This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/ZvRCCsKN95gmwnkeFWd_hv2YiV0.roa File: ZvRCCsKN95gmwnkeFWd_hv2YiV0.roa (raw, json) Hash identifier: MACXjV2P5VU/BibCYAFkD9NxL0EyNPN+9PRqLhlQfhM= Subject key identifier: 66:F4:42:0A:C2:8D:F7:98:26:C2:79:1E:15:67:7F:86:FD:98:89:5D Certificate issuer: /CN=1c4e6a1d3cc1e4f3dc01ab96c94196b9c49d2916 Certificate serial: 019AA1479A2748EC68142B82973939A1299D Authority key identifier: 1C:4E:6A:1D:3C:C1:E4:F3:DC:01:AB:96:C9:41:96:B9:C4:9D:29:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/ZvRCCsKN95gmwnkeFWd_hv2YiV0.roa Signing time: Thu 20 Nov 2025 12:40:15 +0000 ROA not before: Thu 20 Nov 2025 12:40:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 194.88.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.crl rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a1:47:9a:27:48:ec:68:14:2b:82:97:39:39:a1:29:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c4e6a1d3cc1e4f3dc01ab96c94196b9c49d2916 Validity Not Before: Nov 20 12:40:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=66f4420ac28df79826c2791e15677f86fd98895d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8c:0f:22:44:13:b8:01:66:45:c5:37:de:4c: b4:34:5b:e0:70:af:a8:2c:9f:09:cc:7d:e3:8e:a8: eb:e3:b2:db:02:08:71:45:f0:a3:47:c0:4d:6a:d0: b9:47:1a:d6:44:a6:a3:e3:52:a6:e9:4b:2a:6d:30: 93:b8:c4:54:66:67:f7:72:fd:87:e5:ac:f5:f9:53: 96:da:a0:66:ab:63:a1:fb:59:0a:c5:03:84:91:91: 12:cd:f2:d6:11:61:96:55:8f:f6:13:ff:46:05:9a: ad:51:c4:76:39:ac:55:43:40:40:e5:0e:2a:06:76: ce:cb:bf:4a:b7:e3:2f:21:bf:d2:1f:86:2a:b7:32: a2:9e:6b:79:ce:ae:ac:1b:b9:48:f5:a8:fe:6b:2a: 0a:00:36:ee:c7:d6:b4:7a:53:38:3a:d2:7d:cb:c7: 6e:60:c7:ce:2f:00:02:c3:0f:db:07:6d:e2:ff:91: d2:7f:87:6b:e5:9d:37:ab:8c:4d:f1:ff:88:7b:0a: 69:74:b9:cf:16:98:dd:cd:c4:0c:66:36:fb:af:ac: 01:c0:84:48:cf:52:fc:52:37:07:46:5c:19:b9:70: 3f:5a:5b:c6:0d:ac:d7:c4:b9:93:15:65:32:03:f9: fa:15:60:05:8d:60:ac:5d:7a:ce:e1:43:23:60:5a: 97:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:F4:42:0A:C2:8D:F7:98:26:C2:79:1E:15:67:7F:86:FD:98:89:5D X509v3 Authority Key Identifier: keyid:1C:4E:6A:1D:3C:C1:E4:F3:DC:01:AB:96:C9:41:96:B9:C4:9D:29:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/ZvRCCsKN95gmwnkeFWd_hv2YiV0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.88.232.0/24 Signature Algorithm: sha256WithRSAEncryption c9:a4:2a:05:4a:08:05:26:e2:cf:87:07:38:31:db:a0:73:ec: f9:ac:a4:cd:e3:6c:93:89:42:4c:90:c4:5a:d5:c7:56:69:a4: c7:63:ee:ae:77:af:b9:40:de:7c:ff:2c:8d:d6:fa:61:35:24: 9a:19:0b:de:34:ab:cb:54:20:87:da:75:e7:19:5d:0b:af:e6: 2c:44:5c:d3:c9:1a:9b:4e:01:e3:8a:70:5e:f0:3a:2f:7d:2c: 8c:e6:70:65:15:c8:2e:06:f7:d2:53:b8:dd:a3:5e:72:e9:a8: dd:e7:6b:e1:e1:c3:33:4b:aa:d6:ec:12:2b:5c:27:7e:02:c9: e7:0e:4d:a4:12:a3:23:ef:fd:90:e3:e7:c3:d8:b0:51:93:13: ba:a6:64:21:5a:85:f5:ec:fc:82:d6:8a:63:2e:7a:b1:bc:3c: 21:e0:32:dc:0f:45:ae:6d:9a:5b:ca:a5:51:cb:e3:6c:a2:1f: f5:40:dd:70:76:a3:dd:f6:56:78:e4:07:8f:26:c4:f9:02:62: af:35:37:d7:bf:8d:4d:5f:ee:62:93:41:a1:aa:2a:eb:ee:44: ad:57:dc:e4:bd:b5:20:73:d4:86:f5:8d:30:d5:d8:9d:1f:40: 4b:da:a7:b4:49:66:6e:11:e9:a7:0d:41:46:60:50:a7:97:16: 7c:c2:cc:23 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqhR5onSOxoFCuClzk5oSmdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjNGU2YTFkM2NjMWU0ZjNkYzAxYWI5NmM5NDE5NmI5YzQ5 ZDI5MTYwHhcNMjUxMTIwMTI0MDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NmY0NDIwYWMyOGRmNzk4MjZjMjc5MWUxNTY3N2Y4NmZkOTg4OTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYwPIkQTuAFmRcU33ky0NFvgcK+o LJ8JzH3jjqjr47LbAghxRfCjR8BNatC5RxrWRKaj41Km6UsqbTCTuMRUZmf3cv2H 5az1+VOW2qBmq2Oh+1kKxQOEkZESzfLWEWGWVY/2E/9GBZqtUcR2OaxVQ0BA5Q4q BnbOy79Kt+MvIb/SH4YqtzKinmt5zq6sG7lI9aj+ayoKADbux9a0elM4OtJ9y8du YMfOLwACww/bB23i/5HSf4dr5Z03q4xN8f+IewppdLnPFpjdzcQMZjb7r6wBwIRI z1L8UjcHRlwZuXA/WlvGDazXxLmTFWUyA/n6FWAFjWCsXXrO4UMjYFqX3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGb0QgrCjfeYJsJ5HhVnf4b9mIldMB8GA1UdIwQY MBaAFBxOah08weTz3AGrlslBlrnEnSkWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEU1cUhUekI1UFBjQWF1V3lVR1d1Y1NkS1JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi85NmIxMTctZmQzYi00Zjc0LWIzYmYt MWE0MmY2MzJjMzA3LzEvWnZSQ0NzS045NWdtd25rZUZXZF9odjJZaVYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi85NmIxMTctZmQzYi00Zjc0LWIzYmYtMWE0MmY2MzJjMzA3 LzEvSEU1cUhUekI1UFBjQWF1V3lVR1d1Y1NkS1JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwljoMA0G CSqGSIb3DQEBCwUAA4IBAQDJpCoFSggFJuLPhwc4Mdugc+z5rKTN42yTiUJMkMRa 1cdWaaTHY+6ud6+5QN58/yyN1vphNSSaGQveNKvLVCCH2nXnGV0Lr+YsRFzTyRqb TgHjinBe8DovfSyM5nBlFcguBvfSU7jdo15y6ajd52vh4cMzS6rW7BIrXCd+Asnn Dk2kEqMj7/2Q4+fD2LBRkxO6pmQhWoX17PyC1opjLnqxvDwh4DLcD0WubZpbyqVR y+Nsoh/1QN1wdqPd9lZ45AePJsT5AmKvNTfXv41NX+5ik0Ghqirr7kStV9zkvbUg c9SG9Y0w1didH0BL2qe0SWZuEemnDUFGYFCnlxZ8wswj -----END CERTIFICATE-----Generated at Sat Nov 22 21:34:45 2025 by rpki-client