This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ZWOe4HKuY3JvkAPXqydOlYo6w8Y.roa File: ZWOe4HKuY3JvkAPXqydOlYo6w8Y.roa (raw, json) Hash identifier: HxoXj1hFGFO+pPSJl08Y42JFIBnoviWixUfxEbLBXzs= Subject key identifier: 65:63:9E:E0:72:AE:63:72:6F:90:03:D7:AB:27:4E:95:8A:3A:C3:C6 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019B0CF0DA9DB9E9A3B4E80B54E035A81101 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ZWOe4HKuY3JvkAPXqydOlYo6w8Y.roa Signing time: Thu 11 Dec 2025 10:24:29 +0000 ROA not before: Thu 11 Dec 2025 10:24:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 216211 IP address blocks: 195.172.136.0/21 maxlen: 24 212.135.208.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:f0:da:9d:b9:e9:a3:b4:e8:0b:54:e0:35:a8:11:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Dec 11 10:24:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=65639ee072ae63726f9003d7ab274e958a3ac3c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:92:87:8a:0c:01:24:e9:e8:11:17:76:b5:aa: 8e:59:28:44:13:75:1b:8e:be:a2:9f:67:51:ce:6b: d2:d2:ea:63:6e:aa:5d:9c:23:96:96:42:0b:45:02: 29:07:b2:ce:d6:cc:20:52:09:c8:66:a8:40:b1:8e: 27:86:8e:e5:5d:d4:c7:28:b0:30:fb:1c:53:90:b6: 66:55:5a:9a:3c:57:29:0b:d6:8a:23:00:fe:8f:b3: 92:a1:b3:95:0c:2c:6a:e9:51:4e:00:b9:03:27:37: 2c:57:ca:a9:b7:18:c8:3b:eb:0a:04:2f:cc:bf:83: af:b9:9a:7d:b4:17:54:8e:5f:b7:c2:4d:65:26:70: 56:c0:11:3c:05:40:69:5b:10:44:91:7b:51:b5:6c: d6:95:86:db:d6:f7:6b:8b:57:b1:88:08:88:59:be: c4:dc:31:d3:8f:94:bb:b7:29:12:e6:7a:df:21:3a: 26:32:c7:8f:18:bb:ac:be:69:54:d4:c5:fa:74:fe: 23:9d:61:38:4f:b8:96:f9:29:4a:be:95:37:00:1b: 6f:99:ba:50:c2:18:86:1d:4a:b6:77:5e:e5:f8:3e: 2f:41:86:b8:f0:83:fb:e7:c9:7b:79:ed:11:9b:36: a1:48:ad:ec:4d:fd:cb:05:50:eb:90:9d:cd:e8:99: 7d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:63:9E:E0:72:AE:63:72:6F:90:03:D7:AB:27:4E:95:8A:3A:C3:C6 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ZWOe4HKuY3JvkAPXqydOlYo6w8Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.172.136.0/21 212.135.208.0/21 Signature Algorithm: sha256WithRSAEncryption 5c:91:65:08:2f:a1:b1:19:89:6a:35:03:91:47:f3:af:22:ad: 46:58:63:e1:59:ef:f5:0a:27:ba:7e:74:0b:c7:34:64:8a:89: e8:67:d7:89:1b:50:c4:cd:7b:25:ba:bf:26:8e:e3:90:be:f0: 46:e8:a9:33:34:6a:83:cf:89:3c:58:9b:08:6d:fd:e9:85:66: d1:2b:dd:54:d0:f8:ac:5b:05:d9:ba:13:f5:14:81:37:86:ae: 70:1a:45:8b:c8:d7:74:89:e0:2a:53:fd:3a:3f:cf:46:a1:a7: b5:83:ee:d4:53:e3:4c:cb:8b:a1:f9:c8:3c:d5:aa:35:e6:54: 89:be:53:5b:e3:b5:76:dc:61:70:6b:cb:87:14:a4:f7:3d:51: 68:05:a3:58:1d:89:3e:73:3c:d9:cd:ea:f1:b5:3f:5e:67:c7: 82:4f:1b:a8:14:b0:05:c4:91:1d:00:9f:0d:be:6c:36:20:27: 2e:99:d4:e3:a0:0c:cd:30:41:ce:05:8d:9e:57:b7:be:43:1f: 6e:81:d3:91:c0:96:2b:87:be:b7:fa:3a:7d:9b:ab:c4:90:8b: a9:92:dc:6e:cf:37:f4:e2:c6:87:2b:4a:58:16:63:e6:ad:39: ea:ef:ed:0f:4f:e3:0b:68:d8:71:87:03:da:7c:e2:7b:4a:18: d6:e4:e8:74 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsM8NqduemjtOgLVOA1qBEBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjUxMjExMTAyNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTYzOWVlMDcyYWU2MzcyNmY5MDAzZDdhYjI3NGU5NThhM2FjM2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJKHigwBJOnoERd2taqOWShEE3Ub jr6in2dRzmvS0upjbqpdnCOWlkILRQIpB7LO1swgUgnIZqhAsY4nho7lXdTHKLAw +xxTkLZmVVqaPFcpC9aKIwD+j7OSobOVDCxq6VFOALkDJzcsV8qptxjIO+sKBC/M v4OvuZp9tBdUjl+3wk1lJnBWwBE8BUBpWxBEkXtRtWzWlYbb1vdri1exiAiIWb7E 3DHTj5S7tykS5nrfITomMsePGLusvmlU1MX6dP4jnWE4T7iW+SlKvpU3ABtvmbpQ whiGHUq2d17l+D4vQYa48IP758l7ee0RmzahSK3sTf3LBVDrkJ3N6Jl9iQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGVjnuByrmNyb5AD16snTpWKOsPGMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvWldPZTRIS3VZM0p2a0FQWHF5ZE9sWW82dzhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDw6yIAwQD 1IfQMA0GCSqGSIb3DQEBCwUAA4IBAQBckWUIL6GxGYlqNQORR/OvIq1GWGPhWe/1 Cie6fnQLxzRkionoZ9eJG1DEzXslur8mjuOQvvBG6KkzNGqDz4k8WJsIbf3phWbR K91U0PisWwXZuhP1FIE3hq5wGkWLyNd0ieAqU/06P89Goae1g+7UU+NMy4uh+cg8 1ao15lSJvlNb47V23GFwa8uHFKT3PVFoBaNYHYk+czzZzerxtT9eZ8eCTxuoFLAF xJEdAJ8Nvmw2ICcumdTjoAzNMEHOBY2eV7e+Qx9ugdORwJYrh763+jp9m6vEkIup ktxuzzf04saHK0pYFmPmrTnq7+0PT+MLaNhxhwPafOJ7ShjW5Oh0 -----END CERTIFICATE-----Generated at Fri Dec 12 07:58:46 2025 by rpki-client