This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/ZoB60_hxu0YQmtu4xWgFTTuqkR8.roa File: ZoB60_hxu0YQmtu4xWgFTTuqkR8.roa (raw, json) Hash identifier: IeQcDS3Xn7m/Y0n+F+WII24C0xgnfPEXngpI2FLpPag= Subject key identifier: 66:80:7A:D3:F8:71:BB:46:10:9A:DB:B8:C5:68:05:4D:3B:AA:91:1F Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733 Certificate serial: 019BDA10F02DC124661C83841CB0519F1170 Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/ZoB60_hxu0YQmtu4xWgFTTuqkR8.roa Signing time: Tue 20 Jan 2026 06:21:41 +0000 ROA not before: Tue 20 Jan 2026 06:21:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 80.246.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:da:10:f0:2d:c1:24:66:1c:83:84:1c:b0:51:9f:11:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733 Validity Not Before: Jan 20 06:21:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=66807ad3f871bb46109adbb8c568054d3baa911f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:08:05:63:e7:6c:de:17:51:27:38:79:55:f8: de:15:d7:5e:95:4d:16:51:79:7a:cc:5b:4f:33:ce: b9:53:df:2e:ce:ba:05:88:46:69:22:36:aa:0c:09: cd:bc:ae:b4:e8:e9:ed:26:7a:d6:ae:a2:0e:61:e7: 6a:08:30:94:45:b9:47:bd:49:5f:8a:5f:f4:ee:ff: 3b:56:ce:92:a7:a8:a4:b1:af:07:15:87:fc:61:59: 81:75:e7:2b:e2:21:5d:f7:0e:be:0b:5b:9c:05:66: f5:d9:84:2a:22:56:48:3b:a8:dc:a7:41:48:55:56: 59:34:62:5e:e9:f5:d5:53:75:e2:1d:f1:8b:43:0c: be:08:3a:9a:16:c5:4c:da:60:16:48:04:d0:d5:90: bf:f3:0e:b5:e0:cc:36:82:63:de:5a:3f:a9:52:92: 47:64:45:d0:3e:e2:ce:d1:a3:1e:79:45:9f:58:59: 3d:e5:e5:63:a8:02:c9:8e:9c:80:3e:9a:95:02:9b: a7:ba:a7:6f:af:72:61:a2:a4:d4:4f:09:5e:7a:96: 63:bb:8f:a2:e1:4f:fd:73:dc:a1:9c:a6:58:e6:cf: ee:63:e7:3a:42:6a:08:7f:fe:b4:a1:d4:0a:cb:93: 18:d2:68:cf:bb:0b:c5:b5:b2:d0:d0:50:dd:2c:ec: 44:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:80:7A:D3:F8:71:BB:46:10:9A:DB:B8:C5:68:05:4D:3B:AA:91:1F X509v3 Authority Key Identifier: keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/ZoB60_hxu0YQmtu4xWgFTTuqkR8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.246.230.0/24 Signature Algorithm: sha256WithRSAEncryption 81:f8:6e:a3:b9:71:a0:2c:77:65:5d:de:21:45:a1:f8:b0:f3: 3f:9c:a7:8a:aa:15:a7:5b:9a:d4:fc:40:c4:d4:45:37:8a:d8: 42:aa:52:0c:50:50:0e:09:aa:87:6a:26:11:b1:fa:90:c5:b3: 57:11:d3:d4:b8:8f:ac:78:a6:c8:02:a4:28:c8:21:74:9f:89: b7:54:eb:8b:43:69:49:03:9b:6d:b6:3a:e2:ec:55:f9:72:f5: 63:56:18:9e:b9:4c:90:78:61:a8:a8:b2:c1:ca:76:17:d6:df: 1c:18:2e:29:c3:a8:45:e1:ae:de:21:b9:99:e9:cb:fc:4b:78: 46:f0:24:6a:94:f7:39:af:77:4f:dc:00:7d:6f:49:85:47:4b: d2:b2:65:d2:be:5b:ef:bb:31:2f:53:99:ba:16:96:f2:b9:23: 27:52:a4:ac:f8:ad:e1:f3:8d:2f:51:69:7e:54:f8:16:50:dc: 4c:1b:ae:86:f4:8a:71:27:45:da:38:34:9b:7c:eb:e4:88:b8: 8b:2b:11:94:e7:9b:87:17:24:00:64:d3:65:b4:9d:87:96:8e: fc:c2:be:4f:19:ef:26:24:e6:5e:ae:61:5d:51:ed:c3:ea:a7: a1:b6:cc:a4:8f:d7:6c:36:3e:75:97:f6:c9:35:a0:9a:05:86: d9:26:ca:5b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvaEPAtwSRmHIOEHLBRnxFwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1NjM3NjkyZmY1YzQ1NDg2ZDEwNTNiMTQ5ZGMxNDIwMDI2 Y2Q3MzMwHhcNMjYwMTIwMDYyMTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjgwN2FkM2Y4NzFiYjQ2MTA5YWRiYjhjNTY4MDU0ZDNiYWE5MTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9AgFY+ds3hdRJzh5VfjeFddelU0W UXl6zFtPM865U98uzroFiEZpIjaqDAnNvK606OntJnrWrqIOYedqCDCURblHvUlf il/07v87Vs6Sp6iksa8HFYf8YVmBdecr4iFd9w6+C1ucBWb12YQqIlZIO6jcp0FI VVZZNGJe6fXVU3XiHfGLQwy+CDqaFsVM2mAWSATQ1ZC/8w614Mw2gmPeWj+pUpJH ZEXQPuLO0aMeeUWfWFk95eVjqALJjpyAPpqVApunuqdvr3JhoqTUTwleepZju4+i 4U/9c9yhnKZY5s/uY+c6QmoIf/60odQKy5MY0mjPuwvFtbLQ0FDdLOxEUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGaAetP4cbtGEJrbuMVoBU07qpEfMB8GA1UdIwQY MBaAFNVjdpL/XEVIbRBTsUncFCACbNczMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDkt YWRlYWRlMjg2NWMxLzEvWm9CNjBfaHh1MFlRbXR1NHhXZ0ZUVHVxa1I4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDktYWRlYWRlMjg2NWMx LzEvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUPbmMA0G CSqGSIb3DQEBCwUAA4IBAQCB+G6juXGgLHdlXd4hRaH4sPM/nKeKqhWnW5rU/EDE 1EU3ithCqlIMUFAOCaqHaiYRsfqQxbNXEdPUuI+seKbIAqQoyCF0n4m3VOuLQ2lJ A5tttjri7FX5cvVjVhieuUyQeGGoqLLBynYX1t8cGC4pw6hF4a7eIbmZ6cv8S3hG 8CRqlPc5r3dP3AB9b0mFR0vSsmXSvlvvuzEvU5m6FpbyuSMnUqSs+K3h840vUWl+ VPgWUNxMG66G9IpxJ0XaODSbfOvkiLiLKxGU55uHFyQAZNNltJ2Hlo78wr5PGe8m JOZermFdUe3D6qehtsykj9dsNj51l/bJNaCaBYbZJspb -----END CERTIFICATE-----Generated at Sun Jan 25 17:43:09 2026 by rpki-client