This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/ZeEoQgYyvPl6_KZJWp5015nxwwE.roa File: ZeEoQgYyvPl6_KZJWp5015nxwwE.roa (raw, json) Hash identifier: yo/o4KInHp1SWR9VQBXdItm2WoXMmbb1bfO0anrZAYA= Subject key identifier: 65:E1:28:42:06:32:BC:F9:7A:FC:A6:49:5A:9E:74:D7:99:F1:C3:01 Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Certificate serial: 019ADA1F7FF52E37255302221E70E3BF1FF7 Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/ZeEoQgYyvPl6_KZJWp5015nxwwE.roa Signing time: Mon 01 Dec 2025 13:34:48 +0000 ROA not before: Mon 01 Dec 2025 13:34:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 26383 IP address blocks: 2a0e:91c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 05:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:da:1f:7f:f5:2e:37:25:53:02:22:1e:70:e3:bf:1f:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Validity Not Before: Dec 1 13:34:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=65e128420632bcf97afca6495a9e74d799f1c301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6d:c1:b4:24:bd:e1:7f:7b:88:da:4a:63:e2: 70:1b:0c:67:11:09:2b:31:ed:6f:a6:64:a2:8c:dd: 84:56:2c:e2:66:1d:8f:d4:f9:bb:d9:89:29:1c:39: 17:fe:86:aa:95:cb:d3:65:6c:68:25:64:8f:25:44: dc:64:51:7c:9d:86:72:36:b9:d9:53:b1:f2:d6:c2: 92:d8:82:6c:7a:9f:ea:6e:b8:a4:1e:e5:b1:24:85: e1:e5:69:7f:c1:ce:63:76:0d:40:33:4b:41:22:80: e9:70:42:6b:45:b2:18:30:a3:2f:4a:bf:a4:60:3c: 17:74:fe:d5:46:71:ff:35:68:30:2f:99:43:99:cf: 8f:5a:7e:fe:5e:8d:33:7c:26:52:4b:37:40:0d:12: d5:fe:a5:b1:76:b5:f6:71:18:4a:1d:80:95:1b:5a: 7a:63:62:51:7f:e0:c3:3f:fc:80:56:20:50:fc:75: 10:25:b1:cd:46:09:dc:3e:ee:86:89:0d:b1:e0:26: c1:96:49:2d:d4:6e:49:b1:84:e6:98:e7:b2:2f:c6: c9:5a:46:6f:14:38:f7:7e:64:77:c3:8d:51:04:a8: 96:b8:13:b7:46:43:e9:ef:6e:f2:4b:13:7a:46:f7: 55:5a:da:ba:b9:a1:ec:06:04:1d:e5:9b:0a:f9:f5: 91:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:E1:28:42:06:32:BC:F9:7A:FC:A6:49:5A:9E:74:D7:99:F1:C3:01 X509v3 Authority Key Identifier: keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/ZeEoQgYyvPl6_KZJWp5015nxwwE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:91c0::/29 Signature Algorithm: sha256WithRSAEncryption 29:06:e0:4c:4a:7b:52:b9:98:23:26:ff:a3:db:2d:d6:9e:1a: 0b:ee:61:92:b1:98:16:98:76:74:8c:ed:47:9a:f9:7e:12:8c: fa:c3:8b:18:fa:e2:9d:d3:25:ee:f2:5f:ae:6d:af:81:0f:52: 0e:b6:7c:2a:15:a1:d6:b2:6b:a6:5f:c2:8c:fe:bb:a7:2a:0c: 36:51:22:6a:a9:81:f2:73:65:1e:36:13:08:41:40:77:85:5f: b2:52:4b:4f:91:99:ae:81:39:74:6a:32:70:47:18:13:f4:23: 2f:4d:a1:a3:d8:87:f5:34:62:0d:69:ca:63:cc:c2:9d:3b:1b: 07:85:e6:f6:79:1a:ca:61:0c:ee:cf:8e:eb:d6:51:b9:0c:eb: 4f:cf:72:28:a0:5d:cb:d3:f3:d7:03:ca:d4:ad:5a:d3:d5:8a: 17:e0:2d:f4:79:60:30:78:88:e6:3a:4b:0c:ff:8d:52:3f:33: 65:f5:d4:17:18:3b:f9:76:3d:c7:9b:0c:61:57:d9:67:8a:74: d9:8a:b7:5e:40:81:86:f6:ea:fd:8d:30:8b:fd:0e:4d:60:fe: 0c:3a:79:33:2c:2d:a5:0d:33:25:4e:d3:0c:fd:fa:c0:20:38: a3:73:4c:a5:ec:d0:15:b9:6a:e8:2d:ab:c8:71:9b:13:46:a3: 5b:f3:0e:fc -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZraH3/1LjclUwIiHnDjvx/3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw N2VlNTYwHhcNMjUxMjAxMTMzNDQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NWUxMjg0MjA2MzJiY2Y5N2FmY2E2NDk1YTllNzRkNzk5ZjFjMzAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqW3BtCS94X97iNpKY+JwGwxnEQkr Me1vpmSijN2EViziZh2P1Pm72YkpHDkX/oaqlcvTZWxoJWSPJUTcZFF8nYZyNrnZ U7Hy1sKS2IJsep/qbrikHuWxJIXh5Wl/wc5jdg1AM0tBIoDpcEJrRbIYMKMvSr+k YDwXdP7VRnH/NWgwL5lDmc+PWn7+Xo0zfCZSSzdADRLV/qWxdrX2cRhKHYCVG1p6 Y2JRf+DDP/yAViBQ/HUQJbHNRgncPu6GiQ2x4CbBlkkt1G5JsYTmmOeyL8bJWkZv FDj3fmR3w41RBKiWuBO3RkPp727ySxN6RvdVWtq6uaHsBgQd5ZsK+fWRaQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFGXhKEIGMrz5evymSVqedNeZ8cMBMB8GA1UdIwQY MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt OGJmYmRkNDVjYjYyLzEvWmVFb1FnWXl2UGw2X0taSldwNTAxNW54d3dFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg6RwDAN BgkqhkiG9w0BAQsFAAOCAQEAKQbgTEp7UrmYIyb/o9st1p4aC+5hkrGYFph2dIzt R5r5fhKM+sOLGPrindMl7vJfrm2vgQ9SDrZ8KhWh1rJrpl/CjP67pyoMNlEiaqmB 8nNlHjYTCEFAd4VfslJLT5GZroE5dGoycEcYE/QjL02ho9iH9TRiDWnKY8zCnTsb B4Xm9nkaymEM7s+O69ZRuQzrT89yKKBdy9Pz1wPK1K1a09WKF+At9HlgMHiI5jpL DP+NUj8zZfXUFxg7+XY9x5sMYVfZZ4p02Yq3XkCBhvbq/Y0wi/0OTWD+DDp5Mywt pQ0zJU7TDP36wCA4o3NMpezQFblq6C2ryHGbE0ajW/MO/A== -----END CERTIFICATE-----Generated at Thu Dec 4 11:38:06 2025 by rpki-client