This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/z5_ZLlou5VL8i6lfCcZXdC7yb64.roa File: z5_ZLlou5VL8i6lfCcZXdC7yb64.roa (raw, json) Hash identifier: h4wiuEwBBoTuGvA4akzMhxYPAeFa7zj1xJsCK7WvsHY= Subject key identifier: CF:9F:D9:2E:5A:2E:E5:52:FC:8B:A9:5F:09:C6:57:74:2E:F2:6F:AE Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019AD3A57A15686E29C1CDD2DA1564587931 Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/z5_ZLlou5VL8i6lfCcZXdC7yb64.roa Signing time: Sun 30 Nov 2025 07:23:48 +0000 ROA not before: Sun 30 Nov 2025 07:23:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212477 IP address blocks: 89.125.209.0/24 maxlen: 24 103.245.231.0/24 maxlen: 24 185.198.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d3:a5:7a:15:68:6e:29:c1:cd:d2:da:15:64:58:79:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Nov 30 07:23:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cf9fd92e5a2ee552fc8ba95f09c657742ef26fae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:09:a8:9d:8a:6e:e3:1e:ab:78:a1:f0:61:22: 9b:4a:e2:b1:cc:90:6d:e7:9c:2c:bb:6b:57:7a:40: d1:de:c4:bc:8a:41:ad:34:ac:07:a5:30:95:dc:28: b1:0b:78:b1:9d:39:c0:cc:da:1b:23:3d:67:01:7b: 27:8d:31:9a:68:1f:42:b3:76:6f:11:81:1b:59:f4: 3c:5e:3c:1c:f7:dc:4a:2d:a3:4d:10:1e:54:ab:0c: 80:4e:bc:83:2a:fc:e3:4f:70:d5:99:ec:9c:b0:3b: 6a:7f:0a:21:61:4d:64:8b:a6:9c:90:d7:24:0a:cb: 57:81:34:c5:09:b1:54:27:7c:b6:4c:e7:c1:ca:dd: 62:d5:77:08:3c:f5:e3:ae:49:32:86:ea:b2:36:bf: a5:b1:dc:21:23:09:9a:19:d8:3e:e1:1b:d8:80:b9: 53:b6:17:80:77:b7:a6:9e:75:f6:49:e0:0c:f8:f5: d7:24:5a:0a:a5:38:a2:99:0d:b3:62:91:28:9a:e4: 96:fc:76:4d:e9:80:d6:6a:ed:be:fd:9b:51:ae:ff: 3d:9a:43:09:0a:21:0d:18:cc:89:bc:e2:9d:9c:c7: 76:79:c9:40:e0:8b:1d:90:7c:a5:79:0d:00:f3:f5: 6c:5c:14:78:b3:b8:3b:6b:42:1f:d9:9f:fd:32:75: b6:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:9F:D9:2E:5A:2E:E5:52:FC:8B:A9:5F:09:C6:57:74:2E:F2:6F:AE X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/z5_ZLlou5VL8i6lfCcZXdC7yb64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.125.209.0/24 103.245.231.0/24 185.198.234.0/24 Signature Algorithm: sha256WithRSAEncryption 89:79:bb:6f:2e:12:50:5e:85:67:93:63:cb:9f:59:a8:22:9f: 61:b2:b4:a6:8d:52:cd:49:4e:d6:65:2c:22:d0:8f:36:d3:d6: aa:8f:e8:15:0b:5c:3c:fc:cd:ad:9a:77:d5:a9:f1:b6:ac:5a: 87:d7:9d:8e:6d:1f:fa:b6:1c:50:c4:50:33:9b:24:bf:e2:d7: d1:64:69:8d:2f:d2:81:b1:80:cd:d7:bd:ef:ff:91:9d:db:88: 10:52:a0:d9:60:36:46:01:1c:8c:17:c1:d3:42:a3:6c:82:2c: c8:d2:ea:69:ca:48:f1:55:c4:5f:ac:61:a0:f4:a4:1e:0e:de: a2:06:54:da:03:4a:f0:7f:4a:7a:f8:71:30:3d:c8:53:37:a3: 34:41:02:32:9d:ae:cd:4a:f4:ba:30:50:fc:79:ba:3c:04:6f: 1f:f6:f8:67:99:68:d9:00:c8:b2:83:53:bb:01:0f:88:f5:98: 4d:52:75:d4:08:dd:18:f7:98:6e:43:ee:b5:3d:08:e9:dd:07: 88:68:0d:20:57:a9:22:af:91:72:6c:66:21:6b:73:93:44:93: 35:ce:93:a8:9f:9d:eb:12:de:b8:40:79:d3:1f:56:c8:ca:69: ca:78:bc:08:3f:8a:51:61:a2:f4:3c:bf:20:30:70:15:f2:9d: ca:e2:ef:e5 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZrTpXoVaG4pwc3S2hVkWHkxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjUxMTMwMDcyMzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjlmZDkyZTVhMmVlNTUyZmM4YmE5NWYwOWM2NTc3NDJlZjI2ZmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwmonYpu4x6reKHwYSKbSuKxzJBt 55wsu2tXekDR3sS8ikGtNKwHpTCV3CixC3ixnTnAzNobIz1nAXsnjTGaaB9Cs3Zv EYEbWfQ8Xjwc99xKLaNNEB5UqwyATryDKvzjT3DVmeycsDtqfwohYU1ki6ackNck CstXgTTFCbFUJ3y2TOfByt1i1XcIPPXjrkkyhuqyNr+lsdwhIwmaGdg+4RvYgLlT theAd7emnnX2SeAM+PXXJFoKpTiimQ2zYpEomuSW/HZN6YDWau2+/ZtRrv89mkMJ CiENGMyJvOKdnMd2eclA4IsdkHyleQ0A8/VsXBR4s7g7a0If2Z/9MnW2dQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFM+f2S5aLuVS/IupXwnGV3Qu8m+uMB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvejVfWkxsb3U1Vkw4aTZsZkNjWlhkQzd5YjY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWX3RAwQA Z/XnAwQAucbqMA0GCSqGSIb3DQEBCwUAA4IBAQCJebtvLhJQXoVnk2PLn1moIp9h srSmjVLNSU7WZSwi0I8209aqj+gVC1w8/M2tmnfVqfG2rFqH152ObR/6thxQxFAz myS/4tfRZGmNL9KBsYDN173v/5Gd24gQUqDZYDZGARyMF8HTQqNsgizI0uppykjx VcRfrGGg9KQeDt6iBlTaA0rwf0p6+HEwPchTN6M0QQIyna7NSvS6MFD8ebo8BG8f 9vhnmWjZAMiyg1O7AQ+I9ZhNUnXUCN0Y95huQ+61PQjp3QeIaA0gV6kir5FybGYh a3OTRJM1zpOon53rEt64QHnTH1bIymnKeLwIP4pRYaL0PL8gMHAV8p3K4u/l -----END CERTIFICATE-----Generated at Fri Dec 5 07:58:53 2025 by rpki-client