This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ZAwrDuihL2mLZ5xoh8A60HYuFew.roa File: ZAwrDuihL2mLZ5xoh8A60HYuFew.roa (raw, json) Hash identifier: 5KmzyaDYklNBRx2qUI2VUzzimNEkgPLSJgS3DE5oDR0= Subject key identifier: 64:0C:2B:0E:E8:A1:2F:69:8B:67:9C:68:87:C0:3A:D0:76:2E:15:EC Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b Certificate serial: 019AA204323CE855AFCAB6A3D7BEBFA32253 Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ZAwrDuihL2mLZ5xoh8A60HYuFew.roa Signing time: Thu 20 Nov 2025 16:06:15 +0000 ROA not before: Thu 20 Nov 2025 16:06:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 44547 IP address blocks: 5.178.100.0/24 maxlen: 24 5.178.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a2:04:32:3c:e8:55:af:ca:b6:a3:d7:be:bf:a3:22:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b Validity Not Before: Nov 20 16:06:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=640c2b0ee8a12f698b679c6887c03ad0762e15ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:0a:af:1a:21:ab:86:f8:ca:ca:43:06:6f:fe: 3e:32:44:2c:63:78:54:3a:d4:69:44:9e:70:0f:cc: 47:22:2e:c1:af:b9:05:27:3c:3f:e7:68:7f:87:65: 3e:8d:ba:43:b4:2e:e7:07:64:ef:8f:d1:8c:23:c7: 73:3a:bb:c1:5c:50:97:22:37:71:e6:a5:0c:d3:3a: fc:ff:a7:89:d0:02:10:20:60:2d:57:a0:20:d1:3e: 27:fc:b8:0d:da:99:3b:0e:91:cf:5f:a3:12:e1:ac: 43:22:29:63:77:9e:15:c2:f2:05:8c:29:bb:ed:7e: 55:70:c3:e6:81:84:a0:64:52:71:fb:38:a4:63:98: 12:d3:ff:c8:92:09:55:d0:b0:49:40:4f:78:6a:93: dc:8a:e9:8c:0c:e0:39:d3:08:03:57:5c:83:e1:fa: 4f:ef:5e:96:af:0b:4d:3c:05:d9:05:d3:1f:14:65: 17:8e:00:62:ee:e8:50:75:de:75:4a:e3:93:a5:f0: 5a:6e:50:fe:56:ab:9d:81:94:0a:72:9e:b8:31:33: 14:8c:dc:ce:2d:e8:b1:e7:1e:c3:c3:9c:a9:65:9d: 08:69:99:83:29:80:e0:cb:1a:75:27:7b:69:62:95: cd:dd:f9:9d:4a:bb:48:2a:4f:72:19:aa:02:da:b4: 9c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:0C:2B:0E:E8:A1:2F:69:8B:67:9C:68:87:C0:3A:D0:76:2E:15:EC X509v3 Authority Key Identifier: keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ZAwrDuihL2mLZ5xoh8A60HYuFew.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.178.100.0/24 5.178.111.0/24 Signature Algorithm: sha256WithRSAEncryption 18:de:f5:b7:8a:de:5e:25:1e:1d:db:e7:ed:42:13:40:fa:0f: a8:f1:f0:19:bf:95:79:66:f8:3a:a4:73:1c:d2:6a:20:aa:22: 44:c4:e2:a8:24:e6:eb:14:03:e5:02:80:fc:b4:6d:c9:06:cb: ad:6b:88:e4:bf:ef:6f:10:9d:73:1f:bb:12:a5:c5:74:2b:2e: 2f:88:f5:0b:fb:ce:98:3d:24:07:97:cc:ab:dc:12:ed:a6:38: c5:f2:e4:67:cb:d6:7e:d4:6f:bb:f7:2a:cb:f0:53:72:06:97: 17:bc:0f:c0:3c:10:0a:0d:ce:ac:d0:d9:60:e8:e6:8b:68:39: db:fd:a3:23:ae:b3:32:2b:a9:76:20:b8:92:8d:4d:2c:de:ae: b2:cb:5a:0c:ad:c7:8a:d0:b7:0e:fc:4a:c9:b5:78:17:8f:56: 98:9b:ba:22:b7:bb:0a:20:3e:74:b1:a3:fd:43:4d:5c:c1:7a: d2:d8:08:15:28:32:94:07:31:c7:0b:00:67:b5:5c:c3:3c:81: b5:5a:71:61:d9:43:f3:d9:c0:98:98:26:7e:4c:1c:96:60:88: b5:e8:a0:14:1e:29:46:c7:a8:f0:39:16:7e:00:d7:cd:b5:63: fc:0c:62:f7:c9:c7:61:59:97:d3:b0:82:a1:a2:c1:47:23:62: f8:8e:24:82 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqiBDI86FWvyraj176/oyJTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzMTg4MTczMmEzZTI0NWE5NTliYzY3OWUwNDU4YzM5Zjg5 M2U0NmIwHhcNMjUxMTIwMTYwNjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDBjMmIwZWU4YTEyZjY5OGI2NzljNjg4N2MwM2FkMDc2MmUxNWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6QqvGiGrhvjKykMGb/4+MkQsY3hU OtRpRJ5wD8xHIi7Br7kFJzw/52h/h2U+jbpDtC7nB2Tvj9GMI8dzOrvBXFCXIjdx 5qUM0zr8/6eJ0AIQIGAtV6Ag0T4n/LgN2pk7DpHPX6MS4axDIiljd54VwvIFjCm7 7X5VcMPmgYSgZFJx+zikY5gS0//IkglV0LBJQE94apPciumMDOA50wgDV1yD4fpP 716WrwtNPAXZBdMfFGUXjgBi7uhQdd51SuOTpfBablD+VqudgZQKcp64MTMUjNzO Leix5x7Dw5ypZZ0IaZmDKYDgyxp1J3tpYpXN3fmdSrtIKk9yGaoC2rScuQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGQMKw7ooS9pi2ecaIfAOtB2LhXsMB8GA1UdIwQY MBaAFBMYgXMqPiRalZvGeeBFjDn4k+RrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUt Y2Q2MTUyMjYxYzZmLzEvWkF3ckR1aWhMMm1MWjV4b2g4QTYwSFl1RmV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUtY2Q2MTUyMjYxYzZm LzEvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABbJkAwQA BbJvMA0GCSqGSIb3DQEBCwUAA4IBAQAY3vW3it5eJR4d2+ftQhNA+g+o8fAZv5V5 Zvg6pHMc0mogqiJExOKoJObrFAPlAoD8tG3JBsuta4jkv+9vEJ1zH7sSpcV0Ky4v iPUL+86YPSQHl8yr3BLtpjjF8uRny9Z+1G+79yrL8FNyBpcXvA/APBAKDc6s0Nlg 6OaLaDnb/aMjrrMyK6l2ILiSjU0s3q6yy1oMrceK0LcO/ErJtXgXj1aYm7oit7sK ID50saP9Q01cwXrS2AgVKDKUBzHHCwBntVzDPIG1WnFh2UPz2cCYmCZ+TByWYIi1 6KAUHilGx6jwORZ+ANfNtWP8DGL3ycdhWZfTsIKhosFHI2L4jiSC -----END CERTIFICATE-----Generated at Fri Dec 5 18:22:20 2025 by rpki-client