This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/UB5EhbqxifQJIwDLc-DmZe6sLrs.roa File: UB5EhbqxifQJIwDLc-DmZe6sLrs.roa (raw, json) Hash identifier: ngMT3EPkLXr3+fwKyb1JknqgGSR68x36nL0A0WS9bUY= Subject key identifier: 50:1E:44:85:BA:B1:89:F4:09:23:00:CB:73:E0:E6:65:EE:AC:2E:BB Certificate issuer: /CN=64cfba184ff9442a8fe7517b503a9e017fa9f2cb Certificate serial: 019B78346A5B5EE8D7DB36CEDF4D80D79040 Authority key identifier: 64:CF:BA:18:4F:F9:44:2A:8F:E7:51:7B:50:3A:9E:01:7F:A9:F2:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZM-6GE_5RCqP51F7UDqeAX-p8ss.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/UB5EhbqxifQJIwDLc-DmZe6sLrs.roa Signing time: Thu 01 Jan 2026 06:17:39 +0000 ROA not before: Thu 01 Jan 2026 06:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213282 IP address blocks: 185.224.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/ZM-6GE_5RCqP51F7UDqeAX-p8ss.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/ZM-6GE_5RCqP51F7UDqeAX-p8ss.mft rsync://rpki.ripe.net/repository/DEFAULT/ZM-6GE_5RCqP51F7UDqeAX-p8ss.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:6a:5b:5e:e8:d7:db:36:ce:df:4d:80:d7:90:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64cfba184ff9442a8fe7517b503a9e017fa9f2cb Validity Not Before: Jan 1 06:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=501e4485bab189f4092300cb73e0e665eeac2ebb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:50:06:29:73:f9:a0:45:60:97:6f:f4:b2:2b: 5d:51:92:d4:6a:84:a1:83:10:7a:11:3b:c5:bc:8f: cd:2e:0f:31:f5:1c:38:34:28:5d:00:1c:5c:17:76: 92:0e:d6:84:5c:d5:5b:e1:33:f9:c1:ee:06:84:46: 54:11:b9:6c:c7:ad:77:c1:91:af:d0:d8:e4:13:56: df:dc:9b:31:a1:9a:51:86:b6:29:bb:91:a6:ef:bf: 57:66:1c:e3:44:ce:60:01:fe:99:d9:11:01:cf:9c: 03:e7:01:68:75:99:17:1e:58:16:59:a3:31:88:07: aa:41:e7:ab:08:1e:e5:8d:c1:ff:7c:f8:54:63:72: 87:0e:04:a6:98:a6:ec:b1:38:b2:45:7b:f8:fd:6b: e9:6c:28:ca:35:53:b5:9f:54:15:84:df:91:83:56: 23:78:dd:9e:37:e8:52:1e:9c:10:71:38:e9:f8:03: 58:90:0e:80:77:5d:e8:69:26:e3:b2:f4:4f:39:6e: 96:36:fb:e4:14:91:69:71:57:4e:e1:8c:4e:73:b9: dd:c1:64:a6:23:af:87:c1:c6:e1:ad:1f:a4:2f:05: b5:d0:2a:92:d3:5c:29:f9:58:9f:b3:10:10:83:21: af:5e:30:89:c2:f9:a9:34:1d:00:e2:5d:1c:62:1d: 4e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:1E:44:85:BA:B1:89:F4:09:23:00:CB:73:E0:E6:65:EE:AC:2E:BB X509v3 Authority Key Identifier: keyid:64:CF:BA:18:4F:F9:44:2A:8F:E7:51:7B:50:3A:9E:01:7F:A9:F2:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZM-6GE_5RCqP51F7UDqeAX-p8ss.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/UB5EhbqxifQJIwDLc-DmZe6sLrs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/ZM-6GE_5RCqP51F7UDqeAX-p8ss.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.224.1.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:2c:9b:38:83:78:52:18:f8:34:35:1e:20:9a:24:f7:a6:f2: 66:8d:70:47:a1:76:4d:24:28:2d:d6:cc:77:07:02:5b:78:ff: 4b:35:40:60:3f:54:b7:c4:2f:f8:41:53:d5:77:49:97:64:ae: ff:e6:c2:52:66:19:11:29:74:1b:c4:7a:04:7f:0f:74:1b:f5: 3e:ac:96:da:0a:b5:52:c7:9c:c0:ba:ae:91:e4:4f:5f:f3:7d: 86:75:09:3e:53:fa:82:f0:eb:70:aa:9b:44:46:6b:c1:a6:0d: 85:02:6a:13:f8:b8:27:f2:de:d9:bf:2b:d3:87:78:1c:cf:ab: 8d:42:61:71:bc:54:53:59:bf:56:8e:d6:c2:a6:e1:33:ea:0c: 8e:c3:27:ee:40:28:00:0c:4f:89:eb:d8:27:fd:c8:cb:e7:1b: 90:a9:43:04:bd:93:68:e8:f1:85:db:1c:32:7e:12:62:62:93: 31:13:5c:31:58:2c:a0:75:83:ee:9c:25:2c:c6:40:fa:86:62: a8:2a:b6:eb:22:72:b8:86:75:93:b9:61:fb:85:59:1e:df:0d: 7a:eb:b7:eb:a6:01:0e:4d:a7:10:02:08:23:87:f8:76:8b:f7: da:74:b2:2b:e7:2e:56:67:b4:10:33:09:e6:ec:58:f9:dc:81: ec:d6:91:2c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NGpbXujX2zbO302A15BAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0Y2ZiYTE4NGZmOTQ0MmE4ZmU3NTE3YjUwM2E5ZTAxN2Zh OWYyY2IwHhcNMjYwMTAxMDYxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDFlNDQ4NWJhYjE4OWY0MDkyMzAwY2I3M2UwZTY2NWVlYWMyZWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFAGKXP5oEVgl2/0sitdUZLUaoSh gxB6ETvFvI/NLg8x9Rw4NChdABxcF3aSDtaEXNVb4TP5we4GhEZUEblsx613wZGv 0NjkE1bf3JsxoZpRhrYpu5Gm779XZhzjRM5gAf6Z2REBz5wD5wFodZkXHlgWWaMx iAeqQeerCB7ljcH/fPhUY3KHDgSmmKbssTiyRXv4/WvpbCjKNVO1n1QVhN+Rg1Yj eN2eN+hSHpwQcTjp+ANYkA6Ad13oaSbjsvRPOW6WNvvkFJFpcVdO4YxOc7ndwWSm I6+HwcbhrR+kLwW10CqS01wp+VifsxAQgyGvXjCJwvmpNB0A4l0cYh1OywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFAeRIW6sYn0CSMAy3Pg5mXurC67MB8GA1UdIwQY MBaAFGTPuhhP+UQqj+dRe1A6ngF/qfLLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWk0tNkdFXzVSQ3FQNTFGN1VEcWVBWC1wOHNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8yNTNmMmMtNGVkOS00ZjFmLWE5NmYt ZGVmZjcxMTI0MjMzLzEvVUI1RWhicXhpZlFKSXdETGMtRG1aZTZzTHJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8yNTNmMmMtNGVkOS00ZjFmLWE5NmYtZGVmZjcxMTI0MjMz LzEvWk0tNkdFXzVSQ3FQNTFGN1VEcWVBWC1wOHNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueABMA0G CSqGSIb3DQEBCwUAA4IBAQAtLJs4g3hSGPg0NR4gmiT3pvJmjXBHoXZNJCgt1sx3 BwJbeP9LNUBgP1S3xC/4QVPVd0mXZK7/5sJSZhkRKXQbxHoEfw90G/U+rJbaCrVS x5zAuq6R5E9f832GdQk+U/qC8OtwqptERmvBpg2FAmoT+Lgn8t7ZvyvTh3gcz6uN QmFxvFRTWb9WjtbCpuEz6gyOwyfuQCgADE+J69gn/cjL5xuQqUMEvZNo6PGF2xwy fhJiYpMxE1wxWCygdYPunCUsxkD6hmKoKrbrInK4hnWTuWH7hVke3w1667frpgEO TacQAggjh/h2i/fadLIr5y5WZ7QQMwnm7Fj53IHs1pEs -----END CERTIFICATE-----Generated at Sun Jan 25 11:40:33 2026 by rpki-client