This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/ZneiSpjD_-_VaNyAJaG974_7idY.roa File: ZneiSpjD_-_VaNyAJaG974_7idY.roa (raw, json) Hash identifier: Tv60JgAtLqP+CwQFROI1SLVFib7WgfcgdiL6djSfD/U= Subject key identifier: 66:77:A2:4A:98:C3:FF:EF:D5:68:DC:80:25:A1:BD:EF:8F:FB:89:D6 Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019B08720A6345565132077F711E213ADF91 Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/ZneiSpjD_-_VaNyAJaG974_7idY.roa Signing time: Wed 10 Dec 2025 13:27:30 +0000 ROA not before: Wed 10 Dec 2025 13:27:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211522 IP address blocks: 45.142.122.0/24 maxlen: 24 91.103.252.0/24 maxlen: 24 91.103.253.0/24 maxlen: 24 185.17.0.0/24 maxlen: 24 185.106.93.0/24 maxlen: 24 185.106.94.0/24 maxlen: 24 185.112.83.0/24 maxlen: 24 185.125.230.0/24 maxlen: 24 185.174.136.0/24 maxlen: 24 185.174.137.0/24 maxlen: 24 185.217.197.0/24 maxlen: 24 185.229.65.0/24 maxlen: 24 185.229.66.0/24 maxlen: 24 194.67.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 17:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:72:0a:63:45:56:51:32:07:7f:71:1e:21:3a:df:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Dec 10 13:27:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6677a24a98c3ffefd568dc8025a1bdef8ffb89d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f2:58:ed:1d:7f:24:36:42:0a:17:0e:5b:10: 97:be:68:bc:37:2a:5c:1d:87:21:71:e5:44:73:1a: ac:a6:09:88:4c:e2:95:2b:49:f7:01:70:f0:68:0f: 4e:87:17:3f:32:53:67:23:fd:14:d2:7f:c6:84:d6: 59:aa:28:35:c2:a9:af:f9:76:94:73:a2:ee:71:e9: ad:2a:03:c3:04:46:58:10:21:52:25:9c:5c:79:28: 3c:da:68:ae:ea:ca:76:74:28:b9:03:64:89:b4:bc: 6f:2c:57:03:ec:30:91:8c:cf:14:00:eb:89:20:93: b8:f1:ae:4a:b1:3a:5d:90:00:2d:18:06:68:ca:31: 6d:33:bb:bf:00:2d:61:74:f4:1d:e6:f3:6e:3e:42: a6:da:b6:67:1c:d0:2d:b7:e2:27:9b:40:3d:3c:b0: fa:99:c2:e3:20:f2:1e:de:88:b4:3a:6c:02:cf:1e: dc:22:f2:42:b4:d8:ca:84:1a:15:85:3e:6f:d3:ef: cf:9c:f3:3e:79:98:0a:49:63:f0:b6:36:86:ab:22: 26:8e:fd:e6:7e:a7:fc:8a:cb:81:2d:88:b8:72:ae: 59:c2:8f:d2:99:58:e5:66:63:48:93:c4:57:f5:93: 9f:87:1d:29:85:3b:9c:70:26:e2:37:f1:b2:d1:36: e1:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:77:A2:4A:98:C3:FF:EF:D5:68:DC:80:25:A1:BD:EF:8F:FB:89:D6 X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/ZneiSpjD_-_VaNyAJaG974_7idY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.142.122.0/24 91.103.252.0/23 185.17.0.0/24 185.106.93.0-185.106.94.255 185.112.83.0/24 185.125.230.0/24 185.174.136.0/23 185.217.197.0/24 185.229.65.0-185.229.66.255 194.67.201.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:53:b4:78:9b:e2:f2:19:dc:03:16:90:f4:62:0d:34:bf:77: d5:76:14:5b:ce:bc:f0:cb:8d:06:56:4f:e1:4b:0c:35:0d:66: 15:62:a3:bf:e5:ec:d6:05:81:58:bc:70:14:97:25:41:fc:53: 68:ca:3b:15:6f:f6:cd:40:4e:71:f2:56:f3:07:93:55:a4:f3: 92:11:d0:30:92:59:13:1f:d2:af:7d:56:4d:9e:65:49:07:fe: cf:da:26:c9:da:61:47:3f:54:e1:6f:8d:5c:7f:4d:b7:de:48: 0c:1c:86:8c:57:24:9d:95:36:e6:15:9f:f2:7a:6e:6b:97:6e: 5d:5e:3d:d9:09:62:3e:a0:af:08:5d:ec:7d:b9:3f:51:f2:66: ee:d3:7b:b9:54:04:98:80:99:12:63:e0:af:90:fc:f9:7b:a7: 18:08:ff:63:0d:fd:f6:f4:09:0f:50:ae:d3:56:40:b8:85:a2: df:aa:d3:bc:1d:e9:bf:44:d0:bc:8d:10:b7:ef:87:91:61:28: 8a:25:b5:bc:e7:7b:ab:65:0f:63:a6:93:e4:55:fb:58:bb:7c: 86:6d:d5:fb:de:96:ed:a1:70:b6:ae:85:7b:9a:c2:f2:22:e2: 38:bd:5e:2c:d0:8b:1f:74:6e:fb:e5:0c:d7:0f:a9:8e:6d:57: e7:4c:a0:86 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgISAZsIcgpjRVZRMgd/cR4hOt+RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjUxMjEwMTMyNzMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Njc3YTI0YTk4YzNmZmVmZDU2OGRjODAyNWExYmRlZjhmZmI4OWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vJY7R1/JDZCChcOWxCXvmi8Nypc HYchceVEcxqspgmITOKVK0n3AXDwaA9Ohxc/MlNnI/0U0n/GhNZZqig1wqmv+XaU c6LucemtKgPDBEZYECFSJZxceSg82miu6sp2dCi5A2SJtLxvLFcD7DCRjM8UAOuJ IJO48a5KsTpdkAAtGAZoyjFtM7u/AC1hdPQd5vNuPkKm2rZnHNAtt+Inm0A9PLD6 mcLjIPIe3oi0OmwCzx7cIvJCtNjKhBoVhT5v0+/PnPM+eZgKSWPwtjaGqyImjv3m fqf8isuBLYi4cq5Zwo/SmVjlZmNIk8RX9ZOfhx0phTuccCbiN/Gy0TbhAwIDAQAB o4ICTzCCAkswHQYDVR0OBBYEFGZ3okqYw//v1WjcgCWhve+P+4nWMB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvWm5laVNwakRfLV9WYU55QUphRzk3NF83aWRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDBSBAIAATBMAwQALY56AwQB W2f8AwQAuREAMAwDBAC5al0DBAC5al4DBAC5cFMDBAC5feYDBAG5rogDBAC52cUw DAMEALnlQQMEALnlQgMEAMJDyTANBgkqhkiG9w0BAQsFAAOCAQEAe1O0eJvi8hnc AxaQ9GINNL931XYUW8688MuNBlZP4UsMNQ1mFWKjv+Xs1gWBWLxwFJclQfxTaMo7 FW/2zUBOcfJW8weTVaTzkhHQMJJZEx/Sr31WTZ5lSQf+z9omydphRz9U4W+NXH9N t95IDByGjFcknZU25hWf8npua5duXV492QliPqCvCF3sfbk/UfJm7tN7uVQEmICZ EmPgr5D8+XunGAj/Yw399vQJD1Cu01ZAuIWi36rTvB3pv0TQvI0Qt++HkWEoiiW1 vOd7q2UPY6aT5FX7WLt8hm3V+96W7aFwtq6Fe5rC8iLiOL1eLNCLH3Ru++UM1w+p jm1X50yghg== -----END CERTIFICATE-----Generated at Wed Dec 17 20:45:22 2025 by rpki-client