This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/zkXVECFz6EcGyeltj31aM4Xe0zo.roa File: zkXVECFz6EcGyeltj31aM4Xe0zo.roa (raw, json) Hash identifier: av1tyEYUg7j2JgW3Q+4iVzSldfjpMOTaoK8sujOhnPk= Subject key identifier: CE:45:D5:10:21:73:E8:47:06:C9:E9:6D:8F:7D:5A:33:85:DE:D3:3A Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Certificate serial: 019B22968CFA68B8098873BBD41BC904EF06 Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/zkXVECFz6EcGyeltj31aM4Xe0zo.roa Signing time: Mon 15 Dec 2025 15:17:30 +0000 ROA not before: Mon 15 Dec 2025 15:17:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 8274 IP address blocks: 31.133.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:96:8c:fa:68:b8:09:88:73:bb:d4:1b:c9:04:ef:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Validity Not Before: Dec 15 15:17:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ce45d5102173e84706c9e96d8f7d5a3385ded33a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a6:dc:5b:46:92:3c:b5:ad:6e:e6:71:e6:37: b3:91:b8:da:54:5e:4b:18:4a:4e:e8:95:b5:bb:fa: 17:56:0b:8f:5a:83:46:a9:a3:18:6c:07:7c:ed:86: f3:2d:92:f6:3d:e0:8a:a1:aa:86:fb:d8:90:f9:c6: 8d:75:40:77:7f:21:b1:30:6a:59:31:56:ed:6c:61: d6:6a:3f:f7:66:63:cc:4b:19:8a:39:6e:b9:c5:c2: ee:ae:5c:bd:0f:c3:32:88:37:b2:d4:7a:0f:7d:82: e5:9d:f0:6c:32:84:c2:d9:97:d3:9f:46:29:d0:d2: 91:64:04:e6:1f:ed:68:67:3b:95:87:f1:00:1f:ce: 09:a5:67:b8:40:ed:e2:54:3e:90:b4:03:b9:6a:0a: 81:e4:6c:4c:24:5b:dd:79:fc:97:62:4a:01:34:13: 8b:15:91:12:66:ab:1a:ac:ca:fe:95:47:d5:13:1c: 54:bf:ec:a2:05:4c:6c:55:44:9f:46:13:45:d0:c4: 62:fb:3a:25:dd:2d:a2:ba:49:f2:de:97:c4:2c:e7: 6a:9e:0d:aa:5e:d1:b3:97:47:ca:d5:2a:d3:ef:8b: a2:7e:bd:bf:1a:63:c9:90:b6:98:cb:ef:95:08:f7: 59:4c:06:56:3b:a1:39:bf:f8:24:22:6a:09:9f:c5: 3a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:45:D5:10:21:73:E8:47:06:C9:E9:6D:8F:7D:5A:33:85:DE:D3:3A X509v3 Authority Key Identifier: keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/zkXVECFz6EcGyeltj31aM4Xe0zo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.133.46.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:d2:e7:31:d7:b8:0c:79:93:5b:ff:6a:4c:5f:c8:33:2d:2f: e4:f1:7e:cf:1f:90:4a:d3:27:a6:b9:0e:13:7c:ac:ed:fe:21: eb:88:5d:4d:53:19:7f:d6:2a:c1:bb:70:21:93:8c:c6:54:45: 76:36:5c:a8:73:84:84:dc:66:3a:3c:d0:63:53:2e:9f:c6:c1: b1:57:a3:fc:cf:d8:0e:30:cc:68:18:62:b4:99:a3:4b:9d:20: 60:ed:38:cf:14:a9:5f:4a:a3:06:06:ec:4d:1c:7d:7a:3f:c6: 4e:dc:8b:78:ad:df:fe:53:7c:70:6f:bb:7b:1f:0d:19:43:f9: fa:89:b5:50:52:af:65:34:2b:bf:9b:12:76:1b:55:1d:7d:d2: 66:9d:f1:b0:4e:66:ed:61:4e:ad:0b:4e:e1:43:40:ef:b5:91: 01:e9:9c:05:89:20:2b:8a:83:02:9a:5c:69:d4:36:bc:45:1e: 87:d8:d2:64:f9:d5:07:96:87:59:6f:7d:d6:ef:92:e9:d8:4c: a7:c6:1d:81:8c:cb:d2:6d:3f:42:ea:3b:e1:c4:e5:4a:bc:9b: 2d:ab:a3:f0:25:f1:a8:e3:fe:61:9a:10:a9:b2:d9:1b:45:09: 9c:fa:78:ca:09:b2:f3:ef:df:85:80:d1:15:94:57:6c:97:23: e5:bd:11:5f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsiloz6aLgJiHO71BvJBO8GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNjRmOWQwNGVmZDVhOWZjMmUyM2I0MmQ1YjUxYWVmZDlh NTAyNTAwHhcNMjUxMjE1MTUxNzMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTQ1ZDUxMDIxNzNlODQ3MDZjOWU5NmQ4ZjdkNWEzMzg1ZGVkMzNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06bcW0aSPLWtbuZx5jezkbjaVF5L GEpO6JW1u/oXVguPWoNGqaMYbAd87YbzLZL2PeCKoaqG+9iQ+caNdUB3fyGxMGpZ MVbtbGHWaj/3ZmPMSxmKOW65xcLurly9D8MyiDey1HoPfYLlnfBsMoTC2ZfTn0Yp 0NKRZATmH+1oZzuVh/EAH84JpWe4QO3iVD6QtAO5agqB5GxMJFvdefyXYkoBNBOL FZESZqsarMr+lUfVExxUv+yiBUxsVUSfRhNF0MRi+zol3S2iukny3pfELOdqng2q XtGzl0fK1SrT74uifr2/GmPJkLaYy++VCPdZTAZWO6E5v/gkImoJn8U6CwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM5F1RAhc+hHBsnpbY99WjOF3tM6MB8GA1UdIwQY MBaAFFxk+dBO/VqfwuI7QtW1Gu/ZpQJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUt YjY2ZmE0ZjQ3NjNhLzEvemtYVkVDRno2RWNHeWVsdGozMWFNNFhlMHpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUtYjY2ZmE0ZjQ3NjNh LzEvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH4UuMA0G CSqGSIb3DQEBCwUAA4IBAQAN0ucx17gMeZNb/2pMX8gzLS/k8X7PH5BK0yemuQ4T fKzt/iHriF1NUxl/1irBu3Ahk4zGVEV2Nlyoc4SE3GY6PNBjUy6fxsGxV6P8z9gO MMxoGGK0maNLnSBg7TjPFKlfSqMGBuxNHH16P8ZO3It4rd/+U3xwb7t7Hw0ZQ/n6 ibVQUq9lNCu/mxJ2G1UdfdJmnfGwTmbtYU6tC07hQ0DvtZEB6ZwFiSArioMCmlxp 1Da8RR6H2NJk+dUHlodZb33W75Lp2Eynxh2BjMvSbT9C6jvhxOVKvJstq6PwJfGo 4/5hmhCpstkbRQmc+njKCbLz79+FgNEVlFdslyPlvRFf -----END CERTIFICATE-----Generated at Tue Dec 16 09:38:32 2025 by rpki-client