This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/b1fd7a-2e26-4a5d-802d-7246aefcd272/1/ze1bnhxOodvSaZyqj0cJ_3ArzlU.roa File: ze1bnhxOodvSaZyqj0cJ_3ArzlU.roa (raw, json) Hash identifier: PNnVRVHAf7Op/O6n5LoUeAnCU161uCDB3OvamWJNlzk= Subject key identifier: CD:ED:5B:9E:1C:4E:A1:DB:D2:69:9C:AA:8F:47:09:FF:70:2B:CE:55 Certificate issuer: /CN=405ffc74ae92386afb7ce770f0390e90d4cde306 Certificate serial: 019B07AF06EC6C08F098065AA35AF96F530E Authority key identifier: 40:5F:FC:74:AE:92:38:6A:FB:7C:E7:70:F0:39:0E:90:D4:CD:E3:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QF_8dK6SOGr7fOdw8DkOkNTN4wY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/b1fd7a-2e26-4a5d-802d-7246aefcd272/1/ze1bnhxOodvSaZyqj0cJ_3ArzlU.roa Signing time: Wed 10 Dec 2025 09:54:29 +0000 ROA not before: Wed 10 Dec 2025 09:54:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203967 IP address blocks: 91.195.250.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/b1fd7a-2e26-4a5d-802d-7246aefcd272/1/QF_8dK6SOGr7fOdw8DkOkNTN4wY.crl rsync://rpki.ripe.net/repository/DEFAULT/63/b1fd7a-2e26-4a5d-802d-7246aefcd272/1/QF_8dK6SOGr7fOdw8DkOkNTN4wY.mft rsync://rpki.ripe.net/repository/DEFAULT/QF_8dK6SOGr7fOdw8DkOkNTN4wY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:af:06:ec:6c:08:f0:98:06:5a:a3:5a:f9:6f:53:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=405ffc74ae92386afb7ce770f0390e90d4cde306 Validity Not Before: Dec 10 09:54:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cded5b9e1c4ea1dbd2699caa8f4709ff702bce55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1d:1f:bc:dd:07:cf:4f:21:a0:33:05:6a:a4: 18:9c:de:9a:a4:fc:17:fb:62:71:c2:c7:1f:ea:21: cc:1c:6a:83:1e:ea:d4:0f:d9:24:0c:78:a7:c5:e0: ef:63:c1:e4:be:e4:d9:2b:d2:b0:27:38:48:92:06: 7a:a5:af:e0:60:1f:e5:e1:e8:4b:02:22:4d:5a:46: 52:72:87:df:27:75:02:55:db:ba:24:a4:28:61:9c: 3a:c6:97:19:7f:db:38:ea:b5:59:7b:c5:28:a1:83: 63:a6:7e:12:c6:b5:cd:4f:cc:86:0c:40:7d:ba:aa: d0:0c:a6:84:e3:50:c7:a1:19:0c:e6:22:a4:d2:2c: 1a:5f:6c:74:27:be:f1:b1:f9:5b:66:4a:71:f8:50: 66:2e:64:e0:00:35:6e:d8:bc:33:34:a4:14:16:bd: 5c:6c:1e:96:47:52:ea:57:1e:cb:29:bc:fb:b5:80: 6a:14:3f:f4:4a:14:48:74:c6:e1:c2:d8:bc:cf:98: 29:19:6a:ee:e3:0a:e1:35:af:2f:cd:45:c9:3b:12: 7b:57:2f:ce:1c:e1:f5:17:dd:be:05:d8:7d:ae:b9: ab:89:2c:1e:92:f6:34:8e:9a:4c:3e:d8:5b:f7:c5: 94:5f:f0:1d:04:91:9e:cb:ee:80:56:93:b8:fd:f4: 97:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:ED:5B:9E:1C:4E:A1:DB:D2:69:9C:AA:8F:47:09:FF:70:2B:CE:55 X509v3 Authority Key Identifier: keyid:40:5F:FC:74:AE:92:38:6A:FB:7C:E7:70:F0:39:0E:90:D4:CD:E3:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QF_8dK6SOGr7fOdw8DkOkNTN4wY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b1fd7a-2e26-4a5d-802d-7246aefcd272/1/ze1bnhxOodvSaZyqj0cJ_3ArzlU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b1fd7a-2e26-4a5d-802d-7246aefcd272/1/QF_8dK6SOGr7fOdw8DkOkNTN4wY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.195.250.0/23 Signature Algorithm: sha256WithRSAEncryption 6d:1b:ee:30:af:89:c9:07:87:9d:59:bd:c0:e3:f5:07:51:e5: 08:b9:0b:8c:b0:27:d6:27:93:5a:5b:e8:34:4b:e9:0d:32:93: e2:3d:3f:6d:9a:e8:e6:00:1e:cb:4f:2d:f8:9c:bd:64:62:9e: a7:42:5d:32:19:8d:cf:3c:45:2f:48:55:02:66:08:b6:59:8b: e8:5d:4f:22:48:c4:b6:22:8e:52:2d:82:9c:90:88:68:2b:4b: 41:52:3b:70:b2:0a:a9:a1:8d:3a:a2:29:2a:35:08:1b:31:08: c2:2f:d9:be:40:38:54:f4:af:54:fe:5c:d3:56:39:b1:4d:bb: df:a8:94:60:38:50:b8:f4:e6:40:a3:5d:7f:69:8f:7e:9a:cc: 57:90:ff:63:b7:83:95:f4:14:6e:a6:8b:b6:2e:9b:f7:a9:7a: 4d:63:4a:46:e3:c4:70:c1:82:7e:91:45:8c:1d:f4:82:88:d8: 2d:33:4e:b5:0e:67:a4:bd:39:3f:5b:7a:59:33:17:80:e8:7c: 0a:ab:e7:ab:d8:fb:66:18:45:3f:c5:8d:ec:19:f7:02:72:36: 48:ad:93:97:9a:9e:57:bc:95:a9:66:1b:9b:72:d4:4b:14:fe: c4:9d:a2:5c:b1:23:d7:2d:88:53:66:07:ee:29:8b:d6:43:66: 0d:dc:be:9c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsHrwbsbAjwmAZao1r5b1MOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwNWZmYzc0YWU5MjM4NmFmYjdjZTc3MGYwMzkwZTkwZDRj ZGUzMDYwHhcNMjUxMjEwMDk1NDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZGVkNWI5ZTFjNGVhMWRiZDI2OTljYWE4ZjQ3MDlmZjcwMmJjZTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB0fvN0Hz08hoDMFaqQYnN6apPwX +2Jxwscf6iHMHGqDHurUD9kkDHinxeDvY8HkvuTZK9KwJzhIkgZ6pa/gYB/l4ehL AiJNWkZScoffJ3UCVdu6JKQoYZw6xpcZf9s46rVZe8UooYNjpn4SxrXNT8yGDEB9 uqrQDKaE41DHoRkM5iKk0iwaX2x0J77xsflbZkpx+FBmLmTgADVu2LwzNKQUFr1c bB6WR1LqVx7LKbz7tYBqFD/0ShRIdMbhwti8z5gpGWru4wrhNa8vzUXJOxJ7Vy/O HOH1F92+Bdh9rrmriSwekvY0jppMPthb98WUX/AdBJGey+6AVpO4/fSX9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM3tW54cTqHb0mmcqo9HCf9wK85VMB8GA1UdIwQY MBaAFEBf/HSukjhq+3zncPA5DpDUzeMGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUZfOGRLNlNPR3I3Zk9kdzhEa09rTlRONHdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9iMWZkN2EtMmUyNi00YTVkLTgwMmQt NzI0NmFlZmNkMjcyLzEvemUxYm5oeE9vZHZTYVp5cWowY0pfM0FyemxVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9iMWZkN2EtMmUyNi00YTVkLTgwMmQtNzI0NmFlZmNkMjcy LzEvUUZfOGRLNlNPR3I3Zk9kdzhEa09rTlRONHdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW8P6MA0G CSqGSIb3DQEBCwUAA4IBAQBtG+4wr4nJB4edWb3A4/UHUeUIuQuMsCfWJ5NaW+g0 S+kNMpPiPT9tmujmAB7LTy34nL1kYp6nQl0yGY3PPEUvSFUCZgi2WYvoXU8iSMS2 Io5SLYKckIhoK0tBUjtwsgqpoY06oikqNQgbMQjCL9m+QDhU9K9U/lzTVjmxTbvf qJRgOFC49OZAo11/aY9+msxXkP9jt4OV9BRupou2Lpv3qXpNY0pG48RwwYJ+kUWM HfSCiNgtM061DmekvTk/W3pZMxeA6HwKq+er2PtmGEU/xY3sGfcCcjZIrZOXmp5X vJWpZhubctRLFP7EnaJcsSPXLYhTZgfuKYvWQ2YN3L6c -----END CERTIFICATE-----Generated at Fri Dec 19 11:51:54 2025 by rpki-client