This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8830a4-6c83-4338-bafd-b5d1e902310a/1/zm-VPfgYBhRWZQWrUYEyL-yQqqQ.roa File: zm-VPfgYBhRWZQWrUYEyL-yQqqQ.roa (raw, json) Hash identifier: vf/q4m/7I3joQjOIdPXQnV26DkkefWku22BzZk3X9go= Subject key identifier: CE:6F:95:3D:F8:18:06:14:56:65:05:AB:51:81:32:2F:EC:90:AA:A4 Certificate issuer: /CN=834d966d00afbc39b5958bc1a6ed5793ffc0c54d Certificate serial: 019B7F15076CCEB4C609893A705C0E33A61D Authority key identifier: 83:4D:96:6D:00:AF:BC:39:B5:95:8B:C1:A6:ED:57:93:FF:C0:C5:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g02WbQCvvDm1lYvBpu1Xk__AxU0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8830a4-6c83-4338-bafd-b5d1e902310a/1/zm-VPfgYBhRWZQWrUYEyL-yQqqQ.roa Signing time: Fri 02 Jan 2026 14:20:43 +0000 ROA not before: Fri 02 Jan 2026 14:20:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61408 IP address blocks: 5.56.0.0/21 maxlen: 21 5.56.0.0/22 maxlen: 22 5.56.0.0/23 maxlen: 23 5.56.0.0/24 maxlen: 24 5.56.1.0/24 maxlen: 24 5.56.2.0/23 maxlen: 23 5.56.2.0/24 maxlen: 24 5.56.3.0/24 maxlen: 24 5.56.4.0/22 maxlen: 22 5.56.4.0/23 maxlen: 23 5.56.4.0/24 maxlen: 24 5.56.5.0/24 maxlen: 24 5.56.6.0/23 maxlen: 23 5.56.6.0/24 maxlen: 24 5.56.7.0/24 maxlen: 24 185.35.188.0/22 maxlen: 22 185.35.188.0/23 maxlen: 23 185.35.188.0/24 maxlen: 24 185.35.189.0/24 maxlen: 24 185.35.190.0/23 maxlen: 23 185.35.190.0/24 maxlen: 24 185.35.191.0/24 maxlen: 24 2a03:30c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8830a4-6c83-4338-bafd-b5d1e902310a/1/g02WbQCvvDm1lYvBpu1Xk__AxU0.crl rsync://rpki.ripe.net/repository/DEFAULT/44/8830a4-6c83-4338-bafd-b5d1e902310a/1/g02WbQCvvDm1lYvBpu1Xk__AxU0.mft rsync://rpki.ripe.net/repository/DEFAULT/g02WbQCvvDm1lYvBpu1Xk__AxU0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:07:6c:ce:b4:c6:09:89:3a:70:5c:0e:33:a6:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=834d966d00afbc39b5958bc1a6ed5793ffc0c54d Validity Not Before: Jan 2 14:20:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ce6f953df8180614566505ab5181322fec90aaa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:79:aa:07:9f:eb:4f:29:85:dd:1c:0a:80:cb: 10:7d:37:e8:2e:3f:6e:4c:53:4b:e7:fb:9e:36:df: b4:03:90:7c:6c:dc:73:a1:21:81:37:7b:31:95:77: 05:5f:36:6e:0b:f4:48:70:02:f7:a1:8a:68:f1:e0: f0:3f:d1:b1:ed:c7:2b:23:2f:e7:1f:2a:4b:c4:19: bf:fd:7a:b7:f9:8d:ed:cb:47:8b:ff:63:cf:32:9b: 9c:66:52:5e:94:4a:63:fe:78:b5:23:6c:d0:32:fe: 13:c7:8a:77:6d:cb:80:ca:1a:dd:a3:32:ad:46:8f: 16:f9:55:01:f5:3a:1f:29:c6:b9:20:78:1d:8c:b3: b5:32:02:d7:2e:56:2f:4a:ec:73:af:d4:1b:72:ae: a1:f3:63:ff:fa:8e:19:01:f7:23:76:53:b6:53:0c: a8:4f:33:e5:3e:4d:18:0d:76:7f:38:c2:8b:ed:d7: 51:f8:71:af:44:50:5d:75:25:51:d8:ad:65:ad:83: c9:fe:50:32:b1:ba:7b:ec:ac:eb:09:88:0c:57:29: 8f:be:50:bb:40:56:05:7a:fc:2e:67:16:51:00:ae: 48:b9:47:64:84:f4:95:cd:c7:d3:12:ee:e4:07:16: 98:e4:1d:e0:27:b6:e3:75:de:83:15:23:bd:92:fd: 34:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:6F:95:3D:F8:18:06:14:56:65:05:AB:51:81:32:2F:EC:90:AA:A4 X509v3 Authority Key Identifier: keyid:83:4D:96:6D:00:AF:BC:39:B5:95:8B:C1:A6:ED:57:93:FF:C0:C5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g02WbQCvvDm1lYvBpu1Xk__AxU0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8830a4-6c83-4338-bafd-b5d1e902310a/1/zm-VPfgYBhRWZQWrUYEyL-yQqqQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8830a4-6c83-4338-bafd-b5d1e902310a/1/g02WbQCvvDm1lYvBpu1Xk__AxU0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.56.0.0/21 185.35.188.0/22 IPv6: 2a03:30c0::/32 Signature Algorithm: sha256WithRSAEncryption 33:e9:73:9a:c4:6d:0d:5e:81:25:32:54:a8:07:e9:ac:f3:50: 84:be:f9:49:da:95:d6:ca:fd:ab:f1:02:d8:95:46:35:e9:76: b2:42:f3:33:f3:3c:2b:53:a8:26:39:0e:dd:cd:39:b6:a9:af: 17:60:60:47:e3:f9:3a:48:17:7b:92:90:38:37:1b:3e:59:f7: 15:1b:82:08:06:6e:20:ea:b2:2c:11:72:72:02:7c:a4:77:db: 3b:cc:44:94:d7:17:48:6d:8d:8a:8b:f1:3b:c2:3e:a5:9c:03: c6:e7:17:20:28:a6:ed:4f:cc:35:cc:38:1b:4d:e2:f1:0d:8e: 28:47:72:ca:a2:92:14:0f:ab:15:4e:8e:3c:0a:7d:0c:0e:6a: a8:a5:a1:5b:6c:be:21:09:90:93:2a:d3:e6:d1:76:45:c3:3a: 41:35:e2:bd:25:36:b1:5c:57:55:cf:95:6d:84:b1:20:ab:aa: 31:3d:c2:b7:b0:7a:8a:4d:cc:01:8c:4b:01:f7:ab:18:19:a4: 9b:66:60:2f:da:62:a9:c1:3f:e6:08:ca:6a:1f:3d:f9:66:f9: c1:bf:c3:93:85:96:25:65:12:94:7f:73:ef:f4:e8:52:c1:c2: d9:a3:fe:83:42:b2:8b:0c:92:8c:e1:8d:8d:80:df:75:79:ca: eb:72:c7:40 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/FQdszrTGCYk6cFwOM6YdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzNGQ5NjZkMDBhZmJjMzliNTk1OGJjMWE2ZWQ1NzkzZmZj MGM1NGQwHhcNMjYwMTAyMTQyMDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTZmOTUzZGY4MTgwNjE0NTY2NTA1YWI1MTgxMzIyZmVjOTBhYWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3mqB5/rTymF3RwKgMsQfTfoLj9u TFNL5/ueNt+0A5B8bNxzoSGBN3sxlXcFXzZuC/RIcAL3oYpo8eDwP9Gx7ccrIy/n HypLxBm//Xq3+Y3ty0eL/2PPMpucZlJelEpj/ni1I2zQMv4Tx4p3bcuAyhrdozKt Ro8W+VUB9TofKca5IHgdjLO1MgLXLlYvSuxzr9Qbcq6h82P/+o4ZAfcjdlO2Uwyo TzPlPk0YDXZ/OMKL7ddR+HGvRFBddSVR2K1lrYPJ/lAysbp77KzrCYgMVymPvlC7 QFYFevwuZxZRAK5IuUdkhPSVzcfTEu7kBxaY5B3gJ7bjdd6DFSO9kv00ZwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFM5vlT34GAYUVmUFq1GBMi/skKqkMB8GA1UdIwQY MBaAFINNlm0Ar7w5tZWLwabtV5P/wMVNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzAyV2JRQ3Z2RG0xbFl2QnB1MVhrX19BeFUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC84ODMwYTQtNmM4My00MzM4LWJhZmQt YjVkMWU5MDIzMTBhLzEvem0tVlBmZ1lCaFJXWlFXclVZRXlMLXlRcXFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC84ODMwYTQtNmM4My00MzM4LWJhZmQtYjVkMWU5MDIzMTBh LzEvZzAyV2JRQ3Z2RG0xbFl2QnB1MVhrX19BeFUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDBTgAAwQC uSO8MA0EAgACMAcDBQAqAzDAMA0GCSqGSIb3DQEBCwUAA4IBAQAz6XOaxG0NXoEl MlSoB+ms81CEvvlJ2pXWyv2r8QLYlUY16XayQvMz8zwrU6gmOQ7dzTm2qa8XYGBH 4/k6SBd7kpA4Nxs+WfcVG4IIBm4g6rIsEXJyAnykd9s7zESU1xdIbY2Ki/E7wj6l nAPG5xcgKKbtT8w1zDgbTeLxDY4oR3LKopIUD6sVTo48Cn0MDmqopaFbbL4hCZCT KtPm0XZFwzpBNeK9JTaxXFdVz5VthLEgq6oxPcK3sHqKTcwBjEsB96sYGaSbZmAv 2mKpwT/mCMpqHz35ZvnBv8OThZYlZRKUf3Pv9OhSwcLZo/6DQrKLDJKM4Y2NgN91 ecrrcsdA -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:12 2026 by rpki-client