This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/rz8G_EZeHe6y8YO0rgZvU3y0tjQ.roa File: rz8G_EZeHe6y8YO0rgZvU3y0tjQ.roa (raw, json) Hash identifier: L66M7qrWG1LcChfmNvP0nHIx/qquArK5t72744FvAuE= Subject key identifier: AF:3F:06:FC:46:5E:1D:EE:B2:F1:83:B4:AE:06:6F:53:7C:B4:B6:34 Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7 Certificate serial: 019B271DC8627544300C3D6F4AD56A0B1149 Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/rz8G_EZeHe6y8YO0rgZvU3y0tjQ.roa Signing time: Tue 16 Dec 2025 12:23:41 +0000 ROA not before: Tue 16 Dec 2025 12:23:41 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214294 IP address blocks: 195.216.178.0/24 maxlen: 24 195.216.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:1d:c8:62:75:44:30:0c:3d:6f:4a:d5:6a:0b:11:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7 Validity Not Before: Dec 16 12:23:41 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=af3f06fc465e1deeb2f183b4ae066f537cb4b634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ee:bf:04:d1:88:52:0e:b8:17:ba:5a:43:d2: 32:96:ab:6c:90:85:1b:73:27:ba:15:da:62:d7:c0: f0:31:7b:49:37:67:e3:da:12:c6:b1:4c:f5:c0:d8: 66:e0:f5:bb:05:4c:3f:07:96:b9:73:12:f8:d3:48: 33:9e:04:8a:c3:22:91:85:31:ca:09:5f:c6:0a:30: e7:54:5e:93:49:4f:0b:52:26:e7:de:01:a5:ae:21: 3d:7f:92:7f:a5:db:33:7f:25:1c:75:d1:88:d2:4e: 37:ca:32:c4:56:6e:7e:0f:9a:8b:1f:c6:e6:e9:84: 8e:1b:b1:e5:3f:69:4c:12:b4:dc:df:28:2b:66:38: e2:eb:6a:0a:7b:7a:2d:ef:19:7c:94:5f:74:01:5b: 94:91:52:88:a5:5e:9a:16:26:7f:6e:64:09:9b:84: bf:9e:3c:64:73:bb:d7:cf:d6:a4:f8:80:7f:c2:cd: e0:b0:84:94:a9:53:f3:37:c6:bd:ae:36:87:a2:d6: f8:36:95:43:e0:9c:93:3a:5e:4b:64:c6:64:af:3b: 7a:8a:55:31:f5:a5:f9:f4:c4:c8:5a:27:84:16:16: 51:8d:7b:84:24:f1:84:d7:56:43:10:1b:73:09:db: bd:8b:69:be:2b:be:ab:19:dc:2e:14:eb:76:7c:82: f3:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:3F:06:FC:46:5E:1D:EE:B2:F1:83:B4:AE:06:6F:53:7C:B4:B6:34 X509v3 Authority Key Identifier: keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/rz8G_EZeHe6y8YO0rgZvU3y0tjQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.216.178.0/23 Signature Algorithm: sha256WithRSAEncryption 57:93:cf:3f:d1:5d:c0:99:ff:50:5b:6e:6c:ee:69:f7:14:ab: 46:fa:64:fc:cd:32:4e:2f:58:a3:03:ba:5f:ad:09:fd:e6:ff: 4e:03:da:98:bb:ec:35:00:1e:2d:29:65:4f:88:2b:6e:bf:69: c9:3d:bf:9d:86:f1:bf:0c:c9:8d:68:94:44:a8:95:74:da:83: 61:40:91:4a:14:73:59:a5:f0:6b:97:6c:6a:93:11:82:45:90: 14:9f:66:8d:18:51:67:9b:db:62:ea:02:a4:25:73:ee:ff:bb: 50:e3:23:7a:e0:ac:98:0c:a6:cb:60:a8:9f:a4:5b:22:31:e7: cf:2a:36:36:6e:eb:a2:d3:73:13:18:2a:be:92:4b:47:1a:b6: 79:a2:e7:ac:11:47:8d:c6:45:d1:7e:b7:4d:8f:da:04:5d:6a: 1b:0d:1d:91:13:21:6e:c3:35:79:7f:42:32:b1:31:20:79:5a: 2a:06:f0:2b:87:bc:ff:5b:88:1d:0d:72:48:30:8e:89:2c:e2: bb:96:42:40:35:3d:28:e8:e9:38:25:98:1d:18:b3:0d:5d:49: da:aa:e7:69:cf:84:e8:5b:6b:9b:c8:2b:f9:4d:e4:af:7b:04: 5a:5d:19:c7:34:5b:7f:55:64:fd:e5:7b:3b:6c:c5:6a:4e:8b: cf:65:ca:4f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsnHchidUQwDD1vStVqCxFJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YjdkNjY5OTgzNWJmZTlhODA4MWRmYzExNGRmMWJmNmQy MTVkYTcwHhcNMjUxMjE2MTIyMzQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjNmMDZmYzQ2NWUxZGVlYjJmMTgzYjRhZTA2NmY1MzdjYjRiNjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwe6/BNGIUg64F7paQ9IylqtskIUb cye6Fdpi18DwMXtJN2fj2hLGsUz1wNhm4PW7BUw/B5a5cxL400gzngSKwyKRhTHK CV/GCjDnVF6TSU8LUibn3gGlriE9f5J/pdszfyUcddGI0k43yjLEVm5+D5qLH8bm 6YSOG7HlP2lMErTc3ygrZjji62oKe3ot7xl8lF90AVuUkVKIpV6aFiZ/bmQJm4S/ njxkc7vXz9ak+IB/ws3gsISUqVPzN8a9rjaHotb4NpVD4JyTOl5LZMZkrzt6ilUx 9aX59MTIWieEFhZRjXuEJPGE11ZDEBtzCdu9i2m+K76rGdwuFOt2fILzBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK8/BvxGXh3usvGDtK4Gb1N8tLY0MB8GA1UdIwQY MBaAFGW31mmYNb/pqAgd/BFN8b9tIV2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDct OWU0MTNlYmY0MmYzLzEvcno4R19FWmVIZTZ5OFlPMHJnWnZVM3kwdGpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDctOWU0MTNlYmY0MmYz LzEvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw9iyMA0G CSqGSIb3DQEBCwUAA4IBAQBXk88/0V3Amf9QW25s7mn3FKtG+mT8zTJOL1ijA7pf rQn95v9OA9qYu+w1AB4tKWVPiCtuv2nJPb+dhvG/DMmNaJREqJV02oNhQJFKFHNZ pfBrl2xqkxGCRZAUn2aNGFFnm9ti6gKkJXPu/7tQ4yN64KyYDKbLYKifpFsiMefP KjY2buui03MTGCq+kktHGrZ5ouesEUeNxkXRfrdNj9oEXWobDR2REyFuwzV5f0Iy sTEgeVoqBvArh7z/W4gdDXJIMI6JLOK7lkJANT0o6Ok4JZgdGLMNXUnaqudpz4To W2ubyCv5TeSvewRaXRnHNFt/VWT95Xs7bMVqTovPZcpP -----END CERTIFICATE-----Generated at Sat Dec 20 00:12:34 2025 by rpki-client