This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/zbElgd4kOsYPerCSi4Ys9upL4XA.roa File: zbElgd4kOsYPerCSi4Ys9upL4XA.roa (raw, json) Hash identifier: i1lrAyqBTfs/DpcBlpdmtWLhCahW3WY5O3LNfMBqc9Q= Subject key identifier: CD:B1:25:81:DE:24:3A:C6:0F:7A:B0:92:8B:86:2C:F6:EA:4B:E1:70 Certificate issuer: /CN=0c477abf0a27ede886fbc42413d7a89c226b11fa Certificate serial: 019B7C12B224A592DD7880E5BCB9B0B338AC Authority key identifier: 0C:47:7A:BF:0A:27:ED:E8:86:FB:C4:24:13:D7:A8:9C:22:6B:11:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/zbElgd4kOsYPerCSi4Ys9upL4XA.roa Signing time: Fri 02 Jan 2026 00:19:18 +0000 ROA not before: Fri 02 Jan 2026 00:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39522 IP address blocks: 45.87.208.0/22 maxlen: 22 45.87.208.0/24 maxlen: 24 45.87.209.0/24 maxlen: 24 45.87.210.0/24 maxlen: 24 45.87.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:b2:24:a5:92:dd:78:80:e5:bc:b9:b0:b3:38:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c477abf0a27ede886fbc42413d7a89c226b11fa Validity Not Before: Jan 2 00:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cdb12581de243ac60f7ab0928b862cf6ea4be170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:8b:f6:3e:07:74:a9:d7:39:ce:cc:6e:0c:27: 7b:ca:df:4c:33:ad:5d:09:f3:37:6c:a1:d8:05:df: 1c:4c:c4:e1:e8:35:f7:ba:48:28:3c:d5:72:b2:33: 56:cb:ed:62:4e:ce:d8:01:10:ae:ee:33:00:0b:f1: 1d:06:e0:93:d2:95:73:1d:8e:63:f6:dc:c8:2d:90: 9c:e7:69:34:df:bb:73:9d:da:c7:2c:7b:bb:10:35: 37:a1:f0:d6:a9:8e:5c:d6:8d:b0:47:79:a6:6a:d9: 91:a1:b5:63:36:28:05:64:95:a8:71:e0:07:3a:a4: 27:fe:1f:39:29:7d:21:7c:f3:67:f6:e1:8e:6a:25: 34:2f:1c:7e:74:28:f0:48:c3:4c:c9:ce:7a:da:71: ff:65:9e:9b:52:bd:1f:46:9f:49:93:e0:a7:4f:f4: aa:af:3a:ee:09:db:ee:35:47:5b:be:94:02:d9:5d: 26:6e:0d:58:ad:86:83:c9:c5:cd:bd:5a:40:ab:d2: a2:6a:57:75:43:e1:f2:72:a1:e3:83:5f:89:f7:07: 8d:07:55:89:50:46:de:b0:de:d0:69:4d:6b:80:d0: bb:8d:ac:3d:94:45:96:bb:bb:7b:0d:27:64:85:e1: 1d:af:dd:35:a0:e0:86:39:31:fb:c4:cc:dd:95:1e: e0:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:B1:25:81:DE:24:3A:C6:0F:7A:B0:92:8B:86:2C:F6:EA:4B:E1:70 X509v3 Authority Key Identifier: keyid:0C:47:7A:BF:0A:27:ED:E8:86:FB:C4:24:13:D7:A8:9C:22:6B:11:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/zbElgd4kOsYPerCSi4Ys9upL4XA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.87.208.0/22 Signature Algorithm: sha256WithRSAEncryption 90:c5:d0:2e:fa:24:54:24:b6:23:4b:c7:0f:42:d9:0f:b1:f7: 0e:7c:c6:ff:69:40:6a:58:c7:cb:6c:de:55:9a:ab:0e:0a:03: f0:0a:49:16:10:28:b0:00:4b:8e:8e:5e:03:b3:ba:db:45:69: 6e:74:34:fb:5e:ad:3d:d6:57:e7:80:ed:43:e5:5f:91:9f:25: c0:f2:e3:19:f2:70:1c:5e:ec:74:8e:de:c4:3c:e5:8e:fa:47: 21:92:91:8b:d0:94:16:7b:2a:7a:58:1a:2e:49:a9:02:01:e5: c5:af:a6:a9:b5:c9:de:57:da:d0:e4:12:58:83:9b:da:a4:ac: 2a:a9:88:2e:d4:f8:40:33:6e:df:d1:71:85:76:84:b0:54:bf: ec:1b:4c:54:ef:22:dd:ce:24:14:0e:7c:11:4d:d1:e9:08:ee: 88:cb:3d:f3:da:72:01:3f:97:39:cb:c9:25:48:83:98:2b:43: ae:4c:d8:4a:2e:36:c5:4a:50:27:28:93:fd:5c:38:87:e8:11: 8b:2a:a0:d6:f8:32:cd:fe:cb:1c:2a:17:04:e2:ed:eb:0a:9d: 52:34:62:5a:e1:19:55:27:43:f2:95:c0:9a:dc:79:8a:b5:19: 13:ad:ad:f2:e9:bf:9f:7e:8b:c9:c2:23:7b:47:84:e5:58:b5: b4:7e:37:1c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8ErIkpZLdeIDlvLmwszisMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNDc3YWJmMGEyN2VkZTg4NmZiYzQyNDEzZDdhODljMjI2 YjExZmEwHhcNMjYwMTAyMDAxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZGIxMjU4MWRlMjQzYWM2MGY3YWIwOTI4Yjg2MmNmNmVhNGJlMTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ov2Pgd0qdc5zsxuDCd7yt9MM61d CfM3bKHYBd8cTMTh6DX3ukgoPNVysjNWy+1iTs7YARCu7jMAC/EdBuCT0pVzHY5j 9tzILZCc52k037tzndrHLHu7EDU3ofDWqY5c1o2wR3mmatmRobVjNigFZJWoceAH OqQn/h85KX0hfPNn9uGOaiU0Lxx+dCjwSMNMyc562nH/ZZ6bUr0fRp9Jk+CnT/Sq rzruCdvuNUdbvpQC2V0mbg1YrYaDycXNvVpAq9Kiald1Q+HycqHjg1+J9weNB1WJ UEbesN7QaU1rgNC7jaw9lEWWu7t7DSdkheEdr901oOCGOTH7xMzdlR7gyQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM2xJYHeJDrGD3qwkouGLPbqS+FwMB8GA1UdIwQY MBaAFAxHer8KJ+3ohvvEJBPXqJwiaxH6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREVkNnZ3b243ZWlHLThRa0U5ZW9uQ0pyRWZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC81NTZkM2QtMDQyMi00NjEyLWEyMTct MThmNGY2NmE1MGEwLzEvemJFbGdkNGtPc1lQZXJDU2k0WXM5dXBMNFhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC81NTZkM2QtMDQyMi00NjEyLWEyMTctMThmNGY2NmE1MGEw LzEvREVkNnZ3b243ZWlHLThRa0U5ZW9uQ0pyRWZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVfQMA0G CSqGSIb3DQEBCwUAA4IBAQCQxdAu+iRUJLYjS8cPQtkPsfcOfMb/aUBqWMfLbN5V mqsOCgPwCkkWECiwAEuOjl4Ds7rbRWludDT7Xq091lfngO1D5V+RnyXA8uMZ8nAc Xux0jt7EPOWO+kchkpGL0JQWeyp6WBouSakCAeXFr6aptcneV9rQ5BJYg5vapKwq qYgu1PhAM27f0XGFdoSwVL/sG0xU7yLdziQUDnwRTdHpCO6Iyz3z2nIBP5c5y8kl SIOYK0OuTNhKLjbFSlAnKJP9XDiH6BGLKqDW+DLN/sscKhcE4u3rCp1SNGJa4RlV J0PylcCa3HmKtRkTra3y6b+ffovJwiN7R4TlWLW0fjcc -----END CERTIFICATE-----Generated at Sun Jan 25 22:15:23 2026 by rpki-client