This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/ZebnJjtIXjyYRPT1VyIjKOcKa-w.roa File: ZebnJjtIXjyYRPT1VyIjKOcKa-w.roa (raw, json) Hash identifier: SlaNTKVXZtCTnLEw3cjpYiEjvtilfjtk7dgzbwIhEIs= Subject key identifier: 65:E6:E7:26:3B:48:5E:3C:98:44:F4:F5:57:22:23:28:E7:0A:6B:EC Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1 Certificate serial: 019B7F15C6674E5066D7F6AFE16439EBF365 Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/ZebnJjtIXjyYRPT1VyIjKOcKa-w.roa Signing time: Fri 02 Jan 2026 14:21:32 +0000 ROA not before: Fri 02 Jan 2026 14:21:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210158 IP address blocks: 195.77.128.0/22 maxlen: 22 195.77.128.0/23 maxlen: 23 195.77.128.0/24 maxlen: 24 195.77.129.0/24 maxlen: 24 195.77.130.0/23 maxlen: 23 195.77.130.0/24 maxlen: 24 195.77.131.0/24 maxlen: 24 195.235.5.0/24 maxlen: 24 213.0.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:c6:67:4e:50:66:d7:f6:af:e1:64:39:eb:f3:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1 Validity Not Before: Jan 2 14:21:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=65e6e7263b485e3c9844f4f557222328e70a6bec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:35:f4:da:9f:6f:27:e7:e8:f3:7c:c2:69:ea: b0:99:f2:1c:77:c1:86:aa:34:6e:8f:53:30:89:d8: f1:77:a8:66:ef:77:0d:50:c6:37:02:ca:6f:1e:4d: 2f:ae:27:b4:47:61:e1:a5:fe:8c:9f:0f:6e:a0:80: be:50:74:b4:7c:78:5e:d6:f4:94:0c:5e:ba:e0:7d: c7:f3:e5:f4:2c:10:9c:81:d7:22:4b:ac:4f:a4:66: c1:28:ca:20:20:e6:5f:d7:f2:1d:00:64:0f:ad:55: 28:eb:d8:5d:6c:51:2f:79:f4:fd:f1:b3:c7:7d:b2: 10:80:01:65:60:5d:21:aa:f9:a0:03:60:8e:5e:54: 12:47:45:15:48:e8:60:31:9c:9c:32:41:ae:fd:16: ec:f3:87:b1:37:1e:cc:bc:b5:fa:3c:35:c8:9d:2d: 61:e0:25:dc:df:90:f5:11:e6:33:87:f7:e9:47:2f: 84:9f:68:65:c3:13:2a:9e:4a:84:0c:6e:71:84:76: 79:4d:72:92:44:47:d5:49:a6:15:45:6d:13:a4:c7: 72:3c:bc:e7:0f:02:e4:15:e1:d2:0a:e9:ad:a7:81: cf:1c:57:6e:10:78:b0:4c:d0:88:7e:cd:2c:aa:ea: fc:3a:72:50:3a:c6:77:e4:24:46:c9:d9:95:f5:65: 52:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:E6:E7:26:3B:48:5E:3C:98:44:F4:F5:57:22:23:28:E7:0A:6B:EC X509v3 Authority Key Identifier: keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/ZebnJjtIXjyYRPT1VyIjKOcKa-w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.77.128.0/22 195.235.5.0/24 213.0.53.0/24 Signature Algorithm: sha256WithRSAEncryption e2:32:ff:e7:21:a2:1d:55:cb:1c:28:ce:be:64:d8:e1:cc:57: 10:c3:90:00:ed:3e:10:75:18:6e:07:9a:47:73:87:48:6d:44: 6b:c0:c6:de:a9:e9:87:39:f2:72:f9:07:b5:6f:cf:f7:a9:4c: 59:7a:f0:12:ae:ac:13:d8:5e:4d:39:0a:54:85:1d:32:e7:08: ae:cd:34:5e:ce:e8:88:39:02:7a:2e:08:e3:46:72:99:c7:ae: 1d:fe:1a:51:b1:82:95:bb:2a:ff:79:38:ca:d9:d4:59:90:14: f1:18:17:54:cd:a6:ca:c6:c6:d0:52:e1:8e:17:8f:d0:ff:0b: cb:be:57:c6:3e:00:b4:3a:8f:69:2e:4a:00:7f:8e:b4:b4:eb: a9:a7:32:cb:04:1f:23:47:ac:bb:d3:68:a1:db:cb:53:56:2e: 58:26:65:62:c5:6c:21:7f:b4:bc:e6:af:59:49:9b:41:c7:c2: 60:ff:2b:80:82:cc:b4:d1:c2:8e:ed:ee:3f:4e:ad:9b:c9:16: e5:b3:8b:38:d8:c1:51:5f:28:fb:4c:98:07:23:6e:cd:34:3d: 8a:b6:06:b2:b5:c5:15:41:ea:03:58:a6:c5:54:d6:f7:c2:89: 30:5b:9f:e2:92:27:d2:a8:24:92:f9:81:de:de:04:c9:93:02: 33:b9:d1:cc -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/FcZnTlBm1/av4WQ56/NlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwN2Y1ZmUyNzQwYTJiNmRlNGMzNzA5ZDI5NjQxMTViM2M5 NjdkYTEwHhcNMjYwMTAyMTQyMTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NWU2ZTcyNjNiNDg1ZTNjOTg0NGY0ZjU1NzIyMjMyOGU3MGE2YmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzX02p9vJ+fo83zCaeqwmfIcd8GG qjRuj1Mwidjxd6hm73cNUMY3AspvHk0vrie0R2Hhpf6Mnw9uoIC+UHS0fHhe1vSU DF664H3H8+X0LBCcgdciS6xPpGbBKMogIOZf1/IdAGQPrVUo69hdbFEvefT98bPH fbIQgAFlYF0hqvmgA2COXlQSR0UVSOhgMZycMkGu/Rbs84exNx7MvLX6PDXInS1h 4CXc35D1EeYzh/fpRy+En2hlwxMqnkqEDG5xhHZ5TXKSREfVSaYVRW0TpMdyPLzn DwLkFeHSCumtp4HPHFduEHiwTNCIfs0squr8OnJQOsZ35CRGydmV9WVS6wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFGXm5yY7SF48mET09VciIyjnCmvsMB8GA1UdIwQY MBaAFDB/X+J0Citt5MNwnSlkEVs8ln2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQt NGJhMmY4ZjFmODNiLzEvWmVibkpqdElYanlZUlBUMVZ5SWpLT2NLYS13LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQtNGJhMmY4ZjFmODNi LzEvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCw02AAwQA w+sFAwQA1QA1MA0GCSqGSIb3DQEBCwUAA4IBAQDiMv/nIaIdVcscKM6+ZNjhzFcQ w5AA7T4QdRhuB5pHc4dIbURrwMbeqemHOfJy+Qe1b8/3qUxZevASrqwT2F5NOQpU hR0y5wiuzTRezuiIOQJ6LgjjRnKZx64d/hpRsYKVuyr/eTjK2dRZkBTxGBdUzabK xsbQUuGOF4/Q/wvLvlfGPgC0Oo9pLkoAf460tOuppzLLBB8jR6y702ih28tTVi5Y JmVixWwhf7S85q9ZSZtBx8Jg/yuAgsy00cKO7e4/Tq2byRbls4s42MFRXyj7TJgH I27NND2KtgaytcUVQeoDWKbFVNb3wokwW5/ikifSqCSS+YHe3gTJkwIzudHM -----END CERTIFICATE-----Generated at Sun Jan 25 22:31:19 2026 by rpki-client