This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/0ZW1Yp3Jr3YbjISgjyVISpop_bY.roa File: 0ZW1Yp3Jr3YbjISgjyVISpop_bY.roa (raw, json) Hash identifier: y3wJcCNaIFlz7qKFqPLi+oYpGL2vY28QmGF6aCs6tcU= Subject key identifier: D1:95:B5:62:9D:C9:AF:76:1B:8C:84:A0:8F:25:48:4A:9A:29:FD:B6 Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Certificate serial: 019B2773A7F4D9E7A0F4B08ABFCD15FAB2DA Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/0ZW1Yp3Jr3YbjISgjyVISpop_bY.roa Signing time: Tue 16 Dec 2025 13:57:29 +0000 ROA not before: Tue 16 Dec 2025 13:57:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 11967 IP address blocks: 2a0d:d940:70::/44 maxlen: 48 2a0d:d940:2002::/48 maxlen: 48 2a0d:d940:2004::/48 maxlen: 48 2a0d:d940:2006::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 16:02:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:73:a7:f4:d9:e7:a0:f4:b0:8a:bf:cd:15:fa:b2:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Validity Not Before: Dec 16 13:57:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d195b5629dc9af761b8c84a08f25484a9a29fdb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:cd:bd:86:a2:3c:f5:85:77:93:06:8f:7a:77: 30:da:9c:64:18:a5:37:f8:c1:11:78:1d:bd:fc:e8: cc:b0:ca:8c:cb:31:e0:81:70:f1:f0:d7:52:18:9f: d9:e7:de:bc:39:73:6b:8e:07:44:44:79:29:aa:29: b9:76:03:c9:d9:33:29:1a:da:2c:e6:07:ce:f2:f3: 36:ea:48:e9:0e:0c:e1:7c:78:33:49:9f:f6:fb:af: 53:96:33:cb:9b:a2:ba:d1:f0:f4:2b:26:dd:3a:33: 1f:15:2e:0e:e2:0c:bc:30:3e:6a:5c:52:5a:f2:78: 0a:a4:e7:00:a1:9d:fe:b7:27:66:a9:60:af:a1:72: 6f:f5:94:1f:2a:b0:42:19:8b:10:07:75:c8:74:80: e5:e7:80:62:13:6b:7e:1f:81:5f:f6:e6:d4:af:4e: 2a:e5:77:1c:36:58:7e:05:cb:b5:76:f8:a3:e9:66: f2:1e:65:5d:85:c5:65:43:60:a7:42:5c:0e:40:06: 97:ea:19:42:9e:67:13:25:c3:dd:6e:f3:5e:57:c0: f7:6e:bf:ad:3b:00:6e:0a:e6:dc:75:9a:45:85:51: a8:19:52:94:20:d8:01:1e:8d:3c:30:7f:c4:d2:c8: 41:66:05:9e:b2:fe:a4:42:26:5d:bb:c3:a9:c1:c8: 91:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:95:B5:62:9D:C9:AF:76:1B:8C:84:A0:8F:25:48:4A:9A:29:FD:B6 X509v3 Authority Key Identifier: keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/0ZW1Yp3Jr3YbjISgjyVISpop_bY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:d940:70::/44 2a0d:d940:2002::/48 2a0d:d940:2004::/48 2a0d:d940:2006::/48 Signature Algorithm: sha256WithRSAEncryption a8:86:70:03:dc:fd:23:2c:68:fe:bf:4e:0e:6b:7f:2a:6a:e5: 6a:f0:f1:2d:f5:f6:ec:66:07:4e:97:05:7f:0b:c2:ba:bb:28: c9:eb:4f:d8:0b:74:af:ae:17:68:3b:4e:f5:79:50:6d:18:65: 7b:e7:90:91:7d:c8:4d:fa:e6:ed:81:43:f3:c3:88:8b:70:c1: 70:4e:d4:a9:d5:d7:4b:10:fb:4f:f8:86:55:25:00:c3:9e:5f: b1:ef:5e:6c:34:1a:fa:9f:80:82:7d:fa:75:e2:75:45:86:86: 2b:b3:af:6b:7d:05:99:9f:e9:8e:ef:ea:36:53:69:22:1c:25: 55:b7:c9:54:2d:0e:26:b0:30:e4:92:fc:ce:67:53:f7:0a:59: 04:be:d9:de:12:63:f2:4e:1d:9e:ed:93:56:63:d5:9a:9c:3f: 53:d0:1e:2f:32:06:8d:8b:b9:56:b2:0d:2e:b9:c7:39:3a:9b: 6b:1c:1c:b3:28:af:06:df:1a:f3:de:dc:ac:5b:23:a1:87:7c: 09:8e:8f:79:aa:1b:c2:ca:fd:66:57:89:50:10:ae:d4:5b:5c: d8:78:e7:02:4e:70:72:4e:41:ee:c0:02:c7:7c:a7:83:d1:58: fa:0b:73:d0:da:7c:85:d2:e2:7d:b1:dd:ff:89:87:ed:01:5e: 2f:55:36:40 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZsnc6f02eeg9LCKv80V+rLaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj YmJjNzQwHhcNMjUxMjE2MTM1NzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTk1YjU2MjlkYzlhZjc2MWI4Yzg0YTA4ZjI1NDg0YTlhMjlmZGI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApM29hqI89YV3kwaPencw2pxkGKU3 +MEReB29/OjMsMqMyzHggXDx8NdSGJ/Z5968OXNrjgdERHkpqim5dgPJ2TMpGtos 5gfO8vM26kjpDgzhfHgzSZ/2+69TljPLm6K60fD0KybdOjMfFS4O4gy8MD5qXFJa 8ngKpOcAoZ3+tydmqWCvoXJv9ZQfKrBCGYsQB3XIdIDl54BiE2t+H4Ff9ubUr04q 5XccNlh+Bcu1dvij6WbyHmVdhcVlQ2CnQlwOQAaX6hlCnmcTJcPdbvNeV8D3br+t OwBuCubcdZpFhVGoGVKUINgBHo08MH/E0shBZgWesv6kQiZdu8OpwciRNQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFNGVtWKdya92G4yEoI8lSEqaKf22MB8GA1UdIwQY MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt MTRkMjM4NTI3ODM1LzEvMFpXMVlwM0pyM1liaklTZ2p5VklTcG9wX2JZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1 LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAAjAkAwcEKg3ZQABw AwcAKg3ZQCACAwcAKg3ZQCAEAwcAKg3ZQCAGMA0GCSqGSIb3DQEBCwUAA4IBAQCo hnAD3P0jLGj+v04Oa38qauVq8PEt9fbsZgdOlwV/C8K6uyjJ60/YC3SvrhdoO071 eVBtGGV755CRfchN+ubtgUPzw4iLcMFwTtSp1ddLEPtP+IZVJQDDnl+x715sNBr6 n4CCffp14nVFhoYrs69rfQWZn+mO7+o2U2kiHCVVt8lULQ4msDDkkvzOZ1P3ClkE vtneEmPyTh2e7ZNWY9WanD9T0B4vMgaNi7lWsg0uucc5OptrHByzKK8G3xrz3tys WyOhh3wJjo95qhvCyv1mV4lQEK7UW1zYeOcCTnByTkHuwALHfKeD0Vj6C3PQ2nyF 0uJ9sd3/iYftAV4vVTZA -----END CERTIFICATE-----Generated at Wed Dec 17 23:27:48 2025 by rpki-client