This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/ZMqTwlIwPeE8mvoUVuRcrTCwgzU.roa File: ZMqTwlIwPeE8mvoUVuRcrTCwgzU.roa (raw, json) Hash identifier: aGqzihW0U2Fa6GEAQlzK17OaJFeFsHY8Inov7Q4Zp7U= Subject key identifier: 64:CA:93:C2:52:30:3D:E1:3C:9A:FA:14:56:E4:5C:AD:30:B0:83:35 Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Certificate serial: 019AD8C0D91E60544F611C05B97FF35278F6 Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/ZMqTwlIwPeE8mvoUVuRcrTCwgzU.roa Signing time: Mon 01 Dec 2025 07:11:48 +0000 ROA not before: Mon 01 Dec 2025 07:11:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 178.239.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d8:c0:d9:1e:60:54:4f:61:1c:05:b9:7f:f3:52:78:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Validity Not Before: Dec 1 07:11:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=64ca93c252303de13c9afa1456e45cad30b08335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:14:04:c8:fc:7f:4b:3a:bb:37:6d:dd:7d:13: 35:52:b8:fb:a3:1f:48:b7:fd:bf:7c:79:d7:6c:cc: cc:ff:24:59:26:ed:86:2f:52:d6:ca:42:23:31:38: 2a:54:e6:f8:fd:12:f7:b7:1c:0f:6f:ba:f6:f6:00: d3:a9:d0:ec:de:13:75:45:b6:b6:4c:ef:3a:e9:d0: 35:a9:f9:ba:4f:5f:e2:40:25:b1:70:be:a8:55:13: 7f:af:f2:de:70:72:d2:45:73:9e:cf:5c:c5:c7:c5: 96:aa:de:0c:c1:3f:3a:5d:f5:e8:6b:b9:0d:92:95: 3e:00:e3:04:aa:80:73:fe:a6:75:c8:07:de:df:3f: f9:75:11:a6:e3:91:57:61:b2:51:98:cd:ac:1d:e0: b6:08:06:9f:e2:2b:0d:a3:54:ac:41:e7:5b:31:44: 6c:b0:58:9d:a4:10:f1:9b:2c:c6:1d:5c:3c:05:44: 76:cc:82:08:62:f7:f9:e0:02:17:4d:80:ac:50:54: dd:13:9f:1a:fa:b1:61:c4:95:43:09:10:66:7c:ce: d4:b7:2c:86:b6:ec:e0:14:b1:b6:0b:00:c3:d8:6c: 2b:63:19:6c:55:9d:87:b1:42:d3:06:25:d9:ab:98: 3f:7f:49:e0:af:e8:0c:55:b4:48:2c:6d:81:f7:ed: c3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:CA:93:C2:52:30:3D:E1:3C:9A:FA:14:56:E4:5C:AD:30:B0:83:35 X509v3 Authority Key Identifier: keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/ZMqTwlIwPeE8mvoUVuRcrTCwgzU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.239.116.0/24 Signature Algorithm: sha256WithRSAEncryption 10:b2:50:24:ed:73:71:e6:fa:6f:46:3f:be:5e:df:47:0a:39: f2:23:83:9c:b9:f9:36:76:8a:dc:4b:bf:42:07:4c:48:34:84: 26:61:d5:1e:64:32:76:4a:57:87:b2:11:dc:b5:e7:58:8b:f7: 6a:fe:3a:9b:e6:86:1c:21:8c:6b:6d:09:7d:e6:67:58:10:3e: e7:e2:ae:c0:6e:87:be:4e:48:6a:19:87:08:e1:43:29:b6:88: 58:1c:5c:6b:f3:0c:f8:c1:64:19:a5:31:7e:71:cb:0c:d0:66: 11:38:b8:d1:c9:2e:99:f3:f8:c7:4f:39:e8:ac:48:ca:18:d8: 29:44:3b:88:87:41:8a:02:3c:06:a5:f0:bc:59:89:94:83:d6: 1c:34:4a:f6:d4:66:bb:de:54:41:13:f9:64:1f:04:7f:45:5a: 71:9c:51:a2:a9:ff:74:a1:82:a3:c5:61:a9:d0:8b:4e:cb:4e: 01:ca:7b:5e:bc:4c:23:fc:5c:3c:ea:33:a9:2c:17:29:33:13: 42:78:4c:b5:d7:3a:7e:30:ae:25:a7:a4:28:c2:2e:74:27:b8: f6:4c:ed:5c:f1:12:7c:53:e2:af:97:95:48:83:3a:ce:6b:c8: d9:79:b6:fa:c0:9e:43:e9:88:83:77:3e:14:fb:a6:fc:7e:07: fc:d4:3a:c9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrYwNkeYFRPYRwFuX/zUnj2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZDJkYWZmMWM1YmI2MWEwYWM4YjNjYWVhZDRiOGExZmEy ODRkMGYwHhcNMjUxMjAxMDcxMTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NGNhOTNjMjUyMzAzZGUxM2M5YWZhMTQ1NmU0NWNhZDMwYjA4MzM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxQEyPx/Szq7N23dfRM1Urj7ox9I t/2/fHnXbMzM/yRZJu2GL1LWykIjMTgqVOb4/RL3txwPb7r29gDTqdDs3hN1Rba2 TO866dA1qfm6T1/iQCWxcL6oVRN/r/LecHLSRXOez1zFx8WWqt4MwT86XfXoa7kN kpU+AOMEqoBz/qZ1yAfe3z/5dRGm45FXYbJRmM2sHeC2CAaf4isNo1SsQedbMURs sFidpBDxmyzGHVw8BUR2zIIIYvf54AIXTYCsUFTdE58a+rFhxJVDCRBmfM7UtyyG tuzgFLG2CwDD2GwrYxlsVZ2HsULTBiXZq5g/f0ngr+gMVbRILG2B9+3DwQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGTKk8JSMD3hPJr6FFbkXK0wsIM1MB8GA1UdIwQY MBaAFCnS2v8cW7YaCsizyurUuKH6KE0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3Zjgt NGY1N2Q5Y2Y1Y2FhLzEvWk1xVHdsSXdQZUU4bXZvVVZ1UmNyVEN3Z3pVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3ZjgtNGY1N2Q5Y2Y1Y2Fh LzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsu90MA0G CSqGSIb3DQEBCwUAA4IBAQAQslAk7XNx5vpvRj++Xt9HCjnyI4Ocufk2dorcS79C B0xINIQmYdUeZDJ2SleHshHctedYi/dq/jqb5oYcIYxrbQl95mdYED7n4q7Aboe+ TkhqGYcI4UMptohYHFxr8wz4wWQZpTF+ccsM0GYROLjRyS6Z8/jHTznorEjKGNgp RDuIh0GKAjwGpfC8WYmUg9YcNEr21Ga73lRBE/lkHwR/RVpxnFGiqf90oYKjxWGp 0ItOy04ByntevEwj/Fw86jOpLBcpMxNCeEy11zp+MK4lp6Qowi50J7j2TO1c8RJ8 U+Kvl5VIgzrOa8jZebb6wJ5D6YiDdz4U+6b8fgf81DrJ -----END CERTIFICATE-----Generated at Fri Dec 5 21:06:58 2025 by rpki-client