This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/zbIppSlnWSNTs7GzaGkKdhI45G0.roa File: zbIppSlnWSNTs7GzaGkKdhI45G0.roa (raw, json) Hash identifier: eQ35bPX4oM+SXRCwk3+vPoa9gVoTtKZkNjzFJNDZxJA= Subject key identifier: CD:B2:29:A5:29:67:59:23:53:B3:B1:B3:68:69:0A:76:12:38:E4:6D Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C12DA31ABBE113F3CBFFA797AC0E13C Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/zbIppSlnWSNTs7GzaGkKdhI45G0.roa Signing time: Fri 02 Jan 2026 00:19:28 +0000 ROA not before: Fri 02 Jan 2026 00:19:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57565 IP address blocks: 5.230.206.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:da:31:ab:be:11:3f:3c:bf:fa:79:7a:c0:e1:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cdb229a52967592353b3b1b368690a761238e46d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fc:41:bd:0a:04:92:3f:89:39:fa:ae:7e:81: 7d:31:45:1c:36:00:9d:a9:c1:66:36:5e:a8:56:6f: 2e:4f:a7:e5:fc:50:30:05:80:75:87:b2:65:ea:33: 75:ae:5f:88:c2:fe:1d:cb:bc:6b:b7:bd:f6:53:7c: ae:11:46:37:dd:97:5c:52:ba:93:9e:ef:97:55:11: 50:56:3b:f7:4c:50:ab:cc:b4:ee:c0:10:ac:88:2e: ff:af:f1:fe:42:dc:e7:c7:ba:03:a3:6b:8a:09:86: 3b:96:5f:2e:fb:06:a8:1d:75:e9:03:af:7f:6e:d7: b5:60:2c:f4:99:ea:51:0a:9f:36:dd:5e:1f:e5:74: df:ce:a7:45:fd:8c:5a:86:00:a1:ee:29:af:17:56: 40:62:a4:5a:7a:7b:7b:9b:d3:bd:f9:07:d5:5a:25: 15:54:9b:2a:8e:47:3e:20:a3:50:d7:09:c8:dd:7d: b8:e8:87:4b:73:c5:13:95:b8:da:8a:32:33:fd:ff: 62:8a:a1:c8:b4:cd:83:f3:79:da:9f:08:22:af:ab: d2:d9:3b:f7:42:fe:54:16:a7:6b:fe:4d:83:54:84: 79:99:41:07:ba:b4:9a:b0:88:19:b1:a9:e0:e4:b0: 14:67:f0:b0:4c:d7:a7:85:ba:10:90:17:82:29:9c: 51:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:B2:29:A5:29:67:59:23:53:B3:B1:B3:68:69:0A:76:12:38:E4:6D X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/zbIppSlnWSNTs7GzaGkKdhI45G0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.230.206.0/24 Signature Algorithm: sha256WithRSAEncryption 98:f9:0e:02:96:4c:9d:a5:f8:1b:7b:af:7e:34:10:c4:78:c6: 25:e0:08:7a:4f:37:20:f0:47:98:f3:7a:92:ff:e3:b9:65:70: ea:ac:a6:ca:8e:33:32:ea:6f:cf:4c:17:77:34:67:dd:08:b7: 6c:9b:d8:16:2c:db:51:ae:8c:9c:e5:c4:0c:b0:d5:7f:9f:94: e8:3d:eb:fb:22:f1:a1:e2:f1:f6:e6:05:a6:da:fa:58:4f:a3: c1:89:88:e1:a3:c2:88:4a:37:81:5c:b9:06:a1:e8:f4:ae:d3: d9:73:68:26:9c:41:b7:10:19:08:12:db:b5:16:47:ad:bc:aa: 5c:5c:3f:af:ad:50:65:e7:d2:5e:2c:7f:f6:f6:6a:7b:e5:c7: 2e:2a:83:ed:e7:60:5b:f1:20:42:7e:c8:ec:a9:fe:8a:9e:1c: 1a:16:e1:27:c4:07:38:87:7e:6d:50:cd:e9:3c:28:33:09:af: 45:79:4e:63:72:37:1d:f2:05:be:82:08:9b:28:8c:4a:c9:b2: 64:bd:41:60:b3:6b:8d:f1:d2:91:d7:87:e3:5c:8f:31:a6:d2: bf:a0:d3:7e:9a:6b:b9:0f:e7:ae:c7:6c:56:6d:8c:1b:aa:ef: 71:f4:88:23:e3:46:09:08:a0:f0:67:3b:34:53:56:59:11:2a: 21:e2:ea:18 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Etoxq74RPzy/+nl6wOE8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZGIyMjlhNTI5Njc1OTIzNTNiM2IxYjM2ODY5MGE3NjEyMzhlNDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/xBvQoEkj+JOfqufoF9MUUcNgCd qcFmNl6oVm8uT6fl/FAwBYB1h7Jl6jN1rl+Iwv4dy7xrt732U3yuEUY33ZdcUrqT nu+XVRFQVjv3TFCrzLTuwBCsiC7/r/H+Qtznx7oDo2uKCYY7ll8u+waoHXXpA69/ bte1YCz0mepRCp823V4f5XTfzqdF/YxahgCh7imvF1ZAYqRaent7m9O9+QfVWiUV VJsqjkc+IKNQ1wnI3X246IdLc8UTlbjaijIz/f9iiqHItM2D83nanwgir6vS2Tv3 Qv5UFqdr/k2DVIR5mUEHurSasIgZsang5LAUZ/CwTNenhboQkBeCKZxRRQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM2yKaUpZ1kjU7Oxs2hpCnYSOORtMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvemJJcHBTbG5XU05UczdHemFHa0tkaEk0NUcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABebOMA0G CSqGSIb3DQEBCwUAA4IBAQCY+Q4Clkydpfgbe69+NBDEeMYl4Ah6Tzcg8EeY83qS /+O5ZXDqrKbKjjMy6m/PTBd3NGfdCLdsm9gWLNtRroyc5cQMsNV/n5ToPev7IvGh 4vH25gWm2vpYT6PBiYjho8KISjeBXLkGoej0rtPZc2gmnEG3EBkIEtu1FketvKpc XD+vrVBl59JeLH/29mp75ccuKoPt52Bb8SBCfsjsqf6KnhwaFuEnxAc4h35tUM3p PCgzCa9FeU5jcjcd8gW+ggibKIxKybJkvUFgs2uN8dKR14fjXI8xptK/oNN+mmu5 D+eux2xWbYwbqu9x9Igj40YJCKDwZzs0U1ZZESoh4uoY -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:27 2026 by rpki-client