This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/2ZFMh0zA6etBHPElSKjr53lFQ4o.roa File: 2ZFMh0zA6etBHPElSKjr53lFQ4o.roa (raw, json) Hash identifier: cJHvSN9GRBND6oYjzt93ASsLE6Oph7lKT+o1IoQUVxo= Subject key identifier: D9:91:4C:87:4C:C0:E9:EB:41:1C:F1:25:48:A8:EB:E7:79:45:43:8A Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019A6D8CD696E9C494D25C767F93A12A5F2E Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/2ZFMh0zA6etBHPElSKjr53lFQ4o.roa Signing time: Mon 10 Nov 2025 11:35:37 +0000 ROA not before: Mon 10 Nov 2025 11:35:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 44547 IP address blocks: 31.210.42.0/24 maxlen: 24 31.210.55.0/24 maxlen: 24 78.135.82.0/24 maxlen: 24 78.135.83.0/24 maxlen: 24 78.135.111.0/24 maxlen: 24 188.132.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:6d:8c:d6:96:e9:c4:94:d2:5c:76:7f:93:a1:2a:5f:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Nov 10 11:35:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d9914c874cc0e9eb411cf12548a8ebe77945438a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:2c:48:e4:d3:c6:69:9b:89:ad:ea:aa:c0:37: de:ca:3d:96:b5:9c:6c:63:5b:7a:30:e2:32:ce:95: c6:be:ef:5f:fd:be:67:51:a0:bd:cc:83:62:b3:58: ed:e8:3d:60:bc:19:0b:eb:43:71:e3:83:2a:5e:07: c3:0d:a5:c2:e0:4e:d7:3a:db:51:5c:06:f1:aa:b9: 4e:ac:49:1f:7d:bf:cd:56:85:eb:69:11:60:c9:9a: d2:64:d6:5e:67:bc:a8:39:75:ee:18:7c:cf:fa:23: ab:c5:a8:bb:0e:ec:c3:c8:27:4a:ed:ae:9b:16:c0: a9:e4:81:f4:7a:1a:c2:98:14:13:ac:f6:fd:f1:1f: ea:09:3b:8c:04:6c:bf:79:30:08:0a:7c:8a:17:7a: 4e:ee:ce:25:23:52:a6:8f:8a:72:03:c0:35:1b:20: 8f:d4:b0:34:eb:ff:10:f3:9e:c2:04:de:9a:7a:d0: a0:7c:42:42:9d:cd:6f:96:6a:67:1d:56:87:c3:88: 20:dd:94:d0:94:3d:13:80:c6:e0:3c:ea:50:9d:f8: b3:2d:47:9e:90:2f:e9:e9:de:fa:f5:32:9e:7c:16: a4:bd:91:70:1b:12:86:42:85:4b:96:25:6e:56:c4: 30:32:0a:3c:24:0d:e9:9d:fd:88:3d:e4:99:0a:aa: 8d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:91:4C:87:4C:C0:E9:EB:41:1C:F1:25:48:A8:EB:E7:79:45:43:8A X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/2ZFMh0zA6etBHPElSKjr53lFQ4o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.210.42.0/24 31.210.55.0/24 78.135.82.0/23 78.135.111.0/24 188.132.168.0/24 Signature Algorithm: sha256WithRSAEncryption a0:a5:64:6f:d7:c3:bb:ba:66:9a:4a:1b:86:0d:68:fa:88:7b: 0d:b8:55:5a:b8:56:73:ec:fb:f6:12:35:b2:2c:b1:68:a3:1b: 70:1c:fa:3d:db:03:84:50:3e:59:26:83:c1:44:97:45:2f:95: bc:fb:9f:7b:da:c5:0c:b6:dd:ff:74:e7:00:0c:dd:b2:e6:47: be:70:a2:a1:35:0b:c6:32:92:11:ca:88:52:81:c6:c9:19:2b: 4d:d6:d0:b8:3a:29:d4:92:33:c5:c4:d5:cd:96:ed:c9:c0:2b: 47:cb:4b:e9:d2:24:b8:31:48:50:1c:49:64:9e:36:da:e7:9e: e0:89:77:31:73:b7:48:28:08:ff:79:ac:8b:33:26:79:6c:b1: f9:92:74:7a:02:3b:4b:f6:ba:65:ec:09:d7:9d:a7:a0:24:14: 08:6b:ea:b3:6d:7a:e2:73:d8:e2:ed:6b:57:e6:5d:3f:11:eb: fa:70:ab:33:48:f5:d1:d3:cf:1a:a8:4e:a0:cf:c1:cf:d4:42: f5:dd:ad:78:f6:8b:6e:67:c9:b0:3a:57:cc:b1:a0:b5:db:0e: 9b:30:7f:7b:f9:83:b0:db:34:ae:77:73:90:24:42:53:60:d9: a4:eb:2a:7a:f8:72:5c:d9:1d:c2:ff:f5:0c:e7:c1:ae:5b:a7: d8:12:42:0a -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZptjNaW6cSU0lx2f5OhKl8uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjUxMTEwMTEzNTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTkxNGM4NzRjYzBlOWViNDExY2YxMjU0OGE4ZWJlNzc5NDU0MzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCxI5NPGaZuJreqqwDfeyj2WtZxs Y1t6MOIyzpXGvu9f/b5nUaC9zINis1jt6D1gvBkL60Nx44MqXgfDDaXC4E7XOttR XAbxqrlOrEkffb/NVoXraRFgyZrSZNZeZ7yoOXXuGHzP+iOrxai7DuzDyCdK7a6b FsCp5IH0ehrCmBQTrPb98R/qCTuMBGy/eTAICnyKF3pO7s4lI1Kmj4pyA8A1GyCP 1LA06/8Q857CBN6aetCgfEJCnc1vlmpnHVaHw4gg3ZTQlD0TgMbgPOpQnfizLUee kC/p6d769TKefBakvZFwGxKGQoVLliVuVsQwMgo8JA3pnf2IPeSZCqqN0wIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFNmRTIdMwOnrQRzxJUio6+d5RUOKMB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvMlpGTWgwekE2ZXRCSFBFbFNLanI1M2xGUTRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAH9IqAwQA H9I3AwQBTodSAwQATodvAwQAvISoMA0GCSqGSIb3DQEBCwUAA4IBAQCgpWRv18O7 umaaShuGDWj6iHsNuFVauFZz7Pv2EjWyLLFooxtwHPo92wOEUD5ZJoPBRJdFL5W8 +5972sUMtt3/dOcADN2y5ke+cKKhNQvGMpIRyohSgcbJGStN1tC4OinUkjPFxNXN lu3JwCtHy0vp0iS4MUhQHElknjba557giXcxc7dIKAj/eayLMyZ5bLH5knR6AjtL 9rpl7AnXnaegJBQIa+qzbXric9ji7WtX5l0/Eev6cKszSPXR088aqE6gz8HP1EL1 3a149otuZ8mwOlfMsaC12w6bMH97+YOw2zSud3OQJEJTYNmk6yp6+HJc2R3C//UM 58GuW6fYEkIK -----END CERTIFICATE-----Generated at Fri Dec 5 18:22:20 2025 by rpki-client