This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/Z_zmHZbeScpH-GxskMPlONCKf1g.roa File: Z_zmHZbeScpH-GxskMPlONCKf1g.roa (raw, json) Hash identifier: U0Rj8mvj/F/ngowW+kvjEGEloiIZeQO1MYBfycKrAcc= Subject key identifier: 67:FC:E6:1D:96:DE:49:CA:47:F8:6C:6C:90:C3:E5:38:D0:8A:7F:58 Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d Certificate serial: 019B130BAA7EBB254287817283CCB9341950 Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/Z_zmHZbeScpH-GxskMPlONCKf1g.roa Signing time: Fri 12 Dec 2025 14:51:30 +0000 ROA not before: Fri 12 Dec 2025 14:51:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 208621 IP address blocks: 45.157.34.0/24 maxlen: 24 80.64.216.0/23 maxlen: 24 80.64.218.0/23 maxlen: 24 80.64.218.0/24 maxlen: 24 80.64.219.0/24 maxlen: 24 185.232.86.0/23 maxlen: 24 185.232.86.0/24 maxlen: 24 185.232.87.0/24 maxlen: 24 194.146.44.0/24 maxlen: 24 194.146.49.0/24 maxlen: 24 194.156.177.0/24 maxlen: 24 195.22.156.0/24 maxlen: 24 195.22.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 23:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:13:0b:aa:7e:bb:25:42:87:81:72:83:cc:b9:34:19:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d Validity Not Before: Dec 12 14:51:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=67fce61d96de49ca47f86c6c90c3e538d08a7f58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:96:75:ef:4b:a8:2e:c2:82:2e:ad:2a:c6:29: c9:dd:0c:c5:5c:7c:c5:c0:71:5e:e0:f1:a6:20:1e: 16:ce:97:0a:07:f7:2a:a1:f2:7a:e4:9b:54:55:1e: d5:25:d4:77:d8:44:42:ab:c7:d6:70:88:af:22:95: 62:bc:e6:dd:c7:8e:9b:12:33:4a:e1:3c:7a:37:5a: 6b:16:37:e6:8b:1e:7f:6e:db:73:4c:5c:fd:da:7a: c6:9e:15:e1:74:51:71:26:f1:dd:43:6c:f0:45:dd: 02:4a:ed:77:9e:3b:30:47:a6:0a:67:27:f4:69:c6: ea:91:8d:e9:01:f8:99:3b:fe:0f:66:d1:46:b4:f9: e5:bb:89:56:21:41:84:c3:35:5a:5b:f2:41:10:4e: ce:66:aa:ca:72:ee:e5:39:b4:7f:04:56:95:39:39: 3b:ee:87:6f:df:03:ef:cf:ca:1e:58:75:ef:ef:6f: f1:ea:44:40:db:3f:73:39:93:4f:1d:de:8a:ef:10: d1:f1:e7:7b:74:e1:3b:ca:18:60:97:6b:86:57:86: 84:ff:b9:89:ae:a9:8c:ec:67:82:51:96:36:96:4f: a9:51:dc:f0:56:e8:2e:b7:78:4b:5f:b7:fa:a8:94: df:49:fe:60:e8:47:c3:2b:cf:9f:71:b3:86:60:4b: 41:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:FC:E6:1D:96:DE:49:CA:47:F8:6C:6C:90:C3:E5:38:D0:8A:7F:58 X509v3 Authority Key Identifier: keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/Z_zmHZbeScpH-GxskMPlONCKf1g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.157.34.0/24 80.64.216.0/22 185.232.86.0/23 194.146.44.0/24 194.146.49.0/24 194.156.177.0/24 195.22.156.0/23 Signature Algorithm: sha256WithRSAEncryption 76:da:3f:43:6f:b6:53:1f:eb:87:3a:6e:32:47:b5:60:93:07: 8b:85:8d:71:d2:15:80:35:0c:aa:d4:ee:11:5f:4f:0f:2e:54: 0b:41:85:84:ac:02:af:e9:33:1e:f8:ac:e0:ea:6a:18:32:b9: d2:3e:7e:66:e8:eb:25:4a:b4:f2:f5:36:e1:09:62:a0:1e:d6: 43:c7:02:d3:cf:50:5c:6d:3b:60:dc:7f:15:33:5b:05:89:53: 88:aa:1d:9b:bd:38:61:58:34:46:bd:bb:0b:1e:09:e9:3a:50: 11:25:73:05:b0:58:c3:05:67:79:cb:5a:4f:e4:cc:06:14:dc: cf:00:ec:df:fe:f1:b6:4c:3b:47:59:c8:42:ee:1f:ad:78:ab: 0b:60:19:33:cf:ba:7e:62:46:e5:10:83:8a:26:0b:27:c8:58: ec:b8:f0:00:c7:3a:40:be:98:ab:75:27:0a:96:09:f5:a3:1c: 3a:03:5e:d9:66:21:d7:02:69:9a:ca:bd:69:73:fb:ea:de:a2: 69:cd:60:46:6f:fe:ce:db:0a:6a:ba:b0:7d:11:6e:c9:6a:18: d2:8a:17:f2:df:53:69:49:0b:e1:63:71:33:2d:8d:35:9f:72: 28:cf:4b:74:63:26:ea:b4:77:34:5e:8f:62:a2:0e:b7:de:23: 2a:a1:4d:ae -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZsTC6p+uyVCh4Fyg8y5NBlQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw MTRiOGQwHhcNMjUxMjEyMTQ1MTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2N2ZjZTYxZDk2ZGU0OWNhNDdmODZjNmM5MGMzZTUzOGQwOGE3ZjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZZ170uoLsKCLq0qxinJ3QzFXHzF wHFe4PGmIB4WzpcKB/cqofJ65JtUVR7VJdR32ERCq8fWcIivIpVivObdx46bEjNK 4Tx6N1prFjfmix5/bttzTFz92nrGnhXhdFFxJvHdQ2zwRd0CSu13njswR6YKZyf0 acbqkY3pAfiZO/4PZtFGtPnlu4lWIUGEwzVaW/JBEE7OZqrKcu7lObR/BFaVOTk7 7odv3wPvz8oeWHXv72/x6kRA2z9zOZNPHd6K7xDR8ed7dOE7yhhgl2uGV4aE/7mJ rqmM7GeCUZY2lk+pUdzwVugut3hLX7f6qJTfSf5g6EfDK8+fcbOGYEtBjwIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFGf85h2W3knKR/hsbJDD5TjQin9YMB8GA1UdIwQY MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt NmJjNzU1NzhiNGMzLzEvWl96bUhaYmVTY3BILUd4c2tNUGxPTkNLZjFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQALZ0iAwQC UEDYAwQBuehWAwQAwpIsAwQAwpIxAwQAwpyxAwQBwxacMA0GCSqGSIb3DQEBCwUA A4IBAQB22j9Db7ZTH+uHOm4yR7VgkweLhY1x0hWANQyq1O4RX08PLlQLQYWErAKv 6TMe+Kzg6moYMrnSPn5m6OslSrTy9TbhCWKgHtZDxwLTz1BcbTtg3H8VM1sFiVOI qh2bvThhWDRGvbsLHgnpOlARJXMFsFjDBWd5y1pP5MwGFNzPAOzf/vG2TDtHWchC 7h+teKsLYBkzz7p+YkblEIOKJgsnyFjsuPAAxzpAvpirdScKlgn1oxw6A17ZZiHX Ammayr1pc/vq3qJpzWBGb/7O2wpqurB9EW7JahjSihfy31NpSQvhY3EzLY01n3Io z0t0YybqtHc0Xo9iog633iMqoU2u -----END CERTIFICATE-----Generated at Tue Dec 16 09:38:50 2025 by rpki-client