This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/ZOPpffnLkzVDBFjxA2KB9nv0Bg8.roa File: ZOPpffnLkzVDBFjxA2KB9nv0Bg8.roa (raw, json) Hash identifier: 01ysIczyztSZJ9tJXJJ4fsGrtMUrg5BjoJCrO1jiEBE= Subject key identifier: 64:E3:E9:7D:F9:CB:93:35:43:04:58:F1:03:62:81:F6:7B:F4:06:0F Certificate issuer: /CN=9ef19871b1759f3237012e4b6dbb6c2fd2be8b4b Certificate serial: 019A78E7A21BC4ABD2AF85EB3B2EC631A652 Authority key identifier: 9E:F1:98:71:B1:75:9F:32:37:01:2E:4B:6D:BB:6C:2F:D2:BE:8B:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nvGYcbF1nzI3AS5LbbtsL9K-i0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/ZOPpffnLkzVDBFjxA2KB9nv0Bg8.roa Signing time: Wed 12 Nov 2025 16:30:37 +0000 ROA not before: Wed 12 Nov 2025 16:30:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213152 IP address blocks: 193.37.226.0/23 maxlen: 23 193.37.230.0/23 maxlen: 23 2a0f:b480::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.crl rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft rsync://rpki.ripe.net/repository/DEFAULT/nvGYcbF1nzI3AS5LbbtsL9K-i0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:78:e7:a2:1b:c4:ab:d2:af:85:eb:3b:2e:c6:31:a6:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ef19871b1759f3237012e4b6dbb6c2fd2be8b4b Validity Not Before: Nov 12 16:30:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=64e3e97df9cb9335430458f1036281f67bf4060f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:74:8a:d7:87:37:03:75:5d:15:00:0d:ea:7b: a2:5c:d7:89:93:b6:1d:e5:50:e1:7c:c3:4f:7e:9b: 75:cd:b5:25:79:18:dd:ad:af:48:df:33:4c:ca:af: 5b:34:cc:0b:05:e8:26:28:92:9e:25:50:fb:ef:c0: fa:6b:08:98:52:00:23:a6:d8:1f:30:22:a0:7b:35: 01:be:2f:ec:3b:de:75:44:09:23:28:eb:49:ab:f5: 50:75:12:d3:2f:ef:50:41:83:35:39:fd:f0:ec:1c: 56:91:74:f4:61:c7:fb:df:02:cd:59:ee:42:e3:81: 40:c7:2f:3b:3e:1c:62:c1:14:4d:ac:13:d2:98:10: 31:f6:f7:ba:a3:71:78:e4:ff:8d:68:ac:e2:dc:64: e7:f7:07:4f:05:8b:f9:ac:c5:1d:6b:32:c1:a7:14: f1:c9:ba:24:1b:3f:de:3c:35:8e:a1:bb:31:69:1a: 45:47:0e:6c:38:4d:59:fc:23:24:15:11:ea:85:e9: 70:0f:54:fe:c8:1b:ce:a7:5b:cd:df:2e:27:de:aa: d6:ed:19:99:48:04:8c:0a:e0:94:d9:84:25:98:63: 74:71:43:7a:98:83:cf:7b:74:c2:b4:a5:b7:86:8b: c5:88:46:56:80:2b:19:53:a5:bd:1b:42:5b:24:3c: 63:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:E3:E9:7D:F9:CB:93:35:43:04:58:F1:03:62:81:F6:7B:F4:06:0F X509v3 Authority Key Identifier: keyid:9E:F1:98:71:B1:75:9F:32:37:01:2E:4B:6D:BB:6C:2F:D2:BE:8B:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nvGYcbF1nzI3AS5LbbtsL9K-i0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/ZOPpffnLkzVDBFjxA2KB9nv0Bg8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.37.226.0/23 193.37.230.0/23 IPv6: 2a0f:b480::/29 Signature Algorithm: sha256WithRSAEncryption 16:7f:0e:7c:a6:f7:39:3f:4f:38:1f:a5:57:9e:25:bd:44:49: ee:5c:d8:e9:15:53:db:77:b3:6f:87:ca:de:0d:b7:8d:27:2e: 48:b9:58:ce:2a:48:7c:b8:9e:ff:a2:92:6c:5a:ee:23:24:17: 11:3a:43:e4:3a:de:5c:9e:49:31:8f:3b:08:a1:0c:36:55:91: cc:3e:1c:d0:db:4e:c6:20:2e:13:d0:a6:7e:c3:3a:11:53:a5: e4:75:54:92:70:9d:68:ab:ca:05:d6:74:a8:d5:26:5e:77:58: ef:26:02:bd:fd:78:6b:71:fe:b3:fd:c6:8b:2e:df:5f:9e:48: 83:d7:f9:1b:ac:e8:5f:d2:ae:94:32:ec:b8:be:17:23:67:54: f9:13:56:71:f7:d4:e5:92:7d:f4:2f:38:27:27:e8:68:47:fa: 15:62:28:75:3f:80:7f:f6:ba:2d:f6:49:74:18:81:5d:59:c1: a7:6e:a6:ad:14:7b:55:bb:7c:b7:9d:00:3e:77:4e:f2:f4:e8: 80:9b:db:3d:c7:e4:6a:66:7f:4d:32:55:a7:41:c9:50:58:45: 4b:06:e0:8f:b6:d4:6c:60:5a:b8:42:f8:9c:b3:58:ac:95:43: 06:da:8f:1b:13:e1:4b:27:c9:d4:56:b3:2f:a0:65:99:c2:74: 92:aa:00:42 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZp456IbxKvSr4XrOy7GMaZSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllZjE5ODcxYjE3NTlmMzIzNzAxMmU0YjZkYmI2YzJmZDJi ZThiNGIwHhcNMjUxMTEyMTYzMDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NGUzZTk3ZGY5Y2I5MzM1NDMwNDU4ZjEwMzYyODFmNjdiZjQwNjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHSK14c3A3VdFQAN6nuiXNeJk7Yd 5VDhfMNPfpt1zbUleRjdra9I3zNMyq9bNMwLBegmKJKeJVD778D6awiYUgAjptgf MCKgezUBvi/sO951RAkjKOtJq/VQdRLTL+9QQYM1Of3w7BxWkXT0Ycf73wLNWe5C 44FAxy87PhxiwRRNrBPSmBAx9ve6o3F45P+NaKzi3GTn9wdPBYv5rMUdazLBpxTx ybokGz/ePDWOobsxaRpFRw5sOE1Z/CMkFRHqhelwD1T+yBvOp1vN3y4n3qrW7RmZ SASMCuCU2YQlmGN0cUN6mIPPe3TCtKW3hovFiEZWgCsZU6W9G0JbJDxj2QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFGTj6X35y5M1QwRY8QNigfZ79AYPMB8GA1UdIwQY MBaAFJ7xmHGxdZ8yNwEuS227bC/SvotLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnZHWWNiRjFuekkzQVM1TGJidHNMOUstaTBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9hMzZkYmItNjAyNy00M2M0LTgxOTQt NGEwY2IyNTVkNzNhLzEvWk9QcGZmbkxrelZEQkZqeEEyS0I5bnYwQmc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9hMzZkYmItNjAyNy00M2M0LTgxOTQtNGEwY2IyNTVkNzNh LzEvbnZHWWNiRjFuekkzQVM1TGJidHNMOUstaTBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBwSXiAwQB wSXmMA0EAgACMAcDBQMqD7SAMA0GCSqGSIb3DQEBCwUAA4IBAQAWfw58pvc5P084 H6VXniW9REnuXNjpFVPbd7Nvh8reDbeNJy5IuVjOKkh8uJ7/opJsWu4jJBcROkPk Ot5cnkkxjzsIoQw2VZHMPhzQ207GIC4T0KZ+wzoRU6XkdVSScJ1oq8oF1nSo1SZe d1jvJgK9/Xhrcf6z/caLLt9fnkiD1/kbrOhf0q6UMuy4vhcjZ1T5E1Zx99Tlkn30 LzgnJ+hoR/oVYih1P4B/9rot9kl0GIFdWcGnbqatFHtVu3y3nQA+d07y9OiAm9s9 x+RqZn9NMlWnQclQWEVLBuCPttRsYFq4Qvics1islUMG2o8bE+FLJ8nUVrMvoGWZ wnSSqgBC -----END CERTIFICATE-----Generated at Fri Dec 19 14:23:27 2025 by rpki-client