This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/xmAkbH2G5Pgu29-LAr6LSUToIqY.roa File: xmAkbH2G5Pgu29-LAr6LSUToIqY.roa (raw, json) Hash identifier: J5hUihuN8ml/+PNDCYud2S/KPKwQRrLYh7Hl2myuEUA= Subject key identifier: C6:60:24:6C:7D:86:E4:F8:2E:DB:DF:8B:02:BE:8B:49:44:E8:22:A6 Certificate issuer: /CN=64cfba184ff9442a8fe7517b503a9e017fa9f2cb Certificate serial: 019A8CD89D30202E35D37E209895BB2D2854 Authority key identifier: 64:CF:BA:18:4F:F9:44:2A:8F:E7:51:7B:50:3A:9E:01:7F:A9:F2:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZM-6GE_5RCqP51F7UDqeAX-p8ss.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/xmAkbH2G5Pgu29-LAr6LSUToIqY.roa Signing time: Sun 16 Nov 2025 13:26:37 +0000 ROA not before: Sun 16 Nov 2025 13:26:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213282 IP address blocks: 185.224.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/ZM-6GE_5RCqP51F7UDqeAX-p8ss.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/ZM-6GE_5RCqP51F7UDqeAX-p8ss.mft rsync://rpki.ripe.net/repository/DEFAULT/ZM-6GE_5RCqP51F7UDqeAX-p8ss.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:8c:d8:9d:30:20:2e:35:d3:7e:20:98:95:bb:2d:28:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64cfba184ff9442a8fe7517b503a9e017fa9f2cb Validity Not Before: Nov 16 13:26:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c660246c7d86e4f82edbdf8b02be8b4944e822a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e9:95:66:80:5b:61:29:26:45:f0:35:c6:96: d8:2e:1e:09:52:fa:ff:7c:ab:d7:cd:01:4e:6d:e7: e1:f2:65:05:fa:96:f1:c7:0c:40:da:41:da:8e:3b: 04:6a:83:2f:3d:d4:d8:bf:6c:14:54:cd:f0:0c:80: 6a:8f:72:c4:1a:c1:ae:79:d6:9e:8d:ae:3d:2b:95: 83:41:05:de:ec:13:02:38:2d:4e:3b:a5:a0:c5:f3: 7a:0b:59:8d:dc:08:5c:d3:9d:34:d3:ce:fb:4d:24: 2b:78:9f:31:9c:b8:87:58:e0:9c:5d:61:f7:85:43: 33:58:47:c5:24:1d:53:58:f4:f1:31:86:94:23:d8: 97:62:39:9e:89:be:78:71:a1:5c:12:34:cb:70:a2: 0d:ab:b6:27:8a:56:43:b8:e2:94:f9:72:f4:04:3c: f2:d6:6b:9a:5b:63:7d:71:bd:d1:80:f6:81:ee:ad: 61:0d:84:96:c9:cc:aa:8c:ce:cd:39:3e:c5:db:c8: 60:ba:f5:44:eb:c3:8d:02:d3:17:8e:3f:82:c3:da: f1:d8:76:47:9c:81:f7:9a:fa:93:77:1f:0a:d5:1b: a7:7a:8b:dd:e3:f4:26:74:92:b0:e2:3d:6d:fd:72: 72:1a:ce:a5:d1:b2:16:59:81:46:eb:1e:c5:63:ea: a9:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:60:24:6C:7D:86:E4:F8:2E:DB:DF:8B:02:BE:8B:49:44:E8:22:A6 X509v3 Authority Key Identifier: keyid:64:CF:BA:18:4F:F9:44:2A:8F:E7:51:7B:50:3A:9E:01:7F:A9:F2:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZM-6GE_5RCqP51F7UDqeAX-p8ss.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/xmAkbH2G5Pgu29-LAr6LSUToIqY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/ZM-6GE_5RCqP51F7UDqeAX-p8ss.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.224.1.0/24 Signature Algorithm: sha256WithRSAEncryption 55:5f:ac:12:5b:79:d1:01:06:a9:d9:da:b0:85:04:5c:a2:a6: 4a:9e:d6:67:54:7f:23:56:5b:c3:fa:00:9b:18:08:71:eb:1a: cb:49:cc:48:21:9f:38:9c:b3:a1:c7:d0:8f:52:80:24:9d:aa: 5b:7d:d0:be:3f:fa:1a:b7:39:43:b1:ff:28:dc:a2:af:f3:a6: 25:e7:57:88:bc:d7:ce:64:fe:98:b5:09:12:d5:7e:ed:44:6b: 1d:80:71:41:3e:4d:a9:55:78:19:73:26:f7:14:9f:1b:75:67: 2a:2d:03:14:c2:d7:18:a6:63:46:d3:db:ec:e7:f6:80:99:78: b9:f4:51:75:13:14:cb:58:01:2a:fa:90:d0:d5:2c:f5:7e:79: 30:22:f9:5b:07:2f:d4:45:d9:a5:9a:5a:f3:d3:be:0f:38:18: 73:62:72:74:75:8c:69:82:14:26:6c:3d:5e:7d:87:76:89:3a: ca:d0:49:58:3d:f2:38:b0:6c:01:09:d1:4f:42:d7:2d:fe:32: 04:ec:50:21:11:09:b6:0a:ae:79:a6:99:36:fa:47:f7:aa:a0: 08:95:c8:9e:d9:f9:e3:fb:aa:dd:5a:75:00:16:a2:4d:5a:84: b7:15:c2:27:7f:be:c5:f3:57:46:c5:ac:c2:c3:08:34:7b:8f: 2e:1e:eb:8b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqM2J0wIC41034gmJW7LShUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0Y2ZiYTE4NGZmOTQ0MmE4ZmU3NTE3YjUwM2E5ZTAxN2Zh OWYyY2IwHhcNMjUxMTE2MTMyNjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjYwMjQ2YzdkODZlNGY4MmVkYmRmOGIwMmJlOGI0OTQ0ZTgyMmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAremVZoBbYSkmRfA1xpbYLh4JUvr/ fKvXzQFObefh8mUF+pbxxwxA2kHajjsEaoMvPdTYv2wUVM3wDIBqj3LEGsGuedae ja49K5WDQQXe7BMCOC1OO6WgxfN6C1mN3Ahc05000877TSQreJ8xnLiHWOCcXWH3 hUMzWEfFJB1TWPTxMYaUI9iXYjmeib54caFcEjTLcKINq7YnilZDuOKU+XL0BDzy 1muaW2N9cb3RgPaB7q1hDYSWycyqjM7NOT7F28hguvVE68ONAtMXjj+Cw9rx2HZH nIH3mvqTdx8K1Runeovd4/QmdJKw4j1t/XJyGs6l0bIWWYFG6x7FY+qp6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMZgJGx9huT4LtvfiwK+i0lE6CKmMB8GA1UdIwQY MBaAFGTPuhhP+UQqj+dRe1A6ngF/qfLLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWk0tNkdFXzVSQ3FQNTFGN1VEcWVBWC1wOHNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8yNTNmMmMtNGVkOS00ZjFmLWE5NmYt ZGVmZjcxMTI0MjMzLzEveG1Ba2JIMkc1UGd1MjktTEFyNkxTVVRvSXFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8yNTNmMmMtNGVkOS00ZjFmLWE5NmYtZGVmZjcxMTI0MjMz LzEvWk0tNkdFXzVSQ3FQNTFGN1VEcWVBWC1wOHNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueABMA0G CSqGSIb3DQEBCwUAA4IBAQBVX6wSW3nRAQap2dqwhQRcoqZKntZnVH8jVlvD+gCb GAhx6xrLScxIIZ84nLOhx9CPUoAknapbfdC+P/oatzlDsf8o3KKv86Yl51eIvNfO ZP6YtQkS1X7tRGsdgHFBPk2pVXgZcyb3FJ8bdWcqLQMUwtcYpmNG09vs5/aAmXi5 9FF1ExTLWAEq+pDQ1Sz1fnkwIvlbBy/URdmlmlrz074POBhzYnJ0dYxpghQmbD1e fYd2iTrK0ElYPfI4sGwBCdFPQtct/jIE7FAhEQm2Cq55ppk2+kf3qqAIlcie2fnj +6rdWnUAFqJNWoS3FcInf77F81dGxazCwwg0e48uHuuL -----END CERTIFICATE-----Generated at Fri Dec 5 09:26:59 2025 by rpki-client