This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/ZJm9VOYbQ7ZSRYHkoOvuVrZYpHY.roa File: ZJm9VOYbQ7ZSRYHkoOvuVrZYpHY.roa (raw, json) Hash identifier: wDMtw/EqnyznzZJGIho25at/ut+GKbObJobQLd1Krhg= Subject key identifier: 64:99:BD:54:E6:1B:43:B6:52:45:81:E4:A0:EB:EE:56:B6:58:A4:76 Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20 Certificate serial: 019B226F2D74FDAF87E8C8AE271533294655 Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/ZJm9VOYbQ7ZSRYHkoOvuVrZYpHY.roa Signing time: Mon 15 Dec 2025 14:34:30 +0000 ROA not before: Mon 15 Dec 2025 14:34:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 206621 IP address blocks: 141.105.133.0/24 maxlen: 24 141.105.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 08:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:6f:2d:74:fd:af:87:e8:c8:ae:27:15:33:29:46:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20 Validity Not Before: Dec 15 14:34:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6499bd54e61b43b6524581e4a0ebee56b658a476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f2:ef:76:38:ef:aa:ec:3f:e5:25:5e:ce:bd: 0d:c7:bd:0f:3b:c6:9b:95:c1:70:99:a5:86:ff:1c: e0:65:ae:f7:d0:c8:6f:ce:84:5c:e1:45:a2:00:f1: 24:fe:6b:b5:7a:a2:ac:41:2e:7a:0e:e1:7e:18:ab: 65:50:e6:f5:ce:9f:7f:f4:b5:92:23:4b:0c:bd:31: 52:31:05:99:ce:ec:94:37:28:db:50:88:aa:5f:21: 12:bb:0f:f2:3b:48:ec:f4:72:4e:21:d7:da:7f:83: e2:51:00:57:57:f2:c3:f9:19:ec:52:98:7d:47:9a: 10:ef:8d:31:10:e8:cd:78:0a:74:dd:68:36:d3:67: ca:4b:db:dd:23:88:44:67:67:f9:97:59:1e:be:35: 5d:e4:3c:74:cd:47:3f:5c:29:a7:10:81:78:ff:75: 96:e6:1e:30:50:81:4c:c9:7c:3c:f4:8c:4a:f4:35: 64:80:1d:08:87:0d:05:ac:2f:f6:67:80:27:88:db: eb:7f:ca:64:f1:2f:02:98:48:3e:f9:34:0a:06:3b: 88:f3:57:55:b8:4d:7f:fc:f6:81:7f:a0:3c:ad:6f: 62:64:65:f3:25:95:96:46:29:2c:88:94:69:50:7b: d7:09:0a:39:a6:5d:73:da:1c:72:12:94:ae:02:73: 5d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:99:BD:54:E6:1B:43:B6:52:45:81:E4:A0:EB:EE:56:B6:58:A4:76 X509v3 Authority Key Identifier: keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/ZJm9VOYbQ7ZSRYHkoOvuVrZYpHY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.105.133.0/24 141.105.136.0/24 Signature Algorithm: sha256WithRSAEncryption c5:83:82:8c:d3:1a:fc:44:f8:56:0e:08:5e:ad:da:2b:ed:00: a9:93:c9:3e:84:bd:c7:6a:b3:a9:66:93:00:23:3b:e5:65:02: cb:02:6a:68:71:a6:68:1d:e4:60:02:b8:aa:28:56:05:f9:0a: fe:0b:21:81:1d:ef:d8:c1:04:4e:10:d1:f1:77:49:7c:5f:2b: 05:33:70:03:e2:1a:e4:d8:65:1f:9c:41:ac:e3:7b:ac:e4:a4: 04:58:49:92:88:c5:5d:79:51:cf:63:36:8c:70:5d:91:a7:f5: 2d:36:8e:6c:c8:52:6a:22:8e:1a:9a:32:5f:50:ad:9e:24:02: e0:41:a9:36:f0:51:1e:04:c9:31:78:b6:83:ac:5d:fc:7a:5e: 67:d9:0b:7f:0f:e4:72:d5:f3:4a:2c:9c:0e:aa:24:91:75:a5: a0:7f:f9:d2:04:04:97:9f:ec:cf:08:a0:6d:fa:7e:4e:0e:dc: b0:9a:5d:ac:e3:75:21:ee:a0:09:08:95:5e:6c:0f:61:06:cc: d1:a8:f0:3f:f1:04:1c:1b:8c:be:c1:3c:ee:b7:e5:9f:50:de: a1:b1:27:f0:5b:d2:81:24:a9:4e:0c:9e:bd:fc:a7:a8:3f:f2: 35:f9:2c:6c:93:c8:d4:08:4b:5d:bc:69:a3:95:99:26:3f:e9: c9:2d:2f:75 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsiby10/a+H6MiuJxUzKUZVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyYTE1Y2M4ODY1OWY1NzhjYzE1OWM1MmIzYTdlOWVjNTgx OWZiMjAwHhcNMjUxMjE1MTQzNDMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDk5YmQ1NGU2MWI0M2I2NTI0NTgxZTRhMGViZWU1NmI2NThhNDc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfLvdjjvquw/5SVezr0Nx70PO8ab lcFwmaWG/xzgZa730MhvzoRc4UWiAPEk/mu1eqKsQS56DuF+GKtlUOb1zp9/9LWS I0sMvTFSMQWZzuyUNyjbUIiqXyESuw/yO0js9HJOIdfaf4PiUQBXV/LD+RnsUph9 R5oQ740xEOjNeAp03Wg202fKS9vdI4hEZ2f5l1kevjVd5Dx0zUc/XCmnEIF4/3WW 5h4wUIFMyXw89IxK9DVkgB0Ihw0FrC/2Z4AniNvrf8pk8S8CmEg++TQKBjuI81dV uE1//PaBf6A8rW9iZGXzJZWWRiksiJRpUHvXCQo5pl1z2hxyEpSuAnNdtQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGSZvVTmG0O2UkWB5KDr7la2WKR2MB8GA1UdIwQY MBaAFGKhXMiGWfV4zBWcUrOn6exYGfsgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAt NDI2OWI1NmJmN2Q0LzEvWkptOVZPWWJRN1pTUllIa29PdnVWclpZcEhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAtNDI2OWI1NmJmN2Q0 LzEvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAjWmFAwQA jWmIMA0GCSqGSIb3DQEBCwUAA4IBAQDFg4KM0xr8RPhWDgherdor7QCpk8k+hL3H arOpZpMAIzvlZQLLAmpocaZoHeRgAriqKFYF+Qr+CyGBHe/YwQROENHxd0l8XysF M3AD4hrk2GUfnEGs43us5KQEWEmSiMVdeVHPYzaMcF2Rp/UtNo5syFJqIo4amjJf UK2eJALgQak28FEeBMkxeLaDrF38el5n2Qt/D+Ry1fNKLJwOqiSRdaWgf/nSBASX n+zPCKBt+n5ODtywml2s43Uh7qAJCJVebA9hBszRqPA/8QQcG4y+wTzut+WfUN6h sSfwW9KBJKlODJ69/KeoP/I1+Sxsk8jUCEtdvGmjlZkmP+nJLS91 -----END CERTIFICATE-----Generated at Tue Dec 16 12:29:20 2025 by rpki-client