This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/ZSEuWCd4gz5EACBqGI7knKtFPDU.roa File: ZSEuWCd4gz5EACBqGI7knKtFPDU.roa (raw, json) Hash identifier: Lhv+eepu21/9g4OYQmyhCGNfB7JIPz2YX1sB52VBsGQ= Subject key identifier: 65:21:2E:58:27:78:83:3E:44:00:20:6A:18:8E:E4:9C:AB:45:3C:35 Certificate issuer: /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055 Certificate serial: 019A79FFCA24C53D3826DB9D386396C73AA5 Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/ZSEuWCd4gz5EACBqGI7knKtFPDU.roa Signing time: Wed 12 Nov 2025 21:36:37 +0000 ROA not before: Wed 12 Nov 2025 21:36:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 399486 IP address blocks: 147.161.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 09:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:79:ff:ca:24:c5:3d:38:26:db:9d:38:63:96:c7:3a:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055 Validity Not Before: Nov 12 21:36:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=65212e582778833e4400206a188ee49cab453c35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:80:7d:5f:44:5c:ee:c7:ad:04:41:4b:2d:76: 92:86:ca:88:74:51:04:89:4b:73:c8:ac:f7:b2:63: 1c:b2:70:89:5e:7c:fe:85:23:19:fd:cd:1a:67:de: 8c:ff:04:2f:61:3d:14:26:8a:5d:f4:2a:b2:3a:51: a7:31:6e:f5:5c:5b:a0:30:64:f2:8c:2e:9e:34:da: 8f:5f:83:ea:50:f2:a0:13:c3:70:69:f3:a8:52:d7: 82:87:8e:d4:9f:34:20:05:9c:67:4d:0f:d2:03:ae: 2a:39:7c:93:99:4c:0e:56:2b:63:1c:bd:5f:2b:38: 2d:cc:35:44:1f:ab:44:78:ab:9e:2c:c0:e3:79:ac: 49:81:09:5b:5f:45:da:e9:87:c9:b5:dd:97:47:65: 5c:77:cd:97:74:0c:7f:de:79:a3:72:69:29:f7:4c: b0:37:da:16:b8:e1:09:30:bf:7c:fe:11:a6:01:f9: f6:f2:75:e2:dc:35:f5:5f:5b:89:13:59:ad:4f:54: 6d:f7:85:eb:37:b5:48:91:64:d9:99:4d:2f:73:a3: ca:20:16:08:f1:7f:aa:2d:40:ec:37:94:b2:3a:ec: 4a:3c:c9:fe:04:63:51:ce:9a:90:35:a9:86:b4:72: e0:9a:00:00:f4:81:5d:66:3e:2e:7c:3e:78:45:c3: 48:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:21:2E:58:27:78:83:3E:44:00:20:6A:18:8E:E4:9C:AB:45:3C:35 X509v3 Authority Key Identifier: keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/ZSEuWCd4gz5EACBqGI7knKtFPDU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.161.3.0/24 Signature Algorithm: sha256WithRSAEncryption 47:a9:75:3f:bd:03:a9:21:34:c5:44:d9:d5:57:28:57:38:1c: ed:76:37:67:24:88:33:4f:9d:72:17:07:ad:0e:ef:4b:50:87: 3b:84:6c:90:ce:af:1d:97:42:72:cf:18:e2:4d:e9:4c:b6:ef: 13:e6:6e:f5:79:01:6c:0a:e7:52:0e:d7:3c:a5:72:28:f6:52: 68:1c:d1:4b:6f:53:74:e0:14:1f:ae:1f:d3:5d:a5:40:18:f5: c9:ce:74:ce:2b:33:52:2a:63:6b:8a:43:16:fd:c1:53:37:1b: 02:ca:44:4e:65:ca:c7:01:41:d1:de:23:89:b8:4e:ca:ed:bd: 41:04:53:2f:c4:55:b8:2a:f9:e4:fc:e8:a5:10:ab:4f:a8:bf: 90:f2:ae:a3:02:01:11:f1:1f:ff:a2:59:87:53:36:d4:4b:01: 31:2a:ac:28:1c:58:46:38:ab:5e:77:17:a4:1e:78:fb:92:31: dd:f6:7e:e5:cd:df:7f:63:3d:00:e9:0b:33:df:fe:95:a4:03: 7f:63:eb:c6:f4:ff:6e:97:c7:10:60:73:2c:1e:b4:d5:fb:38: 29:eb:92:ff:f2:d0:31:6e:76:ff:bf:bc:33:e6:46:50:52:b6: b8:c4:6b:4d:da:56:71:de:d7:33:28:95:83:d6:1a:6c:a5:12: af:ed:b5:0a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZp5/8okxT04JtudOGOWxzqlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZTcyMDQ2NWM1Y2QwZGE5YzZhMTNiNDRmYTBkODZmNjQ5 ZTUwNTUwHhcNMjUxMTEyMjEzNjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTIxMmU1ODI3Nzg4MzNlNDQwMDIwNmExODhlZTQ5Y2FiNDUzYzM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYB9X0Rc7setBEFLLXaShsqIdFEE iUtzyKz3smMcsnCJXnz+hSMZ/c0aZ96M/wQvYT0UJopd9CqyOlGnMW71XFugMGTy jC6eNNqPX4PqUPKgE8NwafOoUteCh47UnzQgBZxnTQ/SA64qOXyTmUwOVitjHL1f KzgtzDVEH6tEeKueLMDjeaxJgQlbX0Xa6YfJtd2XR2Vcd82XdAx/3nmjcmkp90yw N9oWuOEJML98/hGmAfn28nXi3DX1X1uJE1mtT1Rt94XrN7VIkWTZmU0vc6PKIBYI 8X+qLUDsN5SyOuxKPMn+BGNRzpqQNamGtHLgmgAA9IFdZj4ufD54RcNIowIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGUhLlgneIM+RAAgahiO5JyrRTw1MB8GA1UdIwQY MBaAFJLnIEZcXNDanGoTtE+g2G9knlBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDkt OTA5NmUxNjc0ZTIyLzEvWlNFdVdDZDRnejVFQUNCcUdJN2tuS3RGUERVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDktOTA5NmUxNjc0ZTIy LzEva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk6EDMA0G CSqGSIb3DQEBCwUAA4IBAQBHqXU/vQOpITTFRNnVVyhXOBztdjdnJIgzT51yFwet Du9LUIc7hGyQzq8dl0JyzxjiTelMtu8T5m71eQFsCudSDtc8pXIo9lJoHNFLb1N0 4BQfrh/TXaVAGPXJznTOKzNSKmNrikMW/cFTNxsCykROZcrHAUHR3iOJuE7K7b1B BFMvxFW4Kvnk/OilEKtPqL+Q8q6jAgER8R//olmHUzbUSwExKqwoHFhGOKtedxek Hnj7kjHd9n7lzd9/Yz0A6Qsz3/6VpAN/Y+vG9P9ul8cQYHMsHrTV+zgp65L/8tAx bnb/v7wz5kZQUra4xGtN2lZx3tczKJWD1hpspRKv7bUK -----END CERTIFICATE-----Generated at Fri Dec 5 15:37:53 2025 by rpki-client