This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/EX-zgiFifgkRS0MsJ-fm6dynPFQ.roa File: EX-zgiFifgkRS0MsJ-fm6dynPFQ.roa (raw, json) Hash identifier: NkQ1CRsw1FEEPmAjWSGetO/iDR/XhUi/u+1jVJdjxls= Subject key identifier: 11:7F:B3:82:21:62:7E:09:11:4B:43:2C:27:E7:E6:E9:DC:A7:3C:54 Certificate issuer: /CN=37431f1be9fdc2419098479cde457bbf79571759 Certificate serial: 019AA060E2D299C5ABD9C321337162B2F814 Authority key identifier: 37:43:1F:1B:E9:FD:C2:41:90:98:47:9C:DE:45:7B:BF:79:57:17:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/EX-zgiFifgkRS0MsJ-fm6dynPFQ.roa Signing time: Thu 20 Nov 2025 08:28:15 +0000 ROA not before: Thu 20 Nov 2025 08:28:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 401922 IP address blocks: 185.211.133.0/24 maxlen: 32 2a0b:65c0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 24 Nov 2025 06:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a0:60:e2:d2:99:c5:ab:d9:c3:21:33:71:62:b2:f8:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37431f1be9fdc2419098479cde457bbf79571759 Validity Not Before: Nov 20 08:28:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=117fb38221627e09114b432c27e7e6e9dca73c54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:2c:40:48:9b:24:d3:17:77:cd:6a:2a:03:bc: e4:72:b5:01:fc:c4:4c:d7:b9:87:cc:96:30:b8:c7: f2:f6:5d:5d:7a:0c:2b:74:af:44:57:48:4b:54:ba: 32:34:0a:2d:7c:44:18:4b:82:b0:2f:08:5b:37:c2: 61:46:d7:2e:7b:f5:a2:53:18:e6:de:66:70:17:3a: 2a:61:d9:31:fb:01:ef:f1:b2:40:c4:ca:12:c3:14: e3:2c:7b:b5:46:4c:37:e7:cf:62:8a:ed:c7:c1:0e: 37:bc:16:f3:2a:1a:01:cb:21:1e:41:94:b8:bb:56: f5:63:cf:ca:1d:c5:c4:ed:9d:62:52:4d:1b:f2:91: 1f:95:09:10:66:82:84:98:2d:34:48:96:6a:95:7e: 86:8d:e2:49:9f:25:5b:a4:c7:13:4f:11:17:59:71: bb:27:b8:1b:4b:45:ee:38:9d:fb:71:69:79:4d:16: fd:07:d2:b3:aa:53:19:49:68:67:d2:43:7f:e7:dc: f0:86:46:63:7b:06:3d:42:18:a9:85:1f:37:a6:b9: 93:fe:b8:77:1e:01:3f:57:71:2e:67:f2:2e:a9:ef: 2a:fa:52:8e:86:b2:7e:45:68:e7:28:c6:42:8c:79: 80:c4:c7:5d:c7:db:c5:e9:67:f4:2f:48:26:75:46: 3a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:7F:B3:82:21:62:7E:09:11:4B:43:2C:27:E7:E6:E9:DC:A7:3C:54 X509v3 Authority Key Identifier: keyid:37:43:1F:1B:E9:FD:C2:41:90:98:47:9C:DE:45:7B:BF:79:57:17:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/EX-zgiFifgkRS0MsJ-fm6dynPFQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.211.133.0/24 IPv6: 2a0b:65c0:1::/48 Signature Algorithm: sha256WithRSAEncryption 3b:7e:34:a1:6c:e1:4e:26:c8:8f:bf:f0:e8:93:12:7f:25:ac: 23:2d:b8:97:26:71:d0:1d:b8:55:63:27:eb:30:b8:9b:f4:5e: 2a:7e:f6:fe:84:d5:b8:cb:26:ee:55:02:d4:e5:ae:3c:66:b6: 48:d4:e3:56:4c:4c:49:33:e4:30:16:ae:f0:64:c6:60:da:3f: 05:3a:ec:5e:e1:ae:0f:66:5a:bb:5d:68:4f:a1:50:4f:09:d1: e2:3b:56:f3:4b:dc:0f:f1:01:c6:d5:78:42:2a:ff:55:a4:10: 50:5e:29:b4:45:40:de:5b:29:70:1a:b9:8b:0c:e0:96:5a:68: 21:83:2e:92:b5:48:f0:08:f0:6f:53:bd:16:d1:d9:da:27:9b: 45:b0:95:47:95:db:a4:e9:37:19:77:e2:20:b9:01:e1:f8:ea: 7c:70:08:b4:45:5d:21:fd:26:ae:49:6d:06:12:db:4f:63:9a: c2:94:ee:c2:e6:be:8d:f8:e9:17:28:5f:ca:4b:4e:86:b6:d8: 72:25:62:16:ec:cb:62:60:85:ea:d9:54:26:4f:0a:31:32:2f: e1:00:86:99:35:83:92:ab:fe:9b:11:dc:32:dc:23:e7:eb:6e: 48:cd:1f:95:9b:b3:ea:22:5b:93:82:ba:34:b0:65:c5:9a:3a: 1a:54:bc:39 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZqgYOLSmcWr2cMhM3FisvgUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NDMxZjFiZTlmZGMyNDE5MDk4NDc5Y2RlNDU3YmJmNzk1 NzE3NTkwHhcNMjUxMTIwMDgyODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTdmYjM4MjIxNjI3ZTA5MTE0YjQzMmMyN2U3ZTZlOWRjYTczYzU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2yxASJsk0xd3zWoqA7zkcrUB/MRM 17mHzJYwuMfy9l1degwrdK9EV0hLVLoyNAotfEQYS4KwLwhbN8JhRtcue/WiUxjm 3mZwFzoqYdkx+wHv8bJAxMoSwxTjLHu1Rkw3589iiu3HwQ43vBbzKhoByyEeQZS4 u1b1Y8/KHcXE7Z1iUk0b8pEflQkQZoKEmC00SJZqlX6GjeJJnyVbpMcTTxEXWXG7 J7gbS0XuOJ37cWl5TRb9B9KzqlMZSWhn0kN/59zwhkZjewY9QhiphR83prmT/rh3 HgE/V3EuZ/Iuqe8q+lKOhrJ+RWjnKMZCjHmAxMddx9vF6Wf0L0gmdUY6twIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFBF/s4IhYn4JEUtDLCfn5uncpzxUMB8GA1UdIwQY MBaAFDdDHxvp/cJBkJhHnN5Fe795VxdZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjBNZkctbjl3a0dRbUVlYzNrVjd2M2xYRjFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9iNTM1NDctZDM0MC00MzkyLWFmNDYt NjE1OTYxMzEyYjUyLzEvRVgtemdpRmlmZ2tSUzBNc0otZm02ZHluUEZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9iNTM1NDctZDM0MC00MzkyLWFmNDYtNjE1OTYxMzEyYjUy LzEvTjBNZkctbjl3a0dRbUVlYzNrVjd2M2xYRjFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAudOFMA8E AgACMAkDBwAqC2XAAAEwDQYJKoZIhvcNAQELBQADggEBADt+NKFs4U4myI+/8OiT En8lrCMtuJcmcdAduFVjJ+swuJv0Xip+9v6E1bjLJu5VAtTlrjxmtkjU41ZMTEkz 5DAWrvBkxmDaPwU67F7hrg9mWrtdaE+hUE8J0eI7VvNL3A/xAcbVeEIq/1WkEFBe KbRFQN5bKXAauYsM4JZaaCGDLpK1SPAI8G9TvRbR2donm0WwlUeV26TpNxl34iC5 AeH46nxwCLRFXSH9Jq5JbQYS209jmsKU7sLmvo346RcoX8pLToa22HIlYhbsy2Jg herZVCZPCjEyL+EAhpk1g5Kr/psR3DLcI+frbkjNH5Wbs+oiW5OCujSwZcWaOhpU vDk= -----END CERTIFICATE-----Generated at Sun Nov 23 13:04:39 2025 by rpki-client