This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/ZgDs75tq49WzNx-mbPV0VOcMnUo.roa File: ZgDs75tq49WzNx-mbPV0VOcMnUo.roa (raw, json) Hash identifier: dGFHkQk1n2qHo9JpwRfTWZBitzuU26dRmqqWQYzC5Vc= Subject key identifier: 66:00:EC:EF:9B:6A:E3:D5:B3:37:1F:A6:6C:F5:74:54:E7:0C:9D:4A Certificate issuer: /CN=374e2729b17369890a1512f643cd08e4ba2ff414 Certificate serial: 019AA25031024645312CEE503404531D724B Authority key identifier: 37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/ZgDs75tq49WzNx-mbPV0VOcMnUo.roa Signing time: Thu 20 Nov 2025 17:29:15 +0000 ROA not before: Thu 20 Nov 2025 17:29:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213541 IP address blocks: 185.239.136.0/22 maxlen: 24 185.240.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 09:57:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a2:50:31:02:46:45:31:2c:ee:50:34:04:53:1d:72:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=374e2729b17369890a1512f643cd08e4ba2ff414 Validity Not Before: Nov 20 17:29:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6600ecef9b6ae3d5b3371fa66cf57454e70c9d4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:e7:5a:fc:ae:85:54:fd:20:f0:8a:62:8e:90: 25:69:de:96:9c:e2:42:6d:5a:cc:1b:49:3a:5d:d1: 32:42:2b:63:69:c3:fa:a6:12:e1:41:cb:24:0c:3d: 4b:c3:1c:49:11:5d:c0:7f:81:1d:aa:a5:96:1b:b4: 92:4a:9c:5f:b9:28:a6:0a:98:fa:c5:e9:b5:6f:f4: 0d:4e:e0:a2:97:7b:cd:76:89:f2:27:d4:22:df:85: ff:3c:00:14:3a:58:21:01:b0:3e:e1:ba:8c:9c:20: 0c:84:15:cd:23:40:86:f1:b0:38:6a:66:70:c9:6e: c0:72:ab:1e:11:94:1a:a7:f5:86:af:33:6a:4a:32: fb:ef:7f:37:de:36:8d:fd:59:85:07:b0:4d:16:ce: 0f:79:01:0b:cd:ce:04:d8:37:97:59:67:94:e9:f8: 94:d9:3f:fb:7d:82:cc:00:ca:7e:19:d8:a6:0e:c3: de:47:8c:3f:54:b6:2e:0f:96:a6:35:88:1c:04:ce: ed:8e:85:f0:11:96:99:99:a7:6b:20:ca:c3:71:02: 91:5d:e8:b8:3a:7f:aa:b4:f0:71:8e:38:de:a7:5b: 00:57:8a:67:6e:05:29:bf:b4:f5:4f:dd:4e:e2:f7: d6:ca:61:b9:51:b0:58:ff:fc:af:40:ec:9c:ae:7c: 6d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:00:EC:EF:9B:6A:E3:D5:B3:37:1F:A6:6C:F5:74:54:E7:0C:9D:4A X509v3 Authority Key Identifier: keyid:37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/ZgDs75tq49WzNx-mbPV0VOcMnUo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.239.136.0/22 185.240.92.0/22 Signature Algorithm: sha256WithRSAEncryption 35:c0:c8:8a:d0:a2:8c:35:c3:73:54:f3:da:69:7a:23:76:ba: e1:94:63:df:4d:77:45:24:9f:4e:7b:01:9c:57:19:c9:27:97: f2:86:28:f6:c3:05:d3:8d:a8:2e:7b:15:00:cf:d0:c9:f0:0c: 77:da:7a:23:fe:42:b4:9a:5d:e1:a8:52:1a:24:97:01:85:4b: 72:ae:e8:51:b8:89:72:98:a9:d5:46:1f:53:d2:21:5c:24:80: d0:23:1e:56:0c:4e:0b:04:07:a1:05:40:31:3d:3f:94:de:e6: 60:9c:3b:ad:76:7c:bf:ae:16:16:83:09:a3:21:f4:b8:0d:a6: c6:b1:f7:c3:54:e7:cc:3e:62:db:5f:77:00:5a:29:e3:ae:a3: f5:a4:2a:0a:c0:7d:65:d6:38:34:75:56:cb:e6:e6:29:10:c8: e0:46:f7:a5:17:81:74:15:64:3b:81:d5:f7:fb:c4:b5:84:56: c1:49:25:9a:4a:b7:d6:08:2c:a4:c8:fb:e2:48:92:66:88:30: c8:38:74:a6:eb:cb:69:43:3f:fe:1b:20:36:61:96:e5:b7:40: 1d:a1:18:ab:f6:1d:82:e1:d4:69:ea:7d:2a:44:5f:6a:0c:cd: dd:01:a2:4d:d1:50:20:86:85:eb:bc:63:7d:22:fb:c5:fa:5a: 92:6b:aa:44 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqiUDECRkUxLO5QNARTHXJLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NGUyNzI5YjE3MzY5ODkwYTE1MTJmNjQzY2QwOGU0YmEy ZmY0MTQwHhcNMjUxMTIwMTcyOTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjAwZWNlZjliNmFlM2Q1YjMzNzFmYTY2Y2Y1NzQ1NGU3MGM5ZDRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8eda/K6FVP0g8IpijpAlad6WnOJC bVrMG0k6XdEyQitjacP6phLhQcskDD1LwxxJEV3Af4EdqqWWG7SSSpxfuSimCpj6 xem1b/QNTuCil3vNdonyJ9Qi34X/PAAUOlghAbA+4bqMnCAMhBXNI0CG8bA4amZw yW7AcqseEZQap/WGrzNqSjL773833jaN/VmFB7BNFs4PeQELzc4E2DeXWWeU6fiU 2T/7fYLMAMp+GdimDsPeR4w/VLYuD5amNYgcBM7tjoXwEZaZmadrIMrDcQKRXei4 On+qtPBxjjjep1sAV4pnbgUpv7T1T91O4vfWymG5UbBY//yvQOycrnxtlwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGYA7O+bauPVszcfpmz1dFTnDJ1KMB8GA1UdIwQY MBaAFDdOJymxc2mJChUS9kPNCOS6L/QUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85NTIyMzAtYzI2Mi00MWNjLWI5NTYt Y2ZjNDZhNzZlYzc4LzEvWmdEczc1dHE0OVd6TngtbWJQVjBWT2NNblVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC85NTIyMzAtYzI2Mi00MWNjLWI5NTYtY2ZjNDZhNzZlYzc4 LzEvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCue+IAwQC ufBcMA0GCSqGSIb3DQEBCwUAA4IBAQA1wMiK0KKMNcNzVPPaaXojdrrhlGPfTXdF JJ9OewGcVxnJJ5fyhij2wwXTjaguexUAz9DJ8Ax32noj/kK0ml3hqFIaJJcBhUty ruhRuIlymKnVRh9T0iFcJIDQIx5WDE4LBAehBUAxPT+U3uZgnDutdny/rhYWgwmj IfS4DabGsffDVOfMPmLbX3cAWinjrqP1pCoKwH1l1jg0dVbL5uYpEMjgRvelF4F0 FWQ7gdX3+8S1hFbBSSWaSrfWCCykyPviSJJmiDDIOHSm68tpQz/+GyA2YZblt0Ad oRir9h2C4dRp6n0qRF9qDM3dAaJN0VAghoXrvGN9IvvF+lqSa6pE -----END CERTIFICATE-----Generated at Wed Dec 3 13:18:38 2025 by rpki-client