This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/czp0N6zsFMwe7QP-1vMLK3D-3cc.roa File: czp0N6zsFMwe7QP-1vMLK3D-3cc.roa (raw, json) Hash identifier: pLU2bEtjvdULXrDgKqqba71ebvqBXPVdPdatm43A1uM= Subject key identifier: 73:3A:74:37:AC:EC:14:CC:1E:ED:03:FE:D6:F3:0B:2B:70:FE:DD:C7 Certificate issuer: /CN=0c874a5f52734e260e7bfa4d45114add9277e353 Certificate serial: 019B21A5C174855E4FF8EC98B3FB0D76972F Authority key identifier: 0C:87:4A:5F:52:73:4E:26:0E:7B:FA:4D:45:11:4A:DD:92:77:E3:53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIdKX1JzTiYOe_pNRRFK3ZJ341M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/czp0N6zsFMwe7QP-1vMLK3D-3cc.roa Signing time: Mon 15 Dec 2025 10:54:29 +0000 ROA not before: Mon 15 Dec 2025 10:54:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 5089 IP address blocks: 152.89.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft rsync://rpki.ripe.net/repository/DEFAULT/DIdKX1JzTiYOe_pNRRFK3ZJ341M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:a5:c1:74:85:5e:4f:f8:ec:98:b3:fb:0d:76:97:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c874a5f52734e260e7bfa4d45114add9277e353 Validity Not Before: Dec 15 10:54:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=733a7437acec14cc1eed03fed6f30b2b70feddc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c0:7f:81:fd:9a:34:05:f5:a5:18:71:70:07: 2c:83:91:37:08:38:bc:9a:aa:ae:f5:81:bd:4a:43: 6c:3d:36:9b:2f:e6:65:48:93:2b:20:7f:b0:c3:e6: 5c:31:ba:86:9e:5c:ec:c2:78:9f:8d:d8:71:8e:19: 58:a4:2e:c2:ba:c5:3e:39:06:90:e6:93:39:35:c7: a1:0c:75:9b:a3:43:b6:fa:26:d2:56:c3:9a:28:ba: 2d:33:58:99:66:82:37:f9:51:40:13:2b:e9:39:60: 96:b3:25:ac:e6:45:00:bc:4c:d4:bd:9a:3f:e8:27: 27:aa:79:eb:8d:a9:aa:2f:00:6a:7f:7c:e6:4e:2d: a7:71:af:f3:e0:4e:72:39:ce:43:95:a0:d6:9a:f5: c1:43:4a:c1:ff:84:b4:75:38:d8:c6:8f:48:87:d9: 39:9c:31:7c:62:31:01:7a:1a:8b:4e:08:b2:8b:34: 1b:58:57:71:de:8a:cc:a6:61:3b:b6:6e:5e:45:cc: 00:28:79:8c:ef:1e:86:f1:56:d2:c9:a9:bb:af:4f: c1:30:16:a7:57:7c:11:d5:d4:09:70:2e:c1:c7:fc: fd:7d:8a:04:ba:42:ca:49:81:0b:eb:64:92:f2:12: 0e:88:09:38:76:0c:a4:f1:a0:9c:49:d8:5b:99:71: 9e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:3A:74:37:AC:EC:14:CC:1E:ED:03:FE:D6:F3:0B:2B:70:FE:DD:C7 X509v3 Authority Key Identifier: keyid:0C:87:4A:5F:52:73:4E:26:0E:7B:FA:4D:45:11:4A:DD:92:77:E3:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIdKX1JzTiYOe_pNRRFK3ZJ341M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/czp0N6zsFMwe7QP-1vMLK3D-3cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.89.24.0/22 Signature Algorithm: sha256WithRSAEncryption 66:3c:d4:d1:20:f8:fa:24:8f:10:6c:dc:75:37:80:4e:92:95: 10:9e:f7:3a:4c:9f:5e:88:a1:da:2d:af:c8:25:a6:74:fc:87: 47:b4:ba:41:af:f7:4f:e0:8e:e1:c0:b8:37:5f:62:10:5b:a6: 1d:31:f5:58:0e:aa:74:48:24:45:b5:d8:ec:e4:52:a5:5f:19: 24:6d:74:7a:b6:57:d4:94:31:20:71:54:4b:20:6b:2e:b5:42: f3:1e:c6:e3:fe:a7:6c:08:1d:7a:c5:97:ba:d3:9e:c7:21:4e: 9e:92:bb:62:d5:e1:47:ba:a4:0d:61:97:4f:b2:6a:ee:33:9b: e8:09:df:62:0a:eb:8a:c7:57:68:ca:92:d9:af:4e:e5:0f:17: 74:8b:6c:76:95:e0:62:8f:5c:72:a1:6d:25:25:6c:53:de:1d: ae:5a:08:62:8b:e4:04:dc:71:31:4b:09:37:53:bf:ea:8f:4b: 6e:c7:d7:7b:b3:02:f7:a1:0c:e4:04:e4:6d:ee:87:b3:2d:e2: 55:1e:e5:3b:89:93:8e:0c:8c:dc:c1:54:ed:2b:6a:78:74:ee: 41:f8:69:54:dd:23:5c:e6:e2:59:92:b6:34:c1:4d:b2:9a:6a: e8:c8:7d:32:fc:7c:c6:d7:13:e7:4e:1f:85:cd:49:eb:6c:72: ec:fa:c3:9d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZshpcF0hV5P+OyYs/sNdpcvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjODc0YTVmNTI3MzRlMjYwZTdiZmE0ZDQ1MTE0YWRkOTI3 N2UzNTMwHhcNMjUxMjE1MTA1NDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzNhNzQzN2FjZWMxNGNjMWVlZDAzZmVkNmYzMGIyYjcwZmVkZGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssB/gf2aNAX1pRhxcAcsg5E3CDi8 mqqu9YG9SkNsPTabL+ZlSJMrIH+ww+ZcMbqGnlzswnifjdhxjhlYpC7CusU+OQaQ 5pM5NcehDHWbo0O2+ibSVsOaKLotM1iZZoI3+VFAEyvpOWCWsyWs5kUAvEzUvZo/ 6CcnqnnrjamqLwBqf3zmTi2nca/z4E5yOc5DlaDWmvXBQ0rB/4S0dTjYxo9Ih9k5 nDF8YjEBehqLTgiyizQbWFdx3orMpmE7tm5eRcwAKHmM7x6G8VbSyam7r0/BMBan V3wR1dQJcC7Bx/z9fYoEukLKSYEL62SS8hIOiAk4dgyk8aCcSdhbmXGefQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHM6dDes7BTMHu0D/tbzCytw/t3HMB8GA1UdIwQY MBaAFAyHSl9Sc04mDnv6TUURSt2Sd+NTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRElkS1gxSnpUaVlPZV9wTlJSRkszWkozNDFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC81M2I0ODktYWI0OC00OWZlLTlkMDEt YTBlMzdmMjVhNTE1LzEvY3pwME42enNGTXdlN1FQLTF2TUxLM0QtM2NjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC81M2I0ODktYWI0OC00OWZlLTlkMDEtYTBlMzdmMjVhNTE1 LzEvRElkS1gxSnpUaVlPZV9wTlJSRkszWkozNDFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmFkYMA0G CSqGSIb3DQEBCwUAA4IBAQBmPNTRIPj6JI8QbNx1N4BOkpUQnvc6TJ9eiKHaLa/I JaZ0/IdHtLpBr/dP4I7hwLg3X2IQW6YdMfVYDqp0SCRFtdjs5FKlXxkkbXR6tlfU lDEgcVRLIGsutULzHsbj/qdsCB16xZe6057HIU6ekrti1eFHuqQNYZdPsmruM5vo Cd9iCuuKx1doypLZr07lDxd0i2x2leBij1xyoW0lJWxT3h2uWghii+QE3HExSwk3 U7/qj0tux9d7swL3oQzkBORt7oezLeJVHuU7iZOODIzcwVTtK2p4dO5B+GlU3SNc 5uJZkrY0wU2ymmroyH0y/HzG1xPnTh+FzUnrbHLs+sOd -----END CERTIFICATE-----Generated at Thu Dec 18 10:55:02 2025 by rpki-client