This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/ZAb6wT9rDWaY1PH2s7T29tlJhUs.roa File: ZAb6wT9rDWaY1PH2s7T29tlJhUs.roa (raw, json) Hash identifier: fRwwFmSuTNukQolyfdFctPilc92Pv6bdg5DBKTT/w28= Subject key identifier: 64:06:FA:C1:3F:6B:0D:66:98:D4:F1:F6:B3:B4:F6:F6:D9:49:85:4B Certificate issuer: /CN=6d579d1d5fa7fd2a445b5dd8ee8f2637b41f0d40 Certificate serial: 019B7DCAF3411BF313628841B4552785BF86 Authority key identifier: 6D:57:9D:1D:5F:A7:FD:2A:44:5B:5D:D8:EE:8F:26:37:B4:1F:0D:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bVedHV-n_SpEW13Y7o8mN7QfDUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/ZAb6wT9rDWaY1PH2s7T29tlJhUs.roa Signing time: Fri 02 Jan 2026 08:20:11 +0000 ROA not before: Fri 02 Jan 2026 08:20:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49565 IP address blocks: 185.204.155.0/24 maxlen: 24 2a14:2180:1::/48 maxlen: 48 2a14:2180:2::/48 maxlen: 48 2a14:2180:3::/48 maxlen: 48 2a14:2180:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/bVedHV-n_SpEW13Y7o8mN7QfDUA.crl rsync://rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/bVedHV-n_SpEW13Y7o8mN7QfDUA.mft rsync://rpki.ripe.net/repository/DEFAULT/bVedHV-n_SpEW13Y7o8mN7QfDUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:f3:41:1b:f3:13:62:88:41:b4:55:27:85:bf:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d579d1d5fa7fd2a445b5dd8ee8f2637b41f0d40 Validity Not Before: Jan 2 08:20:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6406fac13f6b0d6698d4f1f6b3b4f6f6d949854b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8f:a0:0f:e2:6c:3d:b3:8f:a0:a8:85:b1:eb: 61:15:4c:39:8b:8e:6e:d5:80:d6:ba:72:cf:34:ec: a4:47:f7:ba:1f:7b:5b:c2:4f:f1:52:51:81:f2:1e: 39:bd:46:5e:7b:ff:69:9f:ae:fa:80:1c:d2:94:32: ba:58:0c:c9:d2:d7:c5:25:30:78:1e:61:9a:eb:63: 32:01:50:ab:47:c5:9d:c8:37:dc:f8:98:60:1a:3f: a2:1d:65:7d:24:18:55:dd:21:e5:b5:a8:d6:f7:9a: ab:ff:66:6d:d4:58:1a:53:8e:c2:5d:c6:c0:ac:c2: 6d:46:09:22:d1:00:3f:38:92:e8:d8:ef:87:2b:ab: 92:57:39:05:2e:54:28:1f:27:7a:f3:7b:96:0b:e1: e8:04:bd:97:64:2c:4d:92:58:1a:84:d8:8a:cc:a1: 0c:f8:7d:0e:a7:f7:5b:09:be:9a:5f:f1:a7:4c:23: 30:3b:12:c5:23:d6:65:a9:8b:7a:34:e3:49:7d:1c: 4c:5b:ab:78:51:7a:dd:9a:07:4b:0d:c4:f4:b0:f6: 64:32:9e:27:ca:3f:cc:9e:82:b3:d4:98:48:0f:b3: 97:4c:73:7a:69:6d:4f:71:f8:13:50:45:9f:2e:3b: 3b:90:c9:38:6a:17:43:6a:49:b0:d8:e8:fb:ef:58: c0:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:06:FA:C1:3F:6B:0D:66:98:D4:F1:F6:B3:B4:F6:F6:D9:49:85:4B X509v3 Authority Key Identifier: keyid:6D:57:9D:1D:5F:A7:FD:2A:44:5B:5D:D8:EE:8F:26:37:B4:1F:0D:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bVedHV-n_SpEW13Y7o8mN7QfDUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/ZAb6wT9rDWaY1PH2s7T29tlJhUs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/bVedHV-n_SpEW13Y7o8mN7QfDUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.204.155.0/24 IPv6: 2a14:2180:1::-2a14:2180:4:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption b6:02:a6:47:f0:e0:1b:f3:c7:9c:9e:cf:9b:b8:35:90:3d:9a: 3c:8c:ec:64:f9:09:f2:18:21:eb:36:73:c3:29:e9:e5:2b:9f: 1d:a8:91:da:77:ed:af:65:f8:42:ed:f2:32:d2:c2:26:f0:43: 1a:3b:63:e4:f4:39:79:70:01:95:04:5c:a7:e7:09:99:24:30: 56:a9:99:70:bd:ca:42:4d:03:f0:33:eb:d7:c2:e9:fa:a5:0b: 35:a1:94:b3:71:3b:24:87:a6:b0:7d:b6:b7:cd:b9:e6:b4:43: 99:5f:fc:a0:37:ed:6d:06:cc:63:28:19:3a:4e:59:2b:6c:9e: cd:6c:48:13:bf:fe:53:93:09:93:17:c7:d1:5d:8e:74:4d:a0: 25:ad:aa:df:35:65:14:23:47:04:c5:2a:08:7a:1f:e8:46:bd: f4:36:07:1c:c2:4b:89:3c:14:43:2b:36:40:22:4f:55:ef:55: 8f:e6:ea:61:6e:73:2b:8f:2d:7a:9f:fa:a6:a0:1d:b3:b0:b2: 7d:64:b5:70:0f:3e:6a:54:38:b1:e7:8d:1e:15:34:13:c5:cb: 48:e3:ac:be:bf:49:96:19:b9:ce:36:a1:60:8f:e5:8b:6f:f4: 3a:26:e2:1a:ff:7e:89:0e:e9:93:37:6c:0d:00:f9:98:c5:df: 36:1f:94:ff -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt9yvNBG/MTYohBtFUnhb+GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNTc5ZDFkNWZhN2ZkMmE0NDViNWRkOGVlOGYyNjM3YjQx ZjBkNDAwHhcNMjYwMTAyMDgyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDA2ZmFjMTNmNmIwZDY2OThkNGYxZjZiM2I0ZjZmNmQ5NDk4NTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4+gD+JsPbOPoKiFsethFUw5i45u 1YDWunLPNOykR/e6H3tbwk/xUlGB8h45vUZee/9pn676gBzSlDK6WAzJ0tfFJTB4 HmGa62MyAVCrR8WdyDfc+JhgGj+iHWV9JBhV3SHltajW95qr/2Zt1FgaU47CXcbA rMJtRgki0QA/OJLo2O+HK6uSVzkFLlQoHyd683uWC+HoBL2XZCxNklgahNiKzKEM +H0Op/dbCb6aX/GnTCMwOxLFI9ZlqYt6NONJfRxMW6t4UXrdmgdLDcT0sPZkMp4n yj/MnoKz1JhID7OXTHN6aW1PcfgTUEWfLjs7kMk4ahdDakmw2Oj771jAgwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFGQG+sE/aw1mmNTx9rO09vbZSYVLMB8GA1UdIwQY MBaAFG1XnR1fp/0qRFtd2O6PJje0Hw1AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlZlZEhWLW5fU3BFVzEzWTdvOG1ON1FmRFVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9jNWVlN2QtZTU0NC00MjFhLWFmNDct ZjYzOTU4NjBmYzk4LzEvWkFiNndUOXJEV2FZMVBIMnM3VDI5dGxKaFVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9jNWVlN2QtZTU0NC00MjFhLWFmNDctZjYzOTU4NjBmYzk4 LzEvYlZlZEhWLW5fU3BFVzEzWTdvOG1ON1FmRFVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAMBAIAATAGAwQAucybMBoE AgACMBQwEgMHACoUIYAAAQMHACoUIYAABDANBgkqhkiG9w0BAQsFAAOCAQEAtgKm R/DgG/PHnJ7Pm7g1kD2aPIzsZPkJ8hgh6zZzwynp5SufHaiR2nftr2X4Qu3yMtLC JvBDGjtj5PQ5eXABlQRcp+cJmSQwVqmZcL3KQk0D8DPr18Lp+qULNaGUs3E7JIem sH22t8255rRDmV/8oDftbQbMYygZOk5ZK2yezWxIE7/+U5MJkxfH0V2OdE2gJa2q 3zVlFCNHBMUqCHof6Ea99DYHHMJLiTwUQys2QCJPVe9Vj+bqYW5zK48tep/6pqAd s7CyfWS1cA8+alQ4seeNHhU0E8XLSOOsvr9Jlhm5zjahYI/li2/0OibiGv9+iQ7p kzdsDQD5mMXfNh+U/w== -----END CERTIFICATE-----Generated at Mon Jan 26 14:09:37 2026 by rpki-client