This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/zZmhXAJxJDzvO8-P5W7loaS7fbA.roa File: zZmhXAJxJDzvO8-P5W7loaS7fbA.roa (raw, json) Hash identifier: taOY8It1xL3N2EmSMhPslz70+vQnXy7dwL95lxsh0c4= Subject key identifier: CD:99:A1:5C:02:71:24:3C:EF:3B:CF:8F:E5:6E:E5:A1:A4:BB:7D:B0 Certificate issuer: /CN=29390ec0adca5f0743d181145c7899f991fb65e0 Certificate serial: 019B01F36F9321BCE1E41EC6B9F2012E16D5 Authority key identifier: 29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/zZmhXAJxJDzvO8-P5W7loaS7fbA.roa Signing time: Tue 09 Dec 2025 07:11:29 +0000 ROA not before: Tue 09 Dec 2025 07:11:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 2854 IP address blocks: 46.111.0.0/20 maxlen: 20 46.111.120.0/21 maxlen: 21 46.111.128.0/21 maxlen: 21 185.128.196.0/24 maxlen: 24 212.176.0.0/19 maxlen: 19 212.176.32.0/19 maxlen: 19 212.176.64.0/19 maxlen: 19 212.176.96.0/19 maxlen: 19 212.176.128.0/20 maxlen: 20 212.176.224.0/19 maxlen: 19 2a00:1ec8:27::/48 maxlen: 48 2a00:1ec8:38::/48 maxlen: 48 2a00:1ec8:54::/48 maxlen: 48 2a00:1ec8:61::/48 maxlen: 48 2a00:1ec8:63::/48 maxlen: 48 2a00:1ec8:66::/48 maxlen: 48 2a00:1ec8:77::/48 maxlen: 48 2a00:1ec8:78::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 07:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:01:f3:6f:93:21:bc:e1:e4:1e:c6:b9:f2:01:2e:16:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29390ec0adca5f0743d181145c7899f991fb65e0 Validity Not Before: Dec 9 07:11:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cd99a15c0271243cef3bcf8fe56ee5a1a4bb7db0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:89:de:3d:91:d9:27:09:0f:30:e9:b1:71:34: 4d:aa:1b:03:39:44:07:b6:c9:e1:9d:81:c0:fe:d5: 0d:df:ee:45:6d:94:1e:60:86:a8:4b:a9:64:2b:ae: a1:e9:af:ed:26:d7:eb:e3:2f:20:52:84:e8:a5:b6: 81:2c:a6:4d:fb:45:2c:2b:d5:25:d8:70:fe:9e:a8: 16:4b:fa:75:50:8d:55:94:f8:3b:a3:ae:62:b1:35: ba:59:65:c9:5d:25:b7:d1:f0:3b:52:4a:40:3a:57: ad:a3:6a:34:8d:be:ce:b0:fe:04:eb:b6:a0:be:0d: ba:9c:a8:bf:b0:ba:7d:4d:5a:a3:02:ba:15:e4:e0: e1:8d:b6:d0:7e:26:53:79:81:d8:76:f9:03:fb:ba: b4:17:4e:e9:45:cb:3c:30:43:ab:c4:09:c5:d3:a1: 28:ba:d7:50:fc:78:f4:66:38:93:c3:10:76:b3:6b: a8:c2:e3:6f:05:3e:d2:6e:42:5f:5a:9c:02:b4:0a: f4:c2:b2:67:ee:75:33:e7:13:78:20:a6:ce:0c:a1: 46:67:c2:f8:36:17:73:6d:7b:e2:bd:d3:52:07:1d: 3e:37:5c:54:bd:a8:db:b7:97:88:51:9a:6b:83:c1: 0e:64:2e:e8:f4:a0:23:80:69:9d:bf:c1:4d:16:1e: 49:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:99:A1:5C:02:71:24:3C:EF:3B:CF:8F:E5:6E:E5:A1:A4:BB:7D:B0 X509v3 Authority Key Identifier: keyid:29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/zZmhXAJxJDzvO8-P5W7loaS7fbA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.111.0.0/20 46.111.120.0-46.111.135.255 185.128.196.0/24 212.176.0.0-212.176.143.255 212.176.224.0/19 IPv6: 2a00:1ec8:27::/48 2a00:1ec8:38::/48 2a00:1ec8:54::/48 2a00:1ec8:61::/48 2a00:1ec8:63::/48 2a00:1ec8:66::/48 2a00:1ec8:77::-2a00:1ec8:78:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 86:55:40:9c:bc:b0:c8:d5:1e:67:7f:27:85:5c:b2:78:31:6c: 51:42:7c:ea:ec:e1:a5:a1:62:c5:5d:19:7c:1e:73:ec:5c:2f: 0f:6d:44:e6:5c:50:3e:25:cb:f4:fa:55:8a:2f:13:21:cb:3a: 12:5c:d2:50:80:48:5d:6e:f6:b6:cb:3c:73:fb:01:30:b1:ee: 8d:14:02:4f:38:e3:98:32:fe:ae:b1:74:b9:5e:8f:e6:cb:38: 1d:d5:ee:4d:b1:73:f1:03:8a:1c:5c:f9:db:7c:07:62:17:ef: e1:6c:61:4a:f3:97:3d:54:55:91:65:77:e4:50:5d:62:ad:fa: 18:24:d4:b6:f2:fc:69:77:bf:aa:fd:9a:93:6d:59:e8:ba:ee: 2d:ef:45:04:cf:40:0b:94:98:ab:8f:b5:dc:eb:9c:5e:c3:7b: 40:2c:cb:93:30:8b:b3:e6:1e:ed:b3:f5:09:7f:56:e7:bb:e5: 7d:9e:16:72:bb:f1:99:43:d1:0a:d4:a1:2a:37:e9:fa:10:70: d9:c9:cc:99:56:04:83:2d:0c:3e:d8:b2:1c:1c:22:23:af:4c: 17:3a:62:f6:42:d0:fe:26:9a:c6:30:70:87:c3:e1:c7:4c:da: 01:4e:e5:de:ea:59:50:27:bc:3b:ff:dc:f6:27:66:49:e1:ce: da:34:fe:4d -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgISAZsB82+TIbzh5B7GufIBLhbVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MzkwZWMwYWRjYTVmMDc0M2QxODExNDVjNzg5OWY5OTFm YjY1ZTAwHhcNMjUxMjA5MDcxMTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDk5YTE1YzAyNzEyNDNjZWYzYmNmOGZlNTZlZTVhMWE0YmI3ZGIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4nePZHZJwkPMOmxcTRNqhsDOUQH tsnhnYHA/tUN3+5FbZQeYIaoS6lkK66h6a/tJtfr4y8gUoTopbaBLKZN+0UsK9Ul 2HD+nqgWS/p1UI1VlPg7o65isTW6WWXJXSW30fA7UkpAOleto2o0jb7OsP4E67ag vg26nKi/sLp9TVqjAroV5ODhjbbQfiZTeYHYdvkD+7q0F07pRcs8MEOrxAnF06Eo utdQ/Hj0ZjiTwxB2s2uowuNvBT7SbkJfWpwCtAr0wrJn7nUz5xN4IKbODKFGZ8L4 NhdzbXvivdNSBx0+N1xUvajbt5eIUZprg8EOZC7o9KAjgGmdv8FNFh5J6wIDAQAB o4IChTCCAoEwHQYDVR0OBBYEFM2ZoVwCcSQ87zvPj+Vu5aGku32wMB8GA1UdIwQY MBaAFCk5DsCtyl8HQ9GBFFx4mfmR+2XgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1RrT3dLM0tYd2REMFlFVVhIaVotWkg3WmVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9iMzEzOTItMmQxYy00OTM0LWE1OWUt ZWQ0MzNhYWM3ODI4LzEvelptaFhBSnhKRHp2TzgtUDVXN2xvYVM3ZmJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9iMzEzOTItMmQxYy00OTM0LWE1OWUtZWQ0MzNhYWM3ODI4 LzEvS1RrT3dLM0tYd2REMFlFVVhIaVotWkg3WmVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGaBggrBgEFBQcBBwEB/wSBijCBhzAzBAIAATAtAwQELm8A MAwDBAMub3gDBAMub4ADBAC5gMQwCwMDBNSwAwQE1LCAAwQF1LDgMFAEAgACMEoD BwAqAB7IACcDBwAqAB7IADgDBwAqAB7IAFQDBwAqAB7IAGEDBwAqAB7IAGMDBwAq AB7IAGYwEgMHACoAHsgAdwMHACoAHsgAeDANBgkqhkiG9w0BAQsFAAOCAQEAhlVA nLywyNUeZ38nhVyyeDFsUUJ86uzhpaFixV0ZfB5z7FwvD21E5lxQPiXL9PpVii8T Ics6ElzSUIBIXW72tss8c/sBMLHujRQCTzjjmDL+rrF0uV6P5ss4HdXuTbFz8QOK HFz523wHYhfv4WxhSvOXPVRVkWV35FBdYq36GCTUtvL8aXe/qv2ak21Z6LruLe9F BM9AC5SYq4+13OucXsN7QCzLkzCLs+Ye7bP1CX9W57vlfZ4WcrvxmUPRCtShKjfp +hBw2cnMmVYEgy0MPtiyHBwiI69MFzpi9kLQ/iaaxjBwh8Phx0zaAU7l3upZUCe8 O//c9idmSeHO2jT+TQ== -----END CERTIFICATE-----Generated at Fri Dec 12 16:18:27 2025 by rpki-client