This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/0ZXWL8JuEPFsoo7ZeEc1RBIwaq0.roa File: 0ZXWL8JuEPFsoo7ZeEc1RBIwaq0.roa (raw, json) Hash identifier: n6CzaP97bzS448Y2GZDBPv1KXkDQbNw4buqHbtLv5xQ= Subject key identifier: D1:95:D6:2F:C2:6E:10:F1:6C:A2:8E:D9:78:47:35:44:12:30:6A:AD Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722 Certificate serial: 019ABEB839E12AE106B1A856DFD1CEB45C06 Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/0ZXWL8JuEPFsoo7ZeEc1RBIwaq0.roa Signing time: Wed 26 Nov 2025 05:52:15 +0000 ROA not before: Wed 26 Nov 2025 05:52:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215362 IP address blocks: 81.181.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:be:b8:39:e1:2a:e1:06:b1:a8:56:df:d1:ce:b4:5c:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722 Validity Not Before: Nov 26 05:52:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d195d62fc26e10f16ca28ed97847354412306aad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:db:22:e4:5e:81:8c:07:ac:23:2d:a6:43:97: 6f:10:9f:74:69:31:7a:d8:7e:8d:46:67:39:06:6b: ab:de:22:f9:b6:1c:b7:65:08:93:f5:15:ea:71:69: 79:be:de:29:a1:31:be:96:9c:90:65:18:9c:ba:84: 84:ce:62:cf:04:80:60:80:30:4e:bd:f7:57:ae:d9: 98:de:34:fc:cb:53:fe:b6:21:bb:8f:e9:64:6c:a0: 69:5c:0a:02:e5:11:6a:36:af:03:d8:42:9f:7d:f4: 59:39:84:fd:42:9b:a0:b9:a8:8a:80:10:a6:16:68: 48:23:5e:01:88:2a:2a:af:7f:0e:19:42:9c:22:41: a7:ed:e4:2e:ed:c0:e7:2e:8c:bc:17:8a:09:14:62: 9a:a9:18:fb:e4:92:7f:a7:44:2d:89:bc:76:da:e8: 0d:53:f8:26:cc:8c:73:67:d6:d7:eb:98:17:a9:eb: cd:3d:35:9e:d3:4e:5e:15:6b:fe:e6:06:7f:af:e7: 31:5e:ab:97:5a:1e:27:86:93:db:a3:80:7a:a8:8c: 31:0f:e5:77:56:ac:68:68:6b:29:cd:3a:20:a5:7e: cf:51:73:15:98:00:a6:8d:95:db:83:88:59:e9:3c: 96:c5:0a:f0:ae:6a:6a:74:83:1a:02:8a:85:a9:f2: 5f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:95:D6:2F:C2:6E:10:F1:6C:A2:8E:D9:78:47:35:44:12:30:6A:AD X509v3 Authority Key Identifier: keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/0ZXWL8JuEPFsoo7ZeEc1RBIwaq0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.181.113.0/24 Signature Algorithm: sha256WithRSAEncryption 99:1b:02:9f:8c:03:35:b3:7f:ae:b3:df:f0:2c:b4:97:79:17: 8a:7c:5b:5e:3f:c0:6c:4e:2c:bf:77:20:1a:ca:44:71:d2:bf: 17:5b:ea:f9:4f:cf:f3:79:2c:ed:15:58:b8:93:6d:34:7e:dd: 28:bc:36:3c:b0:b0:6b:f0:5b:f8:34:f8:f9:60:99:42:99:a5: 0c:70:52:26:cb:b3:7c:0e:a6:94:33:23:2c:c1:25:59:ce:99: 4c:f8:39:33:c7:3c:07:22:1a:51:e3:dc:08:70:67:44:d6:1d: 83:3b:49:48:d1:30:58:30:fc:52:f5:6c:ed:18:e0:12:2b:bb: a7:0d:66:12:14:58:44:99:39:02:d0:71:4e:8a:22:64:04:f2: 4e:e2:f4:13:29:9f:40:6c:0a:96:1d:d4:93:4b:5b:73:66:80: dd:9c:13:1a:e4:8b:c9:e1:81:f7:85:9d:f4:c0:99:15:b6:ca: 41:26:b4:f7:a1:8e:f5:4e:1c:a5:f8:c4:61:b6:80:90:d9:cc: 2f:63:45:f2:dc:9c:d9:f3:58:23:2b:4c:18:1e:6c:fd:06:be: a5:6d:56:96:cb:77:21:72:2d:10:6a:52:a2:5d:4c:d8:91:64: cd:d9:78:02:df:c3:61:62:6d:cf:41:0d:99:18:89:3c:79:16: 8a:d5:74:db -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZq+uDnhKuEGsahW39HOtFwGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh MTU3MjIwHhcNMjUxMTI2MDU1MjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTk1ZDYyZmMyNmUxMGYxNmNhMjhlZDk3ODQ3MzU0NDEyMzA2YWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdsi5F6BjAesIy2mQ5dvEJ90aTF6 2H6NRmc5Bmur3iL5thy3ZQiT9RXqcWl5vt4poTG+lpyQZRicuoSEzmLPBIBggDBO vfdXrtmY3jT8y1P+tiG7j+lkbKBpXAoC5RFqNq8D2EKfffRZOYT9QpuguaiKgBCm FmhII14BiCoqr38OGUKcIkGn7eQu7cDnLoy8F4oJFGKaqRj75JJ/p0Qtibx22ugN U/gmzIxzZ9bX65gXqevNPTWe005eFWv+5gZ/r+cxXquXWh4nhpPbo4B6qIwxD+V3 VqxoaGspzTogpX7PUXMVmACmjZXbg4hZ6TyWxQrwrmpqdIMaAoqFqfJfkQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNGV1i/CbhDxbKKO2XhHNUQSMGqtMB8GA1UdIwQY MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt ZjUyYzQ3YzIyNWRiLzEvMFpYV0w4SnVFUEZzb283WmVFYzFSQkl3YXEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUbVxMA0G CSqGSIb3DQEBCwUAA4IBAQCZGwKfjAM1s3+us9/wLLSXeReKfFteP8BsTiy/dyAa ykRx0r8XW+r5T8/zeSztFVi4k200ft0ovDY8sLBr8Fv4NPj5YJlCmaUMcFImy7N8 DqaUMyMswSVZzplM+DkzxzwHIhpR49wIcGdE1h2DO0lI0TBYMPxS9WztGOASK7un DWYSFFhEmTkC0HFOiiJkBPJO4vQTKZ9AbAqWHdSTS1tzZoDdnBMa5IvJ4YH3hZ30 wJkVtspBJrT3oY71Thyl+MRhtoCQ2cwvY0Xy3JzZ81gjK0wYHmz9Br6lbVaWy3ch ci0QalKiXUzYkWTN2XgC38NhYm3PQQ2ZGIk8eRaK1XTb -----END CERTIFICATE-----Generated at Fri Dec 5 06:20:06 2025 by rpki-client