This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/zXGgJ8ssCd1Pph38Z1ItWHwU6EA.roa File: zXGgJ8ssCd1Pph38Z1ItWHwU6EA.roa (raw, json) Hash identifier: P8aEqGdzKsgNRTrQcaeiKThPpzfIrclMSZ/T32RFslc= Subject key identifier: CD:71:A0:27:CB:2C:09:DD:4F:A6:1D:FC:67:52:2D:58:7C:14:E8:40 Certificate issuer: /CN=7728155856b8ce4d85f8da4f6d35b055b30dbd3c Certificate serial: 019AE095D9C7D86DC7BDF4AEFE1E9B0B36E2 Authority key identifier: 77:28:15:58:56:B8:CE:4D:85:F8:DA:4F:6D:35:B0:55:B3:0D:BD:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dygVWFa4zk2F-NpPbTWwVbMNvTw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/zXGgJ8ssCd1Pph38Z1ItWHwU6EA.roa Signing time: Tue 02 Dec 2025 19:41:48 +0000 ROA not before: Tue 02 Dec 2025 19:41:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 64439 IP address blocks: 94.232.40.0/24 maxlen: 24 94.232.41.0/24 maxlen: 24 94.232.42.0/24 maxlen: 24 94.232.43.0/24 maxlen: 24 94.232.44.0/24 maxlen: 24 94.232.45.0/24 maxlen: 24 94.232.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.mft rsync://rpki.ripe.net/repository/DEFAULT/dygVWFa4zk2F-NpPbTWwVbMNvTw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e0:95:d9:c7:d8:6d:c7:bd:f4:ae:fe:1e:9b:0b:36:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7728155856b8ce4d85f8da4f6d35b055b30dbd3c Validity Not Before: Dec 2 19:41:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cd71a027cb2c09dd4fa61dfc67522d587c14e840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:60:77:34:8e:36:eb:f6:ca:cb:14:30:92:7c: 04:4e:b3:73:08:22:a7:67:bf:de:ec:39:7f:66:44: ec:ec:3c:98:a3:3b:37:7c:85:1f:b2:fa:c0:57:4b: d3:3c:97:a8:53:4a:d2:32:c0:58:bb:45:da:7e:a6: 6a:c5:91:26:81:a0:7d:1e:72:f4:15:61:ec:2c:35: 48:b6:eb:b7:a9:29:b8:d8:ab:dd:1c:52:e4:87:de: 90:6c:5b:1d:cf:b3:61:7d:05:32:f9:e7:f9:c9:c0: 06:f0:81:9a:43:7b:14:d6:9c:df:f4:09:20:3a:9b: 02:52:07:7b:cd:92:4d:35:49:3d:a2:30:8a:d3:c7: 67:db:b3:11:25:82:75:c4:e6:7e:fb:8b:78:83:8d: c3:07:08:df:a0:b7:34:7b:9f:48:64:4c:64:ac:36: 30:14:16:7a:fe:90:0b:8e:b3:a6:f8:14:4d:5c:43: e4:e2:db:ba:30:5b:f7:6a:86:aa:c8:a4:90:19:ab: a8:41:5c:9f:4f:1f:aa:0b:a3:ad:26:79:fa:14:f8: 2c:69:fd:b3:44:d1:6e:56:19:ea:4b:6d:a1:50:b7: b0:e5:a0:83:15:8e:81:a8:e7:95:2b:80:95:1e:a7: 3f:66:98:8a:05:78:4f:d5:20:c8:a0:3c:e0:f2:5b: cc:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:71:A0:27:CB:2C:09:DD:4F:A6:1D:FC:67:52:2D:58:7C:14:E8:40 X509v3 Authority Key Identifier: keyid:77:28:15:58:56:B8:CE:4D:85:F8:DA:4F:6D:35:B0:55:B3:0D:BD:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dygVWFa4zk2F-NpPbTWwVbMNvTw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/zXGgJ8ssCd1Pph38Z1ItWHwU6EA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.232.40.0-94.232.46.255 Signature Algorithm: sha256WithRSAEncryption 7f:5a:69:ff:09:53:a9:32:38:fa:a6:c0:33:17:c5:4b:45:98: 70:0f:0c:59:d0:25:1d:d2:d4:cc:82:98:9f:35:0e:7f:86:c2: c6:be:9c:42:69:0a:1f:9e:ac:23:88:37:fb:81:38:14:c4:ec: 46:a0:ab:57:4e:1f:41:bc:f5:a2:82:6c:03:4c:99:89:ec:7e: 2a:d7:6c:ed:b1:fc:2c:df:d4:57:db:63:b9:99:6e:c8:a2:21: 47:ff:2b:71:1f:2c:bc:f0:12:e2:73:1f:4f:a6:7d:d7:9f:e2: 21:da:64:ef:7a:e5:9c:e0:b4:db:8f:24:5d:fa:c4:01:c9:c6: 89:bc:00:f2:9f:28:df:9c:52:f0:4b:5f:52:0d:d1:5c:23:05: 8b:32:41:21:30:c8:06:68:81:82:6b:59:6f:cf:22:cf:5b:ee: fc:72:15:f2:8e:04:3f:eb:9e:39:bd:27:e8:c8:dc:ac:57:a3: d7:d1:22:c4:da:5b:d0:6e:5c:68:0d:d6:06:77:2b:48:fb:e3: ef:25:4b:50:be:a2:3f:66:8a:dd:0b:d7:e3:88:5f:7c:93:a2: e8:59:f0:d5:00:50:13:bc:ac:74:62:a8:7d:60:d2:5a:2f:74: a9:e0:af:e4:83:57:0d:9f:92:3a:6b:e9:ef:83:55:de:fa:2c: 93:1f:83:f5 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZrgldnH2G3HvfSu/h6bCzbiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MjgxNTU4NTZiOGNlNGQ4NWY4ZGE0ZjZkMzViMDU1YjMw ZGJkM2MwHhcNMjUxMjAyMTk0MTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDcxYTAyN2NiMmMwOWRkNGZhNjFkZmM2NzUyMmQ1ODdjMTRlODQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGB3NI426/bKyxQwknwETrNzCCKn Z7/e7Dl/ZkTs7DyYozs3fIUfsvrAV0vTPJeoU0rSMsBYu0XafqZqxZEmgaB9HnL0 FWHsLDVItuu3qSm42KvdHFLkh96QbFsdz7NhfQUy+ef5ycAG8IGaQ3sU1pzf9Akg OpsCUgd7zZJNNUk9ojCK08dn27MRJYJ1xOZ++4t4g43DBwjfoLc0e59IZExkrDYw FBZ6/pALjrOm+BRNXEPk4tu6MFv3aoaqyKSQGauoQVyfTx+qC6OtJnn6FPgsaf2z RNFuVhnqS22hULew5aCDFY6BqOeVK4CVHqc/ZpiKBXhP1SDIoDzg8lvMHQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFM1xoCfLLAndT6Yd/GdSLVh8FOhAMB8GA1UdIwQY MBaAFHcoFVhWuM5NhfjaT201sFWzDb08MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHlnVldGYTR6azJGLU5wUGJUV3dWYk1OdlR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8zZGNjNGItOTM1Mi00MTFkLTkyNWEt Y2M3ZDQ2M2M4MjBiLzEvelhHZ0o4c3NDZDFQcGgzOFoxSXRXSHdVNkVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8zZGNjNGItOTM1Mi00MTFkLTkyNWEtY2M3ZDQ2M2M4MjBi LzEvZHlnVldGYTR6azJGLU5wUGJUV3dWYk1OdlR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBANe6CgD BABe6C4wDQYJKoZIhvcNAQELBQADggEBAH9aaf8JU6kyOPqmwDMXxUtFmHAPDFnQ JR3S1MyCmJ81Dn+Gwsa+nEJpCh+erCOIN/uBOBTE7Eagq1dOH0G89aKCbANMmYns firXbO2x/Czf1FfbY7mZbsiiIUf/K3EfLLzwEuJzH0+mfdef4iHaZO965ZzgtNuP JF36xAHJxom8APKfKN+cUvBLX1IN0VwjBYsyQSEwyAZogYJrWW/PIs9b7vxyFfKO BD/rnjm9J+jI3KxXo9fRIsTaW9BuXGgN1gZ3K0j74+8lS1C+oj9mit0L1+OIX3yT ouhZ8NUAUBO8rHRiqH1g0lovdKngr+SDVw2fkjpr6e+DVd76LJMfg/U= -----END CERTIFICATE-----Generated at Thu Dec 18 00:26:35 2025 by rpki-client