This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Zr9JG3dBXqYxf1-60DVLi-yS3z4.roa File: Zr9JG3dBXqYxf1-60DVLi-yS3z4.roa (raw, json) Hash identifier: sNrh124ZBaQfHU37+mrtpZ9GIoRAVLrGCazzwkXCGTQ= Subject key identifier: 66:BF:49:1B:77:41:5E:A6:31:7F:5F:BA:D0:35:4B:8B:EC:92:DF:3E Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Certificate serial: 019ADA3A0B784569960E6655175BA54FEF6F Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Zr9JG3dBXqYxf1-60DVLi-yS3z4.roa Signing time: Mon 01 Dec 2025 14:03:48 +0000 ROA not before: Mon 01 Dec 2025 14:03:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 62300 IP address blocks: 62.233.47.0/24 maxlen: 24 194.32.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 05:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:da:3a:0b:78:45:69:96:0e:66:55:17:5b:a5:4f:ef:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Validity Not Before: Dec 1 14:03:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=66bf491b77415ea6317f5fbad0354b8bec92df3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c1:78:d6:01:35:b4:e2:47:d2:e1:b9:24:74: b8:e4:39:59:00:da:9f:ff:0a:81:6b:3d:c3:33:14: de:d1:ca:81:2b:d9:8f:74:fd:7e:ff:a1:05:65:09: 66:6f:ce:ce:0b:e8:57:08:f3:36:77:06:2b:25:49: eb:2b:60:a1:93:0c:90:81:98:fd:6f:6c:54:23:7f: 5e:c8:fc:f2:d1:83:07:90:d9:99:15:32:2d:e7:cd: 8b:2e:2c:23:e7:58:77:ae:82:53:cd:45:a8:a2:67: c1:e9:cb:0d:04:3c:e7:39:6d:78:02:89:b7:3f:81: 8c:6d:16:34:84:af:90:27:de:00:a0:d7:de:44:0e: b0:56:1d:e1:bd:39:af:32:b2:fb:d2:2a:ff:71:39: 86:4b:b2:74:f7:b4:41:20:d0:14:a2:4c:0d:63:25: 58:cb:47:a2:a3:94:3f:fe:4b:33:8e:4e:d7:dc:f3: db:28:71:15:ae:4c:c8:7a:8d:bf:4a:25:a8:62:ea: d1:0c:5d:9a:be:45:24:b6:f9:00:25:cb:47:a6:cd: 0f:97:b7:52:bc:9e:8b:ee:c6:f6:ec:27:f3:0d:80: 41:8b:c5:6d:65:ac:27:f6:8c:b7:ad:73:c0:27:62: ea:6d:d0:c0:d9:9f:56:24:4f:5e:d9:92:80:b1:9f: 12:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:BF:49:1B:77:41:5E:A6:31:7F:5F:BA:D0:35:4B:8B:EC:92:DF:3E X509v3 Authority Key Identifier: keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Zr9JG3dBXqYxf1-60DVLi-yS3z4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.233.47.0/24 194.32.241.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:2a:a9:d3:90:a7:64:d1:d2:6d:c8:f5:9a:bd:4d:b5:c9:25: 75:5b:97:cf:70:5c:a1:eb:61:33:6a:92:f3:57:a7:19:1e:4a: 73:c4:a9:27:ef:b7:fc:9a:9d:94:01:5d:b2:01:f0:fd:96:c4: bd:bd:ec:ee:16:74:70:4b:df:33:7f:57:d1:56:f0:82:cf:0e: 75:19:f5:dd:1f:b3:56:0d:e5:7e:c9:ce:1e:2e:53:b2:46:27: a7:c3:6a:c5:ef:48:5d:04:33:0c:15:ad:2a:0c:6e:5c:ad:84: 51:33:0d:80:90:11:f7:8f:3b:aa:85:cd:34:33:f6:da:a0:73: ca:f9:d4:fe:0e:ec:8e:4f:f6:43:b5:7b:f6:8d:40:12:ea:23: ce:a4:93:a2:39:31:cf:cd:76:43:52:0a:35:93:32:b1:f4:2d: 6d:a1:91:ed:4b:0c:69:21:7a:ee:f6:15:f7:96:83:57:b6:f5: 81:a2:12:3d:36:4e:54:ed:c4:19:1d:53:b9:0d:16:d7:03:41: 70:e8:ac:38:fc:60:8c:95:a8:4e:dd:fc:a5:f7:bb:0d:55:cc: 7d:d1:2e:d8:e0:a6:74:db:ce:ac:ac:68:a3:97:b8:89:94:22: 69:d4:18:82:4f:20:c4:e8:85:80:3f:27:72:bd:32:70:35:8d: 7b:c3:a3:f9 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZraOgt4RWmWDmZVF1ulT+9vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw N2VlNTYwHhcNMjUxMjAxMTQwMzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NmJmNDkxYjc3NDE1ZWE2MzE3ZjVmYmFkMDM1NGI4YmVjOTJkZjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28F41gE1tOJH0uG5JHS45DlZANqf /wqBaz3DMxTe0cqBK9mPdP1+/6EFZQlmb87OC+hXCPM2dwYrJUnrK2ChkwyQgZj9 b2xUI39eyPzy0YMHkNmZFTIt582LLiwj51h3roJTzUWoomfB6csNBDznOW14Aom3 P4GMbRY0hK+QJ94AoNfeRA6wVh3hvTmvMrL70ir/cTmGS7J097RBINAUokwNYyVY y0eio5Q//kszjk7X3PPbKHEVrkzIeo2/SiWoYurRDF2avkUktvkAJctHps0Pl7dS vJ6L7sb27CfzDYBBi8VtZawn9oy3rXPAJ2LqbdDA2Z9WJE9e2ZKAsZ8S+wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGa/SRt3QV6mMX9futA1S4vskt8+MB8GA1UdIwQY MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt OGJmYmRkNDVjYjYyLzEvWnI5SkczZEJYcVl4ZjEtNjBEVkxpLXlTM3o0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAPukvAwQA wiDxMA0GCSqGSIb3DQEBCwUAA4IBAQCaKqnTkKdk0dJtyPWavU21ySV1W5fPcFyh 62EzapLzV6cZHkpzxKkn77f8mp2UAV2yAfD9lsS9vezuFnRwS98zf1fRVvCCzw51 GfXdH7NWDeV+yc4eLlOyRienw2rF70hdBDMMFa0qDG5crYRRMw2AkBH3jzuqhc00 M/baoHPK+dT+DuyOT/ZDtXv2jUAS6iPOpJOiOTHPzXZDUgo1kzKx9C1toZHtSwxp IXru9hX3loNXtvWBohI9Nk5U7cQZHVO5DRbXA0Fw6Kw4/GCMlahO3fyl97sNVcx9 0S7Y4KZ0286srGijl7iJlCJp1BiCTyDE6IWAPydyvTJwNY17w6P5 -----END CERTIFICATE-----Generated at Thu Dec 4 11:38:05 2025 by rpki-client