This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Z_F1HO_sF_kpyqop6HauSkd1IcY.roa File: Z_F1HO_sF_kpyqop6HauSkd1IcY.roa (raw, json) Hash identifier: jF62y42wlvflFoSEYK/bwtm8jtW5sookVKk5XlneCwE= Subject key identifier: 67:F1:75:1C:EF:EC:17:F9:29:CA:AA:29:E8:76:AE:4A:47:75:21:C6 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019ABC0158CFAA2B0294B7978CC901515B7D Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Z_F1HO_sF_kpyqop6HauSkd1IcY.roa Signing time: Tue 25 Nov 2025 17:13:16 +0000 ROA not before: Tue 25 Nov 2025 17:13:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214127 IP address blocks: 5.231.58.0/24 maxlen: 24 5.231.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bc:01:58:cf:aa:2b:02:94:b7:97:8c:c9:01:51:5b:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Nov 25 17:13:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=67f1751cefec17f929caaa29e876ae4a477521c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:81:16:e2:0d:cc:03:02:31:ec:70:90:e7:40: b0:79:08:aa:4d:02:cd:ae:b3:7f:25:bc:1e:73:72: f7:bf:cd:f3:0c:6b:cc:41:ab:43:76:bb:e1:19:37: 6a:b5:ad:1d:ce:60:94:ac:f4:25:b2:b9:df:14:ce: a7:e1:5e:bf:6a:cf:5a:4b:3f:8a:2e:f0:5e:45:d1: 4d:56:ad:76:b4:d9:56:3a:6c:77:d1:06:c6:96:f8: 3c:de:2d:04:47:49:a8:1f:2e:fb:71:5e:f7:28:f8: df:67:d8:3e:bc:ba:b3:a6:98:9f:ce:ec:21:9e:9c: ab:46:c7:b0:1c:40:5e:7e:43:4e:13:0e:fb:69:44: d2:75:13:49:64:ea:a5:80:38:3c:64:59:77:a5:ce: e6:3f:07:db:4b:96:df:54:21:df:09:2f:c2:17:43: dd:e5:6c:56:c7:12:6a:d3:e3:d1:4a:9d:6d:26:a2: 2a:b5:a1:f5:0c:44:34:0b:6a:a9:47:cf:55:d0:5f: b4:dd:cc:99:cf:3d:3a:f7:42:f2:32:bc:3d:e4:fd: c5:83:21:07:82:7b:8f:4e:9b:fa:20:36:54:f2:b5: 21:ea:83:e4:94:96:58:bb:e1:b1:16:88:78:db:7e: 82:c3:d1:04:0b:ce:4f:64:9b:40:c5:d8:bf:27:e3: 94:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:F1:75:1C:EF:EC:17:F9:29:CA:AA:29:E8:76:AE:4A:47:75:21:C6 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Z_F1HO_sF_kpyqop6HauSkd1IcY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.231.58.0/24 5.231.61.0/24 Signature Algorithm: sha256WithRSAEncryption ac:54:63:32:55:ab:d4:5e:f8:7d:07:1b:f6:4b:e5:ad:61:46: 8b:71:44:32:36:d1:5e:8d:34:a2:19:9b:89:01:8a:e7:bc:f3: b4:a4:38:90:0d:5c:2c:92:39:f1:19:e0:d6:e5:fc:bf:be:09: 21:4b:f0:2b:2d:ae:42:c4:34:ec:87:02:1e:94:b0:40:a0:e1: f4:12:9b:57:20:36:0a:af:b2:df:00:c5:67:e7:69:66:9a:9f: 17:fe:b4:a5:36:ae:dd:4d:bb:da:0c:b7:03:ec:21:8a:4b:c1: cf:05:df:77:c0:63:a2:97:64:e9:70:9a:1f:33:57:9d:18:98: b0:f8:52:27:a4:6f:58:47:88:6f:ec:1c:b6:8e:bc:2e:75:f3: 14:b7:15:2e:55:8a:30:aa:f9:25:bb:c0:33:15:11:ff:58:6e: aa:6a:4f:1e:6b:3c:b1:6e:58:35:05:d6:e0:82:9e:f7:4e:0f: 3d:43:02:b2:c3:e4:ad:80:3e:e9:c9:9f:b7:5f:6c:c7:c7:bb: 52:f6:34:8a:c4:bf:92:e4:49:33:b5:9c:84:3c:35:7f:31:76: 18:dc:c5:ed:0d:66:33:26:4e:e6:76:55:77:58:d2:76:66:1c: ca:dd:06:76:12:4e:f8:2f:97:dc:96:e9:1b:bd:6e:e9:55:68: 97:e0:9b:b7 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZq8AVjPqisClLeXjMkBUVt9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMTI1MTcxMzE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2N2YxNzUxY2VmZWMxN2Y5MjljYWFhMjllODc2YWU0YTQ3NzUyMWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYEW4g3MAwIx7HCQ50CweQiqTQLN rrN/Jbwec3L3v83zDGvMQatDdrvhGTdqta0dzmCUrPQlsrnfFM6n4V6/as9aSz+K LvBeRdFNVq12tNlWOmx30QbGlvg83i0ER0moHy77cV73KPjfZ9g+vLqzppifzuwh npyrRsewHEBefkNOEw77aUTSdRNJZOqlgDg8ZFl3pc7mPwfbS5bfVCHfCS/CF0Pd 5WxWxxJq0+PRSp1tJqIqtaH1DEQ0C2qpR89V0F+03cyZzz0690LyMrw95P3FgyEH gnuPTpv6IDZU8rUh6oPklJZYu+GxFoh4236Cw9EEC85PZJtAxdi/J+OUkQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGfxdRzv7Bf5KcqqKeh2rkpHdSHGMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvWl9GMUhPX3NGX2tweXFvcDZIYXVTa2QxSWNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABec6AwQA Bec9MA0GCSqGSIb3DQEBCwUAA4IBAQCsVGMyVavUXvh9Bxv2S+WtYUaLcUQyNtFe jTSiGZuJAYrnvPO0pDiQDVwskjnxGeDW5fy/vgkhS/ArLa5CxDTshwIelLBAoOH0 EptXIDYKr7LfAMVn52lmmp8X/rSlNq7dTbvaDLcD7CGKS8HPBd93wGOil2TpcJof M1edGJiw+FInpG9YR4hv7By2jrwudfMUtxUuVYowqvklu8AzFRH/WG6qak8eazyx blg1Bdbggp73Tg89QwKyw+StgD7pyZ+3X2zHx7tS9jSKxL+S5EkztZyEPDV/MXYY 3MXtDWYzJk7mdlV3WNJ2ZhzK3QZ2Ek74L5fclukbvW7pVWiX4Ju3 -----END CERTIFICATE-----Generated at Fri Dec 5 17:05:19 2025 by rpki-client