This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/ZBZ-5JexiADBbGChiMvtRucnSzc.roa File: ZBZ-5JexiADBbGChiMvtRucnSzc.roa (raw, json) Hash identifier: 5489EETimGAT2VJb2miZnAX917D6h+6DHFGMnwME6HM= Subject key identifier: 64:16:7E:E4:97:B1:88:00:C1:6C:60:A1:88:CB:ED:46:E7:27:4B:37 Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Certificate serial: 019BC0FA2ACF63E003EF6271171A2F0EB9C1 Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/ZBZ-5JexiADBbGChiMvtRucnSzc.roa Signing time: Thu 15 Jan 2026 09:26:18 +0000 ROA not before: Thu 15 Jan 2026 09:26:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25211 IP address blocks: 45.141.233.0/24 maxlen: 24 45.141.234.0/24 maxlen: 24 78.159.128.0/24 maxlen: 24 78.159.129.0/24 maxlen: 24 78.159.131.0/24 maxlen: 24 78.159.136.0/24 maxlen: 24 78.159.137.0/24 maxlen: 24 78.159.138.0/24 maxlen: 24 78.159.139.0/24 maxlen: 24 78.159.149.0/24 maxlen: 24 78.159.150.0/24 maxlen: 24 78.159.152.0/22 maxlen: 22 78.159.153.0/24 maxlen: 24 78.159.154.0/24 maxlen: 24 78.159.155.0/24 maxlen: 24 78.159.156.0/24 maxlen: 24 78.159.157.0/24 maxlen: 24 78.159.158.0/24 maxlen: 24 78.159.159.0/24 maxlen: 24 91.92.33.0/24 maxlen: 24 91.92.34.0/24 maxlen: 24 91.92.35.0/24 maxlen: 24 91.92.40.0/24 maxlen: 24 91.92.42.0/24 maxlen: 24 91.92.43.0/24 maxlen: 24 91.92.44.0/24 maxlen: 24 91.92.45.0/24 maxlen: 24 91.92.46.0/24 maxlen: 24 91.92.49.0/24 maxlen: 24 91.92.50.0/24 maxlen: 24 91.92.51.0/24 maxlen: 24 91.92.52.0/24 maxlen: 24 91.92.53.0/24 maxlen: 24 93.152.207.0/24 maxlen: 24 93.152.210.0/24 maxlen: 24 93.152.211.0/24 maxlen: 24 93.152.214.0/24 maxlen: 24 93.152.215.0/24 maxlen: 24 93.152.216.0/24 maxlen: 24 93.152.217.0/24 maxlen: 24 93.152.218.0/24 maxlen: 24 93.152.221.0/24 maxlen: 24 93.152.222.0/24 maxlen: 24 93.152.223.0/24 maxlen: 24 93.152.224.0/24 maxlen: 24 93.152.226.0/24 maxlen: 24 93.152.227.0/24 maxlen: 24 93.152.230.0/24 maxlen: 24 94.26.28.0/24 maxlen: 24 94.26.29.0/24 maxlen: 24 94.26.76.0/22 maxlen: 22 94.26.76.0/24 maxlen: 24 94.26.77.0/24 maxlen: 24 94.26.78.0/24 maxlen: 24 94.26.79.0/24 maxlen: 24 94.26.89.0/24 maxlen: 24 94.26.90.0/24 maxlen: 24 94.190.195.0/24 maxlen: 24 185.96.252.0/24 maxlen: 24 185.96.253.0/24 maxlen: 24 185.96.255.0/24 maxlen: 24 212.102.105.0/24 maxlen: 24 212.102.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 00:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c0:fa:2a:cf:63:e0:03:ef:62:71:17:1a:2f:0e:b9:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Validity Not Before: Jan 15 09:26:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=64167ee497b18800c16c60a188cbed46e7274b37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:8b:59:3f:f4:e9:ce:ab:a4:2a:a0:b8:ee:35: ac:47:40:57:44:49:f6:01:5c:b7:39:7b:4e:c3:d3: f3:e5:06:a0:71:c9:69:08:0d:57:f9:1d:5b:71:00: da:08:73:a5:5a:93:4a:af:e2:e6:53:bf:89:de:8b: bf:77:ce:39:3b:de:08:9f:a9:db:7a:aa:5f:6e:e8: 19:f3:c5:3f:52:2d:de:ed:ee:73:2c:44:66:7c:e8: f2:dd:b8:14:c7:b0:00:5b:bf:da:7f:31:5e:4e:de: fb:c3:d0:70:e6:53:f7:24:fa:60:70:5f:28:72:d2: 71:4a:ce:fc:91:0c:15:34:d4:2e:1a:2f:b1:8b:34: 72:c4:3c:18:0a:46:99:eb:69:e3:1e:15:85:39:78: 5a:64:ae:b2:2d:07:08:db:ce:9a:e1:09:95:d8:4e: f4:93:28:33:fe:7b:9b:6b:b5:1c:a8:df:63:a4:94: 31:d8:50:c2:43:cb:73:ab:83:07:df:a9:e1:61:8a: 2d:92:b5:ac:13:c2:95:c0:33:4d:ab:32:47:d1:78: 2d:63:00:ec:52:2d:ac:ba:b6:87:f2:d5:6f:ca:49: 4e:53:f2:55:b5:4b:16:a3:08:7f:55:a3:e5:72:01: 34:15:6d:08:03:c4:bf:72:a3:d5:86:be:bf:f5:0f: a8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:16:7E:E4:97:B1:88:00:C1:6C:60:A1:88:CB:ED:46:E7:27:4B:37 X509v3 Authority Key Identifier: keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/ZBZ-5JexiADBbGChiMvtRucnSzc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.141.233.0-45.141.234.255 78.159.128.0/23 78.159.131.0/24 78.159.136.0/22 78.159.149.0-78.159.150.255 78.159.152.0/21 91.92.33.0-91.92.35.255 91.92.40.0/24 91.92.42.0-91.92.46.255 91.92.49.0-91.92.53.255 93.152.207.0/24 93.152.210.0/23 93.152.214.0-93.152.218.255 93.152.221.0-93.152.224.255 93.152.226.0/23 93.152.230.0/24 94.26.28.0/23 94.26.76.0/22 94.26.89.0-94.26.90.255 94.190.195.0/24 185.96.252.0/23 185.96.255.0/24 212.102.105.0/24 212.102.107.0/24 Signature Algorithm: sha256WithRSAEncryption a2:82:2e:e1:15:d3:ec:20:3c:94:c8:3e:2a:f8:de:fe:06:05: a1:c4:0e:ed:3b:e5:16:33:8e:e0:0a:2a:59:04:49:4b:db:b4: b3:99:a9:a4:7f:bc:f6:e3:dd:c7:4f:d2:6f:97:f9:53:32:9d: f4:21:90:68:ed:f3:2c:27:a1:81:b1:44:81:44:98:4a:43:c2: 55:5d:ec:e3:f9:c9:df:a0:72:fa:8b:13:02:8f:36:e4:a7:ba: 48:87:fb:d9:93:93:a7:6b:87:20:d0:7f:ae:b3:2c:0b:4a:2d: a2:14:73:68:33:75:13:2c:18:b5:82:c9:7d:16:1b:03:87:1a: 8d:c5:f1:47:97:96:00:29:71:80:24:3b:92:38:df:4f:ce:22: 4d:6b:83:93:ac:08:b8:4f:e7:26:fb:71:cc:e5:2c:3e:44:5a: d6:3b:1d:31:f1:a3:be:b9:69:d1:4d:0c:31:1e:56:15:6c:d7: 81:fb:7e:0c:30:2f:09:21:7d:e8:84:a1:ec:d2:5b:15:4f:c9: 77:5c:94:81:d9:ca:53:01:11:f6:43:8f:fa:5b:71:0b:e7:71: 61:ca:bd:a9:1d:87:75:11:2a:a4:c3:bb:91:01:5a:9c:d4:35: 42:2c:bc:d4:f1:84:ea:68:15:b8:b9:fd:e0:df:d4:43:66:8d: 01:9d:01:8c -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgISAZvA+irPY+AD72JxFxovDrnBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMWNhYTY5MzU4ZjhjOThmN2E3MTlmMjU5N2Q1ZGFkZGJk MDAxOGMwHhcNMjYwMTE1MDkyNjE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDE2N2VlNDk3YjE4ODAwYzE2YzYwYTE4OGNiZWQ0NmU3Mjc0YjM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiotZP/TpzqukKqC47jWsR0BXREn2 AVy3OXtOw9Pz5QagcclpCA1X+R1bcQDaCHOlWpNKr+LmU7+J3ou/d845O94In6nb eqpfbugZ88U/Ui3e7e5zLERmfOjy3bgUx7AAW7/afzFeTt77w9Bw5lP3JPpgcF8o ctJxSs78kQwVNNQuGi+xizRyxDwYCkaZ62njHhWFOXhaZK6yLQcI286a4QmV2E70 kygz/nuba7UcqN9jpJQx2FDCQ8tzq4MH36nhYYotkrWsE8KVwDNNqzJH0XgtYwDs Ui2suraH8tVvyklOU/JVtUsWowh/VaPlcgE0FW0IA8S/cqPVhr6/9Q+ojwIDAQAB o4IC2DCCAtQwHQYDVR0OBBYEFGQWfuSXsYgAwWxgoYjL7UbnJ0s3MB8GA1UdIwQY MBaAFC0cqmk1j4yY96cZ8ll9Xa3b0AGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2Yjct MjliMDg1ZGQyM2FkLzEvWkJaLTVKZXhpQURCYkdDaGlNdnRSdWNuU3pjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2YjctMjliMDg1ZGQyM2Fk LzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHtBggrBgEFBQcBBwEB/wSB3TCB2jCB1wQCAAEwgdAwDAME AC2N6QMEAC2N6gMEAU6fgAMEAE6fgwMEAk6fiDAMAwQATp+VAwQATp+WAwQDTp+Y MAwDBABbXCEDBAJbXCADBABbXCgwDAMEAVtcKgMEAFtcLjAMAwQAW1wxAwQBW1w0 AwQAXZjPAwQBXZjSMAwDBAFdmNYDBABdmNowDAMEAF2Y3QMEAF2Y4AMEAV2Y4gME AF2Y5gMEAV4aHAMEAl4aTDAMAwQAXhpZAwQAXhpaAwQAXr7DAwQBuWD8AwQAuWD/ AwQA1GZpAwQA1GZrMA0GCSqGSIb3DQEBCwUAA4IBAQCigi7hFdPsIDyUyD4q+N7+ BgWhxA7tO+UWM47gCipZBElL27Szmamkf7z2493HT9Jvl/lTMp30IZBo7fMsJ6GB sUSBRJhKQ8JVXezj+cnfoHL6ixMCjzbkp7pIh/vZk5Ona4cg0H+usywLSi2iFHNo M3UTLBi1gsl9FhsDhxqNxfFHl5YAKXGAJDuSON9PziJNa4OTrAi4T+cm+3HM5Sw+ RFrWOx0x8aO+uWnRTQwxHlYVbNeB+34MMC8JIX3ohKHs0lsVT8l3XJSB2cpTARH2 Q4/6W3EL53Fhyr2pHYd1ESqkw7uRAVqc1DVCLLzU8YTqaBW4uf3g39RDZo0BnQGM -----END CERTIFICATE-----Generated at Fri Jan 23 09:21:42 2026 by rpki-client