This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/Z5XRZtUC9s3CbIed4tLwk0brsf0.roa File: Z5XRZtUC9s3CbIed4tLwk0brsf0.roa (raw, json) Hash identifier: r/qCqYJ4chyv7nOwsypdjNGGILNa7ltYYU9q4PuuHw4= Subject key identifier: 67:95:D1:66:D5:02:F6:CD:C2:6C:87:9D:E2:D2:F0:93:46:EB:B1:FD Certificate issuer: /CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921 Certificate serial: 019AAAD98C89398BE52BF28E8006D3051135 Authority key identifier: E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/Z5XRZtUC9s3CbIed4tLwk0brsf0.roa Signing time: Sat 22 Nov 2025 09:16:15 +0000 ROA not before: Sat 22 Nov 2025 09:16:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 25198 IP address blocks: 95.128.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:aa:d9:8c:89:39:8b:e5:2b:f2:8e:80:06:d3:05:11:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921 Validity Not Before: Nov 22 09:16:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6795d166d502f6cdc26c879de2d2f09346ebb1fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:19:f2:bb:6f:9e:0f:a5:e2:d3:66:4d:16:f8: 5f:b5:af:fa:50:a9:b1:4c:a8:24:57:c0:c6:46:60: c0:b2:6c:11:84:db:46:e1:5c:4c:f1:e2:0f:91:3a: 24:19:b5:e7:2a:a6:19:27:00:97:38:1e:00:5c:dd: 20:bc:a7:d2:c2:03:8e:9a:3f:da:a1:6c:72:cd:54: 77:41:ae:9c:4a:0e:05:f4:ed:23:76:ba:0f:c2:ad: 39:8d:0c:b6:45:f8:f1:7c:42:43:8b:bd:ef:7e:0b: 55:9e:30:ec:e5:4a:bc:5f:74:39:6f:c9:cd:2f:d0: 9f:93:77:ab:2b:34:9a:f2:22:74:d1:0c:d9:0d:1a: 61:f5:8f:3d:56:10:6a:1d:63:20:29:2a:7b:e5:86: 3b:7b:4a:a6:af:c1:ed:28:51:c1:99:ec:4f:b8:18: da:48:0c:41:b7:41:83:dd:e7:2a:05:dd:97:1b:4e: a9:81:e8:56:2f:69:ea:bc:4e:b9:34:af:e6:79:3c: 57:09:d7:4b:fc:e7:bc:d8:6f:e9:fd:cd:6d:ca:70: 07:e4:f6:a3:90:dc:d4:4a:c4:17:d3:d3:6d:6b:52: 25:fc:52:a9:ae:0f:54:22:1e:a3:30:1a:8a:42:1f: 7d:7a:c6:78:8e:5a:0d:1a:2d:ca:07:6d:de:6c:5e: 7b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:95:D1:66:D5:02:F6:CD:C2:6C:87:9D:E2:D2:F0:93:46:EB:B1:FD X509v3 Authority Key Identifier: keyid:E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/Z5XRZtUC9s3CbIed4tLwk0brsf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.128.195.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:43:fd:20:4f:c5:8e:02:b4:b1:07:f0:d8:df:ad:1c:3d:c6: 4e:61:20:e6:e9:17:f3:ea:3c:60:5e:0c:e9:72:cb:d3:21:9f: fb:a8:5b:7f:eb:7c:e6:cb:b4:c7:9f:ad:13:4d:db:6c:61:22: ea:a7:ce:19:43:39:d9:13:b3:f2:35:5f:73:b3:c6:7c:a0:76: 11:3f:c4:52:d4:2f:69:43:ee:f4:85:a5:d5:d5:ff:14:53:04: 9c:28:aa:e2:de:88:14:a2:5f:ef:ac:8c:99:7c:e4:40:9e:9e: 89:c3:70:38:e9:a7:24:50:a4:fe:91:16:cd:a9:ae:99:d3:b7: 3b:0e:51:af:fa:3f:0f:27:38:75:5f:97:ea:ec:3f:86:9d:34: c1:f9:64:b7:64:17:9e:39:fc:8a:50:87:99:0b:f5:ca:d5:21: e5:f7:3e:c5:f2:ec:b6:0b:f3:39:03:96:95:8b:17:d8:28:db: ba:d9:73:e4:80:a2:2b:29:96:13:d3:41:87:0b:10:3a:ba:ec: 37:f7:ec:1b:8a:66:fa:ac:8e:84:69:09:6e:8e:df:d8:53:d1: de:eb:5e:78:b5:82:98:90:cc:98:c3:fd:05:4d:0d:d7:f6:38: 17:8b:78:a1:2a:54:65:ed:4c:4e:6d:cc:bb:7f:5e:ef:be:21: f3:21:be:13 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqq2YyJOYvlK/KOgAbTBRE1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyOTJjOGM3NzliNmVkNmVkZTcyYThjZjExNDkwZWY2ZDdh OWU5MjEwHhcNMjUxMTIyMDkxNjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Nzk1ZDE2NmQ1MDJmNmNkYzI2Yzg3OWRlMmQyZjA5MzQ2ZWJiMWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhnyu2+eD6Xi02ZNFvhfta/6UKmx TKgkV8DGRmDAsmwRhNtG4VxM8eIPkTokGbXnKqYZJwCXOB4AXN0gvKfSwgOOmj/a oWxyzVR3Qa6cSg4F9O0jdroPwq05jQy2RfjxfEJDi73vfgtVnjDs5Uq8X3Q5b8nN L9Cfk3erKzSa8iJ00QzZDRph9Y89VhBqHWMgKSp75YY7e0qmr8HtKFHBmexPuBja SAxBt0GD3ecqBd2XG06pgehWL2nqvE65NK/meTxXCddL/Oe82G/p/c1tynAH5Paj kNzUSsQX09Nta1Il/FKprg9UIh6jMBqKQh99esZ4jloNGi3KB23ebF57xwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGeV0WbVAvbNwmyHneLS8JNG67H9MB8GA1UdIwQY MBaAFOKSyMd5tu1u3nKozxFJDvbXqekhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHBMSXgzbTI3VzdlY3FqUEVVa085dGVwNlNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC80YTJlOTctMjU3MC00NzhiLWI5YmMt NWViYjYzNzgwMDllLzEvWjVYUlp0VUM5czNDYkllZDR0THdrMGJyc2YwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC80YTJlOTctMjU3MC00NzhiLWI5YmMtNWViYjYzNzgwMDll LzEvNHBMSXgzbTI3VzdlY3FqUEVVa085dGVwNlNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX4DDMA0G CSqGSIb3DQEBCwUAA4IBAQAfQ/0gT8WOArSxB/DY360cPcZOYSDm6Rfz6jxgXgzp csvTIZ/7qFt/63zmy7THn60TTdtsYSLqp84ZQznZE7PyNV9zs8Z8oHYRP8RS1C9p Q+70haXV1f8UUwScKKri3ogUol/vrIyZfORAnp6Jw3A46ackUKT+kRbNqa6Z07c7 DlGv+j8PJzh1X5fq7D+GnTTB+WS3ZBeeOfyKUIeZC/XK1SHl9z7F8uy2C/M5A5aV ixfYKNu62XPkgKIrKZYT00GHCxA6uuw39+wbimb6rI6EaQlujt/YU9He6154tYKY kMyYw/0FTQ3X9jgXi3ihKlRl7UxObcy7f17vviHzIb4T -----END CERTIFICATE-----Generated at Fri Dec 5 09:28:48 2025 by rpki-client