This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/ZbE6_5RoZcWnsisvAhCbHllA4JA.roa File: ZbE6_5RoZcWnsisvAhCbHllA4JA.roa (raw, json) Hash identifier: P92IIpl6umna4vLKMyTJWbFn3/vOtFT+JdFg8tJqnDg= Subject key identifier: 65:B1:3A:FF:94:68:65:C5:A7:B2:2B:2F:02:10:9B:1E:59:40:E0:90 Certificate issuer: /CN=e338cd6811dce2ed4f426143c3fc8457b1b434bb Certificate serial: 019B32995A6137F5911F508B6F80561AEAD3 Authority key identifier: E3:38:CD:68:11:DC:E2:ED:4F:42:61:43:C3:FC:84:57:B1:B4:34:BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/ZbE6_5RoZcWnsisvAhCbHllA4JA.roa Signing time: Thu 18 Dec 2025 17:54:29 +0000 ROA not before: Thu 18 Dec 2025 17:54:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48119 IP address blocks: 91.207.126.0/23 maxlen: 32 91.207.126.0/24 maxlen: 32 91.207.127.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 05:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:99:5a:61:37:f5:91:1f:50:8b:6f:80:56:1a:ea:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e338cd6811dce2ed4f426143c3fc8457b1b434bb Validity Not Before: Dec 18 17:54:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=65b13aff946865c5a7b22b2f02109b1e5940e090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:79:25:4c:61:a8:de:94:cc:d9:e6:11:ef:03: 9f:60:78:56:a9:de:29:96:92:6f:fc:b4:5b:7e:55: cf:42:b8:e2:45:71:75:83:89:05:1d:a3:e4:58:34: 36:18:64:b2:27:e5:75:8b:d5:51:33:e0:30:98:e1: 4c:86:3e:d6:85:28:bd:56:1c:2e:76:ac:a6:da:1b: 21:dd:36:fa:c5:19:dc:5c:33:2b:37:1a:db:50:3d: 51:c4:0f:86:91:ff:4a:94:ac:d6:e4:e3:36:72:1d: 66:a8:f4:a9:d1:49:05:ce:6f:03:df:44:01:ca:6b: 7f:1a:f4:cb:1a:0f:1b:f2:6a:02:25:7a:eb:93:a1: e8:2b:44:34:56:97:c5:8f:bc:4a:da:13:5f:7a:2f: 7a:d6:60:46:f5:82:50:c1:41:fd:94:cf:67:36:b1: 50:d2:5f:e1:f7:37:7a:15:28:fb:54:c3:77:7f:73: 29:b1:dd:cb:93:9f:f3:64:fa:14:7e:1c:6f:6f:08: 6f:ce:33:63:1f:af:6a:c4:58:0b:f1:1e:ae:0c:e9: eb:20:d6:37:c4:3a:41:8b:ab:1a:0c:c8:64:b7:eb: d5:09:8a:67:54:b3:80:6f:0e:3c:33:f6:73:21:57: 1d:b1:d8:a2:69:54:76:6f:4c:39:4d:0b:60:f7:38: 20:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:B1:3A:FF:94:68:65:C5:A7:B2:2B:2F:02:10:9B:1E:59:40:E0:90 X509v3 Authority Key Identifier: keyid:E3:38:CD:68:11:DC:E2:ED:4F:42:61:43:C3:FC:84:57:B1:B4:34:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/ZbE6_5RoZcWnsisvAhCbHllA4JA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.207.126.0/23 Signature Algorithm: sha256WithRSAEncryption 77:4f:49:25:90:f0:20:0b:a6:63:45:ba:f7:bc:0b:b4:1d:d6: 4a:51:c9:44:75:99:f9:3c:8e:79:9e:49:11:e2:fd:af:df:19: 01:76:cc:45:cf:80:38:b7:7d:5d:7b:60:84:ef:63:6e:5a:88: 1a:4e:ac:22:4c:68:a3:57:bc:47:01:99:65:7f:f8:38:7f:6e: 15:8a:5b:91:15:82:e7:78:70:43:2c:c6:01:e0:11:2a:9d:1c: 88:51:d1:22:2a:e4:3a:7b:26:bd:3d:cc:26:ac:17:e4:cb:c8: 08:13:61:a1:b1:b4:2f:90:4b:0e:71:fa:e9:5a:cc:85:77:47: 8a:58:8f:a9:f5:22:6b:7a:cc:96:6f:5b:a3:27:b6:f3:70:fd: 10:45:a2:f9:44:6d:88:59:e0:90:9d:f1:15:62:fe:a1:7e:60: 1b:3e:af:e5:d5:c1:e8:95:1b:aa:00:7d:ed:5b:47:95:3d:63: a6:06:fe:3f:a3:8c:9f:47:b5:fa:6f:41:3f:8c:a1:57:2f:50: 60:cb:b0:6f:3b:21:95:b9:e5:79:0d:8e:ac:66:36:3a:db:e1: 88:05:59:64:d8:bb:ba:b8:10:fd:10:c8:f4:5a:fe:23:ad:80: e4:a2:d9:0c:5f:07:24:16:ee:ec:0b:1e:47:fc:22:86:4c:79: fe:a1:f8:c1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsymVphN/WRH1CLb4BWGurTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMzhjZDY4MTFkY2UyZWQ0ZjQyNjE0M2MzZmM4NDU3YjFi NDM0YmIwHhcNMjUxMjE4MTc1NDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NWIxM2FmZjk0Njg2NWM1YTdiMjJiMmYwMjEwOWIxZTU5NDBlMDkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunklTGGo3pTM2eYR7wOfYHhWqd4p lpJv/LRbflXPQrjiRXF1g4kFHaPkWDQ2GGSyJ+V1i9VRM+AwmOFMhj7WhSi9Vhwu dqym2hsh3Tb6xRncXDMrNxrbUD1RxA+Gkf9KlKzW5OM2ch1mqPSp0UkFzm8D30QB ymt/GvTLGg8b8moCJXrrk6HoK0Q0VpfFj7xK2hNfei961mBG9YJQwUH9lM9nNrFQ 0l/h9zd6FSj7VMN3f3Mpsd3Lk5/zZPoUfhxvbwhvzjNjH69qxFgL8R6uDOnrINY3 xDpBi6saDMhkt+vVCYpnVLOAbw48M/ZzIVcdsdiiaVR2b0w5TQtg9zggzwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGWxOv+UaGXFp7IrLwIQmx5ZQOCQMB8GA1UdIwQY MBaAFOM4zWgR3OLtT0JhQ8P8hFextDS7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHpqTmFCSGM0dTFQUW1GRHdfeUVWN0cwTkxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy81ZWE0YjQtOWVkNy00NDRlLTg2YmYt MmViMGFmM2FjNzgxLzEvWmJFNl81Um9aY1duc2lzdkFoQ2JIbGxBNEpBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy81ZWE0YjQtOWVkNy00NDRlLTg2YmYtMmViMGFmM2FjNzgx LzEvNHpqTmFCSGM0dTFQUW1GRHdfeUVWN0cwTkxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW89+MA0G CSqGSIb3DQEBCwUAA4IBAQB3T0klkPAgC6ZjRbr3vAu0HdZKUclEdZn5PI55nkkR 4v2v3xkBdsxFz4A4t31de2CE72NuWogaTqwiTGijV7xHAZllf/g4f24ViluRFYLn eHBDLMYB4BEqnRyIUdEiKuQ6eya9PcwmrBfky8gIE2GhsbQvkEsOcfrpWsyFd0eK WI+p9SJresyWb1ujJ7bzcP0QRaL5RG2IWeCQnfEVYv6hfmAbPq/l1cHolRuqAH3t W0eVPWOmBv4/o4yfR7X6b0E/jKFXL1Bgy7BvOyGVueV5DY6sZjY62+GIBVlk2Lu6 uBD9EMj0Wv4jrYDkotkMXwckFu7sCx5H/CKGTHn+ofjB -----END CERTIFICATE-----Generated at Sat Dec 20 12:32:41 2025 by rpki-client