This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/Zu5zS5Ebt76SokWuEF6Il14NmTo.roa File: Zu5zS5Ebt76SokWuEF6Il14NmTo.roa (raw, json) Hash identifier: JFqBqkR224BYkYQaBKd47dlkMa0iNuagX/1gNr19IqQ= Subject key identifier: 66:EE:73:4B:91:1B:B7:BE:92:A2:45:AE:10:5E:88:97:5E:0D:99:3A Certificate issuer: /CN=78dc3c6ab4afba864ba0d4fdb09e6f0eb06f43fa Certificate serial: 019B30A2A82CE71CDB7B9A9AAEEB668FD2A1 Authority key identifier: 78:DC:3C:6A:B4:AF:BA:86:4B:A0:D4:FD:B0:9E:6F:0E:B0:6F:43:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/Zu5zS5Ebt76SokWuEF6Il14NmTo.roa Signing time: Thu 18 Dec 2025 08:45:24 +0000 ROA not before: Thu 18 Dec 2025 08:45:24 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 49432 IP address blocks: 185.210.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.mft rsync://rpki.ripe.net/repository/DEFAULT/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 20:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:a2:a8:2c:e7:1c:db:7b:9a:9a:ae:eb:66:8f:d2:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78dc3c6ab4afba864ba0d4fdb09e6f0eb06f43fa Validity Not Before: Dec 18 08:45:24 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=66ee734b911bb7be92a245ae105e88975e0d993a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:85:58:84:66:1e:84:12:ba:bb:5d:20:d0:29: 5e:36:59:c2:b6:94:bb:79:27:cf:81:e3:bf:73:5f: f6:12:6c:7d:77:5e:c8:9f:a3:81:7c:37:ac:9e:c9: fa:ef:56:aa:5c:1e:6a:d0:98:c7:49:8d:8f:f7:d4: 1d:8a:c0:5e:f1:6d:f3:26:ec:37:34:29:dc:18:a7: a6:87:6a:33:94:24:01:66:0e:ad:6c:20:29:c0:ba: 56:36:0e:75:7c:84:e7:55:61:a5:f4:be:99:0f:a7: c2:8a:9d:02:92:58:89:19:0e:c9:46:04:c7:6d:d3: 76:da:31:79:43:7b:b9:f4:e1:04:e3:7d:7e:b3:b8: 5f:a6:ec:37:40:7a:22:31:51:99:c9:72:d8:f2:f8: b9:5f:b3:97:ad:0f:ec:72:eb:04:bf:be:ab:7f:5b: 5c:87:08:0c:11:84:9b:66:95:28:f8:b1:87:81:6f: cb:f8:d4:e4:da:b5:26:81:4c:52:67:13:6f:1d:ad: 20:34:ad:07:3c:28:20:96:d8:44:aa:cd:0f:46:83: a8:3e:ef:8b:30:ce:b5:0f:28:3d:2a:49:69:08:9e: e1:ef:8d:14:7d:1d:72:6e:63:74:7c:35:c7:43:05: 4d:98:6a:0a:32:be:3c:7f:dc:27:f1:5c:41:53:37: be:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:EE:73:4B:91:1B:B7:BE:92:A2:45:AE:10:5E:88:97:5E:0D:99:3A X509v3 Authority Key Identifier: keyid:78:DC:3C:6A:B4:AF:BA:86:4B:A0:D4:FD:B0:9E:6F:0E:B0:6F:43:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/Zu5zS5Ebt76SokWuEF6Il14NmTo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.210.224.0/24 Signature Algorithm: sha256WithRSAEncryption 34:9e:28:27:f8:0f:83:21:18:81:cb:dc:c8:4b:8a:ca:9c:39: 8f:3c:3d:7d:91:29:c7:4d:72:44:0d:66:ab:d0:a0:90:34:3e: 7b:d8:61:1e:b1:ce:d7:bc:7b:58:dd:14:12:e0:5e:d0:1f:43: 68:21:08:73:52:0f:bf:2d:b1:c8:cf:d4:fa:77:98:29:57:8f: 47:13:33:ff:d1:70:5f:45:93:84:3a:cd:b5:29:ed:ab:2c:59: 41:49:14:14:c3:bb:41:9b:0b:c0:ed:d5:5f:4a:1d:23:ad:03: f7:fa:41:c0:f9:05:36:27:36:31:bd:8a:8d:c8:6d:67:12:35: b4:d0:f6:59:72:87:ac:c2:28:10:c2:05:81:65:1c:6a:43:75: a5:62:e6:40:a5:c2:2e:4f:e9:86:62:ff:10:07:80:e5:c7:c9: d4:1b:04:26:97:a0:14:7c:9c:ae:60:04:8c:a9:71:db:00:84: 5f:31:e7:85:44:36:a1:97:6b:cf:89:1c:3d:60:8a:6c:85:aa: 2f:ee:a5:97:b9:d0:7f:aa:d6:ad:bf:04:3e:26:22:4e:f3:d8: 25:34:9d:b7:16:c4:11:d6:8f:b6:ee:3a:c7:16:52:e8:a6:f2: 31:8e:e2:02:d1:a0:f9:c8:c0:16:d7:4c:de:93:41:81:f9:d4: 05:de:8c:2f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZswoqgs5xzbe5qarutmj9KhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4ZGMzYzZhYjRhZmJhODY0YmEwZDRmZGIwOWU2ZjBlYjA2 ZjQzZmEwHhcNMjUxMjE4MDg0NTI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NmVlNzM0YjkxMWJiN2JlOTJhMjQ1YWUxMDVlODg5NzVlMGQ5OTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIVYhGYehBK6u10g0CleNlnCtpS7 eSfPgeO/c1/2Emx9d17In6OBfDesnsn671aqXB5q0JjHSY2P99QdisBe8W3zJuw3 NCncGKemh2ozlCQBZg6tbCApwLpWNg51fITnVWGl9L6ZD6fCip0CkliJGQ7JRgTH bdN22jF5Q3u59OEE431+s7hfpuw3QHoiMVGZyXLY8vi5X7OXrQ/scusEv76rf1tc hwgMEYSbZpUo+LGHgW/L+NTk2rUmgUxSZxNvHa0gNK0HPCgglthEqs0PRoOoPu+L MM61Dyg9KklpCJ7h740UfR1ybmN0fDXHQwVNmGoKMr48f9wn8VxBUze+tQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGbuc0uRG7e+kqJFrhBeiJdeDZk6MB8GA1UdIwQY MBaAFHjcPGq0r7qGS6DU/bCebw6wb0P6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZU53OGFyU3Z1b1pMb05UOXNKNXZEckJ2UV9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS81NGY2YTItMTBkMS00MTk1LTk1YmMt OWVlNzY1ODNjNzFhLzEvWnU1elM1RWJ0NzZTb2tXdUVGNklsMTRObVRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS81NGY2YTItMTBkMS00MTk1LTk1YmMtOWVlNzY1ODNjNzFh LzEvZU53OGFyU3Z1b1pMb05UOXNKNXZEckJ2UV9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudLgMA0G CSqGSIb3DQEBCwUAA4IBAQA0nign+A+DIRiBy9zIS4rKnDmPPD19kSnHTXJEDWar 0KCQND572GEesc7XvHtY3RQS4F7QH0NoIQhzUg+/LbHIz9T6d5gpV49HEzP/0XBf RZOEOs21Ke2rLFlBSRQUw7tBmwvA7dVfSh0jrQP3+kHA+QU2JzYxvYqNyG1nEjW0 0PZZcoeswigQwgWBZRxqQ3WlYuZApcIuT+mGYv8QB4Dlx8nUGwQml6AUfJyuYASM qXHbAIRfMeeFRDahl2vPiRw9YIpshaov7qWXudB/qtatvwQ+JiJO89glNJ23FsQR 1o+27jrHFlLopvIxjuIC0aD5yMAW10zek0GB+dQF3owv -----END CERTIFICATE-----Generated at Tue Dec 23 05:18:58 2025 by rpki-client