi JjJSWKe3WN0mZsilR5fzzK/kOFF4kHUZ5/tIUlojlu9quVbtdAUDDUVpnlaavV5h Gsu8aBYL+WQ43ZHbVzAd9p8HYEWJUnSP+2pxRiJ+rTups/GaW12T6RecSvfaWDxR G9WfDK6KHkQ7w6DTaIVZEl8Yiw1VdzYmke/awF4H7rpjhy53jhxatdmECqKp7GqL 92G1yzqtn1r/a/mqr1We0lYDXGRWYTMenSIDNiyJXZjKYT03ckz4FpoYuwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFGQbYaUbM0Z1j3n50LJbxlVUQf0rMB8GA1UdIwQY MBaAFBjg6aPSDPrGy+PM90q1eEp3aCkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR09EcG85SU0tc2JMNDh6M1NyVjRTbmRvS1RNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9hNzYzZWQtYmViMC00M2NiLWJhYTMt OTVhYjgxYjc3NjkxLzEvWkJ0aHBSc3pSbldQZWZuUXNsdkdWVlJCX1NzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9hNzYzZWQtYmViMC00M2NiLWJhYTMtOTVhYjgxYjc3Njkx LzEvR09EcG85SU0tc2JMNDh6M1NyVjRTbmRvS1RNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEW5dAAwQC uTekMA0EAgACMAcDBQAqAO9gMA0GCSqGSIb3DQEBCwUAA4IBAQBl58gg3hSgQRTn NITyVXNqhSbjmryYJeQTplXQwiQAEUx8EqKIzBGtUAIfaeRxDdRv7MeNhTFBWpE0 jXSCRGa4ISVm8766T4xBpue7VtVLZK27ty4TuMEd3kmDAOoYaxCUbXi7GFaE1ulG IV2fNg1Xd2llxASo8cwDhWPV3jg4LlAhxb5xZ34BLlP/FFVA4+kVlBJmUwx1jjL5 9gA9vBu3ebBE3ojJ7LrhBSPvrLKVo4Hnu5XTNQBHVkX5QrZS09BakLS++tDQCWps nFF5LCgOB+vJqLVOfMrnUVF/xrdCTAdy3mPhi3w0oioecubCjWQ6Sr3zdwiPUxRn S+bj/q7E -----END CERTIFICATE-----Generated at Mon Jan 26 02:23:54 2026 by rpki-client