This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/Zbh0v3jIkeNHK_huafJIUWzUhjE.roa File: Zbh0v3jIkeNHK_huafJIUWzUhjE.roa (raw, json) Hash identifier: u5gxSyEmcqN6U6zIZdAUeM1zmLtdQN7lxXducAeyTVA= Subject key identifier: 65:B8:74:BF:78:C8:91:E3:47:2B:F8:6E:69:F2:48:51:6C:D4:86:31 Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9 Certificate serial: 019B78A3454CA803234A348F18FDBDC6F2F3 Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/Zbh0v3jIkeNHK_huafJIUWzUhjE.roa Signing time: Thu 01 Jan 2026 08:18:44 +0000 ROA not before: Thu 01 Jan 2026 08:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16200 IP address blocks: 2a14:ed00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:45:4c:a8:03:23:4a:34:8f:18:fd:bd:c6:f2:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9 Validity Not Before: Jan 1 08:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=65b874bf78c891e3472bf86e69f248516cd48631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8c:d4:1e:47:4d:1b:c4:af:34:21:85:d3:de: d1:03:ac:48:db:a1:21:07:1f:2c:a7:a8:92:82:cd: af:71:87:75:a6:6d:82:fe:6d:ef:b8:f1:99:9e:e7: 8b:25:ae:4e:3f:71:5f:38:75:e5:5f:b9:87:80:81: 69:5e:76:4f:68:b7:9f:c5:41:35:33:10:45:eb:e9: fc:02:03:5b:ab:a9:68:e4:35:4f:15:1d:26:b5:05: 42:61:70:af:56:5e:93:e5:84:01:43:a8:ff:77:8f: c1:20:fa:4e:6e:d1:46:bd:b5:0a:bf:f3:19:d0:b1: 4f:9b:a8:d5:7a:4d:d8:07:2c:51:45:79:43:47:56: 1e:75:40:56:0d:25:42:e7:6f:63:a5:4f:ae:d6:cb: 96:43:ee:cf:1c:fa:1c:d4:60:03:fc:df:1a:c1:bd: fa:58:fa:e5:52:79:9a:96:d5:8b:38:82:ed:bf:66: 4a:c7:75:f8:2d:0a:89:95:38:20:8d:7c:56:bf:8f: 65:7a:77:ad:37:11:1c:43:bb:4c:86:a9:ca:4b:b4: 56:06:05:fd:97:f9:a5:a9:f4:cb:10:30:b2:e8:cb: a6:0c:fd:63:8e:04:4c:dc:e7:07:b4:84:34:e3:49: ac:83:3d:0c:8b:f9:bc:60:49:be:70:43:3d:73:a3: 8f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:B8:74:BF:78:C8:91:E3:47:2B:F8:6E:69:F2:48:51:6C:D4:86:31 X509v3 Authority Key Identifier: keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/Zbh0v3jIkeNHK_huafJIUWzUhjE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:ed00::/29 Signature Algorithm: sha256WithRSAEncryption 03:f1:fb:92:9b:c0:20:4a:1b:bc:3c:49:84:77:26:b0:40:84: 16:ca:39:28:cb:8b:1e:14:26:fd:30:e5:0f:00:96:77:62:c3: c0:52:b8:fc:0f:78:9f:b6:5b:f3:59:5f:b4:03:54:1a:d4:6b: 70:eb:2c:f0:04:61:35:dc:24:0e:c0:5b:e6:d8:90:d3:95:98: eb:e5:66:bf:85:bf:19:89:72:f8:ac:74:2e:ec:bd:20:df:2e: 63:f5:c8:0f:42:03:64:a8:52:e2:d1:25:d1:6f:fe:3c:2d:f0: 35:05:e5:cf:5a:1b:65:4c:4a:a7:08:8d:dc:cd:f2:4b:4c:bd: f1:34:25:28:ef:be:44:78:73:9b:8f:a9:cd:07:7a:2e:85:66: ab:b6:45:91:6d:49:60:f9:6a:6d:11:24:c1:93:5e:42:0e:af: 95:54:ab:34:ba:43:50:46:32:14:ef:83:19:7a:21:45:d0:65: 6f:8b:65:06:24:ce:5d:f7:5f:fb:58:af:a2:3f:e1:83:12:1a: be:7a:c5:e3:7e:aa:d3:5a:8d:aa:78:a0:a7:69:e8:db:3b:3e: 48:57:4f:da:44:fe:b9:a7:8a:a7:2b:48:c6:31:ea:7d:dd:10: 15:af:12:7a:84:11:6c:e9:99:3f:b8:8e:00:b0:12:04:70:6e: 37:2e:8b:e7 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt4o0VMqAMjSjSPGP29xvLzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YmFmMjY5Njc1MTBiM2M1MmU0NmQxZGM1OTM5NjdjZGYy OWY5YzkwHhcNMjYwMTAxMDgxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NWI4NzRiZjc4Yzg5MWUzNDcyYmY4NmU2OWYyNDg1MTZjZDQ4NjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYzUHkdNG8SvNCGF097RA6xI26Eh Bx8sp6iSgs2vcYd1pm2C/m3vuPGZnueLJa5OP3FfOHXlX7mHgIFpXnZPaLefxUE1 MxBF6+n8AgNbq6lo5DVPFR0mtQVCYXCvVl6T5YQBQ6j/d4/BIPpObtFGvbUKv/MZ 0LFPm6jVek3YByxRRXlDR1YedUBWDSVC529jpU+u1suWQ+7PHPoc1GAD/N8awb36 WPrlUnmaltWLOILtv2ZKx3X4LQqJlTggjXxWv49lenetNxEcQ7tMhqnKS7RWBgX9 l/mlqfTLEDCy6MumDP1jjgRM3OcHtIQ040msgz0Mi/m8YEm+cEM9c6OPYwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFGW4dL94yJHjRyv4bmnySFFs1IYxMB8GA1UdIwQY MBaAFFW68mlnUQs8UuRtHcWTlnzfKfnJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAt NDlmOTgxZWU1OTgxLzEvWmJoMHYzaklrZU5IS19odWFmSklVV3pVaGpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAtNDlmOTgxZWU1OTgx LzEvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhTtADAN BgkqhkiG9w0BAQsFAAOCAQEAA/H7kpvAIEobvDxJhHcmsECEFso5KMuLHhQm/TDl DwCWd2LDwFK4/A94n7Zb81lftANUGtRrcOss8ARhNdwkDsBb5tiQ05WY6+Vmv4W/ GYly+Kx0Luy9IN8uY/XID0IDZKhS4tEl0W/+PC3wNQXlz1obZUxKpwiN3M3yS0y9 8TQlKO++RHhzm4+pzQd6LoVmq7ZFkW1JYPlqbREkwZNeQg6vlVSrNLpDUEYyFO+D GXohRdBlb4tlBiTOXfdf+1ivoj/hgxIavnrF436q01qNqnigp2no2zs+SFdP2kT+ uaeKpytIxjHqfd0QFa8SeoQRbOmZP7iOALASBHBuNy6L5w== -----END CERTIFICATE-----Generated at Tue Jan 20 02:58:13 2026 by rpki-client