This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/zeRg5rwyVQrQCVsUlLyRvPr9TxI.roa File: zeRg5rwyVQrQCVsUlLyRvPr9TxI.roa (raw, json) Hash identifier: T17rFq6E9471MLMBhrGLFdRcWoO+rQ0ILITYoqDpgKA= Subject key identifier: CD:E4:60:E6:BC:32:55:0A:D0:09:5B:14:94:BC:91:BC:FA:FD:4F:12 Certificate issuer: /CN=2ee56d4d7b1d1a06ce89f746f79b656c7348c525 Certificate serial: 019B7DCA3B9A060241016B02D7E22D3FF013 Authority key identifier: 2E:E5:6D:4D:7B:1D:1A:06:CE:89:F7:46:F7:9B:65:6C:73:48:C5:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuVtTXsdGgbOifdG95tlbHNIxSU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/zeRg5rwyVQrQCVsUlLyRvPr9TxI.roa Signing time: Fri 02 Jan 2026 08:19:24 +0000 ROA not before: Fri 02 Jan 2026 08:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206970 IP address blocks: 5.104.156.0/23 maxlen: 23 2a06:e381::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.crl rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft rsync://rpki.ripe.net/repository/DEFAULT/LuVtTXsdGgbOifdG95tlbHNIxSU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:3b:9a:06:02:41:01:6b:02:d7:e2:2d:3f:f0:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ee56d4d7b1d1a06ce89f746f79b656c7348c525 Validity Not Before: Jan 2 08:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cde460e6bc32550ad0095b1494bc91bcfafd4f12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:5c:1d:af:57:55:63:b7:8f:90:59:cc:c9:3e: 3c:c6:9a:c1:77:30:5a:e1:0f:ec:9e:c9:3b:25:d1: 83:49:31:08:57:91:28:b7:27:e3:87:39:f2:62:b9: c6:f7:06:d5:0e:50:e3:b0:a5:d1:e9:d9:a4:0e:b5: 3a:5a:3d:40:1d:56:08:92:6a:56:25:9a:b7:e7:55: 55:18:ab:fd:8c:56:7f:6e:ce:9f:2b:d9:ed:4e:ed: 42:7d:3b:a4:d3:43:23:a7:30:64:05:aa:d9:d4:d0: e2:c3:c7:3d:2e:e3:4b:8f:43:25:12:f1:b6:59:04: a5:53:18:32:5c:fa:ba:1f:76:d1:fe:b2:cb:7d:09: d4:de:b7:55:cb:fd:f7:93:47:1b:13:2f:51:b6:9c: f0:d0:b3:02:8b:24:cf:46:bb:24:36:b0:01:d0:e3: 77:7d:d2:65:43:44:fb:1d:47:5e:c2:b8:30:bd:63: 65:40:aa:1b:e3:c3:6d:47:31:29:6c:85:82:3f:27: 59:4a:9c:34:5b:2d:7f:47:be:96:8a:2e:b1:7b:58: ea:13:70:a2:41:2d:67:09:07:0b:db:55:3c:25:a1: d6:29:81:9c:d8:51:ea:ae:5a:43:bb:7c:c7:ae:be: dc:2a:ec:70:0d:47:84:ae:c8:a3:32:6b:79:d0:d5: 6e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:E4:60:E6:BC:32:55:0A:D0:09:5B:14:94:BC:91:BC:FA:FD:4F:12 X509v3 Authority Key Identifier: keyid:2E:E5:6D:4D:7B:1D:1A:06:CE:89:F7:46:F7:9B:65:6C:73:48:C5:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuVtTXsdGgbOifdG95tlbHNIxSU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/zeRg5rwyVQrQCVsUlLyRvPr9TxI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.104.156.0/23 IPv6: 2a06:e381::/32 Signature Algorithm: sha256WithRSAEncryption 7f:94:86:b8:55:2e:a6:70:73:aa:bf:37:52:90:ae:7e:4a:7c: ee:2f:23:34:02:c8:36:78:fb:41:fc:e5:06:ed:f2:87:ef:0b: 14:72:ab:96:4b:96:11:13:a2:14:b9:1d:ab:59:ca:01:03:1b: ac:a3:b5:18:78:96:94:95:51:7d:d6:ee:87:bc:cb:2b:86:34: 03:37:25:83:40:54:d6:2d:a5:27:32:5a:23:4f:89:5a:ff:95: c0:55:4d:40:10:8a:80:4e:19:a8:97:5e:5a:75:ce:99:c6:92: 70:7f:df:dc:f4:32:ee:67:7e:1a:40:2b:f3:83:5d:b0:b3:e0: dd:10:b3:5a:31:1a:de:e0:f1:bc:91:3e:f1:23:f3:06:3c:2f: 84:25:11:28:85:bc:38:25:bb:ca:f5:dc:75:63:dc:db:c9:83: 99:cf:0f:cd:f3:0d:95:26:30:6f:6c:e7:99:d4:49:8c:86:24: 68:38:6f:47:4c:77:b6:d8:4d:35:b5:4d:39:05:44:db:40:66: fe:ca:d6:a3:cc:43:07:fc:a0:7e:d9:78:25:39:7b:f7:17:f4: 02:52:77:9a:8a:ab:55:47:53:5f:89:34:26:86:d5:16:0b:09: a6:21:6d:7d:83:83:56:53:9f:ac:f8:5e:17:f6:f8:3e:79:77: 49:5b:4c:51 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9yjuaBgJBAWsC1+ItP/ATMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZTU2ZDRkN2IxZDFhMDZjZTg5Zjc0NmY3OWI2NTZjNzM0 OGM1MjUwHhcNMjYwMTAyMDgxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZGU0NjBlNmJjMzI1NTBhZDAwOTViMTQ5NGJjOTFiY2ZhZmQ0ZjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21wdr1dVY7ePkFnMyT48xprBdzBa 4Q/snsk7JdGDSTEIV5EotyfjhznyYrnG9wbVDlDjsKXR6dmkDrU6Wj1AHVYIkmpW JZq351VVGKv9jFZ/bs6fK9ntTu1CfTuk00MjpzBkBarZ1NDiw8c9LuNLj0MlEvG2 WQSlUxgyXPq6H3bR/rLLfQnU3rdVy/33k0cbEy9Rtpzw0LMCiyTPRrskNrAB0ON3 fdJlQ0T7HUdewrgwvWNlQKob48NtRzEpbIWCPydZSpw0Wy1/R76Wii6xe1jqE3Ci QS1nCQcL21U8JaHWKYGc2FHqrlpDu3zHrr7cKuxwDUeErsijMmt50NVuewIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFM3kYOa8MlUK0AlbFJS8kbz6/U8SMB8GA1UdIwQY MBaAFC7lbU17HRoGzon3RvebZWxzSMUlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHVWdFRYc2RHZ2JPaWZkRzk1dGxiSE5JeFNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9lMGI2N2UtMjY5MC00YTg4LTlkMTYt MjJlOThkZTI2MTA2LzEvemVSZzVyd3lWUXJRQ1ZzVWxMeVJ2UHI5VHhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9lMGI2N2UtMjY5MC00YTg4LTlkMTYtMjJlOThkZTI2MTA2 LzEvTHVWdFRYc2RHZ2JPaWZkRzk1dGxiSE5JeFNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBBWicMA0E AgACMAcDBQAqBuOBMA0GCSqGSIb3DQEBCwUAA4IBAQB/lIa4VS6mcHOqvzdSkK5+ SnzuLyM0Asg2ePtB/OUG7fKH7wsUcquWS5YRE6IUuR2rWcoBAxuso7UYeJaUlVF9 1u6HvMsrhjQDNyWDQFTWLaUnMlojT4la/5XAVU1AEIqAThmol15adc6ZxpJwf9/c 9DLuZ34aQCvzg12ws+DdELNaMRre4PG8kT7xI/MGPC+EJREohbw4JbvK9dx1Y9zb yYOZzw/N8w2VJjBvbOeZ1EmMhiRoOG9HTHe22E01tU05BUTbQGb+ytajzEMH/KB+ 2XglOXv3F/QCUneaiqtVR1NfiTQmhtUWCwmmIW19g4NWU5+s+F4X9vg+eXdJW0xR -----END CERTIFICATE-----Generated at Tue Feb 10 03:06:19 2026 by rpki-client