This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/zddHYLfkJT0eS8ovV7gSllGYphQ.roa File: zddHYLfkJT0eS8ovV7gSllGYphQ.roa (raw, json) Hash identifier: TkkCe7XhWwbLDrvWx13SyU/qzqmQiXIpAOxCG1/wRvw= Subject key identifier: CD:D7:47:60:B7:E4:25:3D:1E:4B:CA:2F:57:B8:12:96:51:98:A6:14 Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019A8E164DC681E7C733D713744CC3F61A7E Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/zddHYLfkJT0eS8ovV7gSllGYphQ.roa Signing time: Sun 16 Nov 2025 19:13:37 +0000 ROA not before: Sun 16 Nov 2025 19:13:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 206097 IP address blocks: 45.88.12.0/24 maxlen: 24 89.125.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:8e:16:4d:c6:81:e7:c7:33:d7:13:74:4c:c3:f6:1a:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Nov 16 19:13:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cdd74760b7e4253d1e4bca2f57b812965198a614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c5:c2:4d:30:fe:27:8e:54:95:d8:da:3c:ec: 3d:98:cc:f4:6a:0f:df:6f:ed:0a:ff:5c:06:46:62: 6d:e7:60:44:25:4c:89:99:13:66:35:3f:77:e4:4d: 18:b9:6f:a5:94:05:79:f0:05:50:32:30:55:73:15: 21:5e:e5:a0:87:cf:a4:58:dd:55:6c:7b:41:36:5a: 11:04:50:0d:b7:f7:ae:48:7f:e8:8e:3d:1a:41:4e: d2:f6:12:18:66:90:ec:46:24:07:a8:81:f9:9a:cf: c6:95:de:69:16:88:0c:a0:0b:b8:16:07:ce:4d:f2: 24:0b:1c:14:f6:7c:04:fd:32:e8:0b:96:5a:37:5b: b8:18:e2:fd:bb:53:da:fb:47:3d:49:3f:70:97:95: 6b:a7:b3:17:ff:dd:6b:27:ee:c8:ff:a4:aa:67:3f: 54:81:7d:e8:92:1c:c2:05:8b:a3:23:8c:3d:b3:11: ee:87:1e:73:89:5b:bf:e8:97:62:8f:e8:32:c3:0e: 29:11:c7:e4:8b:df:da:7e:d1:53:6d:d7:35:0c:c6: 2d:d7:25:f1:c2:ef:d0:20:4e:b6:b6:66:c3:b1:dc: 79:ab:d9:63:70:62:34:e7:08:da:90:11:e3:d2:c9: e0:b3:75:5f:ab:31:bb:e2:20:10:7e:96:6c:6b:67: 40:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:D7:47:60:B7:E4:25:3D:1E:4B:CA:2F:57:B8:12:96:51:98:A6:14 X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/zddHYLfkJT0eS8ovV7gSllGYphQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.88.12.0/24 89.125.126.0/24 Signature Algorithm: sha256WithRSAEncryption 70:30:d7:4b:8d:fa:a7:e7:e0:8d:23:bc:ad:c3:b7:03:33:25: 67:68:64:34:4b:44:52:97:a2:c7:86:47:4c:d4:c1:08:e6:5f: 3e:dc:fd:8c:3d:6c:a6:3a:8f:38:05:47:15:68:81:07:b7:f5: f9:a6:e4:34:b2:33:2d:f3:81:62:bb:93:bb:c3:eb:e4:cb:cf: 5c:26:d6:2e:83:b6:1a:4f:7b:54:da:5e:b4:c1:06:11:cd:c8: 16:69:b4:70:26:4d:18:4d:4d:bd:7a:5e:40:5b:ca:66:cb:95: 85:5c:ef:d4:87:6f:f9:4f:ea:85:66:c6:39:ee:f9:77:8f:3c: 02:34:fa:c5:b0:35:08:54:9a:cf:7d:c1:a6:82:45:2c:fc:3d: d2:d0:66:83:0b:23:56:9f:83:bb:0a:64:49:02:13:0d:f7:3b: 2b:83:f4:14:bf:ff:8c:1b:b5:a3:98:fc:f9:ad:0c:78:2c:c3: ce:d5:45:4a:bd:cc:35:a4:c2:27:81:68:12:97:90:64:40:3b: ee:f4:7a:c1:19:0c:18:09:6f:49:f2:a6:ab:bd:63:45:ad:1e: f0:cd:0c:7b:0b:96:e6:b1:aa:79:4e:74:c9:43:0b:19:09:8a: 6f:5f:70:cf:25:29:95:ca:a4:b8:2e:3f:ff:a0:45:0f:4a:42: 70:30:76:85 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqOFk3GgefHM9cTdEzD9hp+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjUxMTE2MTkxMzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZGQ3NDc2MGI3ZTQyNTNkMWU0YmNhMmY1N2I4MTI5NjUxOThhNjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8XCTTD+J45UldjaPOw9mMz0ag/f b+0K/1wGRmJt52BEJUyJmRNmNT935E0YuW+llAV58AVQMjBVcxUhXuWgh8+kWN1V bHtBNloRBFANt/euSH/ojj0aQU7S9hIYZpDsRiQHqIH5ms/Gld5pFogMoAu4FgfO TfIkCxwU9nwE/TLoC5ZaN1u4GOL9u1Pa+0c9ST9wl5Vrp7MX/91rJ+7I/6SqZz9U gX3okhzCBYujI4w9sxHuhx5ziVu/6Jdij+gyww4pEcfki9/aftFTbdc1DMYt1yXx wu/QIE62tmbDsdx5q9ljcGI05wjakBHj0sngs3VfqzG74iAQfpZsa2dAvQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFM3XR2C35CU9HkvKL1e4EpZRmKYUMB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvemRkSFlMZmtKVDBlUzhvdlY3Z1NsbEdZcGhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVgMAwQA WX1+MA0GCSqGSIb3DQEBCwUAA4IBAQBwMNdLjfqn5+CNI7ytw7cDMyVnaGQ0S0RS l6LHhkdM1MEI5l8+3P2MPWymOo84BUcVaIEHt/X5puQ0sjMt84Fiu5O7w+vky89c JtYug7YaT3tU2l60wQYRzcgWabRwJk0YTU29el5AW8pmy5WFXO/Uh2/5T+qFZsY5 7vl3jzwCNPrFsDUIVJrPfcGmgkUs/D3S0GaDCyNWn4O7CmRJAhMN9zsrg/QUv/+M G7WjmPz5rQx4LMPO1UVKvcw1pMIngWgSl5BkQDvu9HrBGQwYCW9J8qarvWNFrR7w zQx7C5bmsap5TnTJQwsZCYpvX3DPJSmVyqS4Lj//oEUPSkJwMHaF -----END CERTIFICATE-----Generated at Fri Dec 5 07:56:51 2025 by rpki-client