This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/ZH-ubDHMTokKJo5bC-2xrgqpRoI.roa File: ZH-ubDHMTokKJo5bC-2xrgqpRoI.roa (raw, json) Hash identifier: 6Q7NLS2V8iJ8f1eLvcQ02pin+ITxCpIatXV5c1GWnBE= Subject key identifier: 64:7F:AE:6C:31:CC:4E:89:0A:26:8E:5B:0B:ED:B1:AE:0A:A9:46:82 Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c Certificate serial: 019C2CA35FC234F043C2636BBCEB8987B108 Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/ZH-ubDHMTokKJo5bC-2xrgqpRoI.roa Signing time: Thu 05 Feb 2026 07:10:30 +0000 ROA not before: Thu 05 Feb 2026 07:10:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 26769 IP address blocks: 144.56.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:2c:a3:5f:c2:34:f0:43:c2:63:6b:bc:eb:89:87:b1:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16055801b775e774306321455fd463fbd9273c4c Validity Not Before: Feb 5 07:10:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=647fae6c31cc4e890a268e5b0bedb1ae0aa94682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:99:b9:67:87:92:ea:79:09:24:c6:56:58:e1: 89:11:aa:cd:ca:c8:cd:c0:50:c4:ac:e9:35:f5:bf: a3:51:3a:97:fc:cc:a7:e4:0d:95:ab:fb:5d:f6:8d: 16:cc:c2:ca:19:84:38:04:1b:b2:f5:77:42:9c:03: a3:db:b3:e7:72:ed:03:d7:8d:4d:99:1f:af:ba:22: 06:47:9c:95:35:2d:2f:98:95:50:3a:27:a7:c0:48: 6a:77:cf:b1:77:1e:17:c7:e3:48:a8:08:af:2e:f5: 3e:a2:0e:7b:59:c5:d1:6b:63:f8:f0:11:1c:28:07: 36:f7:2b:4c:e9:43:a3:dd:c4:23:51:2f:8c:c0:ac: b9:16:0d:9a:75:d4:33:93:a7:57:5d:1c:a7:6f:1c: f6:66:8c:81:70:82:35:a4:f1:56:60:df:cf:74:c5: e2:0a:70:ca:70:92:f3:a9:70:1e:ae:e8:a1:dd:e1: 45:79:c9:44:26:ee:47:77:98:3f:84:0e:65:0b:35: c8:34:37:93:64:5f:98:b6:3c:64:fd:b0:5f:61:e5: 92:6f:cf:fc:05:3c:e3:b9:66:03:74:8e:11:8c:c9: 68:cc:53:1a:4f:96:20:76:3b:b9:79:a5:61:27:9f: 03:76:4d:80:9c:8b:97:2a:c9:0a:ba:91:90:67:be: 09:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:7F:AE:6C:31:CC:4E:89:0A:26:8E:5B:0B:ED:B1:AE:0A:A9:46:82 X509v3 Authority Key Identifier: keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/ZH-ubDHMTokKJo5bC-2xrgqpRoI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.56.37.0/24 Signature Algorithm: sha256WithRSAEncryption b6:96:3b:ce:d3:3f:21:da:03:a9:98:c7:91:da:39:59:44:5d: 9f:d1:57:55:e9:ac:4a:d9:04:9e:17:ac:85:f8:99:b6:bd:f1: 70:e6:4f:0c:0d:6c:db:40:d1:f5:d1:03:ce:81:ce:51:6d:4e: 34:0a:74:78:70:04:f7:22:a9:12:52:44:6f:07:8e:04:1a:05: ea:03:7c:e6:b9:a4:34:cc:e0:b5:aa:6d:e1:97:c4:18:69:26: dc:7d:52:d6:e0:5b:e6:cc:bb:85:77:36:ca:aa:21:71:09:1f: a2:43:f4:b8:e7:d3:7c:02:2b:23:0c:75:6f:0f:f6:4c:42:5f: 57:41:1a:fe:69:9c:c3:7e:39:8b:e4:f2:20:95:c7:32:3e:29: c2:37:ec:21:9d:30:17:49:b7:d9:d0:59:a1:13:23:b7:fa:a1: b0:cb:9e:d0:27:5c:0c:41:5b:b8:85:ef:2c:af:63:52:9a:f6: d8:f4:90:2f:12:50:24:d5:81:43:3c:f6:3e:6f:48:1f:c7:fe: 9a:05:18:92:ee:cd:a9:e3:ff:d3:87:df:ba:15:2d:69:ae:7b: 78:70:cd:6b:a6:a4:ab:2a:1d:01:9a:ae:f3:4e:a3:b7:f2:c0: 39:4d:29:12:a9:89:d2:68:aa:98:ea:e6:64:b3:0a:6a:69:8d: 8d:f9:c5:b1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwso1/CNPBDwmNrvOuJh7EIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MDU1ODAxYjc3NWU3NzQzMDYzMjE0NTVmZDQ2M2ZiZDky NzNjNGMwHhcNMjYwMjA1MDcxMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDdmYWU2YzMxY2M0ZTg5MGEyNjhlNWIwYmVkYjFhZTBhYTk0NjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJm5Z4eS6nkJJMZWWOGJEarNysjN wFDErOk19b+jUTqX/Myn5A2Vq/td9o0WzMLKGYQ4BBuy9XdCnAOj27Pncu0D141N mR+vuiIGR5yVNS0vmJVQOienwEhqd8+xdx4Xx+NIqAivLvU+og57WcXRa2P48BEc KAc29ytM6UOj3cQjUS+MwKy5Fg2addQzk6dXXRynbxz2ZoyBcII1pPFWYN/PdMXi CnDKcJLzqXAeruih3eFFeclEJu5Hd5g/hA5lCzXINDeTZF+Ytjxk/bBfYeWSb8/8 BTzjuWYDdI4RjMlozFMaT5Ygdju5eaVhJ58Ddk2AnIuXKskKupGQZ74JOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGR/rmwxzE6JCiaOWwvtsa4KqUaCMB8GA1UdIwQY MBaAFBYFWAG3ded0MGMhRV/UY/vZJzxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgt MTM1NzE3ZWYzODhhLzEvWkgtdWJESE1Ub2tLSm81YkMtMnhyZ3FwUm9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgtMTM1NzE3ZWYzODhh LzEvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkDglMA0G CSqGSIb3DQEBCwUAA4IBAQC2ljvO0z8h2gOpmMeR2jlZRF2f0VdV6axK2QSeF6yF +Jm2vfFw5k8MDWzbQNH10QPOgc5RbU40CnR4cAT3IqkSUkRvB44EGgXqA3zmuaQ0 zOC1qm3hl8QYaSbcfVLW4FvmzLuFdzbKqiFxCR+iQ/S459N8AisjDHVvD/ZMQl9X QRr+aZzDfjmL5PIglccyPinCN+whnTAXSbfZ0FmhEyO3+qGwy57QJ1wMQVu4he8s r2NSmvbY9JAvElAk1YFDPPY+b0gfx/6aBRiS7s2p4//Th9+6FS1prnt4cM1rpqSr Kh0Bmq7zTqO38sA5TSkSqYnSaKqY6uZkswpqaY2N+cWx -----END CERTIFICATE-----Generated at Tue Feb 10 01:50:20 2026 by rpki-client