This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/0ZnGxU7swJYAPtuXdTjVH6mnNw0.roa File: 0ZnGxU7swJYAPtuXdTjVH6mnNw0.roa (raw, json) Hash identifier: Wzl1PorkoIstZTXw6oC670R2MTqHO34fnkZ8n1zG9C0= Subject key identifier: D1:99:C6:C5:4E:EC:C0:96:00:3E:DB:97:75:38:D5:1F:A9:A7:37:0D Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019AC95259F6A4EDF3FFB2F848A9F5EF6C4C Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/0ZnGxU7swJYAPtuXdTjVH6mnNw0.roa Signing time: Fri 28 Nov 2025 07:16:48 +0000 ROA not before: Fri 28 Nov 2025 07:16:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 49581 IP address blocks: 5.83.128.0/24 maxlen: 24 5.83.131.0/24 maxlen: 24 5.83.132.0/24 maxlen: 24 5.175.216.0/24 maxlen: 24 5.175.218.0/24 maxlen: 24 5.175.219.0/24 maxlen: 24 5.231.26.0/24 maxlen: 24 5.231.105.0/24 maxlen: 24 5.231.242.0/24 maxlen: 24 89.106.69.0/24 maxlen: 24 89.106.71.0/24 maxlen: 24 94.249.175.0/24 maxlen: 24 217.69.167.0/24 maxlen: 24 2a02:2fc0:11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c9:52:59:f6:a4:ed:f3:ff:b2:f8:48:a9:f5:ef:6c:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Nov 28 07:16:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d199c6c54eecc096003edb977538d51fa9a7370d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:fc:30:62:f7:27:e3:0c:ff:fb:3c:80:44:7c: f5:cb:91:51:25:88:71:c7:0b:32:65:7b:d6:2a:2c: 29:22:32:e7:0b:37:ec:74:f0:eb:74:8a:85:9a:5e: ea:40:69:65:ab:86:f6:05:04:32:8e:b5:e3:43:52: c0:2e:20:b1:24:ae:b4:49:e2:43:01:74:c1:07:11: 92:a4:8c:fc:8d:0f:95:6e:b7:22:db:0c:d8:60:9e: be:14:10:02:28:5f:c0:22:b3:4b:ea:c6:ee:95:10: eb:3b:21:24:a4:fe:1e:d1:54:e0:21:5c:9a:ee:c3: d3:24:11:ab:1f:44:24:cf:eb:65:2c:70:6f:35:04: a2:f3:77:34:22:4d:58:9d:ba:07:2d:ad:12:e1:32: 44:6a:03:5c:70:e4:92:e5:46:7d:99:77:c5:e7:27: 58:ca:8a:e6:d6:2e:09:18:ba:1d:b2:db:d1:97:19: 44:36:30:df:0d:cf:48:3f:e4:d7:26:88:b0:ab:76: ba:f1:2f:74:10:4f:61:8e:a4:03:12:e6:34:f1:64: 47:f3:a2:90:df:c6:ca:c4:2e:da:42:68:c1:7e:39: fd:28:6f:15:dd:a6:40:e8:b6:d7:bd:0a:78:47:eb: c5:ea:48:c0:65:42:be:78:b8:9f:04:c7:5c:69:bb: 1f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:99:C6:C5:4E:EC:C0:96:00:3E:DB:97:75:38:D5:1F:A9:A7:37:0D X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/0ZnGxU7swJYAPtuXdTjVH6mnNw0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.128.0/24 5.83.131.0-5.83.132.255 5.175.216.0/24 5.175.218.0/23 5.231.26.0/24 5.231.105.0/24 5.231.242.0/24 89.106.69.0/24 89.106.71.0/24 94.249.175.0/24 217.69.167.0/24 IPv6: 2a02:2fc0:11::/48 Signature Algorithm: sha256WithRSAEncryption 94:fa:a3:03:b2:e7:39:de:93:23:ff:67:96:06:6f:05:e0:d1: e3:ef:3c:6e:55:dc:11:a6:38:0d:02:5a:71:b3:5a:c2:f8:3c: ba:78:e4:41:bb:ce:7e:70:d4:23:ef:45:12:e8:6f:29:e3:bb: 78:c9:9f:0c:75:e8:90:a1:dc:6c:f8:63:9a:b4:91:d5:64:00: 1b:00:96:2a:77:1d:0a:69:91:05:fc:b3:96:26:36:b6:bd:ad: 23:16:bb:83:7b:e1:84:c8:bf:d8:be:98:8f:5c:af:4e:a8:d8: 4c:a1:2d:2e:5f:fb:9c:90:b9:58:36:82:6d:e0:ab:be:42:28: dc:87:f7:a7:27:57:3a:6d:30:20:49:54:6e:5e:a0:1e:62:31: 35:6e:e4:92:1d:c2:4b:3e:48:84:b3:d7:7a:c7:9a:8c:c1:3f: 02:43:34:25:27:9b:42:70:9e:ac:e1:dd:b1:a2:f2:ff:d9:7a: fb:c7:1b:66:f0:73:b8:40:53:e8:2e:22:07:85:7b:11:b0:f9: 1c:ec:c5:b7:a2:5b:d5:07:5f:be:23:70:9d:44:8a:9a:61:21: d1:1c:60:3b:d4:97:02:ae:70:8a:97:17:f8:a3:35:02:b7:ad: f2:34:48:ad:c2:c2:20:7f:0c:a7:bc:0b:2d:58:20:4d:71:57: e7:d0:dd:52 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgISAZrJUln2pO3z/7L4SKn172xMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMTI4MDcxNjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTk5YzZjNTRlZWNjMDk2MDAzZWRiOTc3NTM4ZDUxZmE5YTczNzBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/wwYvcn4wz/+zyARHz1y5FRJYhx xwsyZXvWKiwpIjLnCzfsdPDrdIqFml7qQGllq4b2BQQyjrXjQ1LALiCxJK60SeJD AXTBBxGSpIz8jQ+Vbrci2wzYYJ6+FBACKF/AIrNL6sbulRDrOyEkpP4e0VTgIVya 7sPTJBGrH0Qkz+tlLHBvNQSi83c0Ik1YnboHLa0S4TJEagNccOSS5UZ9mXfF5ydY yorm1i4JGLodstvRlxlENjDfDc9IP+TXJoiwq3a68S90EE9hjqQDEuY08WRH86KQ 38bKxC7aQmjBfjn9KG8V3aZA6LbXvQp4R+vF6kjAZUK+eLifBMdcabsfVwIDAQAB o4ICXjCCAlowHQYDVR0OBBYEFNGZxsVO7MCWAD7bl3U41R+ppzcNMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvMFpuR3hVN3N3SllBUHR1WGRUalZINm1uTncwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHQGCCsGAQUFBwEHAQH/BGUwYzBQBAIAATBKAwQABVOAMAwD BAAFU4MDBAAFU4QDBAAFr9gDBAEFr9oDBAAF5xoDBAAF52kDBAAF5/IDBABZakUD BABZakcDBABe+a8DBADZRacwDwQCAAIwCQMHACoCL8AAETANBgkqhkiG9w0BAQsF AAOCAQEAlPqjA7LnOd6TI/9nlgZvBeDR4+88blXcEaY4DQJacbNawvg8unjkQbvO fnDUI+9FEuhvKeO7eMmfDHXokKHcbPhjmrSR1WQAGwCWKncdCmmRBfyzliY2tr2t Ixa7g3vhhMi/2L6Yj1yvTqjYTKEtLl/7nJC5WDaCbeCrvkIo3If3pydXOm0wIElU bl6gHmIxNW7kkh3CSz5IhLPXeseajME/AkM0JSebQnCerOHdsaLy/9l6+8cbZvBz uEBT6C4iB4V7EbD5HOzFt6Jb1QdfviNwnUSKmmEh0RxgO9SXAq5wipcX+KM1Aret 8jRIrcLCIH8Mp7wLLVggTXFX59DdUg== -----END CERTIFICATE-----Generated at Fri Dec 5 17:03:53 2025 by rpki-client