This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zeuez3Z7tpK_vUxV6keuDJufzKQ.roa File: zeuez3Z7tpK_vUxV6keuDJufzKQ.roa (raw, json) Hash identifier: YzHWgAAOaPZLIdq5ZR+ig5aVajfrClNc4dc84tccVvE= Subject key identifier: CD:EB:9E:CF:76:7B:B6:92:BF:BD:4C:55:EA:47:AE:0C:9B:9F:CC:A4 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019AD95530406A582B3B4BC30151DC8E7376 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zeuez3Z7tpK_vUxV6keuDJufzKQ.roa Signing time: Mon 01 Dec 2025 09:53:50 +0000 ROA not before: Mon 01 Dec 2025 09:53:50 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 199614 IP address blocks: 109.176.28.0/24 maxlen: 24 109.176.212.0/23 maxlen: 24 109.176.214.0/23 maxlen: 24 213.130.157.0/24 maxlen: 24 213.130.158.0/24 maxlen: 24 213.130.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 17:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d9:55:30:40:6a:58:2b:3b:4b:c3:01:51:dc:8e:73:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Dec 1 09:53:50 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cdeb9ecf767bb692bfbd4c55ea47ae0c9b9fcca4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a8:75:e3:ac:ee:89:0d:45:13:75:de:4e:1d: a7:12:d8:df:d0:05:44:87:13:7a:9a:6e:a6:77:a7: e4:df:60:00:21:79:79:14:2e:78:d7:e6:81:20:af: 98:32:e7:98:71:78:81:43:6c:20:e1:cf:f0:4b:01: 36:51:5f:2f:48:93:5f:9c:8d:14:e7:20:68:bb:83: 20:2d:f3:eb:7a:72:db:62:65:5c:16:f6:e3:3e:05: 6a:2e:0d:73:59:f2:f9:ff:14:60:63:b3:91:83:84: e7:b1:91:f1:8a:1d:7b:57:30:ea:e7:e7:83:4e:37: 99:c1:43:fb:55:a4:10:42:8b:4f:fc:f6:24:81:37: a6:46:c6:41:ec:86:84:e2:43:8f:27:cf:c8:b0:98: a2:01:35:f8:00:a2:24:a3:5d:7a:70:90:a0:b6:ef: 9f:6b:4d:7f:2a:5f:68:60:71:f6:5b:f1:aa:3f:4d: 1b:68:c5:4c:ee:9f:bb:a2:6f:2b:54:57:a9:65:3b: 4e:28:2c:9e:5a:cc:c0:ba:76:c3:30:8a:de:96:69: f8:15:c8:f6:10:46:ce:df:4e:d7:67:fa:1d:be:ba: 5a:b4:cf:59:7c:a5:11:0b:74:06:f9:28:d6:bb:6f: fa:61:14:58:93:7d:f7:89:66:e5:21:94:96:21:32: e5:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:EB:9E:CF:76:7B:B6:92:BF:BD:4C:55:EA:47:AE:0C:9B:9F:CC:A4 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zeuez3Z7tpK_vUxV6keuDJufzKQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.176.28.0/24 109.176.212.0/22 213.130.157.0-213.130.159.255 Signature Algorithm: sha256WithRSAEncryption 82:70:a5:15:41:a9:59:ab:ee:d7:31:3c:f5:cd:ba:03:a2:62: 9b:a4:0f:e7:f4:9b:8d:e4:50:e2:5f:8b:46:ff:82:6b:e7:18: 96:93:57:75:51:f7:2e:cd:ba:85:f0:9f:68:95:ad:15:6a:54: b3:06:be:7f:12:75:b6:06:e0:98:2b:6a:2d:86:da:e2:23:45: 72:0c:84:f1:70:f4:68:d5:aa:1c:5d:a7:3a:26:35:4f:fb:de: 27:ed:34:e1:8d:6a:cc:49:4f:68:e7:ae:d7:7a:a7:5c:2a:b5: 59:da:18:da:6b:2f:95:05:fa:70:7e:2a:6e:4e:41:e1:40:18: 2d:41:a2:42:84:0c:09:95:9d:7b:51:17:30:0f:59:60:a7:b7: 55:8e:42:c3:83:68:da:5b:02:e3:2c:80:d9:d2:b1:f2:23:d6: 29:14:ba:be:89:82:5e:bc:60:99:fd:17:e1:ff:42:12:79:34: f0:bd:eb:aa:0d:19:e2:41:1a:92:82:18:37:f4:f4:76:aa:f6: 79:65:a1:92:d0:95:23:41:91:6d:8c:20:aa:55:77:06:ac:ee: 64:c5:1d:7b:1a:04:f8:e3:fb:ea:1b:b3:52:ea:2d:49:6a:71: 46:8f:23:52:d9:67:91:93:74:27:6a:78:6e:4a:a3:c2:f1:c5: 56:58:f5:c1 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZrZVTBAalgrO0vDAVHcjnN2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMjAxMDk1MzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZGViOWVjZjc2N2JiNjkyYmZiZDRjNTVlYTQ3YWUwYzliOWZjY2E0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6h146zuiQ1FE3XeTh2nEtjf0AVE hxN6mm6md6fk32AAIXl5FC541+aBIK+YMueYcXiBQ2wg4c/wSwE2UV8vSJNfnI0U 5yBou4MgLfPrenLbYmVcFvbjPgVqLg1zWfL5/xRgY7ORg4TnsZHxih17VzDq5+eD TjeZwUP7VaQQQotP/PYkgTemRsZB7IaE4kOPJ8/IsJiiATX4AKIko116cJCgtu+f a01/Kl9oYHH2W/GqP00baMVM7p+7om8rVFepZTtOKCyeWszAunbDMIrelmn4Fcj2 EEbO307XZ/odvrpatM9ZfKURC3QG+SjWu2/6YRRYk333iWblIZSWITLldwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFM3rns92e7aSv71MVepHrgybn8ykMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvemV1ZXozWjd0cEtfdlV4VjZrZXVESnVmektRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAbbAcAwQC bbDUMAwDBADVgp0DBAXVgoAwDQYJKoZIhvcNAQELBQADggEBAIJwpRVBqVmr7tcx PPXNugOiYpukD+f0m43kUOJfi0b/gmvnGJaTV3VR9y7NuoXwn2iVrRVqVLMGvn8S dbYG4Jgrai2G2uIjRXIMhPFw9GjVqhxdpzomNU/73iftNOGNasxJT2jnrtd6p1wq tVnaGNprL5UF+nB+Km5OQeFAGC1BokKEDAmVnXtRFzAPWWCnt1WOQsODaNpbAuMs gNnSsfIj1ikUur6Jgl68YJn9F+H/QhJ5NPC966oNGeJBGpKCGDf09Haq9nlloZLQ lSNBkW2MIKpVdwas7mTFHXsaBPjj++obs1LqLUlqcUaPI1LZZ5GTdCdqeG5Ko8Lx xVZY9cE= -----END CERTIFICATE-----Generated at Mon Dec 8 03:01:05 2025 by rpki-client