This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/z88G2k3x1vOYYQKTh_PkSaJtHa0.roa File: z88G2k3x1vOYYQKTh_PkSaJtHa0.roa (raw, json) Hash identifier: WHkZWUrwFyd8LYRyYbBzrmTnc7S4CUxtZDKqCdTZ7Co= Subject key identifier: CF:CF:06:DA:4D:F1:D6:F3:98:61:02:93:87:F3:E4:49:A2:6D:1D:AD Certificate issuer: /CN=0e298900355fdf4254c20831f2d7ee3bec429bdb Certificate serial: 019B663CAA8AD01FAB1DBDC02042C8B161F2 Authority key identifier: 0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/z88G2k3x1vOYYQKTh_PkSaJtHa0.roa Signing time: Sun 28 Dec 2025 18:33:30 +0000 ROA not before: Sun 28 Dec 2025 18:33:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 60458 IP address blocks: 45.143.148.0/22 maxlen: 22 45.146.188.0/22 maxlen: 22 45.151.192.0/22 maxlen: 22 185.37.231.0/24 maxlen: 24 185.100.72.0/22 maxlen: 22 185.125.78.0/24 maxlen: 24 185.156.219.0/24 maxlen: 24 185.162.168.0/23 maxlen: 23 185.162.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:3c:aa:8a:d0:1f:ab:1d:bd:c0:20:42:c8:b1:61:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e298900355fdf4254c20831f2d7ee3bec429bdb Validity Not Before: Dec 28 18:33:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cfcf06da4df1d6f39861029387f3e449a26d1dad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:dc:ea:88:05:da:ca:b0:58:4e:d5:fc:84:90: 42:20:4f:dd:9a:02:c4:98:45:84:44:13:7d:ae:8a: dd:43:23:78:be:cd:a2:1b:95:cb:b6:4a:93:53:2e: 2a:56:9b:cd:78:b6:b2:e2:2f:51:a5:d4:fa:86:19: 56:bd:18:58:50:df:95:e0:77:57:dd:f5:1d:78:b0: 42:71:ed:3f:71:fb:da:8b:99:a6:66:03:70:3c:95: de:45:24:44:7d:08:ea:37:51:82:d8:72:8e:1e:05: fe:1d:4c:69:2c:26:38:b9:86:0a:a7:9b:e4:80:53: 7d:15:bf:15:c3:38:d8:75:20:89:50:04:63:cb:a4: c6:20:6d:09:eb:29:ca:07:1f:aa:e3:66:7e:5e:fa: 1a:79:75:32:33:2c:60:31:b2:9e:cd:37:85:f9:41: a4:15:22:3c:5b:89:9d:8a:95:1c:e0:f4:88:ed:5a: 7d:e4:a3:88:49:88:b1:96:3b:5a:e4:d2:83:63:61: 05:a5:86:d9:66:72:a9:e9:42:99:f4:4a:35:b4:c9: 02:17:ed:48:3c:d3:4a:3b:53:11:dc:5f:3b:0b:67: 37:4e:c0:63:36:13:ae:3b:2c:b1:de:08:65:a6:ab: ef:34:91:9e:87:88:ba:10:8a:57:f7:f1:d6:aa:34: 4b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:CF:06:DA:4D:F1:D6:F3:98:61:02:93:87:F3:E4:49:A2:6D:1D:AD X509v3 Authority Key Identifier: keyid:0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/z88G2k3x1vOYYQKTh_PkSaJtHa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.143.148.0/22 45.146.188.0/22 45.151.192.0/22 185.37.231.0/24 185.100.72.0/22 185.125.78.0/24 185.156.219.0/24 185.162.168.0/23 185.162.171.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:de:8d:4e:37:4d:a5:dd:5c:df:c2:3e:15:38:99:fd:fc:fe: 59:d6:ae:ad:d0:eb:7a:b2:ba:40:83:2d:2f:ae:d0:87:a0:cb: 51:4b:ae:31:12:35:7b:b9:41:8b:4e:d4:64:b1:28:c5:e5:77: 49:35:71:83:e0:8d:b8:7b:70:f0:94:b5:47:cc:6e:41:3f:49: d5:15:52:a6:63:74:2a:80:a2:25:d8:0e:7b:f7:19:81:92:92: 1d:ef:f9:e4:02:c6:0c:29:78:ed:8a:51:6d:5f:4f:50:14:6d: 62:4d:7e:7d:94:49:82:3f:4b:bf:6f:35:23:0e:df:c4:48:7f: ab:95:8d:4b:3b:8f:b8:25:9e:82:4d:af:5f:6f:24:10:cb:94: c9:82:26:39:d8:42:8a:c3:7a:e4:46:98:8b:f9:49:8a:6d:b4: 53:51:3e:c1:a7:41:67:cc:55:fb:c5:5c:d9:b4:7f:04:a1:97: 55:f6:ab:9f:37:b4:c5:3d:23:3a:38:2b:01:ce:e7:9c:40:1a: 8f:82:41:9a:84:af:50:27:29:c2:f7:ba:02:64:45:6f:be:3a: f5:44:43:74:00:9a:a4:6e:31:90:d4:70:25:a5:0a:0a:21:04: 69:fc:ce:f4:32:a7:2c:0e:de:25:d9:84:fd:a6:c1:7a:02:d7: 55:82:a5:fe -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZtmPKqK0B+rHb3AIELIsWHyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMjk4OTAwMzU1ZmRmNDI1NGMyMDgzMWYyZDdlZTNiZWM0 MjliZGIwHhcNMjUxMjI4MTgzMzMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZmNmMDZkYTRkZjFkNmYzOTg2MTAyOTM4N2YzZTQ0OWEyNmQxZGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5dzqiAXayrBYTtX8hJBCIE/dmgLE mEWERBN9rordQyN4vs2iG5XLtkqTUy4qVpvNeLay4i9RpdT6hhlWvRhYUN+V4HdX 3fUdeLBCce0/cfvai5mmZgNwPJXeRSREfQjqN1GC2HKOHgX+HUxpLCY4uYYKp5vk gFN9Fb8VwzjYdSCJUARjy6TGIG0J6ynKBx+q42Z+XvoaeXUyMyxgMbKezTeF+UGk FSI8W4mdipUc4PSI7Vp95KOISYixljta5NKDY2EFpYbZZnKp6UKZ9Eo1tMkCF+1I PNNKO1MR3F87C2c3TsBjNhOuOyyx3ghlpqvvNJGeh4i6EIpX9/HWqjRLowIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFM/PBtpN8dbzmGECk4fz5EmibR2tMB8GA1UdIwQY MBaAFA4piQA1X99CVMIIMfLX7jvsQpvbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGltSkFEVmYzMEpVd2dneDh0ZnVPLXhDbTlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9jZmVhOWUtYmVlMi00YmNiLThkZWYt M2U0Yjc0ZGQwNThkLzEvejg4RzJrM3gxdk9ZWVFLVGhfUGtTYUp0SGEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9jZmVhOWUtYmVlMi00YmNiLThkZWYtM2U0Yjc0ZGQwNThk LzEvRGltSkFEVmYzMEpVd2dneDh0ZnVPLXhDbTlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQCLY+UAwQC LZK8AwQCLZfAAwQAuSXnAwQCuWRIAwQAuX1OAwQAuZzbAwQBuaKoAwQAuaKrMA0G CSqGSIb3DQEBCwUAA4IBAQAP3o1ON02l3Vzfwj4VOJn9/P5Z1q6t0Ot6srpAgy0v rtCHoMtRS64xEjV7uUGLTtRksSjF5XdJNXGD4I24e3DwlLVHzG5BP0nVFVKmY3Qq gKIl2A579xmBkpId7/nkAsYMKXjtilFtX09QFG1iTX59lEmCP0u/bzUjDt/ESH+r lY1LO4+4JZ6CTa9fbyQQy5TJgiY52EKKw3rkRpiL+UmKbbRTUT7Bp0FnzFX7xVzZ tH8EoZdV9qufN7TFPSM6OCsBzuecQBqPgkGahK9QJynC97oCZEVvvjr1REN0AJqk bjGQ1HAlpQoKIQRp/M70MqcsDt4l2YT9psF6AtdVgqX+ -----END CERTIFICATE-----Generated at Wed Dec 31 00:57:06 2025 by rpki-client