This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/z-QoEkF6zLCFpcF_-M5edmlEZsg.roa File: z-QoEkF6zLCFpcF_-M5edmlEZsg.roa (raw, json) Hash identifier: WYLBEFCcRstcUEGK3n2Y55tgOTBgy5qAWmg1FymkBnk= Subject key identifier: CF:E4:28:12:41:7A:CC:B0:85:A5:C1:7F:F8:CE:5E:76:69:44:66:C8 Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe Certificate serial: 019AD9B9DF2CBE67961263588F53BBB10073 Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/z-QoEkF6zLCFpcF_-M5edmlEZsg.roa Signing time: Mon 01 Dec 2025 11:43:48 +0000 ROA not before: Mon 01 Dec 2025 11:43:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16276 IP address blocks: 80.174.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d9:b9:df:2c:be:67:96:12:63:58:8f:53:bb:b1:00:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe Validity Not Before: Dec 1 11:43:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cfe42812417accb085a5c17ff8ce5e76694466c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fe:c4:83:1e:9b:03:80:17:4c:48:4b:30:5e: d2:da:17:c5:0b:ed:c6:d2:65:ce:ac:e5:f2:82:fd: b7:c4:c5:8c:09:5e:42:98:13:02:63:41:d3:8b:6f: 32:85:6f:4c:a1:e8:ce:c9:f3:0e:b1:be:f1:78:b2: 24:94:60:36:52:b1:25:0e:18:10:f9:d6:0a:09:c5: 54:29:f0:17:e8:85:e6:3f:8e:66:98:10:08:86:3d: ef:e3:84:db:62:3d:82:a1:12:c8:3f:69:ad:2f:27: 5d:ff:45:68:d7:7b:0c:23:6f:0d:59:82:81:1b:d5: e2:c5:43:02:93:ab:8f:da:02:c6:6d:82:86:7a:1c: 0a:af:3b:05:b6:f8:cd:5d:c9:01:7b:a4:0a:7d:ed: 80:91:da:21:9c:8a:8c:a7:15:68:2c:85:12:96:96: e1:fb:04:d7:4f:76:b7:a3:b0:2d:1a:a5:a8:3a:8b: a0:67:06:be:d9:aa:61:79:5b:2d:3b:3d:1b:ec:0e: c4:7f:8b:01:d8:a9:b5:33:47:d0:f1:2e:3e:3f:3e: 1b:80:82:28:5c:16:b2:eb:6b:c8:07:33:07:34:c0: 52:53:9d:e8:ee:95:73:88:d6:4a:e4:8b:62:e3:b4: 24:be:72:6c:54:bc:79:9d:22:5c:a5:97:52:5c:83: 01:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:E4:28:12:41:7A:CC:B0:85:A5:C1:7F:F8:CE:5E:76:69:44:66:C8 X509v3 Authority Key Identifier: keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/z-QoEkF6zLCFpcF_-M5edmlEZsg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.174.121.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:4a:26:59:e9:08:c1:f2:3a:cf:f0:64:f4:dc:09:a8:8c:76: 77:a5:ed:9c:e9:b3:a7:42:92:88:8c:c7:41:4c:60:0d:48:e2: 2d:f2:64:da:ae:af:7f:db:16:79:ed:5a:da:f8:0f:6c:09:0b: 83:b4:aa:f4:c4:7b:e0:c6:82:4b:0e:54:b4:4c:6a:88:9a:f3: 88:7c:c0:fb:15:95:6b:27:04:6b:ba:23:dc:c8:d1:d0:1f:e3: 8a:c6:10:37:72:ac:ed:3a:22:24:e9:98:03:6e:b1:3a:2b:ad: 49:b7:0b:56:bd:05:15:6b:f6:a7:d0:db:44:23:3f:a8:28:45: f8:2f:1c:a9:ed:a4:18:9e:9c:2e:b5:13:9c:4c:46:ca:bb:a8: aa:ec:07:33:a0:6a:d1:a4:8b:f7:30:b1:42:01:f5:7a:dc:1e: 38:e6:f4:b3:af:49:c9:df:3f:8a:93:cf:42:58:22:c2:48:82: f7:df:bd:53:74:35:ac:bd:1a:44:3e:1c:54:dc:e0:d8:52:14: ac:cd:6d:b6:16:cf:71:49:cc:7a:47:c2:3b:17:18:dd:9c:2b: bc:e5:4d:5c:6a:a4:3e:e0:09:25:57:27:3f:24:ac:bc:9e:54: 9f:30:c0:56:c4:e4:5f:66:80:fe:c4:5e:18:d3:c5:9c:db:96: b2:e8:ff:4e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrZud8svmeWEmNYj1O7sQBzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NTk5OTg5OWY3NmQyZTJlNGNjZGZjODE3Zjk4NzljZmFj MDZiYmUwHhcNMjUxMjAxMTE0MzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZmU0MjgxMjQxN2FjY2IwODVhNWMxN2ZmOGNlNWU3NjY5NDQ2NmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArf7Egx6bA4AXTEhLMF7S2hfFC+3G 0mXOrOXygv23xMWMCV5CmBMCY0HTi28yhW9MoejOyfMOsb7xeLIklGA2UrElDhgQ +dYKCcVUKfAX6IXmP45mmBAIhj3v44TbYj2CoRLIP2mtLydd/0Vo13sMI28NWYKB G9XixUMCk6uP2gLGbYKGehwKrzsFtvjNXckBe6QKfe2AkdohnIqMpxVoLIUSlpbh +wTXT3a3o7AtGqWoOougZwa+2apheVstOz0b7A7Ef4sB2Km1M0fQ8S4+Pz4bgIIo XBay62vIBzMHNMBSU53o7pVziNZK5Iti47QkvnJsVLx5nSJcpZdSXIMBWwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM/kKBJBesywhaXBf/jOXnZpRGbIMB8GA1UdIwQY MBaAFLRZmYmfdtLi5MzfyBf5h5z6wGu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUt NzM0MjhmOWM3YmZmLzEvei1Rb0VrRjZ6TENGcGNGXy1NNWVkbWxFWnNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUtNzM0MjhmOWM3YmZm LzEvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUK55MA0G CSqGSIb3DQEBCwUAA4IBAQB8SiZZ6QjB8jrP8GT03AmojHZ3pe2c6bOnQpKIjMdB TGANSOIt8mTarq9/2xZ57Vra+A9sCQuDtKr0xHvgxoJLDlS0TGqImvOIfMD7FZVr JwRruiPcyNHQH+OKxhA3cqztOiIk6ZgDbrE6K61JtwtWvQUVa/an0NtEIz+oKEX4 Lxyp7aQYnpwutROcTEbKu6iq7AczoGrRpIv3MLFCAfV63B445vSzr0nJ3z+Kk89C WCLCSIL3371TdDWsvRpEPhxU3ODYUhSszW22Fs9xScx6R8I7FxjdnCu85U1caqQ+ 4AklVyc/JKy8nlSfMMBWxORfZoD+xF4Y08Wc25ay6P9O -----END CERTIFICATE-----Generated at Fri Dec 5 04:28:45 2025 by rpki-client