This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/zRBFe9x1meBumlZVBO7a-XrbamY.roa File: zRBFe9x1meBumlZVBO7a-XrbamY.roa (raw, json) Hash identifier: 9tVoYdgbZgFACYKhxfO+KxLqad27bA9cdGeFVvtqTOQ= Subject key identifier: CD:10:45:7B:DC:75:99:E0:6E:9A:56:55:04:EE:DA:F9:7A:DB:6A:66 Certificate issuer: /CN=49cd9ec8e53f8fc2a35e91b77014f6a73d8b5b3d Certificate serial: 019B7EA7390D4AEA21E4CC9115FCA4DDAFE5 Authority key identifier: 49:CD:9E:C8:E5:3F:8F:C2:A3:5E:91:B7:70:14:F6:A7:3D:8B:5B:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/zRBFe9x1meBumlZVBO7a-XrbamY.roa Signing time: Fri 02 Jan 2026 12:20:46 +0000 ROA not before: Fri 02 Jan 2026 12:20:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56676 IP address blocks: 31.130.120.0/21 maxlen: 21 91.237.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.crl rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.mft rsync://rpki.ripe.net/repository/DEFAULT/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:39:0d:4a:ea:21:e4:cc:91:15:fc:a4:dd:af:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49cd9ec8e53f8fc2a35e91b77014f6a73d8b5b3d Validity Not Before: Jan 2 12:20:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd10457bdc7599e06e9a565504eedaf97adb6a66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:5c:89:42:19:6d:06:ff:31:c9:ff:98:e1:30: b4:10:5f:41:23:c7:77:23:e5:81:db:ba:e8:4c:ee: d1:eb:2e:39:35:b7:c3:f9:4b:b6:f2:7c:ed:1e:6b: 76:4c:d0:53:11:2e:50:06:60:71:f2:04:69:b6:2a: 0d:4d:41:83:f5:29:ce:50:6d:03:1e:8d:6f:cb:c5: 6f:70:34:0e:9e:3f:09:53:42:b6:e5:4e:96:1a:d0: 2b:7f:ee:fc:77:23:a1:8a:9b:b1:4e:ce:ea:5c:51: 79:50:57:b9:6c:f9:63:fd:3a:01:d4:78:65:87:f0: 36:ed:09:2e:cc:9f:48:03:f0:54:d1:52:f8:8d:19: d7:24:ce:bd:2a:e0:e4:44:87:27:4d:8c:d6:eb:3a: a9:83:58:ff:da:16:cc:cd:ac:ef:c5:fc:56:c7:1f: 43:52:2a:0e:c9:a5:41:02:fb:9f:db:52:7d:69:f8: c8:59:e5:95:23:7e:4a:3c:c0:34:4d:97:12:12:47: c5:03:e3:e9:fc:28:56:3d:96:f8:29:16:45:da:ff: 5b:4c:83:6b:88:53:5b:27:a6:19:ee:56:a1:35:34: 00:a2:67:36:a4:08:0f:d3:0f:82:8b:8b:2b:ba:0c: f1:5c:de:8e:88:49:d5:42:e7:61:d3:5d:8b:6d:0c: 1b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:10:45:7B:DC:75:99:E0:6E:9A:56:55:04:EE:DA:F9:7A:DB:6A:66 X509v3 Authority Key Identifier: keyid:49:CD:9E:C8:E5:3F:8F:C2:A3:5E:91:B7:70:14:F6:A7:3D:8B:5B:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/zRBFe9x1meBumlZVBO7a-XrbamY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.130.120.0/21 91.237.209.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:c6:0d:7e:4b:17:3f:73:80:b1:9d:f4:80:5d:24:23:f1:c7: 71:87:3a:e0:7a:b8:0f:43:d3:5a:67:e3:7a:cd:7b:df:6c:2a: 17:35:3e:4b:4a:23:7d:82:27:4a:1e:02:fb:04:27:5b:dd:62: d0:d0:80:54:43:89:c6:7b:18:eb:aa:cb:52:fc:57:6f:66:ab: 13:64:e0:c2:e6:46:39:d0:94:a3:86:1b:53:38:49:c8:bd:1d: 1b:28:56:d4:84:50:5f:a3:2c:78:86:1b:a5:ee:08:68:05:e7: c2:e2:27:62:ca:7d:1c:7d:63:3f:56:17:79:af:2b:e7:9b:c1: fc:d1:95:b5:a1:3c:df:06:70:7f:06:38:0c:d3:d2:f8:08:2f: 2b:6d:d5:ed:3c:09:33:61:8b:a0:16:8c:65:a3:8a:75:d0:f8: 54:ba:87:f1:62:5f:1f:5f:d2:dc:52:fc:ca:cd:7e:21:ce:0d: 73:79:92:60:72:10:21:ca:c8:af:d4:3b:fd:62:fd:8f:ba:c0: ab:a7:c1:29:ec:57:21:1a:a0:ca:89:7c:3b:08:05:8f:e8:5f: 27:71:02:be:03:69:ec:16:cb:e5:f8:1c:5f:ef:31:3c:7f:f2: 5c:ef:10:38:31:36:9f:a1:1a:4e:49:79:e4:f3:ea:15:3d:cd: 5f:bf:a7:b0 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+pzkNSuoh5MyRFfyk3a/lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5Y2Q5ZWM4ZTUzZjhmYzJhMzVlOTFiNzcwMTRmNmE3M2Q4 YjViM2QwHhcNMjYwMTAyMTIyMDQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDEwNDU3YmRjNzU5OWUwNmU5YTU2NTUwNGVlZGFmOTdhZGI2YTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlyJQhltBv8xyf+Y4TC0EF9BI8d3 I+WB27roTO7R6y45NbfD+Uu28nztHmt2TNBTES5QBmBx8gRptioNTUGD9SnOUG0D Ho1vy8VvcDQOnj8JU0K25U6WGtArf+78dyOhipuxTs7qXFF5UFe5bPlj/ToB1Hhl h/A27QkuzJ9IA/BU0VL4jRnXJM69KuDkRIcnTYzW6zqpg1j/2hbMzazvxfxWxx9D UioOyaVBAvuf21J9afjIWeWVI35KPMA0TZcSEkfFA+Pp/ChWPZb4KRZF2v9bTINr iFNbJ6YZ7lahNTQAomc2pAgP0w+Ci4srugzxXN6OiEnVQudh012LbQwbJwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFM0QRXvcdZngbppWVQTu2vl622pmMB8GA1UdIwQY MBaAFEnNnsjlP4/Co16Rt3AU9qc9i1s9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2MyZXlPVV9qOEtqWHBHM2NCVDJwejJMV3owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xYjU5NjEtODRhYi00MGJlLWIwZGMt MmY2ZjlmODg4Mzc1LzEvelJCRmU5eDFtZUJ1bWxaVkJPN2EtWHJiYW1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8xYjU5NjEtODRhYi00MGJlLWIwZGMtMmY2ZjlmODg4Mzc1 LzEvU2MyZXlPVV9qOEtqWHBHM2NCVDJwejJMV3owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDH4J4AwQA W+3RMA0GCSqGSIb3DQEBCwUAA4IBAQAsxg1+Sxc/c4CxnfSAXSQj8cdxhzrgergP Q9NaZ+N6zXvfbCoXNT5LSiN9gidKHgL7BCdb3WLQ0IBUQ4nGexjrqstS/FdvZqsT ZODC5kY50JSjhhtTOEnIvR0bKFbUhFBfoyx4hhul7ghoBefC4idiyn0cfWM/Vhd5 ryvnm8H80ZW1oTzfBnB/BjgM09L4CC8rbdXtPAkzYYugFoxlo4p10PhUuofxYl8f X9LcUvzKzX4hzg1zeZJgchAhysiv1Dv9Yv2PusCrp8Ep7FchGqDKiXw7CAWP6F8n cQK+A2nsFsvl+Bxf7zE8f/Jc7xA4MTafoRpOSXnk8+oVPc1fv6ew -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:23 2026 by rpki-client