This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/zbSB5vbt2ENBKedPqL0MbCvcsiE.roa File: zbSB5vbt2ENBKedPqL0MbCvcsiE.roa (raw, json) Hash identifier: qNcA+DNLWSfrmhFl96O2n/H/XQwiRSiEXO74X3eY3Lo= Subject key identifier: CD:B4:81:E6:F6:ED:D8:43:41:29:E7:4F:A8:BD:0C:6C:2B:DC:B2:21 Certificate issuer: /CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd Certificate serial: 019BE01942B2E9177D1346385DB016268A78 Authority key identifier: 55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/zbSB5vbt2ENBKedPqL0MbCvcsiE.roa Signing time: Wed 21 Jan 2026 10:28:30 +0000 ROA not before: Wed 21 Jan 2026 10:28:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207567 IP address blocks: 168.222.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:19:42:b2:e9:17:7d:13:46:38:5d:b0:16:26:8a:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd Validity Not Before: Jan 21 10:28:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cdb481e6f6edd8434129e74fa8bd0c6c2bdcb221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ff:e9:c0:f4:c3:0a:38:47:5f:6b:90:d7:27: ce:46:74:53:aa:0b:fc:de:94:51:ce:09:b7:cd:31: fd:86:6e:f3:8f:43:5c:a4:ad:20:ca:cc:e1:09:af: c7:7e:5c:b8:9b:f8:5e:cf:1b:29:e4:bd:17:62:94: b7:7c:9f:10:15:3e:2c:54:12:33:f0:ab:b1:d8:93: f3:c4:aa:dc:e8:63:bc:7d:1c:57:95:64:69:12:b3: 10:9f:22:d5:4e:2b:ba:e2:95:42:a9:ed:67:71:c1: 37:a9:69:19:96:86:ed:41:85:c3:7a:62:95:e3:97: af:58:fb:05:36:31:be:42:b5:03:c8:86:04:39:3f: c3:47:76:21:f6:f1:3c:be:63:04:2e:a9:2d:ed:f3: 41:bf:9d:92:de:bd:65:de:6a:11:61:0e:12:44:b1: 2e:bf:7d:ac:4a:ae:06:8b:bf:80:7a:1c:22:56:a2: ee:51:bc:a3:e5:f1:39:95:cc:4b:77:08:47:e6:bb: df:b3:2c:a3:17:c1:38:af:88:17:04:1a:5f:5d:44: 87:fa:63:30:8a:17:66:eb:4a:6a:cb:7e:2a:91:f2: 4e:63:be:41:c0:2b:f3:73:82:5e:76:7f:bb:f7:ff: 3d:54:c6:e2:86:d3:4a:b6:2b:25:d4:45:b4:67:ca: 7d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:B4:81:E6:F6:ED:D8:43:41:29:E7:4F:A8:BD:0C:6C:2B:DC:B2:21 X509v3 Authority Key Identifier: keyid:55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/zbSB5vbt2ENBKedPqL0MbCvcsiE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.222.254.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:8e:f5:88:5d:b1:c5:ea:1d:d8:f8:0d:6b:a1:8b:53:fc:6e: 24:23:81:57:9e:f3:12:ee:1d:88:f3:de:ab:9a:62:68:24:19: e3:7b:02:c6:13:3c:dc:98:d5:4d:98:a8:e7:5e:4e:ce:e1:95: 76:81:68:fb:cd:90:ba:7c:7a:c0:36:7e:1c:53:b6:23:7e:81: 3a:12:b7:fa:19:ab:3b:52:f8:09:cb:5c:80:62:7b:f9:64:cb: 21:93:c6:b9:39:e7:10:91:e0:b4:4b:59:a8:7b:29:37:18:1e: 85:0a:14:d0:ec:e1:18:f1:b8:68:10:d8:7b:9c:59:65:10:e4: 88:9d:b0:31:28:49:ed:e0:80:7f:a9:4b:53:a7:57:b7:06:2f: 0b:19:d8:89:8a:38:d2:54:e9:a5:ce:a0:54:7f:da:f9:09:4a: 6e:a5:92:24:1d:ac:59:c2:b4:f4:d6:a9:40:c8:bd:ec:35:45: 7f:06:5f:fa:60:8c:90:bf:ea:6f:31:a3:f8:5e:c5:6e:07:c5: 3a:7a:82:28:bc:d3:b6:54:61:54:7d:ad:72:15:df:a7:b4:7b: 76:11:ea:3e:9f:a8:a0:b5:44:18:bb:08:24:d7:51:76:6c:fa: 1b:27:38:13:b5:a3:94:69:d8:13:f8:84:c6:9b:08:c5:61:ec: 3c:11:2f:23 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvgGUKy6Rd9E0Y4XbAWJop4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YzliMjAyNWUwZTY5NTgwOGY2YjYxZWUyNzZhZWQ0ZmI1 NjgwY2QwHhcNMjYwMTIxMTAyODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZGI0ODFlNmY2ZWRkODQzNDEyOWU3NGZhOGJkMGM2YzJiZGNiMjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApf/pwPTDCjhHX2uQ1yfORnRTqgv8 3pRRzgm3zTH9hm7zj0NcpK0gyszhCa/Hfly4m/hezxsp5L0XYpS3fJ8QFT4sVBIz 8Kux2JPzxKrc6GO8fRxXlWRpErMQnyLVTiu64pVCqe1nccE3qWkZlobtQYXDemKV 45evWPsFNjG+QrUDyIYEOT/DR3Yh9vE8vmMELqkt7fNBv52S3r1l3moRYQ4SRLEu v32sSq4Gi7+AehwiVqLuUbyj5fE5lcxLdwhH5rvfsyyjF8E4r4gXBBpfXUSH+mMw ihdm60pqy34qkfJOY75BwCvzc4Jedn+79/89VMbihtNKtisl1EW0Z8p9qQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM20geb27dhDQSnnT6i9DGwr3LIhMB8GA1UdIwQY MBaAFFXJsgJeDmlYCPa2HuJ2rtT7VoDNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmNteUFsNE9hVmdJOXJZZTRuYXUxUHRXZ00wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82MzY2YjQtZGQ2Zi00MDQwLTg4OTUt NzFiZTBkNTE5MTlkLzEvemJTQjV2YnQyRU5CS2VkUHFMME1iQ3Zjc2lFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS82MzY2YjQtZGQ2Zi00MDQwLTg4OTUtNzFiZTBkNTE5MTlk LzEvVmNteUFsNE9hVmdJOXJZZTRuYXUxUHRXZ00wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqN7+MA0G CSqGSIb3DQEBCwUAA4IBAQAOjvWIXbHF6h3Y+A1roYtT/G4kI4FXnvMS7h2I896r mmJoJBnjewLGEzzcmNVNmKjnXk7O4ZV2gWj7zZC6fHrANn4cU7YjfoE6Erf6Gas7 UvgJy1yAYnv5ZMshk8a5OecQkeC0S1moeyk3GB6FChTQ7OEY8bhoENh7nFllEOSI nbAxKEnt4IB/qUtTp1e3Bi8LGdiJijjSVOmlzqBUf9r5CUpupZIkHaxZwrT01qlA yL3sNUV/Bl/6YIyQv+pvMaP4XsVuB8U6eoIovNO2VGFUfa1yFd+ntHt2Eeo+n6ig tUQYuwgk11F2bPobJzgTtaOUadgT+ITGmwjFYew8ES8j -----END CERTIFICATE-----Generated at Sun Jan 25 21:26:23 2026 by rpki-client