This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/zbAORhJVXtMoGKcD9VvlKtXQvCM.roa File: zbAORhJVXtMoGKcD9VvlKtXQvCM.roa (raw, json) Hash identifier: Dme/MffDzRscTtpOm/eYuLZJmQW4bf9yIlFMyWJha0k= Subject key identifier: CD:B0:0E:46:12:55:5E:D3:28:18:A7:03:F5:5B:E5:2A:D5:D0:BC:23 Certificate issuer: /CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db Certificate serial: 019B7CECFE0A4877A8E767EDC68226253D0D Authority key identifier: E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/zbAORhJVXtMoGKcD9VvlKtXQvCM.roa Signing time: Fri 02 Jan 2026 04:17:44 +0000 ROA not before: Fri 02 Jan 2026 04:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16203 IP address blocks: 213.170.41.0/24 maxlen: 24 213.170.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:fe:0a:48:77:a8:e7:67:ed:c6:82:26:25:3d:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db Validity Not Before: Jan 2 04:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cdb00e4612555ed32818a703f55be52ad5d0bc23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7f:b7:2c:c9:1e:3b:ab:55:30:07:34:2e:6e: 91:98:05:50:18:9e:4d:03:b0:16:38:5d:31:36:e0: d0:ed:88:e5:3e:f1:48:0b:f0:09:92:cf:26:75:32: 06:07:47:17:c8:3e:51:79:aa:16:6d:46:07:ce:9d: 35:ef:fc:19:7f:53:75:44:4d:b2:d6:3b:c1:ee:18: 93:17:64:7c:a3:86:3c:6f:85:9c:49:07:17:59:e1: 5d:0f:26:96:ae:6b:06:da:ef:da:8f:94:e8:26:53: a2:1a:9d:30:e4:89:88:6b:7b:96:28:f6:34:00:dc: 9c:77:79:56:ba:58:94:cc:54:20:68:17:6a:44:7a: 65:ed:8f:c9:4e:ac:33:1b:5b:38:1d:ca:90:61:bc: ee:45:94:c6:b0:f1:f5:84:be:15:94:eb:59:9e:1b: e6:2e:41:1b:66:ac:15:a8:92:91:ba:9a:9f:e2:cc: 59:54:a8:56:e8:3b:03:9b:d0:df:dd:89:c7:b8:3a: b2:45:0e:64:56:20:14:3a:04:1c:3b:77:97:de:ad: 4a:38:1f:67:bf:5f:2c:a0:10:ad:99:16:52:3d:f8: b6:b0:32:25:f0:a6:ee:05:5c:4f:80:62:33:f1:a6: 0a:bf:62:41:b5:3b:b8:bd:1c:57:50:d2:9f:fe:b4: b7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:B0:0E:46:12:55:5E:D3:28:18:A7:03:F5:5B:E5:2A:D5:D0:BC:23 X509v3 Authority Key Identifier: keyid:E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/zbAORhJVXtMoGKcD9VvlKtXQvCM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.170.41.0/24 213.170.46.0/24 Signature Algorithm: sha256WithRSAEncryption 25:8c:e5:8e:17:ea:7a:e6:06:0b:8b:87:01:b0:ab:eb:28:18: 1e:b5:dc:f2:34:83:fd:02:e7:42:d3:f3:8c:e8:47:f9:3e:f3: 99:9a:21:81:49:f9:18:1f:a7:36:c7:c4:c3:69:ed:47:03:e0: 09:2e:69:16:6c:fe:72:94:93:00:47:c4:2e:75:0f:ad:21:87: ab:9e:5e:f1:3f:07:dc:9a:3b:80:d9:22:ab:8b:47:32:30:0d: 29:95:9d:3b:3e:ad:32:2d:79:7a:5d:23:3d:ff:0d:d4:69:19: 30:5e:0d:4c:56:e5:c1:9b:9f:0d:b1:77:a1:45:a7:f7:37:20: eb:7c:33:ad:34:c7:c7:f5:23:d6:61:2a:12:fc:12:b8:ce:02: 0b:b7:a6:d7:2f:67:54:84:da:b4:98:b2:bf:e9:3a:d5:a4:e8: 30:1a:96:5d:ca:2f:b1:04:85:38:d2:be:94:bd:1e:2f:f1:ad: 4f:32:cf:e0:f0:87:a0:ac:e9:12:7e:26:9b:1d:dc:49:b0:f8: f2:c4:d4:5c:e9:80:8a:47:dd:df:35:b6:11:82:59:8a:c0:8c: 7d:1a:f3:28:f6:9c:ff:a1:27:d8:70:50:73:d5:8d:d5:09:06: c2:21:92:1d:51:00:42:b6:fc:e0:d7:62:77:93:91:c2:08:d2: 05:79:fb:5b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87P4KSHeo52ftxoImJT0NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4NDAzYjVlNDVjZDU4YmU1ZjZjNWQzM2ZhNTY1YWI0OTIy M2UzZGIwHhcNMjYwMTAyMDQxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZGIwMGU0NjEyNTU1ZWQzMjgxOGE3MDNmNTViZTUyYWQ1ZDBiYzIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3+3LMkeO6tVMAc0Lm6RmAVQGJ5N A7AWOF0xNuDQ7YjlPvFIC/AJks8mdTIGB0cXyD5ReaoWbUYHzp017/wZf1N1RE2y 1jvB7hiTF2R8o4Y8b4WcSQcXWeFdDyaWrmsG2u/aj5ToJlOiGp0w5ImIa3uWKPY0 ANycd3lWuliUzFQgaBdqRHpl7Y/JTqwzG1s4HcqQYbzuRZTGsPH1hL4VlOtZnhvm LkEbZqwVqJKRupqf4sxZVKhW6DsDm9Df3YnHuDqyRQ5kViAUOgQcO3eX3q1KOB9n v18soBCtmRZSPfi2sDIl8KbuBVxPgGIz8aYKv2JBtTu4vRxXUNKf/rS3PQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFM2wDkYSVV7TKBinA/Vb5SrV0LwjMB8GA1UdIwQY MBaAFOhAO15FzVi+X2xdM/pWWrSSI+PbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkVBN1hrWE5XTDVmYkYwei1sWmF0SklqNDlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy84OTc2ZWQtZGEwYS00OWE1LWE3NTEt YTg3MWVjYzIxMmE2LzEvemJBT1JoSlZYdE1vR0tjRDlWdmxLdFhRdkNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy84OTc2ZWQtZGEwYS00OWE1LWE3NTEtYTg3MWVjYzIxMmE2 LzEvNkVBN1hrWE5XTDVmYkYwei1sWmF0SklqNDlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1aopAwQA 1aouMA0GCSqGSIb3DQEBCwUAA4IBAQAljOWOF+p65gYLi4cBsKvrKBgetdzyNIP9 AudC0/OM6Ef5PvOZmiGBSfkYH6c2x8TDae1HA+AJLmkWbP5ylJMAR8QudQ+tIYer nl7xPwfcmjuA2SKri0cyMA0plZ07Pq0yLXl6XSM9/w3UaRkwXg1MVuXBm58NsXeh Raf3NyDrfDOtNMfH9SPWYSoS/BK4zgILt6bXL2dUhNq0mLK/6TrVpOgwGpZdyi+x BIU40r6UvR4v8a1PMs/g8IegrOkSfiabHdxJsPjyxNRc6YCKR93fNbYRglmKwIx9 GvMo9pz/oSfYcFBz1Y3VCQbCIZIdUQBCtvzg12J3k5HCCNIFeftb -----END CERTIFICATE-----Generated at Mon Jan 26 02:44:03 2026 by rpki-client