This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/zZPuHWJDy83KhJHPetdS190Sc9A.roa File: zZPuHWJDy83KhJHPetdS190Sc9A.roa (raw, json) Hash identifier: p0Sn4R1w3W9WwTjzDtRCal/zanta/wz6d1ex1M+TJKQ= Subject key identifier: CD:93:EE:1D:62:43:CB:CD:CA:84:91:CF:7A:D7:52:D7:DD:12:73:D0 Certificate issuer: /CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf Certificate serial: 019A9FFC8BAE94AED22CE520D0158DE09F6D Authority key identifier: 54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/zZPuHWJDy83KhJHPetdS190Sc9A.roa Signing time: Thu 20 Nov 2025 06:38:39 +0000 ROA not before: Thu 20 Nov 2025 06:38:39 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 185.101.170.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.mft rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9f:fc:8b:ae:94:ae:d2:2c:e5:20:d0:15:8d:e0:9f:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf Validity Not Before: Nov 20 06:38:39 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cd93ee1d6243cbcdca8491cf7ad752d7dd1273d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d2:f8:3b:1a:20:fa:c0:35:d1:1b:53:cb:46: d6:cd:09:82:90:6b:d5:28:12:10:47:19:38:3a:39: d7:61:70:4e:e5:69:2b:e2:77:79:47:6c:54:7f:d0: 23:12:36:59:23:13:91:bf:67:28:06:9f:36:60:51: 8b:c5:3a:79:72:58:dd:05:fd:48:0d:3f:99:9c:7c: 1b:77:74:01:82:8a:ba:4b:c6:25:47:98:73:ac:69: ca:1c:b1:06:d2:ad:82:96:41:b0:d9:5c:7b:a2:7b: 5b:1c:ea:f2:8f:61:3f:5b:57:4f:85:3c:ef:88:2d: 18:18:3b:64:d2:a2:70:b7:6c:76:54:29:d2:07:c5: 61:20:eb:c6:a9:d3:3c:8e:35:ab:8d:06:8c:35:18: 76:a3:ca:fe:72:bb:8a:d4:f0:02:e2:36:77:17:ac: 72:c3:52:da:5d:2c:f5:35:29:14:e6:91:fe:6f:4b: 63:8f:f7:f4:d8:27:ff:30:83:57:e2:11:8e:86:5f: 39:66:84:2b:a3:fb:8b:bc:62:7f:fd:d0:c7:1c:02: 80:53:cc:95:a3:3b:48:6a:37:93:19:88:3e:4b:08: be:71:6b:fa:30:05:a4:58:d9:a5:1c:59:38:e6:a2: 66:68:e4:3a:0f:65:bc:08:fe:c8:18:a1:3e:54:e9: cb:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:93:EE:1D:62:43:CB:CD:CA:84:91:CF:7A:D7:52:D7:DD:12:73:D0 X509v3 Authority Key Identifier: keyid:54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/zZPuHWJDy83KhJHPetdS190Sc9A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.101.170.0/23 Signature Algorithm: sha256WithRSAEncryption 1c:b0:02:63:0c:2a:f3:6d:a5:f0:11:76:20:34:3b:63:e8:1c: 22:0b:84:85:1c:2e:80:af:b3:33:da:75:93:0a:55:8d:7a:30: 74:c4:ed:e6:ab:95:7a:bc:5f:8c:62:44:e7:69:e9:18:04:68: 12:92:12:e0:d0:46:80:c3:eb:1e:8d:fa:1c:02:6d:5f:2b:bf: 20:0e:1c:75:cd:f3:4d:ba:8a:2c:5e:32:e8:45:8f:df:ba:86: 07:a9:80:bd:dc:39:00:91:0f:44:d0:e1:3a:66:cd:7a:34:57: b6:42:49:e5:c7:2d:71:c2:e4:c8:ab:21:1b:09:ba:cb:78:7a: 55:bf:3c:15:b8:6a:49:42:33:f3:8d:0c:eb:39:f6:c0:5c:a9: 25:ed:91:21:6d:ff:f9:48:af:0b:a0:79:c3:d2:86:cf:23:e5: 44:3b:33:f3:96:64:1b:a6:e9:f9:f9:ae:d8:dd:e9:c3:bc:0a: aa:29:c1:88:fa:a9:fb:bb:a3:2f:71:34:63:fd:6d:d8:5f:ca: 10:ae:dd:45:1e:4f:36:9c:87:66:f5:51:f0:70:6d:bb:81:d3: 33:ee:33:e6:70:06:a4:14:cf:6c:6d:73:27:88:e2:0a:22:4c: a3:1a:a3:2f:f2:10:95:f7:79:7d:ce:ca:ec:19:53:da:7e:d8: 1f:0d:4f:27 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqf/IuulK7SLOUg0BWN4J9tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0MWZkYzdhMmYxMWE1NzY2ZDNhZDdiZGY2MjVjZTVlMTE5 YThmZGYwHhcNMjUxMTIwMDYzODM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDkzZWUxZDYyNDNjYmNkY2E4NDkxY2Y3YWQ3NTJkN2RkMTI3M2QwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudL4Oxog+sA10RtTy0bWzQmCkGvV KBIQRxk4OjnXYXBO5Wkr4nd5R2xUf9AjEjZZIxORv2coBp82YFGLxTp5cljdBf1I DT+ZnHwbd3QBgoq6S8YlR5hzrGnKHLEG0q2ClkGw2Vx7ontbHOryj2E/W1dPhTzv iC0YGDtk0qJwt2x2VCnSB8VhIOvGqdM8jjWrjQaMNRh2o8r+cruK1PAC4jZ3F6xy w1LaXSz1NSkU5pH+b0tjj/f02Cf/MINX4hGOhl85ZoQro/uLvGJ//dDHHAKAU8yV oztIajeTGYg+Swi+cWv6MAWkWNmlHFk45qJmaOQ6D2W8CP7IGKE+VOnLpQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM2T7h1iQ8vNyoSRz3rXUtfdEnPQMB8GA1UdIwQY MBaAFFQf3HovEaV2bTrXvfYlzl4Rmo/fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkJfY2VpOFJwWFp0T3RlOTlpWE9YaEdhajk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC84ZmFkNjctYmI2Yi00NzczLWI4MWUt YzkwMGE4OWYyMGYxLzEvelpQdUhXSkR5ODNLaEpIUGV0ZFMxOTBTYzlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC84ZmFkNjctYmI2Yi00NzczLWI4MWUtYzkwMGE4OWYyMGYx LzEvVkJfY2VpOFJwWFp0T3RlOTlpWE9YaEdhajk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuWWqMA0G CSqGSIb3DQEBCwUAA4IBAQAcsAJjDCrzbaXwEXYgNDtj6BwiC4SFHC6Ar7Mz2nWT ClWNejB0xO3mq5V6vF+MYkTnaekYBGgSkhLg0EaAw+sejfocAm1fK78gDhx1zfNN uoosXjLoRY/fuoYHqYC93DkAkQ9E0OE6Zs16NFe2Qknlxy1xwuTIqyEbCbrLeHpV vzwVuGpJQjPzjQzrOfbAXKkl7ZEhbf/5SK8LoHnD0obPI+VEOzPzlmQbpun5+a7Y 3enDvAqqKcGI+qn7u6MvcTRj/W3YX8oQrt1FHk82nIdm9VHwcG27gdMz7jPmcAak FM9sbXMniOIKIkyjGqMv8hCV93l9zsrsGVPaftgfDU8n -----END CERTIFICATE-----Generated at Thu Dec 4 05:59:17 2025 by rpki-client