This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/ZE4_DBxQwALbQp4-Ya_aM_mhrl0.roa File: ZE4_DBxQwALbQp4-Ya_aM_mhrl0.roa (raw, json) Hash identifier: Lvmxym8DA/HbdXnZJmH0a7Rf9SHSGMaHbfhmON/p9SA= Subject key identifier: 64:4E:3F:0C:1C:50:C0:02:DB:42:9E:3E:61:AF:DA:33:F9:A1:AE:5D Certificate issuer: /CN=5b0c95023fa0d33b226eef2f22c8eca390526bf0 Certificate serial: 019B7D5D1467BF561810E81879919C0764DA Authority key identifier: 5B:0C:95:02:3F:A0:D3:3B:22:6E:EF:2F:22:C8:EC:A3:90:52:6B:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WwyVAj-g0zsibu8vIsjso5BSa_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/ZE4_DBxQwALbQp4-Ya_aM_mhrl0.roa Signing time: Fri 02 Jan 2026 06:20:10 +0000 ROA not before: Fri 02 Jan 2026 06:20:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57375 IP address blocks: 185.232.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.crl rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.mft rsync://rpki.ripe.net/repository/DEFAULT/WwyVAj-g0zsibu8vIsjso5BSa_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:14:67:bf:56:18:10:e8:18:79:91:9c:07:64:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b0c95023fa0d33b226eef2f22c8eca390526bf0 Validity Not Before: Jan 2 06:20:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=644e3f0c1c50c002db429e3e61afda33f9a1ae5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5f:16:8e:f5:68:4a:bc:b1:0b:1e:b9:80:17: ea:3b:8f:fb:de:1e:69:1b:12:96:c2:62:c9:2c:43: 9e:35:86:e6:36:53:8d:e5:bd:36:ce:ba:a6:36:3d: 4f:8f:a3:db:77:96:11:2b:53:db:4c:9b:4f:b3:65: bb:44:74:fc:d8:51:d6:e3:c9:a7:cf:b3:87:38:df: 81:b3:bb:4d:e0:13:c7:91:ce:0e:f5:b5:00:e1:af: 95:f0:6e:56:7d:0b:d9:26:e6:38:77:66:53:23:3a: 68:8e:b8:61:a1:53:d0:83:cc:3e:50:94:13:c2:80: a8:dc:86:47:31:60:c0:38:a4:e5:d1:cb:4d:65:82: 22:84:2e:83:33:8b:5b:5b:ac:8c:41:54:86:44:14: 19:6c:d1:bd:50:96:3b:9d:7d:44:05:b0:c0:14:27: 34:61:03:04:1f:5b:8a:18:95:97:cc:06:74:28:18: 9e:92:89:36:59:dc:a9:c4:20:1a:59:0a:33:46:03: 36:34:bd:42:31:ce:22:13:0e:c8:44:46:f8:23:f5: fd:dd:3a:2f:2d:da:11:9e:98:ef:e6:51:e6:92:a2: 5f:10:8c:c1:01:8c:9f:b9:ac:cb:ff:d7:a6:80:3f: 6a:e3:d2:b7:6a:a5:77:f7:f5:c7:0e:49:48:f9:63: f9:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:4E:3F:0C:1C:50:C0:02:DB:42:9E:3E:61:AF:DA:33:F9:A1:AE:5D X509v3 Authority Key Identifier: keyid:5B:0C:95:02:3F:A0:D3:3B:22:6E:EF:2F:22:C8:EC:A3:90:52:6B:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwyVAj-g0zsibu8vIsjso5BSa_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/ZE4_DBxQwALbQp4-Ya_aM_mhrl0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.232.233.0/24 Signature Algorithm: sha256WithRSAEncryption 41:60:f5:29:ce:bc:8a:8e:c2:88:12:89:66:0f:7d:5f:a6:49: 3e:ec:8c:c0:57:8b:67:9b:cc:5f:ca:c9:8c:fe:62:d5:bf:bc: 2a:50:2f:95:5e:39:c4:25:d9:a4:9b:09:eb:71:fa:c5:c9:78: 3f:40:cf:c7:99:ec:52:5b:56:57:27:83:54:13:63:ec:15:e9: e4:4e:28:ab:d7:ba:7a:95:2c:fb:73:af:f5:b2:a2:0d:8a:f0: 7b:59:a3:a6:a5:4b:b1:cd:84:03:a4:55:0b:d7:9c:6a:3b:b7: f3:7b:f4:f6:00:6b:09:30:1a:1f:91:43:de:01:46:bc:56:82: d4:5a:c7:4c:d0:36:ff:70:e3:f0:63:6a:b2:d7:ae:b5:ea:c5: 4b:d2:a3:a1:84:bb:5f:67:3d:0d:4b:21:73:14:e0:5a:05:45: a8:dd:ff:cb:21:9c:95:99:f3:f3:67:e0:d5:9b:03:4d:51:4d: d4:37:83:75:5f:08:85:83:eb:d9:72:ad:48:99:63:93:70:1e: 25:6d:aa:ab:8d:ca:6b:7d:f4:11:d9:76:07:5a:15:69:c5:1a: 25:b2:52:19:dd:a7:65:9b:b5:3f:24:df:75:07:9d:ee:0d:05: 2d:63:d0:2c:ed:4a:50:57:ef:1c:24:7c:7a:04:e0:bc:92:a1: 6a:fc:b1:b2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XRRnv1YYEOgYeZGcB2TaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViMGM5NTAyM2ZhMGQzM2IyMjZlZWYyZjIyYzhlY2EzOTA1 MjZiZjAwHhcNMjYwMTAyMDYyMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDRlM2YwYzFjNTBjMDAyZGI0MjllM2U2MWFmZGEzM2Y5YTFhZTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzl8WjvVoSryxCx65gBfqO4/73h5p GxKWwmLJLEOeNYbmNlON5b02zrqmNj1Pj6Pbd5YRK1PbTJtPs2W7RHT82FHW48mn z7OHON+Bs7tN4BPHkc4O9bUA4a+V8G5WfQvZJuY4d2ZTIzpojrhhoVPQg8w+UJQT woCo3IZHMWDAOKTl0ctNZYIihC6DM4tbW6yMQVSGRBQZbNG9UJY7nX1EBbDAFCc0 YQMEH1uKGJWXzAZ0KBiekok2WdypxCAaWQozRgM2NL1CMc4iEw7IREb4I/X93Tov LdoRnpjv5lHmkqJfEIzBAYyfuazL/9emgD9q49K3aqV39/XHDklI+WP5WwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGROPwwcUMAC20KePmGv2jP5oa5dMB8GA1UdIwQY MBaAFFsMlQI/oNM7Im7vLyLI7KOQUmvwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3d5VkFqLWcwenNpYnU4dklzanNvNUJTYV9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny81ODU3NmQtZDQzOS00MDFiLTlmODEt ZTBlOTBlMDg0NTA4LzEvWkU0X0RCeFF3QUxiUXA0LVlhX2FNX21ocmwwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny81ODU3NmQtZDQzOS00MDFiLTlmODEtZTBlOTBlMDg0NTA4 LzEvV3d5VkFqLWcwenNpYnU4dklzanNvNUJTYV9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuejpMA0G CSqGSIb3DQEBCwUAA4IBAQBBYPUpzryKjsKIEolmD31fpkk+7IzAV4tnm8xfysmM /mLVv7wqUC+VXjnEJdmkmwnrcfrFyXg/QM/HmexSW1ZXJ4NUE2PsFenkTiir17p6 lSz7c6/1sqINivB7WaOmpUuxzYQDpFUL15xqO7fze/T2AGsJMBofkUPeAUa8VoLU WsdM0Db/cOPwY2qy16616sVL0qOhhLtfZz0NSyFzFOBaBUWo3f/LIZyVmfPzZ+DV mwNNUU3UN4N1XwiFg+vZcq1ImWOTcB4lbaqrjcprffQR2XYHWhVpxRolslIZ3adl m7U/JN91B53uDQUtY9As7UpQV+8cJHx6BOC8kqFq/LGy -----END CERTIFICATE-----Generated at Mon Feb 9 23:41:31 2026 by rpki-client