This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/zb5Tq5SbF97sJGMW1tTdhsAEuGM.roa File: zb5Tq5SbF97sJGMW1tTdhsAEuGM.roa (raw, json) Hash identifier: uqnagb10dPZijwwxExnQT3uF2RU2GRewk0IqQqUbplQ= Subject key identifier: CD:BE:53:AB:94:9B:17:DE:EC:24:63:16:D6:D4:DD:86:C0:04:B8:63 Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019B7CEE61A3BA678511CCDCC36F90C4594B Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/zb5Tq5SbF97sJGMW1tTdhsAEuGM.roa Signing time: Fri 02 Jan 2026 04:19:15 +0000 ROA not before: Fri 02 Jan 2026 04:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 140224 IP address blocks: 87.229.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 04:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:61:a3:ba:67:85:11:cc:dc:c3:6f:90:c4:59:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Jan 2 04:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cdbe53ab949b17deec246316d6d4dd86c004b863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ca:c6:e6:ca:64:2f:b1:ed:54:9b:ed:d8:7d: d4:40:c8:f5:99:43:00:cc:dd:9c:c7:f6:5f:3a:0c: 06:ad:6c:fb:d9:ae:db:4c:75:b8:03:f5:ec:98:7b: c2:42:5e:38:f3:88:01:c0:e4:09:bb:b8:93:13:56: fc:b0:62:0b:61:d8:94:d7:c1:77:21:38:62:a2:24: 76:28:27:7f:b5:30:95:46:c6:e6:78:1e:45:d1:a5: ae:dc:87:73:4d:ac:69:4f:21:e3:da:6e:b4:b6:5f: c3:b5:d1:7b:ed:58:39:9b:9b:ff:5b:49:92:f9:d4: ac:38:29:64:60:30:c7:f9:7a:29:e4:43:2e:11:06: d7:15:d8:82:31:66:26:3b:7a:30:e1:1d:14:cc:23: e4:88:b8:1b:86:8b:6e:0b:c4:bd:5b:bd:08:a8:db: e1:ad:44:74:f5:91:f4:de:bd:10:89:a8:2f:23:00: 03:31:31:79:07:2a:3d:e8:49:22:aa:1a:e8:dc:2e: 92:14:b0:cf:b6:d6:76:cc:2b:b0:33:82:54:ea:1e: 14:16:35:7d:e4:05:d8:55:ba:a4:44:fd:27:88:ff: 28:fe:e1:16:8a:5b:cc:d9:80:f8:54:cd:1b:3a:27: 77:b6:81:c1:36:88:9e:f0:5e:46:c1:70:db:fb:a7: 31:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:BE:53:AB:94:9B:17:DE:EC:24:63:16:D6:D4:DD:86:C0:04:B8:63 X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/zb5Tq5SbF97sJGMW1tTdhsAEuGM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.229.92.0/24 Signature Algorithm: sha256WithRSAEncryption 60:7e:36:35:2c:6e:17:fb:aa:9d:23:d7:91:0c:86:d9:0a:e3: 64:7e:70:ec:95:73:35:51:55:36:1a:7f:b0:df:6c:89:bd:17: 83:90:48:a1:9f:90:2f:2b:dd:f6:48:26:f9:7c:5b:c0:35:16: 19:f0:f8:23:b6:de:4e:cf:d2:4a:ff:f0:00:c0:8c:98:0c:5b: 85:da:e2:44:20:c1:bd:d9:98:31:5a:a4:ab:b8:69:cb:53:d2: ca:a2:26:f1:b5:6f:95:39:73:88:2e:1b:fc:d3:30:5a:52:9d: 05:cc:19:d3:6c:47:26:f6:ef:63:9e:44:4f:ea:26:57:fd:dc: aa:e3:27:0c:50:aa:f2:66:92:33:97:d7:81:a5:19:51:2b:28: 21:24:23:16:93:6c:54:04:d1:33:b0:46:d1:05:dd:0b:2d:fb: c8:4d:32:5a:7e:ea:07:07:81:e4:61:7a:5b:7f:45:8a:f4:d3: ee:d2:9f:d4:ba:1a:44:f6:c0:9c:32:96:5b:a4:6d:df:61:87: 59:f4:75:64:88:8a:36:b4:9c:42:ed:42:66:48:91:82:1e:46: d4:4c:d0:1a:0a:7f:28:8f:ff:0f:a0:5b:e9:7c:3e:72:bf:ff: 84:16:b8:39:67:1e:2c:30:70:43:17:4a:f5:01:59:58:d0:de: 3d:70:ca:55 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87mGjumeFEczcw2+QxFlLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjYwMTAyMDQxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZGJlNTNhYjk0OWIxN2RlZWMyNDYzMTZkNmQ0ZGQ4NmMwMDRiODYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6MrG5spkL7HtVJvt2H3UQMj1mUMA zN2cx/ZfOgwGrWz72a7bTHW4A/XsmHvCQl4484gBwOQJu7iTE1b8sGILYdiU18F3 IThioiR2KCd/tTCVRsbmeB5F0aWu3IdzTaxpTyHj2m60tl/DtdF77Vg5m5v/W0mS +dSsOClkYDDH+Xop5EMuEQbXFdiCMWYmO3ow4R0UzCPkiLgbhotuC8S9W70IqNvh rUR09ZH03r0QiagvIwADMTF5Byo96Ekiqhro3C6SFLDPttZ2zCuwM4JU6h4UFjV9 5AXYVbqkRP0niP8o/uEWilvM2YD4VM0bOid3toHBNoie8F5GwXDb+6cxVwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM2+U6uUmxfe7CRjFtbU3YbABLhjMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvemI1VHE1U2JGOTdzSkdNVzF0VGRoc0FFdUdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+VcMA0G CSqGSIb3DQEBCwUAA4IBAQBgfjY1LG4X+6qdI9eRDIbZCuNkfnDslXM1UVU2Gn+w 32yJvReDkEihn5AvK932SCb5fFvANRYZ8Pgjtt5Oz9JK//AAwIyYDFuF2uJEIMG9 2ZgxWqSruGnLU9LKoibxtW+VOXOILhv80zBaUp0FzBnTbEcm9u9jnkRP6iZX/dyq 4ycMUKryZpIzl9eBpRlRKyghJCMWk2xUBNEzsEbRBd0LLfvITTJafuoHB4HkYXpb f0WK9NPu0p/UuhpE9sCcMpZbpG3fYYdZ9HVkiIo2tJxC7UJmSJGCHkbUTNAaCn8o j/8PoFvpfD5yv/+EFrg5Zx4sMHBDF0r1AVlY0N49cMpV -----END CERTIFICATE-----Generated at Mon Jan 19 11:23:53 2026 by rpki-client