This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/ZyAHstw3EO7YTzWK_4MhXVEVEAs.roa File: ZyAHstw3EO7YTzWK_4MhXVEVEAs.roa (raw, json) Hash identifier: kIfOUeIdWnUXCi/90lzs3826rh+/meHGwqYPvETzzx0= Subject key identifier: 67:20:07:B2:DC:37:10:EE:D8:4F:35:8A:FF:83:21:5D:51:15:10:0B Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Certificate serial: 019ABB3C7F55671A82D8D6AA21C7FAB8AF56 Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/ZyAHstw3EO7YTzWK_4MhXVEVEAs.roa Signing time: Tue 25 Nov 2025 13:38:15 +0000 ROA not before: Tue 25 Nov 2025 13:38:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 89.42.82.0/23 maxlen: 23 93.114.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 07:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bb:3c:7f:55:67:1a:82:d8:d6:aa:21:c7:fa:b8:af:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Validity Not Before: Nov 25 13:38:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=672007b2dc3710eed84f358aff83215d5115100b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9b:a5:6e:12:84:39:51:85:bd:b1:42:8c:a2: 4c:2d:d4:f4:9e:42:bf:b8:ad:5b:29:ea:11:ae:e7: 25:59:20:17:8a:15:a4:ab:98:49:67:58:07:72:95: 98:3d:0b:35:39:af:74:7e:b1:75:5b:83:59:4d:3d: 5a:8e:3c:e5:68:85:ec:b0:1b:59:fb:be:a5:68:c6: b6:4f:5a:fa:03:8c:a4:5c:b9:4e:6a:b3:a4:74:f9: ed:9f:7f:70:a3:10:cc:f1:4c:f5:b4:c5:9d:48:b2: 3b:36:95:fc:94:94:1c:3c:db:3f:23:db:dc:85:b4: fd:3d:81:69:0f:55:83:fe:62:2f:35:9f:29:50:81: 0d:ec:aa:d0:fb:26:14:23:f6:a2:89:fa:6d:18:97: 2a:e1:a1:6f:de:7c:f6:85:d1:16:28:b3:0f:eb:49: b1:1d:96:b1:be:8d:b2:ce:27:12:55:d3:74:84:07: af:44:81:7a:1d:ba:be:cc:4e:a4:ae:c3:88:08:6d: ab:d9:87:80:f5:8a:1c:12:63:78:6b:9b:de:6a:82: 97:c1:8c:a8:fd:60:d5:60:e2:23:3f:65:1e:0b:96: 15:4d:cb:4c:f2:14:2b:c8:da:a3:22:e7:9c:cd:8c: 4f:ce:26:12:6d:99:35:0b:59:64:c8:7a:44:2c:0f: 0c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:20:07:B2:DC:37:10:EE:D8:4F:35:8A:FF:83:21:5D:51:15:10:0B X509v3 Authority Key Identifier: keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/ZyAHstw3EO7YTzWK_4MhXVEVEAs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.42.82.0/23 93.114.72.0/24 Signature Algorithm: sha256WithRSAEncryption 34:58:ac:7a:14:04:19:1a:d5:5d:e5:81:ac:d1:24:f5:81:92: 19:52:c4:60:68:47:38:bd:1e:af:52:ff:f0:15:c8:c3:73:2d: 91:0e:65:77:ec:5b:a4:f6:3b:9f:ec:07:02:b1:9d:3b:02:9b: 01:a5:18:9e:72:5a:b7:38:4c:66:0a:f5:88:b1:ae:3e:ca:31: c4:a8:50:19:4e:35:54:eb:60:22:60:61:fc:4d:13:25:d1:ce: 95:b0:a0:4b:34:ab:56:b9:b7:a2:32:04:13:9d:5b:2f:4c:ea: f5:3d:c1:17:7a:82:6d:5d:4e:40:9e:39:63:50:d2:7b:a3:eb: 0c:ba:ae:96:53:01:b9:ad:86:44:1a:24:5d:0f:39:ae:61:79: e4:b6:23:d4:ae:6d:3f:32:76:b9:86:7d:0f:79:24:24:0b:3c: 33:dd:fc:77:04:a9:41:e4:2a:2b:99:9f:e7:fe:3f:75:f8:ca: 19:10:ff:66:15:0c:02:68:d8:4f:b5:be:b1:3b:72:ce:2f:1b: 2f:27:79:52:a7:fb:90:63:6e:a9:2e:ab:d1:14:3d:6e:c6:9d: 05:28:05:e4:04:7b:e6:66:42:cb:b2:8b:fd:c5:ce:d1:2a:92: 9e:76:89:0f:04:3b:a5:d1:52:eb:73:89:75:1e:f2:35:2d:82: 03:5d:a7:57 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZq7PH9VZxqC2NaqIcf6uK9WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm MDFjMWQwHhcNMjUxMTI1MTMzODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NzIwMDdiMmRjMzcxMGVlZDg0ZjM1OGFmZjgzMjE1ZDUxMTUxMDBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pulbhKEOVGFvbFCjKJMLdT0nkK/ uK1bKeoRruclWSAXihWkq5hJZ1gHcpWYPQs1Oa90frF1W4NZTT1ajjzlaIXssBtZ +76laMa2T1r6A4ykXLlOarOkdPntn39woxDM8Uz1tMWdSLI7NpX8lJQcPNs/I9vc hbT9PYFpD1WD/mIvNZ8pUIEN7KrQ+yYUI/aiifptGJcq4aFv3nz2hdEWKLMP60mx HZaxvo2yzicSVdN0hAevRIF6Hbq+zE6krsOICG2r2YeA9YocEmN4a5veaoKXwYyo /WDVYOIjP2UeC5YVTctM8hQryNqjIueczYxPziYSbZk1C1lkyHpELA8MmQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGcgB7LcNxDu2E81iv+DIV1RFRALMB8GA1UdIwQY MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt YjQyZjIzZDgyOGMzLzEvWnlBSHN0dzNFTzdZVHpXS180TWhYVkVWRUFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBWSpSAwQA XXJIMA0GCSqGSIb3DQEBCwUAA4IBAQA0WKx6FAQZGtVd5YGs0ST1gZIZUsRgaEc4 vR6vUv/wFcjDcy2RDmV37Fuk9juf7AcCsZ07ApsBpRieclq3OExmCvWIsa4+yjHE qFAZTjVU62AiYGH8TRMl0c6VsKBLNKtWubeiMgQTnVsvTOr1PcEXeoJtXU5Anjlj UNJ7o+sMuq6WUwG5rYZEGiRdDzmuYXnktiPUrm0/Mna5hn0PeSQkCzwz3fx3BKlB 5CormZ/n/j91+MoZEP9mFQwCaNhPtb6xO3LOLxsvJ3lSp/uQY26pLqvRFD1uxp0F KAXkBHvmZkLLsov9xc7RKpKedokPBDul0VLrc4l1HvI1LYIDXadX -----END CERTIFICATE-----Generated at Fri Dec 5 17:19:35 2025 by rpki-client