This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/ZbxImoNqXRLDNvdnH4iMDANgidI.roa File: ZbxImoNqXRLDNvdnH4iMDANgidI.roa (raw, json) Hash identifier: w0C4brd6pZ8lauWP2MWtB50PXapccIM+KpGIY1kaKnY= Subject key identifier: 65:BC:48:9A:83:6A:5D:12:C3:36:F7:67:1F:88:8C:0C:03:60:89:D2 Certificate issuer: /CN=1404e18e8616705ec0f290e57ca829a82f5f96c2 Certificate serial: 019B7F15B74497B68A3DF9823549CA7E4ED9 Authority key identifier: 14:04:E1:8E:86:16:70:5E:C0:F2:90:E5:7C:A8:29:A8:2F:5F:96:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FAThjoYWcF7A8pDlfKgpqC9flsI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/ZbxImoNqXRLDNvdnH4iMDANgidI.roa Signing time: Fri 02 Jan 2026 14:21:28 +0000 ROA not before: Fri 02 Jan 2026 14:21:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31673 IP address blocks: 185.88.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.mft rsync://rpki.ripe.net/repository/DEFAULT/FAThjoYWcF7A8pDlfKgpqC9flsI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:b7:44:97:b6:8a:3d:f9:82:35:49:ca:7e:4e:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1404e18e8616705ec0f290e57ca829a82f5f96c2 Validity Not Before: Jan 2 14:21:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=65bc489a836a5d12c336f7671f888c0c036089d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:7d:b9:ba:97:b4:45:c9:c8:6e:d2:46:3a:77: d5:aa:7a:3a:8d:1a:e1:15:e5:09:7b:f2:52:33:b1: 02:d0:7f:83:78:e2:89:36:d2:db:be:10:ca:e4:d2: 72:a4:da:4a:84:6c:1e:d2:a2:28:fd:03:e5:30:d6: 05:db:d1:f4:a1:dd:37:51:78:08:ba:c9:48:42:ad: 4c:b2:2e:b2:43:3d:6a:12:01:50:99:b5:d2:66:8d: 87:0a:f4:8f:35:45:4c:7e:1e:8a:02:b0:c7:01:8d: 66:0c:5d:ba:72:f8:c3:ea:73:33:06:3a:55:d6:b5: 26:60:29:09:67:f9:5c:b7:3a:ad:35:16:da:63:b5: 16:5c:48:22:fe:1b:29:1a:32:98:92:c6:a7:cc:8f: ab:67:61:84:22:13:ef:2b:f0:cc:46:f9:55:bc:e8: 05:0b:74:e2:c3:64:70:48:9e:1e:21:fe:8a:7d:59: 2b:f3:36:80:0b:46:42:78:a4:c6:9b:7b:e1:9e:ec: 25:36:00:64:8a:71:df:21:40:d4:b1:7e:de:1a:38: a0:7a:4c:52:b1:fd:03:c1:99:5a:cf:cb:e6:ce:c6: fb:75:4b:e4:16:63:34:ef:5f:b0:5f:4f:85:7b:0e: 32:d5:2b:44:37:f6:50:19:ae:68:8f:fe:93:8b:46: 91:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:BC:48:9A:83:6A:5D:12:C3:36:F7:67:1F:88:8C:0C:03:60:89:D2 X509v3 Authority Key Identifier: keyid:14:04:E1:8E:86:16:70:5E:C0:F2:90:E5:7C:A8:29:A8:2F:5F:96:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FAThjoYWcF7A8pDlfKgpqC9flsI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/ZbxImoNqXRLDNvdnH4iMDANgidI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.88.188.0/22 Signature Algorithm: sha256WithRSAEncryption 4f:56:6b:4c:9b:d9:65:08:6d:92:c5:09:83:56:a7:29:35:3e: af:4d:0d:3a:7f:2a:ec:d1:aa:28:af:f1:35:84:b2:82:c1:18: 70:6a:96:ab:ef:b3:4c:90:3f:a7:14:c9:ba:53:3b:ab:8d:71: c5:9f:29:9f:62:d2:cb:57:7e:aa:59:d7:98:bb:dd:98:12:26: 30:1c:96:6b:23:6c:44:bf:c6:4b:7e:a6:c8:b6:29:29:7c:fa: 1f:d2:5f:fa:93:c9:21:b8:5e:d3:ab:8d:a3:f2:a6:b0:28:3e: fe:01:ee:25:71:b0:45:56:c8:59:7b:ec:fa:3e:c2:b3:8b:ae: af:40:1f:cf:73:8a:9e:1d:46:a3:61:8c:37:e9:67:01:b9:47: 01:9d:81:93:7e:2d:d4:f3:af:b0:18:2a:89:92:3b:cb:e0:15: 64:2e:70:dc:38:83:47:b9:35:8a:84:4c:d1:6a:99:de:16:1f: d6:99:70:87:ce:07:0a:09:cb:34:ab:91:08:e4:ef:2b:59:ed: c7:17:73:43:b6:3b:fc:ab:08:e1:00:b6:b8:86:b1:72:0a:52: 6d:90:a2:a0:e8:20:fd:89:dc:a9:d9:0e:7f:cf:fe:a8:f1:6e: b2:a8:70:ca:f2:bb:85:dd:19:3e:28:05:9d:15:2b:12:86:26: 35:e0:92:51 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FbdEl7aKPfmCNUnKfk7ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0MDRlMThlODYxNjcwNWVjMGYyOTBlNTdjYTgyOWE4MmY1 Zjk2YzIwHhcNMjYwMTAyMTQyMTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NWJjNDg5YTgzNmE1ZDEyYzMzNmY3NjcxZjg4OGMwYzAzNjA4OWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5X25upe0RcnIbtJGOnfVqno6jRrh FeUJe/JSM7EC0H+DeOKJNtLbvhDK5NJypNpKhGwe0qIo/QPlMNYF29H0od03UXgI uslIQq1Msi6yQz1qEgFQmbXSZo2HCvSPNUVMfh6KArDHAY1mDF26cvjD6nMzBjpV 1rUmYCkJZ/lctzqtNRbaY7UWXEgi/hspGjKYksanzI+rZ2GEIhPvK/DMRvlVvOgF C3Tiw2RwSJ4eIf6KfVkr8zaAC0ZCeKTGm3vhnuwlNgBkinHfIUDUsX7eGjigekxS sf0DwZlaz8vmzsb7dUvkFmM071+wX0+Few4y1StEN/ZQGa5oj/6Ti0aRqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGW8SJqDal0Swzb3Zx+IjAwDYInSMB8GA1UdIwQY MBaAFBQE4Y6GFnBewPKQ5XyoKagvX5bCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkFUaGpvWVdjRjdBOHBEbGZLZ3BxQzlmbHNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9jYmJlZGMtYjdiYy00MjU1LWJjNDEt ZTM2ZThkMjkzYWUwLzEvWmJ4SW1vTnFYUkxETnZkbkg0aU1EQU5naWRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9jYmJlZGMtYjdiYy00MjU1LWJjNDEtZTM2ZThkMjkzYWUw LzEvRkFUaGpvWVdjRjdBOHBEbGZLZ3BxQzlmbHNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVi8MA0G CSqGSIb3DQEBCwUAA4IBAQBPVmtMm9llCG2SxQmDVqcpNT6vTQ06fyrs0aoor/E1 hLKCwRhwapar77NMkD+nFMm6UzurjXHFnymfYtLLV36qWdeYu92YEiYwHJZrI2xE v8ZLfqbItikpfPof0l/6k8khuF7Tq42j8qawKD7+Ae4lcbBFVshZe+z6PsKzi66v QB/Pc4qeHUajYYw36WcBuUcBnYGTfi3U86+wGCqJkjvL4BVkLnDcOINHuTWKhEzR apneFh/WmXCHzgcKCcs0q5EI5O8rWe3HF3NDtjv8qwjhALa4hrFyClJtkKKg6CD9 idyp2Q5/z/6o8W6yqHDK8ruF3Rk+KAWdFSsShiY14JJR -----END CERTIFICATE-----Generated at Mon Jan 26 04:38:50 2026 by rpki-client