This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/cZgGmuqhaEJZe1u2pe_Dthmax4g.roa File: cZgGmuqhaEJZe1u2pe_Dthmax4g.roa (raw, json) Hash identifier: q/RP3hCioWplIRqOwi9yxassJhCySIp/KOX9lI+brhE= Subject key identifier: 71:98:06:9A:EA:A1:68:42:59:7B:5B:B6:A5:EF:C3:B6:19:9A:C7:88 Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019AFD66E37A80C07DD6C547E40C48C363DB Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/cZgGmuqhaEJZe1u2pe_Dthmax4g.roa Signing time: Mon 08 Dec 2025 09:59:29 +0000 ROA not before: Mon 08 Dec 2025 09:59:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 42375 IP address blocks: 213.178.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 13:50:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fd:66:e3:7a:80:c0:7d:d6:c5:47:e4:0c:48:c3:63:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Dec 8 09:59:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7198069aeaa16842597b5bb6a5efc3b6199ac788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:df:6e:4f:30:ac:c4:84:1c:49:e9:af:2d:41: 12:19:b5:8b:f4:c4:f8:d4:ee:de:d0:7b:e1:7e:58: 8c:e4:26:d9:58:ad:a4:ca:64:e8:6e:02:c3:87:32: e4:2a:fc:1b:e1:fa:6f:f5:2a:ea:bd:96:25:72:33: 1e:40:f9:e3:fb:40:6b:69:64:08:1c:41:f5:30:63: 53:23:7f:26:5d:a5:aa:31:eb:b2:ee:9b:20:37:2d: d9:82:4e:14:93:f2:5b:1e:40:d3:5c:62:c2:a6:a6: 7b:d9:b4:b3:06:6f:58:3a:e8:c4:a5:ef:69:bd:aa: 2e:f7:c6:75:80:3b:fb:ac:55:95:50:02:9d:f8:1d: 9a:ea:56:89:c4:21:80:30:30:55:cf:0a:9b:54:bd: 29:c2:e8:a3:b2:49:67:28:18:d3:55:55:fa:53:b1: bc:d3:73:f3:8f:3c:19:d4:b9:5a:c7:d4:61:0b:a9: 3c:dc:f6:f9:dd:0b:20:65:44:ab:ae:9c:5f:09:a2: 13:d3:1b:68:5c:f4:74:0b:c8:74:3b:93:8b:5f:44: 52:e3:25:b9:db:d8:17:88:b1:15:96:1f:49:ee:ce: 10:06:34:07:3c:b1:bf:91:5b:8a:a7:7c:83:7b:60: 44:b9:30:b5:70:26:93:8a:ec:b8:50:97:82:e1:1a: 9d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:98:06:9A:EA:A1:68:42:59:7B:5B:B6:A5:EF:C3:B6:19:9A:C7:88 X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/cZgGmuqhaEJZe1u2pe_Dthmax4g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.178.152.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:40:04:c2:4f:54:fb:33:51:5c:fd:22:18:0e:7b:28:c0:e4: 2e:c5:ba:de:d1:e9:40:68:e7:46:aa:d2:c0:0a:6a:fc:59:94: 00:44:c2:1a:d7:2b:e4:40:69:e6:fb:ed:45:e4:a9:d3:da:25: d9:f7:54:56:c9:36:bc:6a:d7:6c:a3:ac:88:09:cd:74:05:d5: fc:72:61:12:4d:04:ea:a0:69:07:61:67:d1:ad:f9:1e:35:3a: 54:ee:af:cb:40:5d:56:31:4d:37:d5:93:d3:58:c3:49:b5:49: 89:fb:2b:73:d9:14:a6:a5:2f:8d:d4:49:b1:7f:ed:3a:00:37: eb:ca:bc:a5:43:b6:da:cf:e2:5a:dd:56:da:6a:43:8f:a8:52: 19:16:c6:81:e3:39:c3:4f:59:ed:08:3d:90:af:b9:cb:32:c7: 3f:43:be:7d:0c:ac:d8:43:4e:31:a7:04:58:d9:29:ed:d9:b6: f6:b3:c5:0e:8e:fe:23:b1:a9:21:cb:87:32:c3:4e:1b:21:3c: a4:ef:dd:0c:57:a4:1b:b7:b8:d9:a2:be:05:08:0a:90:0a:d9: 39:1f:c4:3f:4e:41:21:f0:fa:af:b6:04:77:e3:97:1a:92:10: f6:c2:fb:82:79:99:90:7b:30:86:9f:a4:94:ed:48:b9:e4:49: 40:19:78:ac -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZr9ZuN6gMB91sVH5AxIw2PbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjUxMjA4MDk1OTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTk4MDY5YWVhYTE2ODQyNTk3YjViYjZhNWVmYzNiNjE5OWFjNzg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1d9uTzCsxIQcSemvLUESGbWL9MT4 1O7e0HvhfliM5CbZWK2kymTobgLDhzLkKvwb4fpv9SrqvZYlcjMeQPnj+0BraWQI HEH1MGNTI38mXaWqMeuy7psgNy3Zgk4Uk/JbHkDTXGLCpqZ72bSzBm9YOujEpe9p vaou98Z1gDv7rFWVUAKd+B2a6laJxCGAMDBVzwqbVL0pwuijsklnKBjTVVX6U7G8 03PzjzwZ1Llax9RhC6k83Pb53QsgZUSrrpxfCaIT0xtoXPR0C8h0O5OLX0RS4yW5 29gXiLEVlh9J7s4QBjQHPLG/kVuKp3yDe2BEuTC1cCaTiuy4UJeC4RqdowIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHGYBprqoWhCWXtbtqXvw7YZmseIMB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvY1pnR211cWhhRUpaZTF1MnBlX0R0aG1heDRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1bKYMA0G CSqGSIb3DQEBCwUAA4IBAQCbQATCT1T7M1Fc/SIYDnsowOQuxbre0elAaOdGqtLA Cmr8WZQARMIa1yvkQGnm++1F5KnT2iXZ91RWyTa8atdso6yICc10BdX8cmESTQTq oGkHYWfRrfkeNTpU7q/LQF1WMU031ZPTWMNJtUmJ+ytz2RSmpS+N1Emxf+06ADfr yrylQ7baz+Ja3VbaakOPqFIZFsaB4znDT1ntCD2Qr7nLMsc/Q759DKzYQ04xpwRY 2Snt2bb2s8UOjv4jsakhy4cyw04bITyk790MV6Qbt7jZor4FCAqQCtk5H8Q/TkEh 8PqvtgR345cakhD2wvuCeZmQezCGn6SU7Ui55ElAGXis -----END CERTIFICATE-----Generated at Mon Dec 8 20:10:41 2025 by rpki-client